This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json) Hash identifier: +Dq4O8M5s1QQrEtFzQShP+JBanxmSo6fmGQpLqOIooo= Subject key identifier: 59:D7:AF:79:57:73:16:BD:90:3B:AB:93:C8:05:4E:8E:91:F8:73:9C Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Certificate serial: 019B2F67251781880FF9FEE9C9128E0D9B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft Manifest number: 161B Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: 48vHnbJT+HwArszNWyvz7W5W8igkKgrIdz+8861Td9I=) 2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:25:17:81:88:0f:f9:fe:e9:c9:12:8e:0d:9b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=59d7af79577316bd903bab93c8054e8e91f8739c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:ad:ef:c1:33:00:06:99:b9:3e:0b:80:a3: 24:7f:e4:4b:f9:a4:a4:43:f5:95:5f:98:74:46:5e: 93:a9:8a:04:3e:1c:d0:36:e0:d9:8e:59:d9:39:f7: bc:3a:b4:7d:4b:a6:5f:41:d7:54:21:aa:b4:2b:f9: 24:c4:a0:68:71:80:23:67:26:77:67:77:7a:91:b7: 80:1d:3b:95:b3:2c:57:3c:1b:03:cd:66:c1:57:b3: 90:24:f3:21:ad:8e:b7:aa:59:a5:05:3f:4e:e4:6b: ba:a7:7a:ab:f8:54:91:92:6f:ab:c7:43:6b:8a:28: 7a:ff:ad:ed:21:31:84:08:ad:01:3d:bd:ab:e7:13: 44:9a:cc:6e:df:c0:9c:8a:34:d3:96:42:30:ee:82: d5:ae:80:56:33:32:0e:3f:20:37:4e:88:c6:b7:23: 9b:6c:bd:ba:82:70:58:12:cc:79:ea:14:df:24:f9: cc:9d:72:a2:4b:54:3c:f2:c2:6b:4a:ff:7f:fc:ef: 44:c6:8e:f2:60:da:56:74:3b:fa:d5:a7:f4:f5:80: b5:93:07:2a:b9:09:44:87:8f:47:8f:0c:6f:2e:42: 19:c4:36:82:d2:88:1f:32:90:3d:ec:fc:12:cd:fd: 43:37:40:d4:74:5c:94:bb:11:f6:0a:75:3b:6a:6f: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D7:AF:79:57:73:16:BD:90:3B:AB:93:C8:05:4E:8E:91:F8:73:9C X509v3 Authority Key Identifier: keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b8:0a:61:9c:0c:37:78:5f:6c:b8:58:7e:a2:21:f4:6a:31: 3b:14:cc:d5:e1:4c:a3:bc:3f:70:8e:63:40:39:88:ed:61:fc: 31:e0:be:5a:9a:19:eb:09:c5:64:75:d6:a3:53:7d:13:33:3f: 49:72:f0:5a:5e:1e:85:1d:6d:e8:58:15:d5:2a:5e:65:3f:fc: 03:65:7c:33:7f:f3:60:52:e3:a0:1e:74:8c:c1:83:2e:e7:d7: 97:03:3a:e0:18:64:f1:3a:ff:02:77:0c:36:58:2e:a5:8a:92: 71:ea:47:21:9c:2b:73:6c:c4:7b:d0:84:1d:c5:16:01:0f:04: 19:f3:79:55:cd:2a:25:70:8c:3d:33:69:d0:c9:94:84:67:50: 72:0c:71:7e:53:6a:cb:d8:92:8f:1c:3b:51:86:3b:7e:11:c4: a7:e2:df:5c:78:c1:f3:05:95:be:8c:52:7e:88:fe:ea:96:e4: ad:53:78:6c:2d:95:23:fc:88:d0:00:e7:b9:e3:56:f6:6b:31: 0a:c5:ee:67:c5:9f:28:23:d4:6d:66:dc:27:97:28:b0:6b:75: 46:b4:01:07:b2:6d:81:45:65:7d:28:3b:ba:8e:9b:22:a9:8a: a3:9c:43:cd:8e:a9:0b:dc:84:9c:ef:51:32:82:28:22:4e:24: 1d:5b:36:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyUXgYgP+f7pyRKODZsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhhZjkzODQ1YmQyNTM4NjQ1MmRiZGZhYTAyMTZlMTNj YWY4YzcwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD Eyg1OWQ3YWY3OTU3NzMxNmJkOTAzYmFiOTNjODA1NGU4ZTkxZjg3MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S+t78EzAAaZuT4LgKMkf+RL+aSk Q/WVX5h0Rl6TqYoEPhzQNuDZjlnZOfe8OrR9S6ZfQddUIaq0K/kkxKBocYAjZyZ3 Z3d6kbeAHTuVsyxXPBsDzWbBV7OQJPMhrY63qlmlBT9O5Gu6p3qr+FSRkm+rx0Nr iih6/63tITGECK0BPb2r5xNEmsxu38CcijTTlkIw7oLVroBWMzIOPyA3TojGtyOb bL26gnBYEsx56hTfJPnMnXKiS1Q88sJrSv9//O9Exo7yYNpWdDv61af09YC1kwcq uQlEh49HjwxvLkIZxDaC0ogfMpA97PwSzf1DN0DUdFyUuxH2CnU7am/QCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnXr3lXcxa9kDurk8gFTo6R+HOcMB8GA1UdIwQY MBaAFBqIr5OEW9JThkUtvfqgIW4TyvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUt NWY5ZjBhYzBmYWU3LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUtNWY5ZjBhYzBmYWU3 LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7gKYZwM N3hfbLhYfqIh9GoxOxTM1eFMo7w/cI5jQDmI7WH8MeC+WpoZ6wnFZHXWo1N9EzM/ SXLwWl4ehR1t6FgV1SpeZT/8A2V8M3/zYFLjoB50jMGDLufXlwM64Bhk8Tr/AncM NlgupYqScepHIZwrc2zEe9CEHcUWAQ8EGfN5Vc0qJXCMPTNp0MmUhGdQcgxxflNq y9iSjxw7UYY7fhHEp+LfXHjB8wWVvoxSfoj+6pbkrVN4bC2VI/yI0ADnueNW9msx CsXuZ8WfKCPUbWbcJ5cosGt1RrQBB7JtgUVlfSg7uo6bIqmKo5xDzY6pC9yEnO9R MoIoIk4kHVs2rw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:47 2025 by rpki-client