This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json) Hash identifier: WiR4ZC4dE425g411QHfEolhwgM2N5YJQpJ2fsQu0Y+k= Subject key identifier: 4E:CC:FD:5F:36:D2:9B:0B:CB:C9:67:26:69:D7:64:8E:C4:48:6E:E0 Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Certificate serial: 019B5FE5DC556EF8C42C7AFAD3EBB0760DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft Manifest number: 14E5 Signing time: Sat 27 Dec 2025 13:00:58 +0000 Manifest this update: Sat 27 Dec 2025 13:00:58 +0000 Manifest next update: Sun 28 Dec 2025 13:00:58 +0000 Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=) 2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: eM2KorB0C0n3S9p7nFXb/BXzWYClwjgx0cOpqGrUv/A=) 3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:dc:55:6e:f8:c4:2c:7a:fa:d3:eb:b0:76:0d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Validity Not Before: Dec 27 13:00:58 2025 GMT Not After : Dec 28 13:00:58 2025 GMT Subject: CN=4eccfd5f36d29b0bcbc9672669d7648ec4486ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:63:8c:15:02:35:c1:95:0c:c6:41:00:c5: 74:a8:f2:7e:5f:27:43:d2:bf:67:b0:36:8b:a5:57: 52:28:a8:5b:b4:d0:77:af:ef:d8:48:36:98:af:c4: 63:51:30:a1:5c:52:bd:aa:f0:4d:6a:b0:92:8b:85: 0e:fa:c8:af:01:db:74:a3:7d:39:a3:a6:df:8f:30: b6:ad:03:f6:b0:74:4a:1a:3d:30:57:e7:6f:ce:b1: 3d:d5:92:fe:75:c0:40:ad:a5:23:cb:dc:6b:12:c6: 9f:c6:8b:d8:ae:94:3c:86:59:7b:1a:d2:9f:ed:74: e7:07:8e:44:e6:ea:79:5f:b9:7c:62:88:6d:9a:46: 52:cf:31:74:73:f1:21:e6:57:91:fe:88:30:ca:d4: ae:3d:ec:5a:86:d2:2a:13:12:98:3b:3f:1a:5c:90: 02:81:12:7c:0f:7e:65:d7:97:50:2f:53:f2:07:2e: f0:8e:d8:65:50:68:20:97:fe:db:97:d0:fc:39:c8: 53:5c:d8:cb:4c:7a:b0:b7:92:9e:a2:d6:44:d0:58: 49:45:6f:12:be:ef:ad:22:74:7d:76:81:e5:25:8f: d4:c8:8f:f9:fa:07:5a:0f:64:ff:e5:53:c0:b6:22: 5e:8b:b7:16:8e:02:c6:9b:ef:ef:c0:53:4c:78:b2: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CC:FD:5F:36:D2:9B:0B:CB:C9:67:26:69:D7:64:8E:C4:48:6E:E0 X509v3 Authority Key Identifier: keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fc:5e:92:1c:35:92:c8:8b:0b:0c:1f:84:c7:35:3d:ee:8e: b8:9e:54:13:c6:9e:90:f3:74:a7:b8:a0:cf:74:9a:68:74:14: d3:65:ad:48:00:5a:fc:98:56:ef:1e:6f:6f:f3:af:c6:13:d0: 68:6a:3c:fc:c2:b6:61:94:9f:54:a6:76:25:cd:18:d7:6d:2a: c0:26:21:28:72:11:d8:c6:47:16:68:79:26:1a:99:c0:9b:69: 90:42:c7:31:6a:5f:20:cf:d2:73:d8:f9:84:e7:7b:aa:e3:d9: 28:0a:f4:9e:d6:d5:12:bd:8c:22:2e:fe:29:ca:51:28:12:d1: 76:10:76:4c:42:ac:e1:d2:04:c3:8e:0d:82:ab:12:ec:dd:1d: 9f:18:4f:b9:e6:ee:03:8a:b7:d9:6a:fe:71:09:70:fa:68:31: 01:5d:23:0a:0f:17:ed:f3:20:da:bd:29:45:f4:5e:2a:5f:3c: 75:fd:04:b5:ae:87:24:cd:f8:ac:9f:8c:b0:dc:79:ee:69:e9: 54:fb:85:8d:05:89:e7:c5:b1:31:bd:9e:d7:c8:32:d4:57:e5: d5:24:09:b9:2c:93:e0:e7:64:8c:86:71:ed:7b:a2:72:46:d8: ee:69:2c:88:b2:75:62:d4:72:93:e1:a0:58:51:9b:b0:65:39: 2c:77:21:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5dxVbvjELHr60+uwdg3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0 YzM1YjQwHhcNMjUxMjI3MTMwMDU4WhcNMjUxMjI4MTMwMDU4WjAzMTEwLwYDVQQD Eyg0ZWNjZmQ1ZjM2ZDI5YjBiY2JjOTY3MjY2OWQ3NjQ4ZWM0NDg2ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApopjjBUCNcGVDMZBAMV0qPJ+XydD 0r9nsDaLpVdSKKhbtNB3r+/YSDaYr8RjUTChXFK9qvBNarCSi4UO+sivAdt0o305 o6bfjzC2rQP2sHRKGj0wV+dvzrE91ZL+dcBAraUjy9xrEsafxovYrpQ8hll7GtKf 7XTnB45E5up5X7l8YohtmkZSzzF0c/Eh5leR/ogwytSuPexahtIqExKYOz8aXJAC gRJ8D35l15dQL1PyBy7wjthlUGggl/7bl9D8OchTXNjLTHqwt5KeotZE0FhJRW8S vu+tInR9doHlJY/UyI/5+gdaD2T/5VPAtiJei7cWjgLGm+/vwFNMeLJ5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7M/V820psLy8lnJmnXZI7ESG7gMB8GA1UdIwQY MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvxekhw1 ksiLCwwfhMc1Pe6OuJ5UE8aekPN0p7igz3SaaHQU02WtSABa/JhW7x5vb/OvxhPQ aGo8/MK2YZSfVKZ2Jc0Y120qwCYhKHIR2MZHFmh5JhqZwJtpkELHMWpfIM/Sc9j5 hOd7quPZKAr0ntbVEr2MIi7+KcpRKBLRdhB2TEKs4dIEw44NgqsS7N0dnxhPuebu A4q32Wr+cQlw+mgxAV0jCg8X7fMg2r0pRfReKl88df0Eta6HJM34rJ+MsNx57mnp VPuFjQWJ58WxMb2e18gy1Ffl1SQJuSyT4OdkjIZx7XuickbY7mksiLJ1YtRyk+Gg WFGbsGU5LHchTw== -----END CERTIFICATE-----Generated at Sat Dec 27 15:57:26 2025 by rpki-client