This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json) Hash identifier: J64F9Six603J9x0r0em7/uKvStt+axUmTckpwkG5mBU= Subject key identifier: 81:1D:AE:71:2B:96:5F:C0:1A:0A:08:31:6C:80:AC:4B:03:9A:1E:34 Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Certificate serial: 019B300C6E6A7B75B5FC05668D81681E87E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 06:01:19 +0000 Manifest this update: Thu 18 Dec 2025 06:01:19 +0000 Manifest next update: Fri 19 Dec 2025 06:01:19 +0000 Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=) 2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: WF3McIfimFNTRsmvFhzH1y+T6FVmcgofXH8nreSaCQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:6e:6a:7b:75:b5:fc:05:66:8d:81:68:1e:87:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Validity Not Before: Dec 18 06:01:19 2025 GMT Not After : Dec 19 06:01:19 2025 GMT Subject: CN=811dae712b965fc01a0a08316c80ac4b039a1e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:83:5e:1c:f4:34:e8:c6:fe:ee:09:fa:e7: bc:a1:a3:3c:37:4c:f1:fb:ad:ca:52:20:9c:02:b6: f5:dd:36:c8:b7:77:c6:d8:3d:31:f6:b0:52:97:46: 62:46:98:5d:70:19:bd:f0:2b:0c:c2:33:47:90:41: 52:3c:f8:bf:40:0a:75:1b:f0:fd:42:00:37:29:30: dc:73:f4:4b:65:91:34:b3:17:ac:76:0c:c4:d5:ff: 6f:66:c7:b1:46:75:27:45:ac:b4:6f:ca:f4:45:a8: 16:62:27:a5:7a:3a:39:4a:15:2c:a1:7c:73:11:2e: 3f:7b:cf:ad:e5:89:c4:2f:4e:1d:c7:39:6e:50:a5: 60:dc:0f:72:ce:f4:dc:9e:b0:e6:4c:35:d1:72:41: 58:d4:db:0b:c2:86:24:c4:7e:0b:51:15:4b:dc:52: 9b:d1:f8:00:15:a7:a9:fb:ee:b7:78:1d:38:27:b5: 3d:f3:41:20:3b:6d:09:ee:d4:ce:18:20:ec:f1:13: df:45:d5:d2:0a:ac:0d:54:1d:0a:2e:dc:47:3a:7a: 12:48:19:a5:fa:1f:d5:0a:49:2e:3a:21:5d:fd:ad: 25:62:c6:28:1a:f0:42:b0:66:dd:cf:a6:22:e4:70: 7e:0a:cb:fd:41:03:48:45:e2:f6:56:7f:a1:a0:3d: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1D:AE:71:2B:96:5F:C0:1A:0A:08:31:6C:80:AC:4B:03:9A:1E:34 X509v3 Authority Key Identifier: keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:8a:66:35:2e:78:17:3f:9b:e4:91:f8:29:83:ea:b0:e3:06: 89:76:f1:45:68:80:ec:fe:9e:db:f7:74:e4:d9:95:a8:15:51: 82:6b:73:ef:75:d2:a2:da:cb:1f:0f:a5:fe:cc:38:a8:80:7c: 9e:f7:f1:cb:95:71:71:b0:1b:19:23:7a:8b:8a:ff:ee:3b:2c: a3:6a:0d:1b:25:4f:19:11:94:47:e0:5f:47:ed:f0:6e:d4:3c: 0d:3b:b0:ce:78:87:a3:90:2b:3b:44:13:91:df:f9:74:b1:51: 03:b5:6f:c9:7f:8f:6d:0c:ef:c5:ea:3f:2b:09:fc:b2:4c:45: a8:34:70:5b:45:d9:07:59:f3:e7:19:b4:4e:8c:e4:b7:69:0d: 61:15:b9:29:d0:39:af:06:fc:44:7d:91:15:a1:b2:11:2e:72: b3:1c:d2:b0:f1:ef:50:d8:41:5f:44:49:ce:84:61:a9:06:8a: 30:c1:6c:62:1a:9f:18:4f:52:13:de:81:09:80:21:39:2c:c7: 0a:ae:20:6e:5e:e2:cd:b7:d1:aa:a7:a9:6c:a5:8d:51:c0:cd: 68:b8:e0:c0:f7:c8:c5:4f:51:93:53:09:64:0e:f1:c3:45:46: 2d:b6:e2:a8:7d:1d:3d:c7:07:36:d3:78:df:fb:3a:ab:1f:58: 4e:33:b8:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDG5qe3W1/AVmjYFoHoflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk NGZjNmEwHhcNMjUxMjE4MDYwMTE5WhcNMjUxMjE5MDYwMTE5WjAzMTEwLwYDVQQD Eyg4MTFkYWU3MTJiOTY1ZmMwMWEwYTA4MzE2YzgwYWM0YjAzOWExZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WaDXhz0NOjG/u4J+ue8oaM8N0zx +63KUiCcArb13TbIt3fG2D0x9rBSl0ZiRphdcBm98CsMwjNHkEFSPPi/QAp1G/D9 QgA3KTDcc/RLZZE0sxesdgzE1f9vZsexRnUnRay0b8r0RagWYielejo5ShUsoXxz ES4/e8+t5YnEL04dxzluUKVg3A9yzvTcnrDmTDXRckFY1NsLwoYkxH4LURVL3FKb 0fgAFaep++63eB04J7U980EgO20J7tTOGCDs8RPfRdXSCqwNVB0KLtxHOnoSSBml +h/VCkkuOiFd/a0lYsYoGvBCsGbdz6Yi5HB+Csv9QQNIReL2Vn+hoD2RSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEdrnErll/AGgoIMWyArEsDmh40MB8GA1UdIwQY MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YpmNS54 Fz+b5JH4KYPqsOMGiXbxRWiA7P6e2/d05NmVqBVRgmtz73XSotrLHw+l/sw4qIB8 nvfxy5VxcbAbGSN6i4r/7jsso2oNGyVPGRGUR+BfR+3wbtQ8DTuwzniHo5ArO0QT kd/5dLFRA7VvyX+PbQzvxeo/Kwn8skxFqDRwW0XZB1nz5xm0Tozkt2kNYRW5KdA5 rwb8RH2RFaGyES5ysxzSsPHvUNhBX0RJzoRhqQaKMMFsYhqfGE9SE96BCYAhOSzH Cq4gbl7izbfRqqepbKWNUcDNaLjgwPfIxU9Rk1MJZA7xw0VGLbbiqH0dPccHNtN4 3/s6qx9YTjO43g== -----END CERTIFICATE-----Generated at Thu Dec 18 14:24:07 2025 by rpki-client