This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json) Hash identifier: AN+URQDNN4+I5GYuphaI/vi1gwLPv1H00tX02Tu7Gmc= Subject key identifier: 24:47:E7:41:26:D0:F9:69:73:EC:2D:72:C7:B8:79:BD:5D:DD:09:94 Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Certificate serial: 019B2DB0B9855A7EF86CEFA59009EF05041B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft Manifest number: 14AB Signing time: Wed 17 Dec 2025 19:01:55 +0000 Manifest this update: Wed 17 Dec 2025 19:01:55 +0000 Manifest next update: Thu 18 Dec 2025 19:01:55 +0000 Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=) 2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: LkZUm9h11rjAzN6XfOBcwlz5kaPx42/3MH8rJ/f2i5c=) 3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:b9:85:5a:7e:f8:6c:ef:a5:90:09:ef:05:04:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Validity Not Before: Dec 17 19:01:55 2025 GMT Not After : Dec 18 19:01:55 2025 GMT Subject: CN=2447e74126d0f96973ec2d72c7b879bd5ddd0994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:06:43:d5:72:dd:12:7b:3e:84:81:8e:eb: eb:77:39:4d:9b:9a:d9:0a:23:9f:9c:0f:2e:54:66: 1f:1b:db:a5:95:cf:19:d1:d4:1b:57:85:17:71:66: 4a:17:14:05:ae:cd:a0:97:92:fd:9a:c6:7b:65:0b: 03:24:ed:c9:eb:9c:b6:a6:b7:32:c7:7a:9d:66:e8: 7b:ce:f5:dd:f5:8b:e2:d4:f2:07:4b:7c:7b:5e:50: e4:dc:27:5d:79:b0:68:04:da:81:03:37:79:aa:45: c6:f5:96:3c:5e:0d:8a:4b:1a:3d:f8:91:38:f4:cb: 58:9f:25:f6:fe:07:6c:9a:37:cd:e7:1e:6b:26:c6: 06:eb:d9:1b:de:ef:0f:55:b3:dd:ed:b6:55:55:77: 3f:e2:15:b5:46:6d:22:7f:cf:5f:bf:f0:0c:69:88: 90:9f:65:1b:57:36:6f:06:0f:be:73:25:39:61:3e: ef:f1:0b:cf:0c:30:49:c1:b1:68:73:80:16:66:a0: 40:aa:dc:e6:27:d2:f4:a7:26:2e:59:8e:1c:0a:58: 82:9a:7d:82:d0:8b:8c:15:96:60:e8:ea:5a:ad:e2: 46:b7:5f:50:c3:59:5d:e2:81:ce:7a:1c:79:45:5f: 3d:8f:18:40:00:ac:0b:4c:03:fa:4c:bf:27:5e:db: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:47:E7:41:26:D0:F9:69:73:EC:2D:72:C7:B8:79:BD:5D:DD:09:94 X509v3 Authority Key Identifier: keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:92:a0:4d:80:ed:0d:6b:8a:e2:9d:d0:60:f6:e5:13:83:32: 22:5c:94:32:fd:ec:61:d5:65:d8:eb:cc:4d:bf:11:4f:98:a1: df:59:3f:7f:de:3d:88:77:b4:93:10:35:1a:fe:c6:4e:8d:e0: fd:1a:aa:b0:5d:ea:e8:6a:a2:15:14:fb:c6:42:d0:b0:37:52: 64:f5:68:42:18:11:f8:d1:ca:84:db:b5:cc:c0:3f:d1:7c:87: c4:97:20:72:89:4b:ce:4b:b5:d6:33:74:f3:4d:af:66:49:e6: 86:c1:fd:15:8b:c9:b4:4e:53:2c:d1:89:87:82:4f:d1:cb:fb: 26:56:62:fb:4e:b4:ff:20:22:a5:e0:88:f6:c8:de:aa:9b:d6: cb:57:8d:74:cd:a2:4c:14:26:ef:2b:10:01:9e:ec:38:58:b0: c0:f8:d1:98:b7:30:31:0c:71:75:63:e6:97:93:39:b4:53:02: 06:20:be:b2:fa:d4:34:7d:15:3f:21:e8:31:b2:e9:de:78:ef: 73:9c:d9:11:40:d6:51:76:02:bd:94:96:dc:ca:e1:0e:21:6c: da:5b:be:e7:13:b2:42:15:1b:5c:ce:eb:67:09:44:45:16:9d: 42:67:ea:7e:3d:ff:76:88:29:4f:3a:a4:0b:96:96:20:36:b2: 1f:9c:31:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsLmFWn74bO+lkAnvBQQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi YzJjOWMwHhcNMjUxMjE3MTkwMTU1WhcNMjUxMjE4MTkwMTU1WjAzMTEwLwYDVQQD EygyNDQ3ZTc0MTI2ZDBmOTY5NzNlYzJkNzJjN2I4NzliZDVkZGQwOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixEGQ9Vy3RJ7PoSBjuvrdzlNm5rZ CiOfnA8uVGYfG9ullc8Z0dQbV4UXcWZKFxQFrs2gl5L9msZ7ZQsDJO3J65y2prcy x3qdZuh7zvXd9Yvi1PIHS3x7XlDk3CddebBoBNqBAzd5qkXG9ZY8Xg2KSxo9+JE4 9MtYnyX2/gdsmjfN5x5rJsYG69kb3u8PVbPd7bZVVXc/4hW1Rm0if89fv/AMaYiQ n2UbVzZvBg++cyU5YT7v8QvPDDBJwbFoc4AWZqBAqtzmJ9L0pyYuWY4cCliCmn2C 0IuMFZZg6OpareJGt19Qw1ld4oHOehx5RV89jxhAAKwLTAP6TL8nXtv88wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRH50Em0Plpc+wtcse4eb1d3QmUMB8GA1UdIwQY MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5KgTYDt DWuK4p3QYPblE4MyIlyUMv3sYdVl2OvMTb8RT5ih31k/f949iHe0kxA1Gv7GTo3g /RqqsF3q6GqiFRT7xkLQsDdSZPVoQhgR+NHKhNu1zMA/0XyHxJcgcolLzku11jN0 802vZknmhsH9FYvJtE5TLNGJh4JP0cv7JlZi+060/yAipeCI9sjeqpvWy1eNdM2i TBQm7ysQAZ7sOFiwwPjRmLcwMQxxdWPml5M5tFMCBiC+svrUNH0VPyHoMbLp3njv c5zZEUDWUXYCvZSW3MrhDiFs2lu+5xOyQhUbXM7rZwlERRadQmfqfj3/dogpTzqk C5aWIDayH5wxFA== -----END CERTIFICATE-----Generated at Thu Dec 18 00:12:17 2025 by rpki-client