This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json) Hash identifier: amrybdu+LuF2k3P64fRoPPq9Gqo9fe7wXNAp24Gb0Wo= Subject key identifier: B4:65:97:3A:5E:14:20:A1:2F:15:5E:6C:80:33:2D:E2:7D:28:B5:F1 Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10 Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10 Certificate serial: 019AF6533B7C261FA5517E441DD1458EDD8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft Manifest number: 1761 Signing time: Sun 07 Dec 2025 01:00:41 +0000 Manifest this update: Sun 07 Dec 2025 01:00:41 +0000 Manifest next update: Mon 08 Dec 2025 01:00:41 +0000 Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: Hm5P3gzzLU+DpVVkFYxJCcECbmc8GHVjfBhLNCmS/jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:3b:7c:26:1f:a5:51:7e:44:1d:d1:45:8e:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10 Validity Not Before: Dec 7 01:00:41 2025 GMT Not After : Dec 8 01:00:41 2025 GMT Subject: CN=b465973a5e1420a12f155e6c80332de27d28b5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:3f:01:a7:42:7f:a8:79:56:dd:4e:c9:8c: 9e:26:24:22:1d:d2:be:aa:ac:8e:00:76:3a:69:ea: 7e:56:db:98:1d:e3:f0:03:3a:57:22:bf:68:d3:5d: 36:ff:06:a5:cc:35:9a:75:31:5e:7a:7c:7b:d7:12: 36:24:69:9b:5b:32:ad:af:20:82:56:59:f8:e8:2c: c2:b1:64:e8:1d:f8:49:97:41:1f:ad:40:4b:95:11: e7:aa:9a:e4:b8:50:fb:d5:37:1f:36:84:44:2f:4f: be:81:32:90:cf:24:71:00:e2:c7:d1:71:24:dc:ab: 0d:ea:f1:bf:7d:41:c0:6a:90:ac:66:41:e5:ae:eb: 29:eb:62:f8:86:d2:40:b5:06:6e:c0:37:41:62:1d: d1:90:c8:0c:87:20:f2:3c:a5:a8:10:54:fe:0d:9e: 33:02:b5:66:79:f5:8f:2f:c1:66:c0:a2:de:76:8b: cf:07:9e:ce:db:ea:df:73:78:c7:37:02:21:e9:3d: a5:38:e0:b4:c6:ae:7d:9a:14:5f:a5:79:d7:ec:0d: 88:1c:8d:09:00:35:dc:36:92:01:1d:f7:28:47:22: 5a:8d:0a:a3:fc:6d:98:2e:67:f9:ac:ee:49:33:b6: 2f:31:8f:b3:25:87:3e:31:f6:80:d1:9e:64:9a:9b: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:97:3A:5E:14:20:A1:2F:15:5E:6C:80:33:2D:E2:7D:28:B5:F1 X509v3 Authority Key Identifier: keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:99:ec:03:4b:a9:70:8e:41:9a:7d:27:7a:9f:a6:95:13: d2:94:49:50:b7:4d:c0:55:88:58:e4:49:cd:bf:8f:d0:bf:ac: dc:14:f6:dc:95:21:62:b2:c8:3c:7b:e5:7b:67:16:77:3f:c9: 02:6d:cb:b0:a3:51:ff:d4:d8:1b:30:02:6b:2e:5a:56:07:49: cf:c3:79:ea:60:0c:91:03:40:0e:0c:75:86:8f:80:55:46:f1: 73:1d:d1:21:bd:c4:34:19:e5:a1:a1:b6:f1:e5:de:53:ca:fb: 6b:69:41:22:dc:45:95:56:26:82:f4:9c:27:08:4c:9a:24:8a: 87:6e:a9:56:85:b5:69:22:87:d5:e3:28:92:26:15:79:51:cd: fe:87:cf:d1:49:79:49:97:ea:57:1a:28:d4:6b:06:d8:4a:92: f4:22:eb:c0:6d:d8:75:c6:80:ce:bd:32:03:28:44:ee:ab:97: 49:46:fb:da:0c:88:9e:9d:ce:b0:ec:3a:dc:8a:48:cd:38:53: 4d:ae:d2:7e:85:85:ef:11:a0:bc:31:1b:b8:2c:05:5a:02:1f: 46:9d:b7:cf:eb:f0:6b:84:14:9a:c3:d6:54:1a:bd:c7:27:c8: 74:d5:ae:bb:a4:06:68:50:65:7b:9d:87:6e:a7:de:c2:42:b4: e5:bc:37:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2Uzt8Jh+lUX5EHdFFjt2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTRmMTY2MjM4NjdhMGJiMWYzMzc4NTBlYWNhYmZmODdj NDdlMTAwHhcNMjUxMjA3MDEwMDQxWhcNMjUxMjA4MDEwMDQxWjAzMTEwLwYDVQQD EyhiNDY1OTczYTVlMTQyMGExMmYxNTVlNmM4MDMzMmRlMjdkMjhiNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYc/AadCf6h5Vt1OyYyeJiQiHdK+ qqyOAHY6aep+VtuYHePwAzpXIr9o0102/walzDWadTFeenx71xI2JGmbWzKtryCC Vln46CzCsWToHfhJl0EfrUBLlRHnqprkuFD71TcfNoREL0++gTKQzyRxAOLH0XEk 3KsN6vG/fUHAapCsZkHlrusp62L4htJAtQZuwDdBYh3RkMgMhyDyPKWoEFT+DZ4z ArVmefWPL8FmwKLedovPB57O2+rfc3jHNwIh6T2lOOC0xq59mhRfpXnX7A2IHI0J ADXcNpIBHfcoRyJajQqj/G2YLmf5rO5JM7YvMY+zJYc+MfaA0Z5kmpsIqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRllzpeFCChLxVebIAzLeJ9KLXxMB8GA1UdIwQY MBaAFBjk8WYjhnoLsfM3hQ6sq/+HxH4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNWYwZmUtMjBlMC00MWFiLWIzMmIt YmRmNTFhOWJkZjdhLzEvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNWYwZmUtMjBlMC00MWFiLWIzMmItYmRmNTFhOWJkZjdh LzEvR09UeFppT0dlZ3V4OHplRkRxeXJfNGZFZmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiWZ7ANL qXCOQZp9J3qfppUT0pRJULdNwFWIWORJzb+P0L+s3BT23JUhYrLIPHvle2cWdz/J Am3LsKNR/9TYGzACay5aVgdJz8N56mAMkQNADgx1ho+AVUbxcx3RIb3ENBnloaG2 8eXeU8r7a2lBItxFlVYmgvScJwhMmiSKh26pVoW1aSKH1eMokiYVeVHN/ofP0Ul5 SZfqVxoo1GsG2EqS9CLrwG3YdcaAzr0yAyhE7quXSUb72gyInp3OsOw63IpIzThT Ta7SfoWF7xGgvDEbuCwFWgIfRp23z+vwa4QUmsPWVBq9xyfIdNWuu6QGaFBle52H bqfewkK05bw34A== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:13 2025 by rpki-client