This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json) Hash identifier: ONl2JMLA92QaEhCHKUISa9F8TzRdXDGJFSz0npOU8tc= Subject key identifier: 70:88:C4:15:65:8D:63:E8:E5:43:DC:47:3F:70:CF:98:A7:25:52:20 Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Certificate serial: 019B6DD882B4AA1CD6A9CA8F84DACAF39158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 06:01:04 +0000 Manifest this update: Tue 30 Dec 2025 06:01:04 +0000 Manifest next update: Wed 31 Dec 2025 06:01:04 +0000 Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=) 2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: PrJrlYzFvZxedK2104nDCs1TQAWBQ+gdG0lNsaW/3QY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:82:b4:aa:1c:d6:a9:ca:8f:84:da:ca:f3:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Validity Not Before: Dec 30 06:01:04 2025 GMT Not After : Dec 31 06:01:04 2025 GMT Subject: CN=7088c415658d63e8e543dc473f70cf98a7255220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:0b:31:8c:b6:17:0e:64:36:52:ca:f9:dd: 1d:1c:f4:6f:fc:95:90:69:70:75:b8:08:02:f5:6f: 74:27:43:fb:92:e9:ac:cd:28:f8:e3:01:db:62:46: 59:12:98:f5:d5:cf:1a:c1:26:e4:99:b0:25:ba:4a: d2:f9:11:4a:1f:95:49:56:06:14:35:ca:65:85:fc: 6a:90:60:c1:5b:fc:70:2d:c5:21:f9:37:11:61:30: 7d:e1:70:ff:ec:53:28:72:5d:42:2f:00:fb:c7:72: f5:9d:d3:46:d6:47:f2:0c:08:54:a5:64:0f:df:67: 45:0f:72:6a:5b:c9:bc:3a:69:ef:c1:58:77:51:bf: 98:8d:8c:b3:a7:43:96:d5:64:2d:77:84:9b:36:40: d7:1d:39:15:88:52:06:11:1d:40:ef:9d:a8:59:7e: fc:1d:35:6a:a1:14:2f:03:7c:dd:e2:6b:00:4f:ff: 34:87:77:0f:5a:42:6f:54:f3:4b:e4:db:82:7b:e4: 40:86:dc:d4:83:cb:5b:10:a7:99:07:08:f8:77:13: 5a:2b:d1:56:3f:20:ca:86:b7:56:12:ff:79:64:b9: f8:b8:05:57:60:e8:b7:42:fc:84:bc:91:7a:f0:29: 04:e1:79:a8:4b:7d:9f:c1:00:e4:d7:97:78:10:a3: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:88:C4:15:65:8D:63:E8:E5:43:DC:47:3F:70:CF:98:A7:25:52:20 X509v3 Authority Key Identifier: keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:9f:04:fe:27:d4:6c:bd:f7:93:dd:ac:8d:43:4d:cd:fe: 7d:83:8d:aa:f5:85:a7:19:66:96:80:eb:15:a3:f5:9e:3a:ee: 1d:81:80:a9:e9:bb:44:8f:5b:80:28:18:c3:ae:cf:1d:ca:0d: b4:2b:bb:f2:d7:95:7f:4e:94:d6:65:7a:8a:a4:a4:7c:e3:69: 7d:cf:6c:7a:d9:95:1b:f2:ad:7d:08:ab:df:f1:78:77:69:91: 1d:1b:56:86:4c:91:41:b7:f4:39:ba:3d:99:a6:6c:8f:b7:dd: d9:30:d6:70:0d:3c:3f:8f:1c:ce:55:43:b5:e8:44:5c:8d:f6: 98:92:f8:34:38:0f:14:5e:1f:5a:0a:75:45:f7:d2:53:2f:bb: 3f:27:78:89:ed:ae:8c:95:a9:79:f4:07:e1:b9:5f:03:2f:39: 67:71:00:46:c3:01:33:4a:6e:85:87:38:69:64:e1:a0:ee:0e: 35:19:19:db:7a:8a:02:7a:d2:d7:aa:32:f0:75:23:27:63:32: 20:ab:00:64:56:8c:25:77:67:d2:58:bf:d7:99:e1:87:3d:3e: ff:05:35:ad:fe:05:bb:dc:ad:41:ae:d3:b3:5f:a7:5f:0d:99: ec:03:eb:38:15:d5:5f:10:27:eb:e9:18:a3:05:7f:88:09:bd: f9:fb:07:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2IK0qhzWqcqPhNrK85FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk NGZjNmEwHhcNMjUxMjMwMDYwMTA0WhcNMjUxMjMxMDYwMTA0WjAzMTEwLwYDVQQD Eyg3MDg4YzQxNTY1OGQ2M2U4ZTU0M2RjNDczZjcwY2Y5OGE3MjU1MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxkLMYy2Fw5kNlLK+d0dHPRv/JWQ aXB1uAgC9W90J0P7kumszSj44wHbYkZZEpj11c8awSbkmbAlukrS+RFKH5VJVgYU NcplhfxqkGDBW/xwLcUh+TcRYTB94XD/7FMocl1CLwD7x3L1ndNG1kfyDAhUpWQP 32dFD3JqW8m8OmnvwVh3Ub+YjYyzp0OW1WQtd4SbNkDXHTkViFIGER1A752oWX78 HTVqoRQvA3zd4msAT/80h3cPWkJvVPNL5NuCe+RAhtzUg8tbEKeZBwj4dxNaK9FW PyDKhrdWEv95ZLn4uAVXYOi3QvyEvJF68CkE4XmoS32fwQDk15d4EKPAGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCIxBVljWPo5UPcRz9wz5inJVIgMB8GA1UdIwQY MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsyfBP4n 1Gy995PdrI1DTc3+fYONqvWFpxlmloDrFaP1njruHYGAqem7RI9bgCgYw67PHcoN tCu78teVf06U1mV6iqSkfONpfc9setmVG/KtfQir3/F4d2mRHRtWhkyRQbf0Obo9 maZsj7fd2TDWcA08P48czlVDtehEXI32mJL4NDgPFF4fWgp1RffSUy+7Pyd4ie2u jJWpefQH4blfAy85Z3EARsMBM0puhYc4aWThoO4ONRkZ23qKAnrS16oy8HUjJ2My IKsAZFaMJXdn0li/15nhhz0+/wU1rf4Fu9ytQa7Ts1+nXw2Z7APrOBXVXxAn6+kY owV/iAm9+fsHeA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:20 2025 by rpki-client