This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json) Hash identifier: xOlLFoA3e7pPo8HlnSjxDtoRu7N6P4Q6+oprO6LU+dQ= Subject key identifier: 09:54:EA:1B:FC:BB:16:7B:22:99:5C:0A:E5:3C:12:B2:99:AA:58:99 Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5 Certificate serial: 019AF3C09F32EA29596AFA7BC725C0DFB9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:01:18 +0000 Manifest this update: Sat 06 Dec 2025 13:01:18 +0000 Manifest next update: Sun 07 Dec 2025 13:01:18 +0000 Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=) 2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: GrVnUf/A3obdOX/doP3kSYtuZJRO0v9FClhxfFgHd/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:9f:32:ea:29:59:6a:fa:7b:c7:25:c0:df:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e937c103db046f22553ef99438fa2959240da5 Validity Not Before: Dec 6 13:01:18 2025 GMT Not After : Dec 7 13:01:18 2025 GMT Subject: CN=0954ea1bfcbb167b22995c0ae53c12b299aa5899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a9:9a:5a:a6:49:c2:00:49:9c:71:5d:92:71: db:2f:20:21:ab:4a:4c:cf:f0:af:81:27:d6:e7:8e: 82:f1:b4:1b:e5:55:7c:46:44:41:9c:c1:87:50:cb: 55:f5:69:5b:c0:aa:f8:ec:7c:ed:94:4f:30:b7:30: 08:dc:e9:33:c7:bf:23:3c:76:b4:ea:b2:51:1a:53: d5:ba:8a:50:4d:ff:cb:06:e6:87:dd:10:e5:d6:c1: 10:a3:94:1f:c9:c2:d4:f5:d5:49:f7:2a:37:1e:dd: 5b:33:84:6e:b0:8a:27:64:d3:2e:e6:a4:6f:5c:36: 10:b9:5f:b9:51:4e:a3:90:c3:fa:23:7b:9b:47:5e: ee:cb:c4:5b:bb:ea:c6:1d:70:44:be:0d:0b:51:77: 52:97:15:84:7d:b2:89:38:df:6b:cd:96:c7:d5:31: 02:f3:e7:f4:cf:a0:cb:33:36:fb:7a:10:58:5c:5e: 84:36:60:de:79:74:67:08:a6:ac:10:41:39:0c:db: 5c:58:02:cf:f3:1a:5d:02:70:57:bc:e9:ba:c2:e8: 09:c9:5c:a4:98:fc:b9:4b:0e:c8:ec:44:d5:0a:06: e7:d2:dc:d0:c5:0c:60:bb:d9:9b:4d:4b:56:3c:1f: 86:08:ab:9f:c0:2c:3c:65:ce:7f:bd:f6:4d:1f:a0: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:EA:1B:FC:BB:16:7B:22:99:5C:0A:E5:3C:12:B2:99:AA:58:99 X509v3 Authority Key Identifier: keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9c:5f:4f:a1:7e:ed:17:c0:5a:e8:50:73:e3:7c:37:48:8e: f2:29:07:d7:5f:20:8d:5c:dc:dd:08:60:0b:33:05:43:e7:ec: e5:e4:f1:13:5d:13:f4:a6:0d:b9:40:24:61:40:8f:c7:cd:6f: ef:20:5a:95:fa:a7:e3:64:e3:0c:b4:c8:76:b8:48:32:bb:b2: 8e:cc:b2:40:f2:56:87:a2:9f:6e:03:e0:19:9b:82:c4:2e:72: a2:af:94:14:cb:e2:68:8f:e0:78:89:ef:86:de:b1:29:52:08: d5:6a:b1:d6:79:bb:79:26:de:30:80:9c:72:d9:b9:06:ac:a9: 92:92:1d:65:4a:c4:30:0d:a5:3f:1f:78:1c:37:b9:c9:23:4d: 16:87:34:ad:d2:66:2a:f7:f0:95:c5:a3:83:67:cb:c3:79:f4: 6d:27:c1:9e:61:7d:77:43:e1:54:97:5a:35:44:2f:88:c9:5c: 1b:81:ef:ca:61:72:30:8e:ec:d3:c4:de:e5:16:90:c8:cc:66: 9b:19:a4:58:07:e9:1a:0a:a9:7c:2e:64:cc:e0:31:2e:40:60: 4e:46:63:84:45:ef:91:8e:4e:4f:75:26:2e:b3:89:f1:64:d3: 19:a8:d3:69:e0:82:97:80:9d:ae:67:f5:31:7e:b4:48:d5:ed: 8f:16:a4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJ8y6ilZavp7xyXA37ngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky NDBkYTUwHhcNMjUxMjA2MTMwMTE4WhcNMjUxMjA3MTMwMTE4WjAzMTEwLwYDVQQD EygwOTU0ZWExYmZjYmIxNjdiMjI5OTVjMGFlNTNjMTJiMjk5YWE1ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8amaWqZJwgBJnHFdknHbLyAhq0pM z/CvgSfW546C8bQb5VV8RkRBnMGHUMtV9WlbwKr47HztlE8wtzAI3Okzx78jPHa0 6rJRGlPVuopQTf/LBuaH3RDl1sEQo5QfycLU9dVJ9yo3Ht1bM4RusIonZNMu5qRv XDYQuV+5UU6jkMP6I3ubR17uy8Rbu+rGHXBEvg0LUXdSlxWEfbKJON9rzZbH1TEC 8+f0z6DLMzb7ehBYXF6ENmDeeXRnCKasEEE5DNtcWALP8xpdAnBXvOm6wugJyVyk mPy5Sw7I7ETVCgbn0tzQxQxgu9mbTUtWPB+GCKufwCw8Zc5/vfZNH6DbVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlU6hv8uxZ7IplcCuU8ErKZqliZMB8GA1UdIwQY MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZxfT6F+ 7RfAWuhQc+N8N0iO8ikH118gjVzc3QhgCzMFQ+fs5eTxE10T9KYNuUAkYUCPx81v 7yBalfqn42TjDLTIdrhIMruyjsyyQPJWh6KfbgPgGZuCxC5yoq+UFMviaI/geInv ht6xKVII1Wqx1nm7eSbeMICcctm5BqypkpIdZUrEMA2lPx94HDe5ySNNFoc0rdJm KvfwlcWjg2fLw3n0bSfBnmF9d0PhVJdaNUQviMlcG4HvymFyMI7s08Te5RaQyMxm mxmkWAfpGgqpfC5kzOAxLkBgTkZjhEXvkY5OT3UmLrOJ8WTTGajTaeCCl4Cdrmf1 MX60SNXtjxak7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:18 2025 by rpki-client