This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json) Hash identifier: kOeMeZCGvx2bNOZtCzvfl22LUyokiYBzls4aFSvHs7o= Subject key identifier: 4D:78:45:41:10:FF:4E:53:42:04:39:32:B8:40:71:09:F3:D5:CC:8D Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Certificate serial: 019B3D22BCB2AF1625AAB713BA2B85619482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft Manifest number: 14D3 Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=) 2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: e9a1AF5ErdWMqxpkZFonVAb28B4P23xlVBKeDRC75jM=) 3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:bc:b2:af:16:25:aa:b7:13:ba:2b:85:61:94:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=4d78454110ff4e5342043932b8407109f3d5cc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:7c:ea:6f:a4:40:b7:eb:42:34:c0:6d:db: 60:e1:da:60:80:11:6a:bb:c3:7f:8a:61:8a:da:72: f3:5c:d7:1b:9d:c5:b9:66:49:6f:eb:43:65:17:b1: c2:43:76:1e:63:10:74:c3:8c:fd:49:85:3e:be:d8: 61:16:71:9b:20:6c:61:09:0c:12:9b:51:77:78:57: 35:9d:c2:97:81:5a:b8:31:08:1b:ea:8a:a4:16:35: b2:57:a7:9a:24:d6:06:7f:67:4b:4e:cf:0c:c4:25: 75:5f:be:92:51:5a:28:2d:3b:e3:c4:27:6f:37:f5: 32:8a:70:21:17:f7:d3:bc:c4:9f:26:eb:d4:43:63: a8:ca:df:bc:5c:5b:dc:c3:cc:76:75:55:8c:02:46: 5c:29:0c:91:9f:73:5f:91:0c:3e:84:c1:35:96:9d: e6:28:14:21:44:13:d0:72:ad:44:a4:7f:6d:73:92: 07:87:d4:20:6c:0a:3c:07:b4:7f:b0:40:28:1c:fc: a3:47:8e:f9:bd:e6:88:84:0e:89:16:9f:8a:75:d3: 73:e6:be:a0:71:7e:19:ea:df:a5:d7:98:c7:f8:7f: e4:a8:8e:58:a5:4b:ab:0a:94:cd:1a:b6:2a:42:1a: 7a:c2:64:bb:84:5c:e8:ef:0e:43:f0:2b:24:ec:7f: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:78:45:41:10:FF:4E:53:42:04:39:32:B8:40:71:09:F3:D5:CC:8D X509v3 Authority Key Identifier: keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6d:66:da:41:b5:28:b9:8d:c5:52:d1:88:09:4f:2a:95:77: 30:6d:6b:83:ab:59:de:5e:1d:74:ef:24:5b:f2:7f:3e:02:11: 06:b2:43:1f:7f:c5:27:36:1b:8f:04:7c:ec:11:65:35:56:35: 8c:5a:71:9c:62:88:8d:5b:a1:cf:1b:13:52:a6:c9:ce:dd:a7: 0e:96:c2:4d:22:b8:5f:71:6c:a3:48:27:bf:38:9b:d7:68:1b: f9:08:85:6a:cc:95:fd:bc:d1:5e:38:de:33:6a:56:1a:d4:27: 69:b3:79:e9:48:22:2c:6c:01:b7:e3:29:3d:df:e0:c7:3e:b1: 89:91:bb:9d:3e:dc:aa:85:3b:72:9c:a8:6a:0b:ea:4c:87:19: 6a:18:f1:34:bb:c3:a2:c1:8c:dc:9b:cd:32:0d:0d:0d:fb:44: 9e:bc:5b:4d:c8:47:7c:3f:5e:bf:a9:d2:4a:ae:8c:29:e2:16: 9f:e0:e9:a4:a9:3a:05:2f:15:7b:3c:74:48:d6:13:f1:47:16: ea:33:ea:d3:92:c6:e3:0c:95:7e:99:8f:34:58:ec:5b:f7:07: dc:fe:07:b4:81:a1:19:95:fa:cd:6f:5d:29:24:c0:dd:19:bc: 3c:70:86:df:d4:b1:d0:d4:19:6d:44:02:29:a1:aa:02:2c:5b: cc:a5:a1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IryyrxYlqrcTuiuFYZSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0 YzM1YjQwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD Eyg0ZDc4NDU0MTEwZmY0ZTUzNDIwNDM5MzJiODQwNzEwOWYzZDVjYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoF86m+kQLfrQjTAbdtg4dpggBFq u8N/imGK2nLzXNcbncW5Zklv60NlF7HCQ3YeYxB0w4z9SYU+vthhFnGbIGxhCQwS m1F3eFc1ncKXgVq4MQgb6oqkFjWyV6eaJNYGf2dLTs8MxCV1X76SUVooLTvjxCdv N/UyinAhF/fTvMSfJuvUQ2Ooyt+8XFvcw8x2dVWMAkZcKQyRn3NfkQw+hME1lp3m KBQhRBPQcq1EpH9tc5IHh9QgbAo8B7R/sEAoHPyjR475veaIhA6JFp+KddNz5r6g cX4Z6t+l15jH+H/kqI5YpUurCpTNGrYqQhp6wmS7hFzo7w5D8Csk7H91uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE14RUEQ/05TQgQ5MrhAcQnz1cyNMB8GA1UdIwQY MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk21m2kG1 KLmNxVLRiAlPKpV3MG1rg6tZ3l4ddO8kW/J/PgIRBrJDH3/FJzYbjwR87BFlNVY1 jFpxnGKIjVuhzxsTUqbJzt2nDpbCTSK4X3Fso0gnvzib12gb+QiFasyV/bzRXjje M2pWGtQnabN56UgiLGwBt+MpPd/gxz6xiZG7nT7cqoU7cpyoagvqTIcZahjxNLvD osGM3JvNMg0NDftEnrxbTchHfD9ev6nSSq6MKeIWn+DppKk6BS8Vezx0SNYT8UcW 6jPq05LG4wyVfpmPNFjsW/cH3P4HtIGhGZX6zW9dKSTA3Rm8PHCG39Sx0NQZbUQC KaGqAixbzKWhzA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:23:06 2025 by rpki-client