This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json) Hash identifier: AFALbqQlDHsAG1P0viqPf3lrn/ITbo0xdRCfGiabmHo= Subject key identifier: 41:B7:66:2C:A2:0B:9A:CB:25:AE:22:C1:07:CE:B3:32:91:89:B6:06 Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Certificate serial: 019B544F375000D45BD2A5EFF4A7EDEAE279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft Manifest number: 1334 Signing time: Thu 25 Dec 2025 07:00:36 +0000 Manifest this update: Thu 25 Dec 2025 07:00:36 +0000 Manifest next update: Fri 26 Dec 2025 07:00:36 +0000 Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: 5zcN51Zg+7CNsLpVzzg5L7e2KlsayzssvJP1aeS4/DY=) 2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:37:50:00:d4:5b:d2:a5:ef:f4:a7:ed:ea:e2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Validity Not Before: Dec 25 07:00:36 2025 GMT Not After : Dec 26 07:00:36 2025 GMT Subject: CN=41b7662ca20b9acb25ae22c107ceb3329189b606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:ae:d8:5d:8d:bf:51:02:55:30:36:da:fa: 32:00:a5:da:bd:df:07:a7:9f:ba:1b:d6:fd:84:67: 13:ff:76:0d:1e:d3:a8:ce:b5:d8:bf:87:3d:ac:78: d1:80:1e:e7:f3:c3:0f:8b:d0:99:24:e5:74:61:32: 60:90:5a:86:51:0b:56:d3:d7:19:cd:d9:63:0d:e2: 8b:94:ae:59:99:7f:40:45:dd:d2:60:ef:f1:18:fa: 04:80:0d:b5:17:2a:54:5a:dc:48:89:9b:32:89:0c: 62:4f:78:db:5e:17:cc:9e:0a:f3:5d:4f:37:c7:4a: b3:e9:6a:8a:73:6a:7b:bd:06:c6:90:bb:d7:36:98: 2e:b5:2d:1c:4a:6b:58:a5:8b:b5:08:83:21:c4:9c: 39:71:7a:e6:ca:6d:c4:09:be:55:04:a2:f4:4c:15: e1:4d:02:fd:b4:a4:86:73:d3:29:68:43:df:fd:f0: 70:31:a2:e8:6b:3c:1a:f5:3e:e6:6b:a5:b0:6d:46: f9:54:3d:c4:36:08:69:47:a5:17:f7:c8:1e:8f:fc: 2c:e8:6c:3d:fd:59:bb:fc:6e:b8:26:ec:bf:48:58: 70:3f:11:51:e6:db:a1:06:90:56:fe:98:b6:6e:0a: c8:52:5e:c8:d1:de:19:5f:10:1a:46:b6:ac:a0:0d: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B7:66:2C:A2:0B:9A:CB:25:AE:22:C1:07:CE:B3:32:91:89:B6:06 X509v3 Authority Key Identifier: keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5d:6a:3a:f6:0e:8e:cb:43:59:09:05:14:06:d3:d4:5e:6e: 08:6a:86:5e:f6:7a:25:40:0a:c2:58:2e:10:37:27:09:06:61: 7f:bb:12:a9:28:cb:02:a0:e8:8d:94:cd:a9:33:d3:12:b7:97: a6:4d:c9:86:4a:fe:cb:78:46:40:8e:a3:80:3c:76:64:de:e1: 67:db:58:35:aa:06:b6:62:2d:00:eb:9c:d1:24:b7:9d:7d:d7: a2:cd:b8:d2:af:df:24:83:46:e5:ce:b3:d1:45:de:f4:51:cf: 97:58:5c:2d:6a:e6:40:a0:5c:23:b1:6d:fd:0d:56:50:96:46: 25:02:ea:9f:0b:9c:3d:0f:c2:13:89:ed:31:9d:af:7d:fb:ef: 1b:8c:67:c8:e2:2d:be:f4:31:59:ae:3b:31:56:d3:d4:b2:c8: 78:6c:63:80:32:a4:1b:f8:9d:9a:d2:8f:d6:fc:07:52:3f:83: c8:b4:72:a8:4a:40:8f:86:4e:8a:55:23:65:ee:a5:73:f6:b9: 7f:4f:db:6a:ef:c9:e0:d0:12:80:cf:ff:f8:3d:9c:52:c2:3c: bb:29:a7:a1:b8:91:3a:02:04:3d:dc:00:d4:32:25:5d:dc:8b: 04:d9:a1:17:d8:64:81:0b:e4:e2:f4:85:0d:81:e4:06:a8:f3: 7d:8d:2a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUTzdQANRb0qXv9Kft6uJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZTUwNmZjZjFkN2NmNjQ5ZDM4OGU5NzVjYTI2MjUyZTIx OWZjN2MwHhcNMjUxMjI1MDcwMDM2WhcNMjUxMjI2MDcwMDM2WjAzMTEwLwYDVQQD Eyg0MWI3NjYyY2EyMGI5YWNiMjVhZTIyYzEwN2NlYjMzMjkxODliNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJCu2F2Nv1ECVTA22voyAKXavd8H p5+6G9b9hGcT/3YNHtOozrXYv4c9rHjRgB7n88MPi9CZJOV0YTJgkFqGUQtW09cZ zdljDeKLlK5ZmX9ARd3SYO/xGPoEgA21FypUWtxIiZsyiQxiT3jbXhfMngrzXU83 x0qz6WqKc2p7vQbGkLvXNpgutS0cSmtYpYu1CIMhxJw5cXrmym3ECb5VBKL0TBXh TQL9tKSGc9MpaEPf/fBwMaLoazwa9T7ma6WwbUb5VD3ENghpR6UX98gej/ws6Gw9 /Vm7/G64Juy/SFhwPxFR5tuhBpBW/pi2bgrIUl7I0d4ZXxAaRrasoA3gxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG3ZiyiC5rLJa4iwQfOszKRibYGMB8GA1UdIwQY MBaAFIDlBvzx189knTiOl1yiYlLiGfx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQt ZmY3ZGMwNGJhMzg1LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQtZmY3ZGMwNGJhMzg1 LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAl1qOvYO jstDWQkFFAbT1F5uCGqGXvZ6JUAKwlguEDcnCQZhf7sSqSjLAqDojZTNqTPTEreX pk3Jhkr+y3hGQI6jgDx2ZN7hZ9tYNaoGtmItAOuc0SS3nX3Xos240q/fJING5c6z 0UXe9FHPl1hcLWrmQKBcI7Ft/Q1WUJZGJQLqnwucPQ/CE4ntMZ2vffvvG4xnyOIt vvQxWa47MVbT1LLIeGxjgDKkG/idmtKP1vwHUj+DyLRyqEpAj4ZOilUjZe6lc/a5 f0/bau/J4NASgM//+D2cUsI8uymnobiROgIEPdwA1DIlXdyLBNmhF9hkgQvk4vSF DYHkBqjzfY0qHw== -----END CERTIFICATE-----Generated at Thu Dec 25 10:58:29 2025 by rpki-client