This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json) Hash identifier: CAftd9MRsO9wQlPYo0sIzBM3BzRMNMuZhTPaXR5eRrg= Subject key identifier: 7E:23:09:8D:16:15:F4:84:7F:0F:22:98:D9:10:79:C2:3C:41:DE:37 Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Certificate serial: 019AF23FFA342F3D12A4FB74875B6D4DB7D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=) 2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: TmhLzksHdLcnzXZZYu4sSxDQD1h2JSccCDqwjoDEYUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fa:34:2f:3d:12:a4:fb:74:87:5b:6d:4d:b7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=7e23098d1615f4847f0f2298d91079c23c41de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:5e:54:85:fb:05:78:fa:02:31:81:7c:0e: 50:73:a3:f8:39:fb:2c:0d:3e:e0:9b:97:55:c6:64: fa:56:3d:50:cd:a0:10:a6:c0:55:df:55:1a:7f:ca: e4:37:9b:64:8a:d4:ed:05:a0:46:00:dc:b0:30:c5: 0c:68:b7:04:46:93:4d:c3:40:51:87:b3:a4:aa:ad: d2:d7:91:53:55:98:7a:3f:e6:97:bf:a4:05:19:52: 1d:01:b6:d5:45:b2:a4:9a:df:a6:c9:ee:5c:37:01: 01:41:bf:3b:d1:a2:51:39:c1:21:9b:8c:94:46:3f: 2e:e9:39:4f:ff:b9:3a:e7:6a:21:90:d0:e0:2e:c8: 9e:cb:45:bf:14:0f:aa:30:6f:52:cb:e3:4e:6b:45: 6b:7d:3d:a0:f2:45:ca:0f:9f:5d:25:32:6e:3a:e1: a2:87:66:26:41:4e:cf:53:94:01:19:9a:64:76:8f: bf:a3:60:8b:91:ad:62:df:3b:0f:19:a3:2d:b3:50: 29:c5:20:47:14:34:b4:d2:90:a4:b2:ce:fc:a6:72: 52:46:72:7c:00:12:5e:34:5d:53:87:bf:f9:42:37: 15:8a:21:6f:82:a4:41:c7:55:3e:da:9f:8f:85:86: 32:b0:c9:d1:36:9c:5d:6d:74:16:50:ba:ce:e8:3f: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:09:8D:16:15:F4:84:7F:0F:22:98:D9:10:79:C2:3C:41:DE:37 X509v3 Authority Key Identifier: keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:73:2a:08:87:26:44:e0:72:fd:79:b6:90:6c:10:01:61:4d: 32:19:39:42:60:f1:41:31:a8:24:dd:ca:56:85:5f:e6:c0:03: 3e:c1:07:13:3f:69:a9:06:04:ab:cb:f6:53:8f:1d:eb:98:c8: 38:f7:32:0c:f8:96:35:86:73:29:02:05:66:1b:d0:b4:ac:8f: c7:bd:0f:ec:34:88:90:e6:41:0e:a8:41:84:75:fc:f0:28:88: e8:8b:6b:e7:8e:e9:8c:fe:a8:7b:4c:54:33:d0:6e:ea:f3:90: 03:72:87:2d:36:8b:63:16:be:70:94:fa:ef:b9:98:28:00:91: 06:47:fd:71:7c:72:57:13:9b:01:8d:0d:64:a7:39:b1:ca:cc: 42:43:2a:c3:da:5e:88:a6:fe:1a:ad:37:7d:4a:45:f4:92:69: 74:db:9b:76:72:43:65:6f:04:d7:9d:5f:83:79:18:0e:6d:a3: 45:27:0c:d8:a9:49:70:80:82:6c:59:6f:07:2f:dd:e8:e8:6c: a5:66:a9:e0:da:47:95:9f:c3:9f:e5:bd:b2:f4:83:e4:cd:27: 68:9a:ec:3c:8b:48:fe:1e:3b:a1:58:16:b2:26:01:b8:6f:ce: 29:45:37:80:7a:d3:1c:b1:93:b4:bc:04:f8:30:bb:1b:ea:ca: 54:02:e3:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/o0Lz0SpPt0h1ttTbfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk NGZjNmEwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD Eyg3ZTIzMDk4ZDE2MTVmNDg0N2YwZjIyOThkOTEwNzljMjNjNDFkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVeVIX7BXj6AjGBfA5Qc6P4Ofss DT7gm5dVxmT6Vj1QzaAQpsBV31Uaf8rkN5tkitTtBaBGANywMMUMaLcERpNNw0BR h7Okqq3S15FTVZh6P+aXv6QFGVIdAbbVRbKkmt+mye5cNwEBQb870aJROcEhm4yU Rj8u6TlP/7k652ohkNDgLsiey0W/FA+qMG9Sy+NOa0VrfT2g8kXKD59dJTJuOuGi h2YmQU7PU5QBGZpkdo+/o2CLka1i3zsPGaMts1ApxSBHFDS00pCkss78pnJSRnJ8 ABJeNF1Th7/5QjcViiFvgqRBx1U+2p+PhYYysMnRNpxdbXQWULrO6D+AewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4jCY0WFfSEfw8imNkQecI8Qd43MB8GA1UdIwQY MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHMqCIcm ROBy/Xm2kGwQAWFNMhk5QmDxQTGoJN3KVoVf5sADPsEHEz9pqQYEq8v2U48d65jI OPcyDPiWNYZzKQIFZhvQtKyPx70P7DSIkOZBDqhBhHX88CiI6Itr547pjP6oe0xU M9Bu6vOQA3KHLTaLYxa+cJT677mYKACRBkf9cXxyVxObAY0NZKc5scrMQkMqw9pe iKb+Gq03fUpF9JJpdNubdnJDZW8E151fg3kYDm2jRScM2KlJcICCbFlvBy/d6Ohs pWap4NpHlZ/Dn+W9svSD5M0naJrsPItI/h47oVgWsiYBuG/OKUU3gHrTHLGTtLwE +DC7G+rKVALj1A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:58 2025 by rpki-client