This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json) Hash identifier: IMf5fY5VO4l3K7nPay3Q6SJc5wnOuDOJoej7QVtKREk= Subject key identifier: 22:4E:20:06:B6:F2:4F:7C:4F:F4:6F:09:B5:0C:22:84:37:DA:BF:0C Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9 Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9 Certificate serial: 019B2C9D1BF5DCDC0467D1248609193F4BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft Manifest number: 0ED2 Signing time: Wed 17 Dec 2025 14:00:52 +0000 Manifest this update: Wed 17 Dec 2025 14:00:52 +0000 Manifest next update: Thu 18 Dec 2025 14:00:52 +0000 Files and hashes: 1: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: YTtxxkv98zUkVoAxR8d8X5Clg8ayt5N9JrEEoKBghOM=) 2: xs7enPVeNIMyt7yLlWdZQsBjc6E.roa (hash: Hl7Zc5f4P4RuVLf0+lM7s4f9NcFGJ5Df6CUhJF0dl6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:1b:f5:dc:dc:04:67:d1:24:86:09:19:3f:4b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9 Validity Not Before: Dec 17 14:00:52 2025 GMT Not After : Dec 18 14:00:52 2025 GMT Subject: CN=224e2006b6f24f7c4ff46f09b50c228437dabf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:1b:4b:b7:55:8a:49:9e:e3:47:f3:67:e1: 6e:c2:9b:87:7a:78:93:28:02:95:20:21:17:b3:54: b6:53:c6:5a:64:a5:64:61:54:24:b3:0a:ef:94:17: 65:05:8c:98:e9:0a:9c:68:b0:45:6d:d5:27:71:61: 10:c8:7c:5a:6f:52:71:87:5d:4e:5c:06:ae:02:c5: 08:1d:65:f3:5d:c2:57:86:da:2c:2c:e6:9b:8a:8c: 7d:b0:00:a7:c6:d3:36:e1:7b:5c:cd:4d:c7:5a:b0: 2e:6d:e8:f5:bb:2e:f4:40:db:1f:94:9d:4e:72:44: e0:2b:3b:7a:2d:73:78:5d:b7:cc:aa:3c:8c:35:f1: 79:79:1d:83:e5:30:38:b6:08:6f:59:4f:7a:20:d6: 25:5a:fc:d6:4d:13:f0:df:fd:2e:2c:9c:f3:e7:ca: ae:25:d8:0a:47:a4:9b:53:41:f8:8b:13:cd:c1:e2: fb:d6:30:bf:c4:ee:e9:6c:aa:cc:fc:aa:e8:de:c9: 4a:c9:a7:11:e2:af:cf:2d:8f:7f:cb:7c:6f:e2:1c: fb:1f:6b:4f:c6:8e:9a:8a:77:95:02:3a:a5:63:1a: b5:27:42:db:87:12:64:fe:7c:f3:49:93:64:64:04: 59:b5:98:ac:b8:71:33:2c:92:e7:70:c6:95:73:c5: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:20:06:B6:F2:4F:7C:4F:F4:6F:09:B5:0C:22:84:37:DA:BF:0C X509v3 Authority Key Identifier: keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:d0:ac:b7:10:ab:0b:d4:1c:28:66:bb:54:6d:81:6a:4a: fe:50:df:cf:d1:fb:14:b5:9a:14:11:69:4a:fb:43:4c:de:8e: 70:af:54:6d:b5:ab:80:e9:70:4a:3c:8c:86:f6:34:b8:fe:b0: 50:99:af:4a:56:f8:1d:a0:13:cc:43:0e:e3:63:07:46:a7:85: 0e:0e:56:f1:22:9e:e6:dc:4c:d5:5d:13:a0:ec:64:4b:09:22: ca:a7:a1:43:d4:65:3b:ff:da:4e:31:da:14:7b:5a:1a:82:c0: 0d:ac:3d:65:58:6f:3a:83:0a:fe:3d:dd:ff:26:3f:f3:db:b2: 1d:87:ab:ff:c2:7a:06:43:19:08:c6:5b:b3:ff:ce:20:29:11: 89:ba:9f:07:49:95:40:78:e0:3d:61:b8:03:15:f3:e5:42:28: 48:9b:73:32:5f:ce:05:85:96:15:b1:03:37:26:ae:1b:2d:17: 5b:98:b8:d8:d1:b2:62:ab:65:dd:90:ea:64:9e:ba:c2:39:dd: fd:58:2a:a1:70:95:ca:9f:51:4c:80:c1:c8:02:93:09:d9:ae: cc:f2:a5:8e:a9:22:07:70:91:6c:ca:20:7e:45:91:d0:d8:d9: 57:5e:f3:00:e4:2d:e8:1e:eb:2f:33:24:e6:1b:fe:cf:3a:45: fb:c4:a4:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnRv13NwEZ9EkhgkZP0vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyODg5MDNkOTBjMDFlMmQ1Y2UxODc4ODA1YWQ0YTkyZDI4 YWVkYzkwHhcNMjUxMjE3MTQwMDUyWhcNMjUxMjE4MTQwMDUyWjAzMTEwLwYDVQQD EygyMjRlMjAwNmI2ZjI0ZjdjNGZmNDZmMDliNTBjMjI4NDM3ZGFiZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiYbS7dVikme40fzZ+FuwpuHeniT KAKVICEXs1S2U8ZaZKVkYVQkswrvlBdlBYyY6QqcaLBFbdUncWEQyHxab1Jxh11O XAauAsUIHWXzXcJXhtosLOabiox9sACnxtM24XtczU3HWrAubej1uy70QNsflJ1O ckTgKzt6LXN4XbfMqjyMNfF5eR2D5TA4tghvWU96INYlWvzWTRPw3/0uLJzz58qu JdgKR6SbU0H4ixPNweL71jC/xO7pbKrM/Kro3slKyacR4q/PLY9/y3xv4hz7H2tP xo6aineVAjqlYxq1J0LbhxJk/nzzSZNkZARZtZisuHEzLJLncMaVc8XUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJOIAa28k98T/RvCbUMIoQ32r8MMB8GA1UdIwQY MBaAFIKIkD2QwB4tXOGHiAWtSpLSiu3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84M2Y4MmQtMTU0NS00MDc0LTg2ODIt YTFkZTU4YTNiMzViLzEvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84M2Y4MmQtMTU0NS00MDc0LTg2ODItYTFkZTU4YTNiMzVi LzEvZ29pUVBaREFIaTFjNFllSUJhMUtrdEtLN2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6fQrLcQ qwvUHChmu1RtgWpK/lDfz9H7FLWaFBFpSvtDTN6OcK9UbbWrgOlwSjyMhvY0uP6w UJmvSlb4HaATzEMO42MHRqeFDg5W8SKe5txM1V0ToOxkSwkiyqehQ9RlO//aTjHa FHtaGoLADaw9ZVhvOoMK/j3d/yY/89uyHYer/8J6BkMZCMZbs//OICkRibqfB0mV QHjgPWG4AxXz5UIoSJtzMl/OBYWWFbEDNyauGy0XW5i42NGyYqtl3ZDqZJ66wjnd /VgqoXCVyp9RTIDByAKTCdmuzPKljqkiB3CRbMogfkWR0NjZV17zAOQt6B7rLzMk 5hv+zzpF+8SkXw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:55:40 2025 by rpki-client