This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json) Hash identifier: opp6Z9lKtnPg5JrghkTF8xRoRKX3bvAM7YAaTQyYNpo= Subject key identifier: 33:5A:8D:60:71:1F:C5:86:5D:DA:40:50:27:EA:C9:A6:1C:80:45:F1 Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0 Certificate serial: 019B41A4D70C65E13620C415456F355FEE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft Manifest number: 0CAF Signing time: Sun 21 Dec 2025 16:01:20 +0000 Manifest this update: Sun 21 Dec 2025 16:01:20 +0000 Manifest next update: Mon 22 Dec 2025 16:01:20 +0000 Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=) 2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: u89/lQPML3OZSJW9nzh1EUik16fiXY4xcmaZ/cTcH14=) 3: rNGt9LDewJiHuR2lJc36D8TSyXw.roa (hash: g8y+iBLG3cbxk27H5tP4VQre3m+vNBagD8EWSrYcgoM=) 4: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:d7:0c:65:e1:36:20:c4:15:45:6f:35:5f:ee:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0 Validity Not Before: Dec 21 16:01:20 2025 GMT Not After : Dec 22 16:01:20 2025 GMT Subject: CN=335a8d60711fc5865dda405027eac9a61c8045f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:c6:39:9d:4f:66:12:f2:0a:83:4c:55:3c: e0:ee:b9:c9:85:54:f2:5a:5b:56:20:18:4e:d7:63: 2a:9e:46:1b:1d:24:00:ed:3b:2b:68:66:40:f8:7b: 26:1a:74:3d:b8:e7:90:c4:e2:53:75:ce:46:9a:34: 11:49:cc:e6:1c:31:b7:f8:6f:73:3b:a7:68:3c:9a: 01:e8:4d:8d:44:1f:b7:9b:61:b1:0c:a3:97:1c:b3: 97:5c:59:d4:cc:1d:5b:00:41:f6:e0:9d:5f:65:50: 96:a1:82:68:d7:05:52:8b:35:63:ee:96:73:c5:1c: 05:ff:68:97:41:03:66:cf:5e:68:0a:13:61:ce:41: 41:81:ef:48:13:71:61:06:b3:50:ba:8d:7d:f0:ce: 1c:10:b6:ca:34:c4:39:53:d7:7f:ea:b6:af:b9:a9: 8a:ea:2a:5f:79:04:b0:01:e5:ba:26:09:f2:51:19: c6:3d:05:da:13:74:66:e9:e6:d0:bf:c0:7c:4f:26: 21:ed:2a:45:bd:37:c5:fc:5e:fd:95:0a:9f:3c:3a: 3f:da:e2:97:e0:9e:6d:0e:4e:3c:91:c5:0c:0e:3c: 2b:03:08:67:df:49:50:b7:f6:82:28:79:b2:b4:07: 07:92:d3:2a:f9:87:23:96:ea:85:6f:c0:f5:41:5b: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:8D:60:71:1F:C5:86:5D:DA:40:50:27:EA:C9:A6:1C:80:45:F1 X509v3 Authority Key Identifier: keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:3b:8f:66:7d:a2:d8:fb:d9:75:0d:a5:a2:3c:e0:00:2f: 08:67:ae:0b:5a:99:46:04:44:71:f2:de:98:4b:fd:78:21:1e: d9:5d:19:9a:83:4f:5f:5c:30:ee:10:bc:73:c3:7d:b3:87:55: 58:3b:b7:f8:dd:ce:bd:5d:e0:64:29:c3:40:60:a4:06:c5:1e: 0e:8e:72:7c:64:df:c4:c5:7f:a1:e3:70:4c:9d:b2:e7:e7:2f: 2a:ff:df:57:7c:66:58:de:bc:07:f0:04:37:80:48:56:8a:0f: d1:8a:7c:ff:e3:01:51:a5:28:e6:e8:43:a1:98:70:e3:af:99: d3:a6:40:aa:33:7b:e1:23:7f:2f:e1:b4:72:1f:77:a0:40:6c: 3d:c8:e8:cd:d0:cd:fb:4a:31:b3:f0:57:c0:67:05:09:77:27: f5:2a:dd:73:30:a5:96:fb:42:d5:68:90:e8:90:f8:99:ce:bf: de:61:20:b1:d6:0a:6c:f8:a0:58:99:f6:58:c2:a1:af:48:57: a1:9a:62:6a:77:b9:75:b4:40:db:70:a3:03:7d:de:e9:c9:8d: 8a:2f:13:22:a6:64:25:3c:9c:b3:a3:27:d0:1f:ff:a2:30:08: c6:bc:6c:52:7b:50:4f:23:c9:1a:0b:70:9e:80:29:81:f1:59: 5b:db:e3:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpNcMZeE2IMQVRW81X+46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1 OWVkZjAwHhcNMjUxMjIxMTYwMTIwWhcNMjUxMjIyMTYwMTIwWjAzMTEwLwYDVQQD EygzMzVhOGQ2MDcxMWZjNTg2NWRkYTQwNTAyN2VhYzlhNjFjODA0NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvGOZ1PZhLyCoNMVTzg7rnJhVTy WltWIBhO12MqnkYbHSQA7TsraGZA+HsmGnQ9uOeQxOJTdc5GmjQRSczmHDG3+G9z O6doPJoB6E2NRB+3m2GxDKOXHLOXXFnUzB1bAEH24J1fZVCWoYJo1wVSizVj7pZz xRwF/2iXQQNmz15oChNhzkFBge9IE3FhBrNQuo198M4cELbKNMQ5U9d/6ravuamK 6ipfeQSwAeW6JgnyURnGPQXaE3Rm6ebQv8B8TyYh7SpFvTfF/F79lQqfPDo/2uKX 4J5tDk48kcUMDjwrAwhn30lQt/aCKHmytAcHktMq+YcjluqFb8D1QVsRwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNajWBxH8WGXdpAUCfqyaYcgEXxMB8GA1UdIwQY MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt MTg5NjU1NWEyZjBlLzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFI7j2Z9 otj72XUNpaI84AAvCGeuC1qZRgREcfLemEv9eCEe2V0ZmoNPX1ww7hC8c8N9s4dV WDu3+N3OvV3gZCnDQGCkBsUeDo5yfGTfxMV/oeNwTJ2y5+cvKv/fV3xmWN68B/AE N4BIVooP0Yp8/+MBUaUo5uhDoZhw46+Z06ZAqjN74SN/L+G0ch93oEBsPcjozdDN +0oxs/BXwGcFCXcn9SrdczCllvtC1WiQ6JD4mc6/3mEgsdYKbPigWJn2WMKhr0hX oZpiane5dbRA23CjA33e6cmNii8TIqZkJTycs6Mn0B//ojAIxrxsUntQTyPJGgtw noApgfFZW9vjRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:27:45 2025 by rpki-client