This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json) Hash identifier: yA6/7cMA6HJqAJvJg+htJD7+SZlpphgSZQDxzAi9VRc= Subject key identifier: 45:8A:5D:3F:22:A2:C7:A7:12:18:AF:90:3F:3A:7E:22:8B:D8:9F:7D Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Certificate serial: 019B2B8A3CE3D27C86D6E86001BC363F406A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft Manifest number: 1619 Signing time: Wed 17 Dec 2025 09:00:38 +0000 Manifest this update: Wed 17 Dec 2025 09:00:38 +0000 Manifest next update: Thu 18 Dec 2025 09:00:38 +0000 Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: XDOZWGC46nWNqYlZba/l1j7f97nhGlXSJOPAXVNC7LI=) 2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:3c:e3:d2:7c:86:d6:e8:60:01:bc:36:3f:40:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Validity Not Before: Dec 17 09:00:38 2025 GMT Not After : Dec 18 09:00:38 2025 GMT Subject: CN=458a5d3f22a2c7a71218af903f3a7e228bd89f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:9f:4c:a2:2f:34:31:a3:40:c9:9a:a2:db: 11:2e:1c:89:68:69:3e:23:8f:51:22:61:cd:7d:63: 75:29:c3:62:63:bf:50:fe:e7:55:ec:1c:2d:4a:c1: 6b:e6:8f:60:3f:fd:a9:34:80:4a:1a:d6:02:46:17: d2:09:13:33:04:1a:ce:22:3f:58:29:91:80:24:eb: d0:98:e9:5d:4c:fb:df:3e:f7:f2:e4:b3:b1:72:50: e9:ac:27:b3:5b:c4:83:de:64:5b:d8:ce:51:4e:12: 96:93:60:d0:bc:42:59:cf:9a:bc:7c:5e:86:ff:47: 8c:cd:56:93:12:9d:0b:3a:28:fc:82:8c:29:e7:0b: df:49:69:2b:74:ca:74:b4:ff:74:8c:2c:49:31:ab: d2:40:c4:28:7b:1e:a6:b4:e5:22:6b:18:40:0b:96: c7:50:66:e2:3e:54:f3:44:b4:d7:5c:84:1d:b6:5b: 96:7d:dc:24:03:97:f5:83:11:ce:ea:49:f8:49:ae: fc:9d:30:01:0e:7d:41:81:b9:37:4e:bc:ea:a0:b9: 16:c8:8c:50:d1:a8:82:e4:1f:df:5d:87:f3:15:29: 47:a5:15:07:c8:bb:14:f6:c3:a2:be:73:93:56:a6: a2:1d:66:87:af:fa:cb:1e:41:35:58:93:bb:88:96: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:5D:3F:22:A2:C7:A7:12:18:AF:90:3F:3A:7E:22:8B:D8:9F:7D X509v3 Authority Key Identifier: keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cc:ef:11:0e:8d:19:37:47:c3:21:99:42:87:3d:cf:fd:e6: 69:f8:53:51:54:ed:b0:4c:fd:8b:06:78:7e:8e:24:fc:ad:c9: c7:57:80:6e:ad:76:2d:59:2b:9f:84:58:12:c8:d8:e4:7a:06: 43:3e:b2:73:72:9f:ab:4f:3a:93:f2:81:5d:2c:6d:7a:c9:e0: 5b:ec:81:c0:06:f5:66:63:57:56:53:ed:f4:bf:da:ae:1c:5d: b9:44:9c:43:53:f5:9c:90:ae:f5:ad:6f:08:13:32:54:ca:7d: 1c:a6:ab:59:57:b2:72:fe:e4:1f:2f:d3:97:38:3a:a0:d0:da: 94:db:dd:b7:73:45:e0:2d:de:e6:44:14:7c:48:40:bd:46:c4: fa:ef:78:d3:1c:4c:0d:2e:4a:9a:e6:93:50:b2:f0:f4:65:05: 49:12:7f:c3:9c:c5:bf:8b:09:4a:76:02:57:f9:e2:67:77:61: d3:96:3e:9e:df:7c:0b:6f:8b:63:44:6a:9a:9b:c4:8e:b3:bd: 13:8a:a9:0f:77:20:cc:c4:4f:ef:39:d7:eb:0a:d0:36:76:8d: 94:3c:4e:30:5b:30:58:35:63:ee:53:09:41:f3:fe:9f:95:75: 3f:d4:7a:3e:be:4b:b1:3c:8f:f0:14:0c:59:4a:95:e6:ec:ff: 52:01:11:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijzj0nyG1uhgAbw2P0BqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhhZjkzODQ1YmQyNTM4NjQ1MmRiZGZhYTAyMTZlMTNj YWY4YzcwHhcNMjUxMjE3MDkwMDM4WhcNMjUxMjE4MDkwMDM4WjAzMTEwLwYDVQQD Eyg0NThhNWQzZjIyYTJjN2E3MTIxOGFmOTAzZjNhN2UyMjhiZDg5ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQSfTKIvNDGjQMmaotsRLhyJaGk+ I49RImHNfWN1KcNiY79Q/udV7BwtSsFr5o9gP/2pNIBKGtYCRhfSCRMzBBrOIj9Y KZGAJOvQmOldTPvfPvfy5LOxclDprCezW8SD3mRb2M5RThKWk2DQvEJZz5q8fF6G /0eMzVaTEp0LOij8gowp5wvfSWkrdMp0tP90jCxJMavSQMQoex6mtOUiaxhAC5bH UGbiPlTzRLTXXIQdtluWfdwkA5f1gxHO6kn4Sa78nTABDn1Bgbk3TrzqoLkWyIxQ 0aiC5B/fXYfzFSlHpRUHyLsU9sOivnOTVqaiHWaHr/rLHkE1WJO7iJbj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWKXT8iosenEhivkD86fiKL2J99MB8GA1UdIwQY MBaAFBqIr5OEW9JThkUtvfqgIW4TyvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUt NWY5ZjBhYzBmYWU3LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUtNWY5ZjBhYzBmYWU3 LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVczvEQ6N GTdHwyGZQoc9z/3mafhTUVTtsEz9iwZ4fo4k/K3Jx1eAbq12LVkrn4RYEsjY5HoG Qz6yc3Kfq086k/KBXSxtesngW+yBwAb1ZmNXVlPt9L/arhxduUScQ1P1nJCu9a1v CBMyVMp9HKarWVeycv7kHy/Tlzg6oNDalNvdt3NF4C3e5kQUfEhAvUbE+u940xxM DS5KmuaTULLw9GUFSRJ/w5zFv4sJSnYCV/niZ3dh05Y+nt98C2+LY0RqmpvEjrO9 E4qpD3cgzMRP7znX6wrQNnaNlDxOMFswWDVj7lMJQfP+n5V1P9R6Pr5LsTyP8BQM WUqV5uz/UgERzw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:23:06 2025 by rpki-client