This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft File: Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json) Hash identifier: 3yAf0DRBB1Nq5TabUfzPBFAdUParyPtO5fMmlRlaOoU= Subject key identifier: E6:66:EC:8C:6D:9C:9E:B1:31:26:48:F1:72:48:4F:EC:27:92:86:B1 Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Certificate serial: 019B3C7E40851B97E07A697AA947B0AFC531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:05 +0000 Manifest this update: Sat 20 Dec 2025 16:01:05 +0000 Manifest next update: Sun 21 Dec 2025 16:01:05 +0000 Files and hashes: 1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: /Nb0wZCUnb71W5V9mkyc3qWl0Y/Nd9YLccCtOHGOyq0=) 2: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (hash: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=) 3: V7vJK1PzSdzcivTHP2kjHgag3Cc.roa (hash: OnLS3rg6t36BwcZTS3yV6qxgn2/9ln9WoFUEiCOulgw=) 4: umrbROcVD8F_XU1iMMOs7YeDor4.roa (hash: OZEW+D1b6/plYCkSsv4RF+haf9Cmn+tdLrcmbAbfFig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:40:85:1b:97:e0:7a:69:7a:a9:47:b0:af:c5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Validity Not Before: Dec 20 16:01:05 2025 GMT Not After : Dec 21 16:01:05 2025 GMT Subject: CN=e666ec8c6d9c9eb1312648f172484fec279286b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:5e:9b:88:e7:27:b8:41:48:74:01:76:47: 5d:70:2e:5e:c2:5a:8c:d3:83:3e:e0:cb:b8:bf:a9: ca:8c:18:e5:a5:8c:d3:0a:fc:a3:48:4c:46:a7:d7: 9d:a6:39:be:6d:59:27:41:0f:4f:d6:d4:a6:03:5c: 7d:b1:0a:90:8a:f5:14:b7:5e:f6:c2:50:b9:2a:00: 75:10:06:8a:47:82:11:0f:71:3b:d7:c5:6b:a3:d8: c4:4d:c3:7a:66:aa:8f:5c:ad:97:31:a1:1e:9a:0b: 20:20:ad:bc:cf:f5:9c:eb:fd:0f:b0:11:e7:d1:ab: 2a:53:d3:69:60:3a:f4:10:26:f7:6e:6b:dc:69:33: c7:ac:4b:65:f8:5c:3e:06:0e:e5:be:d4:55:3a:52: 97:4a:97:8d:bd:dc:4e:a1:d0:ca:c1:a1:1e:ba:3f: 42:07:49:02:0f:b2:15:99:23:e1:1d:7c:d5:c7:df: 4a:2e:2f:c1:65:fd:cc:7d:1f:b4:81:98:c6:82:cb: a8:35:73:6b:80:0e:48:1b:1c:5e:a3:f2:21:22:5f: a8:29:65:91:9e:87:ca:b9:28:e2:ec:ad:15:a7:48: df:41:67:bc:3c:77:67:2c:a6:e2:82:9c:f6:c0:a2: 40:be:8a:13:f6:84:3c:42:cb:bb:ad:33:8a:a2:e6: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:EC:8C:6D:9C:9E:B1:31:26:48:F1:72:48:4F:EC:27:92:86:B1 X509v3 Authority Key Identifier: keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:bf:be:17:58:32:14:e9:f4:39:7f:6e:29:16:db:f0:5c: 65:23:e1:0f:f4:0d:64:67:d0:a0:3b:9b:ce:dc:f5:35:ad:70: 3f:43:8c:3c:c1:70:8d:7f:79:4d:ac:f8:d1:f7:ce:bf:07:56: f3:32:bc:be:65:f2:8e:d4:70:17:14:b1:40:61:03:3f:c2:dd: 25:15:2b:95:2f:92:d9:01:c3:4c:e6:f1:e2:ef:e0:16:53:25: 23:a7:47:f0:e5:f8:ae:61:17:fd:12:7f:4e:e9:de:2c:4b:6e: 10:da:f2:55:34:91:c0:71:3a:5d:b3:46:8e:27:16:7e:88:23: 3e:c6:26:f0:1a:09:73:17:88:1a:57:f2:94:61:dd:d7:f9:56: f3:bb:f8:1e:4e:31:d4:75:e4:9e:9e:d0:43:e7:29:3d:53:2d: 88:78:3f:8d:ca:8e:8f:1c:8f:ec:47:9b:ae:6f:d0:52:bc:ff: bb:ec:40:ac:a4:52:fe:7d:b7:7e:a9:94:85:78:84:e7:35:7b: cc:0b:66:d4:02:56:38:76:82:13:5c:6c:ee:78:8e:6d:e6:55: e0:f7:82:0b:f7:70:f4:a8:1c:15:c7:ab:1f:e6:ef:71:8f:d5: 49:78:27:e4:6f:b7:36:5c:43:4b:b5:05:34:33:47:67:ad:15: 46:25:c6:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkCFG5fgeml6qUewr8UxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODc5ZGUxYzc1ZmJiZDJjMzFkMWQ5MDgxNDA1NmYyN2Q1 N2Q3NzYwHhcNMjUxMjIwMTYwMTA1WhcNMjUxMjIxMTYwMTA1WjAzMTEwLwYDVQQD EyhlNjY2ZWM4YzZkOWM5ZWIxMzEyNjQ4ZjE3MjQ4NGZlYzI3OTI4NmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s9em4jnJ7hBSHQBdkddcC5ewlqM 04M+4Mu4v6nKjBjlpYzTCvyjSExGp9edpjm+bVknQQ9P1tSmA1x9sQqQivUUt172 wlC5KgB1EAaKR4IRD3E718Vro9jETcN6ZqqPXK2XMaEemgsgIK28z/Wc6/0PsBHn 0asqU9NpYDr0ECb3bmvcaTPHrEtl+Fw+Bg7lvtRVOlKXSpeNvdxOodDKwaEeuj9C B0kCD7IVmSPhHXzVx99KLi/BZf3MfR+0gZjGgsuoNXNrgA5IGxxeo/IhIl+oKWWR nofKuSji7K0Vp0jfQWe8PHdnLKbigpz2wKJAvooT9oQ8Qsu7rTOKouYI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZm7IxtnJ6xMSZI8XJIT+wnkoaxMB8GA1UdIwQY MBaAFBqHneHHX7vSwx0dkIFAVvJ9V9d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWIt OGIyZWJlNGUyOWNlLzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWItOGIyZWJlNGUyOWNl LzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJde/vhdY MhTp9Dl/bikW2/BcZSPhD/QNZGfQoDubztz1Na1wP0OMPMFwjX95Taz40ffOvwdW 8zK8vmXyjtRwFxSxQGEDP8LdJRUrlS+S2QHDTObx4u/gFlMlI6dH8OX4rmEX/RJ/ TuneLEtuENryVTSRwHE6XbNGjicWfogjPsYm8BoJcxeIGlfylGHd1/lW87v4Hk4x 1HXknp7QQ+cpPVMtiHg/jcqOjxyP7Eebrm/QUrz/u+xArKRS/n23fqmUhXiE5zV7 zAtm1AJWOHaCE1xs7niObeZV4PeCC/dw9KgcFcerH+bvcY/VSXgn5G+3NlxDS7UF NDNHZ60VRiXGyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:35:26 2025 by rpki-client