This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft File: goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json) Hash identifier: aXVDoiuulSLlCKMrHwGleeVIrEW4pif1j5gsniW2Hvc= Subject key identifier: E7:5A:9E:1D:56:64:2C:08:91:F6:63:C4:7A:F1:44:49:89:35:13:B5 Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81 Certificate issuer: /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81 Certificate serial: 019AF61C21E21BE7DF76AEA6251A46CD752F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 00:00:29 +0000 Manifest this update: Sun 07 Dec 2025 00:00:29 +0000 Manifest next update: Mon 08 Dec 2025 00:00:29 +0000 Files and hashes: 1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=) 2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: q8QhPLSKDwOdgmr/RUoxzgpQdGjx8Rsr7Ts7x9sic8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:21:e2:1b:e7:df:76:ae:a6:25:1a:46:cd:75:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81 Validity Not Before: Dec 7 00:00:29 2025 GMT Not After : Dec 8 00:00:29 2025 GMT Subject: CN=e75a9e1d56642c0891f663c47af14449893513b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:41:35:80:5e:6b:9c:9b:0d:e5:ea:bd:6f: 16:3f:be:c4:28:ff:e6:8a:26:50:6a:a9:40:4d:24: e9:2a:3c:08:35:9f:af:91:bd:cc:40:45:c5:82:9c: e6:95:c6:67:a0:cf:99:ec:e6:3d:f0:a9:86:21:ef: 01:f1:f4:94:07:ee:d8:fe:f2:ae:c0:8e:fb:1e:d8: 0c:ea:22:51:e7:9c:e1:ea:a9:49:30:69:a7:2e:38: 48:63:cd:1e:2e:7b:cd:c8:0c:79:df:bc:68:bc:e8: 85:80:17:c0:2e:fc:e3:df:b8:66:90:b8:f5:eb:36: 5f:51:69:10:75:c1:ab:9d:60:bb:61:eb:f1:55:ad: 7e:5e:af:79:0a:47:39:21:ee:a9:33:3e:e6:27:73: 3d:1c:34:92:51:34:36:2e:0d:24:d2:30:cc:9b:88: dd:1a:96:d4:5f:ec:3c:a3:67:4a:9b:09:b2:e4:d5: ed:b9:e5:6b:89:0a:f7:09:e3:70:56:15:be:03:e2: 8c:18:37:10:13:5a:59:b6:b1:06:cb:e8:52:37:48: 1f:10:63:7e:9f:d9:52:ab:e7:ca:71:ed:46:02:29: 1c:16:b4:a7:16:69:c2:b2:d2:22:3d:7a:9e:8f:3e: f2:3e:11:a5:3e:47:b3:ae:d9:d9:cc:b1:b4:75:bf: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5A:9E:1D:56:64:2C:08:91:F6:63:C4:7A:F1:44:49:89:35:13:B5 X509v3 Authority Key Identifier: keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:df:ac:be:7c:81:1d:0e:f9:79:a5:23:94:aa:80:87:ce:d1: 24:a5:7c:a8:df:61:29:bb:75:bd:5b:26:5d:fa:05:c0:2a:67: 00:d8:38:9b:c7:5a:cb:af:cb:df:9a:5a:d4:ca:3a:fe:d0:85: 98:37:3c:87:e4:fb:50:f3:9e:06:fe:68:fd:e3:ff:f2:2f:0f: a7:83:cc:4a:7a:cf:61:37:cc:31:01:bd:66:81:7f:4d:af:85: 6a:55:d4:d8:ca:21:21:70:66:86:8c:aa:33:83:69:04:b6:d4: 08:3b:76:4e:90:b1:bf:bc:d0:b9:b2:5a:8e:89:61:25:5b:b9: 65:24:d5:66:13:be:7d:7a:7b:92:87:76:c7:45:61:73:b0:83: 35:72:82:94:42:02:48:9a:fd:10:e9:14:a3:ee:57:26:7b:13: ab:17:e0:1e:69:4e:61:dd:c1:13:ef:19:fe:c0:ec:16:4d:5b: aa:c8:7d:c6:cf:3e:d9:77:ef:b7:86:35:41:8d:13:a3:87:60: a1:5a:91:11:5d:95:5f:4b:d5:7f:f6:5e:77:d2:87:42:27:aa: fb:6c:0b:65:aa:77:96:2b:02:2d:95:73:2f:d7:a6:fc:a8:0a: a3:5e:2c:c2:9c:f8:6c:c6:03:11:3a:1c:5c:3a:db:bc:84:03: bb:b9:c1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCHiG+ffdq6mJRpGzXUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyODY3MmNkNzM2YjU3ZTFlM2RmYzdkZDczNmYzYmQ4YTYx NmJhODEwHhcNMjUxMjA3MDAwMDI5WhcNMjUxMjA4MDAwMDI5WjAzMTEwLwYDVQQD EyhlNzVhOWUxZDU2NjQyYzA4OTFmNjYzYzQ3YWYxNDQ0OTg5MzUxM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBBNYBea5ybDeXqvW8WP77EKP/m iiZQaqlATSTpKjwINZ+vkb3MQEXFgpzmlcZnoM+Z7OY98KmGIe8B8fSUB+7Y/vKu wI77HtgM6iJR55zh6qlJMGmnLjhIY80eLnvNyAx537xovOiFgBfALvzj37hmkLj1 6zZfUWkQdcGrnWC7YevxVa1+Xq95Ckc5Ie6pMz7mJ3M9HDSSUTQ2Lg0k0jDMm4jd GpbUX+w8o2dKmwmy5NXtueVriQr3CeNwVhW+A+KMGDcQE1pZtrEGy+hSN0gfEGN+ n9lSq+fKce1GAikcFrSnFmnCstIiPXqejz7yPhGlPkezrtnZzLG0db+veQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdanh1WZCwIkfZjxHrxREmJNRO1MB8GA1UdIwQY MBaAFIKGcs1za1fh49/H3XNvO9imFrqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgt ZWVlN2ZhZTVjMDM3LzEvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81NGJiNTAtMDFiZS00ZWM2LTk0MTgtZWVlN2ZhZTVjMDM3 LzEvZ29aeXpYTnJWLUhqMzhmZGMyODcyS1lXdW9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9+svnyB HQ75eaUjlKqAh87RJKV8qN9hKbt1vVsmXfoFwCpnANg4m8day6/L35pa1Mo6/tCF mDc8h+T7UPOeBv5o/eP/8i8Pp4PMSnrPYTfMMQG9ZoF/Ta+FalXU2MohIXBmhoyq M4NpBLbUCDt2TpCxv7zQubJajolhJVu5ZSTVZhO+fXp7kod2x0Vhc7CDNXKClEIC SJr9EOkUo+5XJnsTqxfgHmlOYd3BE+8Z/sDsFk1bqsh9xs8+2Xfvt4Y1QY0To4dg oVqREV2VX0vVf/Zed9KHQieq+2wLZap3lisCLZVzL9em/KgKo14swpz4bMYDEToc XDrbvIQDu7nBrQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:26 2025 by rpki-client