This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json) Hash identifier: EUAQ0SfsJht2IM+FwbPa/FNxNLs14usBhqPra+A36wk= Subject key identifier: AE:BE:49:94:E3:47:A9:B7:FF:1A:C3:A0:62:CC:2E:17:62:CC:51:D9 Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e Certificate serial: 019B213DCB3747046A2E3B037E8F70FBAE52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft Manifest number: 09A8 Signing time: Mon 15 Dec 2025 09:00:56 +0000 Manifest this update: Mon 15 Dec 2025 09:00:56 +0000 Manifest next update: Tue 16 Dec 2025 09:00:56 +0000 Files and hashes: 1: 3a2aA3phNWUF0g57WpzFbueiUww.roa (hash: yZ0tZQ4HobZpCClXrhnqNAtC3/BMDlKJP+hoj005BvE=) 2: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: B0CDpYN8g6dmvuV0fnQhFgTDfGTh6szS3rXY62js1Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:cb:37:47:04:6a:2e:3b:03:7e:8f:70:fb:ae:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e Validity Not Before: Dec 15 09:00:56 2025 GMT Not After : Dec 16 09:00:56 2025 GMT Subject: CN=aebe4994e347a9b7ff1ac3a062cc2e1762cc51d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:6d:04:54:df:30:09:fa:89:8f:8e:1b:d7: 2d:0f:a7:1e:f8:62:0a:7b:ac:fe:06:2c:c5:00:73: 8a:b4:8f:f1:c3:04:5f:27:ab:28:80:da:9b:ed:4d: e9:b8:bf:b9:57:6c:dc:19:e9:1f:2a:66:db:c9:7f: 7c:00:dd:18:f2:71:36:3d:c2:4d:01:96:d5:f9:db: 42:20:cb:8a:6e:2f:f0:c6:90:8c:61:1a:de:ab:8f: 58:c8:b4:c4:81:0f:86:0e:95:1d:b1:b2:81:df:9b: d4:ca:1b:e7:ab:49:b9:88:35:9a:44:96:1c:3f:b9: 15:2a:95:3d:46:3b:63:8a:be:0f:44:2e:1c:e4:9f: a0:23:b3:b8:25:cf:66:9e:b4:42:48:a7:43:29:8e: ee:0b:13:25:7e:37:61:4c:8a:40:df:15:25:23:b9: 46:7d:37:a9:e9:81:35:3a:14:23:e9:16:65:f6:66: 61:a3:b9:a4:f4:99:2f:bc:9d:e3:9b:10:47:f1:a8: 81:ec:f0:62:90:00:1a:bf:60:3e:95:ec:3a:0d:d8: 59:02:9d:9b:e1:91:4c:5f:fc:c5:fe:bc:9c:e5:e2: 53:25:b7:da:96:7f:92:df:3d:64:6e:be:1e:ca:75: 9c:dc:b1:6c:a0:56:d0:27:1e:85:d8:8f:ad:68:f9: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BE:49:94:E3:47:A9:B7:FF:1A:C3:A0:62:CC:2E:17:62:CC:51:D9 X509v3 Authority Key Identifier: keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3b:99:fd:37:27:fe:82:98:8b:01:5d:e4:ec:a6:57:fc:3d: ed:0e:c8:81:a6:0b:6a:66:b8:fc:bf:bc:5f:3c:05:15:0e:38: a8:58:a8:48:79:5d:52:c6:83:30:3e:55:a0:b8:78:2f:69:d7: 3c:ea:54:9d:88:0f:2a:94:01:ce:a5:f2:94:c5:76:3a:3e:a9: 97:96:48:e8:f3:d3:2f:9e:ec:cc:53:04:43:65:3b:93:c5:87: 97:cb:c3:64:82:ec:8e:a9:9f:04:59:24:a4:b8:29:ad:46:54: 8d:64:d1:4e:71:d9:f3:4d:e1:86:79:08:71:c1:6d:b8:72:6c: 9d:c2:3e:82:24:d4:d8:73:00:fc:30:4c:91:a8:f3:5d:04:64: a9:37:d1:49:dc:b9:15:79:b3:5a:a9:1c:61:dc:52:e0:20:66: fa:8f:65:6f:b9:05:b8:e4:bb:e9:9e:89:b4:46:d0:19:0c:bb: ce:8c:5b:15:86:bb:f2:cb:fb:00:44:87:d2:bd:54:ea:29:66: 0e:ec:12:45:a4:cb:47:2e:6b:a2:97:4f:35:bb:3e:e7:f2:00: 0f:8e:dd:27:20:69:41:6a:0c:6e:3c:fd:c6:d9:92:02:c9:3c: ed:c5:7a:c7:05:7c:00:b2:09:c8:47:23:bd:db:1d:00:cc:0a: 44:b0:bb:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPcs3RwRqLjsDfo9w+65SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZTdkN2IzYmM0YzA3OTFjMGNmZmUzZjE1NTVhYjc3M2Uz ZWQxNmUwHhcNMjUxMjE1MDkwMDU2WhcNMjUxMjE2MDkwMDU2WjAzMTEwLwYDVQQD EyhhZWJlNDk5NGUzNDdhOWI3ZmYxYWMzYTA2MmNjMmUxNzYyY2M1MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+NtBFTfMAn6iY+OG9ctD6ce+GIK e6z+BizFAHOKtI/xwwRfJ6sogNqb7U3puL+5V2zcGekfKmbbyX98AN0Y8nE2PcJN AZbV+dtCIMuKbi/wxpCMYRreq49YyLTEgQ+GDpUdsbKB35vUyhvnq0m5iDWaRJYc P7kVKpU9Rjtjir4PRC4c5J+gI7O4Jc9mnrRCSKdDKY7uCxMlfjdhTIpA3xUlI7lG fTep6YE1OhQj6RZl9mZho7mk9JkvvJ3jmxBH8aiB7PBikAAav2A+lew6DdhZAp2b 4ZFMX/zF/ryc5eJTJbfaln+S3z1kbr4eynWc3LFsoFbQJx6F2I+taPkcawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6+SZTjR6m3/xrDoGLMLhdizFHZMB8GA1UdIwQY MBaAFAjn17O8TAeRwM/+PxVVq3c+PtFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMt MmZjMzVjZDFhYzJhLzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMtMmZjMzVjZDFhYzJh LzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizuZ/Tcn /oKYiwFd5OymV/w97Q7IgaYLama4/L+8XzwFFQ44qFioSHldUsaDMD5VoLh4L2nX POpUnYgPKpQBzqXylMV2Oj6pl5ZI6PPTL57szFMEQ2U7k8WHl8vDZILsjqmfBFkk pLgprUZUjWTRTnHZ803hhnkIccFtuHJsncI+giTU2HMA/DBMkajzXQRkqTfRSdy5 FXmzWqkcYdxS4CBm+o9lb7kFuOS76Z6JtEbQGQy7zoxbFYa78sv7AESH0r1U6ilm DuwSRaTLRy5ropdPNbs+5/IAD47dJyBpQWoMbjz9xtmSAsk87cV6xwV8ALIJyEcj vdsdAMwKRLC7xw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:34 2025 by rpki-client