This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: zdFKC43akXsonaVUlSoo+o4bTboexfVnza99aOPP3QI=
Subject key identifier: F2:C8:99:AE:5B:8D:9C:2B:AE:FF:42:B2:E0:B6:18:D8:23:96:1B:70
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 019AF3C0BB017618B51CBE1E71BBAACEA5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 14AD
Signing time: Sat 06 Dec 2025 13:01:25 +0000
Manifest this update: Sat 06 Dec 2025 13:01:25 +0000
Manifest next update: Sun 07 Dec 2025 13:01:25 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: 2B0e2vhfPXflElfxCu9z/PgbSqnnH2E3qAFKPxFz4/c=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:bb:01:76:18:b5:1c:be:1e:71:bb:aa:ce:a5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Dec 6 13:01:25 2025 GMT
Not After : Dec 7 13:01:25 2025 GMT
Subject: CN=f2c899ae5b8d9c2baeff42b2e0b618d823961b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a7:87:06:fe:7c:f3:c6:0c:79:f2:92:b1:ec:
cb:1c:90:ff:c7:c5:bf:1c:de:35:23:e9:fd:ab:2b:
99:cb:37:73:e3:ed:2e:a2:f8:3b:68:2e:c4:1d:b7:
fb:f5:41:48:47:3d:a8:64:1e:03:ac:a3:3b:42:00:
73:8d:13:30:22:4a:5c:99:42:1d:f3:f2:51:eb:62:
08:f0:a1:46:d1:14:dd:88:a9:7c:2b:a7:69:1c:77:
23:ac:8e:5e:8c:17:02:58:62:71:0e:12:22:f8:c1:
1f:5a:2f:97:9c:20:a8:59:90:de:e0:52:48:df:e4:
a3:3b:5f:7e:a2:6b:48:7d:71:99:c6:90:fc:da:68:
f6:82:e7:7c:5d:62:d0:16:df:56:92:31:6c:75:eb:
b7:34:0b:5a:21:49:46:a5:af:6d:71:49:74:fa:17:
04:02:90:b1:d3:e1:ef:63:4d:14:b8:74:fc:4e:fc:
30:a8:2f:d5:1e:28:35:95:ce:cc:2d:59:cb:25:ba:
cd:b1:e3:a2:fd:8a:4e:bc:73:5a:fc:ba:74:a2:9b:
24:2e:00:4f:25:71:6f:f5:38:54:2b:58:92:ff:44:
3d:40:69:63:46:57:3c:98:28:23:17:3a:5b:8e:2a:
14:b5:62:64:13:ef:62:77:22:ed:90:a3:0f:61:6d:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:99:AE:5B:8D:9C:2B:AE:FF:42:B2:E0:B6:18:D8:23:96:1B:70
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3a:09:e4:b0:fd:61:60:08:99:09:56:ca:c0:d1:2d:31:a4:
04:ea:36:29:8a:17:51:9d:58:b0:6d:49:14:5f:e6:8f:38:51:
28:aa:00:ca:f7:09:79:ef:df:a0:61:06:17:6a:03:a1:69:34:
35:05:2b:0a:82:8c:28:99:c4:e4:a2:db:98:b5:83:27:00:9e:
13:e5:23:7f:0e:ef:2c:37:79:34:5f:a3:4c:38:f6:f3:cb:0e:
56:1b:5f:da:73:2e:e7:c6:6c:c4:25:39:96:30:83:bd:9e:a5:
6c:22:31:34:8d:13:38:df:bb:0a:b7:bd:03:9a:52:d5:23:ba:
e8:69:9b:7a:ad:24:5e:fa:15:18:4c:ce:ed:56:7e:e9:ad:fd:
54:21:e7:8a:5a:3b:fc:c8:e6:4c:86:4e:51:1e:5c:40:ce:5f:
fa:eb:42:b7:c4:a5:50:b4:ae:39:98:0a:7c:38:05:e6:eb:be:
59:98:9e:d2:ab:55:41:4e:36:0e:e3:be:20:b8:05:31:10:00:
b4:de:ea:70:34:2b:1a:1f:ae:22:2e:da:79:1a:11:98:5d:de:
bb:ff:d5:07:47:7c:c4:3e:4e:b5:43:6b:5d:76:a0:8b:ae:0f:
e1:59:ad:85:d1:12:a4:47:ba:35:9e:4a:ab:eb:7e:6c:ac:4f:
90:23:10:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzwLsBdhi1HL4ecbuqzqXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0
YzM1YjQwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD
EyhmMmM4OTlhZTViOGQ5YzJiYWVmZjQyYjJlMGI2MThkODIzOTYxYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6eHBv5888YMefKSsezLHJD/x8W/
HN41I+n9qyuZyzdz4+0uovg7aC7EHbf79UFIRz2oZB4DrKM7QgBzjRMwIkpcmUId
8/JR62II8KFG0RTdiKl8K6dpHHcjrI5ejBcCWGJxDhIi+MEfWi+XnCCoWZDe4FJI
3+SjO19+omtIfXGZxpD82mj2gud8XWLQFt9WkjFsdeu3NAtaIUlGpa9tcUl0+hcE
ApCx0+HvY00UuHT8TvwwqC/VHig1lc7MLVnLJbrNseOi/YpOvHNa/Lp0opskLgBP
JXFv9ThUK1iS/0Q9QGljRlc8mCgjFzpbjioUtWJkE+9idyLtkKMPYW2YaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLIma5bjZwrrv9CsuC2GNgjlhtwMB8GA1UdIwQY
MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt
ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm
LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDoJ5LD9
YWAImQlWysDRLTGkBOo2KYoXUZ1YsG1JFF/mjzhRKKoAyvcJee/foGEGF2oDoWk0
NQUrCoKMKJnE5KLbmLWDJwCeE+Ujfw7vLDd5NF+jTDj288sOVhtf2nMu58ZsxCU5
ljCDvZ6lbCIxNI0TON+7Cre9A5pS1SO66Gmbeq0kXvoVGEzO7VZ+6a39VCHnilo7
/MjmTIZOUR5cQM5f+utCt8SlULSuOZgKfDgF5uu+WZie0qtVQU42DuO+ILgFMRAA
tN7qcDQrGh+uIi7aeRoRmF3eu//VB0d8xD5OtUNrXXagi64P4VmthdESpEe6NZ5K
q+t+bKxPkCMQ7Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:04:29 2025 by rpki-client