This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json) Hash identifier: JLswv4bw/T0pVcp0YLP9u9zYwKTDhL64y/pn/m7wLpI= Subject key identifier: 74:B5:20:0E:28:AC:D6:1F:26:75:FC:BD:74:4A:DD:2C:5F:F0:65:70 Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4 Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4 Certificate serial: 019AF23F9E8246A7707C08851529765E6F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft Manifest number: 0BF8 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: ODcajmBBu9Drfqa7E3uNmfp/LuBLt7dwu57gT9XGVJs=) 2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9e:82:46:a7:70:7c:08:85:15:29:76:5e:6f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=74b5200e28acd61f2675fcbd744add2c5ff06570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:3e:ed:d5:c7:45:77:ff:aa:cb:44:05:52: 1b:48:8d:01:e7:65:ef:a8:e4:b0:61:86:c2:90:78: 9c:dc:9e:d5:7f:fd:c0:25:05:7d:af:c3:d4:4a:a8: 71:8c:85:3f:c2:17:4b:c1:3e:0f:6a:48:b9:f1:23: f2:3a:86:1e:22:40:17:d3:9f:ac:a9:82:79:31:58: 67:95:7e:f8:a5:75:ff:30:52:3d:bc:94:f4:b4:3f: 24:15:2a:1b:30:5c:d3:b2:ec:c0:fd:19:7d:72:92: ab:dd:68:93:b0:f8:d5:b1:5b:fd:0b:3c:8d:be:b5: 10:ca:bd:40:93:87:4a:bb:d1:51:9b:2e:d5:4b:ce: 37:7f:7c:d0:94:5a:55:6b:0b:e7:c9:22:df:50:32: 4e:bf:38:79:f5:3d:a3:91:4d:5f:10:22:a6:59:c2: b3:21:ac:38:35:58:fb:fb:3f:df:5b:30:bf:62:3b: 0a:d3:39:ac:87:ce:3e:ef:c1:6e:a5:5b:70:32:cf: 4c:00:08:fe:24:9e:3c:07:74:00:d7:47:95:de:45: ff:cd:2b:3e:62:7b:39:38:74:e0:d5:07:23:4b:c3: e9:cc:8a:dd:7d:e2:c7:a3:0c:96:3e:d2:87:d1:68: 69:0e:48:87:48:b5:ef:0f:14:cc:30:bc:e9:97:b8: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B5:20:0E:28:AC:D6:1F:26:75:FC:BD:74:4A:DD:2C:5F:F0:65:70 X509v3 Authority Key Identifier: keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c2:25:3d:c2:08:a1:9e:e6:ed:de:ab:7e:3d:7e:8c:f3:0e: 6f:fa:ae:20:25:a3:0b:84:ff:bb:25:e2:9e:da:81:b9:96:dd: 76:e6:ec:4b:2a:f0:cd:dc:fd:aa:4d:36:24:1c:10:77:54:03: 82:e7:9d:e7:3b:82:8b:1d:79:97:e1:3e:d6:8d:08:bb:89:36: 03:ad:ea:d5:f8:bc:57:c2:29:93:78:55:82:0e:1c:42:cb:4c: 18:65:0f:e9:e0:c2:b9:44:63:cb:c0:14:f6:00:26:5c:fa:c2: 27:ad:fa:9c:11:2d:31:be:d9:da:5a:e6:64:f5:c4:ab:69:35: 47:80:72:79:b7:93:59:f3:bd:a3:e1:6a:70:fb:74:c3:1f:48: fc:ad:ce:d9:f4:19:1d:ae:a5:11:b1:75:6d:f1:d2:93:1a:25: 01:5e:f1:fa:ee:79:6a:4e:f8:34:f0:87:5d:52:28:42:db:eb: 8b:68:c1:9a:6a:91:6d:55:11:a1:68:f1:c5:56:d7:b1:c5:9f: bf:39:04:f6:18:8f:77:73:a6:e5:6f:09:ff:91:4c:ed:13:79: a3:9e:f7:be:a7:44:f6:44:20:f7:d2:40:26:11:96:c0:10:10: 19:0d:f6:4a:7e:67:5d:33:1b:5e:14:e3:6d:71:71:dd:4d:3a: f6:db:17:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP56CRqdwfAiFFSl2Xm9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi YTBkYjQwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg3NGI1MjAwZTI4YWNkNjFmMjY3NWZjYmQ3NDRhZGQyYzVmZjA2NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94+7dXHRXf/qstEBVIbSI0B52Xv qOSwYYbCkHic3J7Vf/3AJQV9r8PUSqhxjIU/whdLwT4Paki58SPyOoYeIkAX05+s qYJ5MVhnlX74pXX/MFI9vJT0tD8kFSobMFzTsuzA/Rl9cpKr3WiTsPjVsVv9CzyN vrUQyr1Ak4dKu9FRmy7VS843f3zQlFpVawvnySLfUDJOvzh59T2jkU1fECKmWcKz Iaw4NVj7+z/fWzC/YjsK0zmsh84+78FupVtwMs9MAAj+JJ48B3QA10eV3kX/zSs+ Yns5OHTg1QcjS8PpzIrdfeLHowyWPtKH0WhpDkiHSLXvDxTMMLzpl7jMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS1IA4orNYfJnX8vXRK3Sxf8GVwMB8GA1UdIwQY MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt YzE0MDJkMjYxNDMyLzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsIlPcII oZ7m7d6rfj1+jPMOb/quICWjC4T/uyXintqBuZbddubsSyrwzdz9qk02JBwQd1QD gued5zuCix15l+E+1o0Iu4k2A63q1fi8V8Ipk3hVgg4cQstMGGUP6eDCuURjy8AU 9gAmXPrCJ636nBEtMb7Z2lrmZPXEq2k1R4ByebeTWfO9o+FqcPt0wx9I/K3O2fQZ Ha6lEbF1bfHSkxolAV7x+u55ak74NPCHXVIoQtvri2jBmmqRbVURoWjxxVbXscWf vzkE9hiPd3Om5W8J/5FM7RN5o573vqdE9kQg99JAJhGWwBAQGQ32Sn5nXTMbXhTj bXFx3U069tsX0g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:16 2025 by rpki-client