This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json) Hash identifier: tNyP57+29utmYN1ehiQklMKj817so6WwzudD0/5RvDE= Subject key identifier: D6:3B:F6:9D:4B:A6:79:17:64:40:4C:ED:9C:E5:AC:94:87:EC:DA:27 Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Certificate serial: 019B4C9620AAF3C323B2F73D79FE9905AB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft Manifest number: 1330 Signing time: Tue 23 Dec 2025 19:01:05 +0000 Manifest this update: Tue 23 Dec 2025 19:01:05 +0000 Manifest next update: Wed 24 Dec 2025 19:01:05 +0000 Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: jSGmA3FABCtiS1cmMFJjNMQy+qxkh+BVoJF/kXes10s=) 2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:20:aa:f3:c3:23:b2:f7:3d:79:fe:99:05:ab:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Validity Not Before: Dec 23 19:01:05 2025 GMT Not After : Dec 24 19:01:05 2025 GMT Subject: CN=d63bf69d4ba6791764404ced9ce5ac9487ecda27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:60:10:18:92:e2:35:46:91:8e:0f:2b:f2: 04:33:07:1d:29:e9:fd:a1:ab:b5:d3:d6:15:6d:cb: 3c:c4:96:55:aa:c5:b3:4c:de:3c:3d:a1:f9:1d:76: a0:35:24:26:a3:a2:e3:44:ca:7d:f3:18:01:70:30: 0b:e4:06:67:7e:17:6a:c1:f2:eb:db:e4:16:a8:24: dc:10:8f:70:c3:fc:91:05:5a:16:e5:14:63:13:a0: f6:dc:87:6d:24:8f:ee:4c:95:92:2f:14:ef:03:11: f7:24:e9:4a:53:44:99:b4:62:83:0b:80:45:b6:da: be:07:ef:9e:5f:29:19:54:e8:d7:4f:83:41:20:36: fc:2a:b6:ba:a0:e8:05:de:3a:72:e7:f7:16:35:2c: 4b:24:71:97:27:28:41:c4:34:b0:e6:75:bf:64:26: 5d:ab:35:1a:3f:e5:58:7a:6d:77:5f:38:c3:ed:e1: e0:01:c8:cf:35:ea:02:17:c5:32:d2:3f:75:15:d9: 16:25:4f:c9:a1:26:33:a9:3e:e3:84:4a:37:c9:16: bd:cb:dd:50:4e:85:a1:45:5a:53:87:d6:86:17:e7: a0:c7:5c:6d:d0:b1:76:54:55:f0:5a:f8:ca:7c:b2: f9:da:15:43:c8:aa:d9:29:5f:35:ab:39:ca:a1:d4: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3B:F6:9D:4B:A6:79:17:64:40:4C:ED:9C:E5:AC:94:87:EC:DA:27 X509v3 Authority Key Identifier: keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bc:f4:28:85:07:bb:ca:96:fa:75:e3:09:24:2d:93:09:04: b3:4b:5d:94:f8:68:ba:84:d4:dc:7a:cb:5d:a2:7f:82:ec:06: d9:28:1a:c2:f1:c8:d8:ec:4b:04:54:a7:5b:41:c9:6d:cd:31: b7:80:33:3e:89:2e:72:0c:1a:98:e5:a4:8d:fa:c3:04:30:c1: 73:cc:0e:46:64:da:1a:5c:62:ce:a0:63:cc:9f:2e:c5:5b:9b: f3:e3:06:86:f2:c9:f3:81:d8:9e:d1:fc:97:b0:6f:d3:fd:10: c4:f3:b0:8d:7c:b9:c7:39:89:5e:2a:ae:4c:21:35:7c:d9:3f: 01:26:71:2d:2b:c7:f9:1b:84:f1:f3:12:44:36:5d:96:6f:a3: d0:ee:74:31:cd:53:49:bf:de:23:a0:57:dc:c6:c4:b1:7e:a3: 41:37:84:15:4d:f6:4d:42:41:38:4b:9a:99:b4:cc:b2:9b:9e: 79:88:0c:fb:07:44:c8:a9:db:f4:5f:4e:17:bb:2b:1b:5c:38: f9:e6:0e:eb:24:91:e1:50:ba:a2:c8:95:73:e9:3c:04:41:7e: 5a:75:9a:a8:8a:34:f9:7b:f4:fe:e0:53:28:ab:b6:88:a1:da: c4:71:e1:16:8c:c3:b5:03:bf:ca:fd:c3:54:f6:5b:11:2b:a5: ad:8e:6d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMliCq88Mjsvc9ef6ZBasuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZTUwNmZjZjFkN2NmNjQ5ZDM4OGU5NzVjYTI2MjUyZTIx OWZjN2MwHhcNMjUxMjIzMTkwMTA1WhcNMjUxMjI0MTkwMTA1WjAzMTEwLwYDVQQD EyhkNjNiZjY5ZDRiYTY3OTE3NjQ0MDRjZWQ5Y2U1YWM5NDg3ZWNkYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArepgEBiS4jVGkY4PK/IEMwcdKen9 oau109YVbcs8xJZVqsWzTN48PaH5HXagNSQmo6LjRMp98xgBcDAL5AZnfhdqwfLr 2+QWqCTcEI9ww/yRBVoW5RRjE6D23IdtJI/uTJWSLxTvAxH3JOlKU0SZtGKDC4BF ttq+B++eXykZVOjXT4NBIDb8Kra6oOgF3jpy5/cWNSxLJHGXJyhBxDSw5nW/ZCZd qzUaP+VYem13XzjD7eHgAcjPNeoCF8Uy0j91FdkWJU/JoSYzqT7jhEo3yRa9y91Q ToWhRVpTh9aGF+egx1xt0LF2VFXwWvjKfLL52hVDyKrZKV81qznKodQV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY79p1LpnkXZEBM7ZzlrJSH7NonMB8GA1UdIwQY MBaAFIDlBvzx189knTiOl1yiYlLiGfx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQt ZmY3ZGMwNGJhMzg1LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQtZmY3ZGMwNGJhMzg1 LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLz0KIUH u8qW+nXjCSQtkwkEs0tdlPhouoTU3HrLXaJ/guwG2SgawvHI2OxLBFSnW0HJbc0x t4AzPokucgwamOWkjfrDBDDBc8wORmTaGlxizqBjzJ8uxVub8+MGhvLJ84HYntH8 l7Bv0/0QxPOwjXy5xzmJXiquTCE1fNk/ASZxLSvH+RuE8fMSRDZdlm+j0O50Mc1T Sb/eI6BX3MbEsX6jQTeEFU32TUJBOEuambTMspueeYgM+wdEyKnb9F9OF7srG1w4 +eYO6ySR4VC6osiVc+k8BEF+WnWaqIo0+Xv0/uBTKKu2iKHaxHHhFozDtQO/yv3D VPZbESulrY5tew== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:42 2025 by rpki-client