This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json) Hash identifier: QG11lYxcxOS72YTFgo0oJrjo295sYxy4ADWveSUVVWM= Subject key identifier: 58:1C:73:19:FB:83:3D:3B:C4:C1:64:0D:95:B7:4D:DB:C1:8B:C1:B6 Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41 Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741 Certificate serial: 019B2EF9D59D02A09E4D6D3B850F8730587F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft Manifest number: 076D Signing time: Thu 18 Dec 2025 01:01:23 +0000 Manifest this update: Thu 18 Dec 2025 01:01:23 +0000 Manifest next update: Fri 19 Dec 2025 01:01:23 +0000 Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: 2YGbf1ZSAmtiVNTqoziJktgoymEvvMtf15vTd+0PK7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:d5:9d:02:a0:9e:4d:6d:3b:85:0f:87:30:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741 Validity Not Before: Dec 18 01:01:23 2025 GMT Not After : Dec 19 01:01:23 2025 GMT Subject: CN=581c7319fb833d3bc4c1640d95b74ddbc18bc1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:d2:52:f8:e9:5d:62:e5:e7:c4:ea:20:df: 88:bd:b1:8a:0c:df:d9:5f:42:21:9b:ed:e2:9d:21: d6:02:38:d6:4c:f8:41:56:c9:59:8b:11:dd:d5:9c: a6:2e:03:04:1e:6a:46:55:08:8c:56:67:f4:ae:da: f7:60:ef:82:b6:f3:9c:54:4c:bc:e1:3f:18:8d:92: cf:4f:2a:63:c5:98:9f:7c:98:36:cc:51:fb:f8:7f: e9:03:d1:4f:4c:32:d5:0d:2d:57:87:3d:f3:2b:74: 3d:06:15:96:c2:3c:53:36:72:00:4b:05:9d:08:fc: a2:b9:52:b9:e2:c6:3d:84:2d:bc:a1:d5:ff:2e:24: 36:55:ad:25:19:d7:39:f9:0c:d1:ca:e0:5b:f3:b2: e1:4a:05:61:5b:7b:f0:d2:bf:21:48:80:ed:04:10: 5e:16:61:c8:60:38:e7:f4:c7:9f:65:a5:54:0b:a6: 79:f0:3f:dd:0c:68:d9:8c:d3:f6:1a:87:8a:80:42: d3:38:00:c9:d0:fa:13:90:8e:94:c8:88:16:40:3b: 68:00:f6:2e:eb:f8:16:fd:28:01:38:30:d3:c3:56: 15:1f:51:21:f9:20:a2:aa:05:8a:23:42:a8:b7:ee: 6e:5d:9f:1c:da:f7:dd:e6:4c:76:be:06:02:15:9e: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:73:19:FB:83:3D:3B:C4:C1:64:0D:95:B7:4D:DB:C1:8B:C1:B6 X509v3 Authority Key Identifier: keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:25:a0:f4:61:de:64:cd:64:20:49:17:2f:d1:90:2b:6f: 3b:3b:fe:c8:42:33:54:c6:61:b5:9e:62:c8:80:b8:87:bf:d8: 67:79:aa:3e:78:99:44:5d:f1:8b:c4:4b:f3:54:71:d0:ee:31: cd:3f:de:3f:9a:93:7b:f0:32:d0:40:5a:88:00:ba:e8:54:df: c0:03:2b:08:9b:16:6a:7a:a1:2b:06:5e:7c:76:29:c9:ac:c9: c1:b5:e1:1c:26:26:62:77:9a:17:59:34:95:d2:96:f5:7a:0b: 5b:2e:8f:64:cf:db:4e:bf:18:b1:54:d3:7a:bc:2b:2f:86:a0: 61:2e:fd:2f:88:3f:df:e9:e0:8a:28:e7:b1:97:50:c5:8b:87: b2:10:40:cd:92:f5:c8:0e:14:3f:d6:cd:8e:58:08:ab:69:26: 5e:0c:79:6a:63:15:02:50:45:9c:63:8a:0f:de:c0:a3:15:3c: 10:4c:f6:b0:ba:98:9e:78:33:07:61:05:2b:7c:8f:55:33:a6: a7:03:1f:bc:3a:49:f1:2b:03:eb:46:84:2f:f5:86:15:56:6a: e2:23:9d:95:30:bc:2d:b6:de:b0:e4:72:ba:3b:31:4e:01:ec: 83:de:64:e9:c0:1b:9c:78:d3:c9:86:b7:35:b4:24:3b:b3:9a: 6a:60:77:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+dWdAqCeTW07hQ+HMFh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm ZWI3NDEwHhcNMjUxMjE4MDEwMTIzWhcNMjUxMjE5MDEwMTIzWjAzMTEwLwYDVQQD Eyg1ODFjNzMxOWZiODMzZDNiYzRjMTY0MGQ5NWI3NGRkYmMxOGJjMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrSUvjpXWLl58TqIN+IvbGKDN/Z X0Ihm+3inSHWAjjWTPhBVslZixHd1ZymLgMEHmpGVQiMVmf0rtr3YO+CtvOcVEy8 4T8YjZLPTypjxZiffJg2zFH7+H/pA9FPTDLVDS1Xhz3zK3Q9BhWWwjxTNnIASwWd CPyiuVK54sY9hC28odX/LiQ2Va0lGdc5+QzRyuBb87LhSgVhW3vw0r8hSIDtBBBe FmHIYDjn9MefZaVUC6Z58D/dDGjZjNP2GoeKgELTOADJ0PoTkI6UyIgWQDtoAPYu 6/gW/SgBODDTw1YVH1Eh+SCiqgWKI0Kot+5uXZ8c2vfd5kx2vgYCFZ5NzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgccxn7gz07xMFkDZW3TdvBi8G2MB8GA1UdIwQY MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvsloPRh 3mTNZCBJFy/RkCtvOzv+yEIzVMZhtZ5iyIC4h7/YZ3mqPniZRF3xi8RL81Rx0O4x zT/eP5qTe/Ay0EBaiAC66FTfwAMrCJsWanqhKwZefHYpyazJwbXhHCYmYneaF1k0 ldKW9XoLWy6PZM/bTr8YsVTTerwrL4agYS79L4g/3+ngiijnsZdQxYuHshBAzZL1 yA4UP9bNjlgIq2kmXgx5amMVAlBFnGOKD97AoxU8EEz2sLqYnngzB2EFK3yPVTOm pwMfvDpJ8SsD60aEL/WGFVZq4iOdlTC8LbbesORyujsxTgHsg95k6cAbnHjTyYa3 NbQkO7OaamB3aw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:09 2025 by rpki-client