This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft File: a_CO0PpuGTufOlC_cmtB0MMpspc.mft (raw, json) Hash identifier: JJvH01Amq7fu3xkGg/ZVCjlu3kD9W7kQXpG5s8WIw1g= Subject key identifier: 86:F6:94:41:5E:2E:D6:52:1A:A0:7A:76:E6:8D:54:03:89:6F:53:D1 Authority key identifier: 6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97 Certificate issuer: /CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297 Certificate serial: 019B24E361A28D0A32D566692F456952DC6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft Manifest number: 036B Signing time: Tue 16 Dec 2025 02:00:40 +0000 Manifest this update: Tue 16 Dec 2025 02:00:40 +0000 Manifest next update: Wed 17 Dec 2025 02:00:40 +0000 Files and hashes: 1: a_CO0PpuGTufOlC_cmtB0MMpspc.crl (hash: Ixqmyl1lw59tpZq2/27vmTr2eQ3BlOMcuRolr0fqT/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:61:a2:8d:0a:32:d5:66:69:2f:45:69:52:dc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf08ed0fa6e193b9f3a50bf726b41d0c329b297 Validity Not Before: Dec 16 02:00:40 2025 GMT Not After : Dec 17 02:00:40 2025 GMT Subject: CN=86f694415e2ed6521aa07a76e68d5403896f53d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:fc:6d:76:d2:49:f5:72:91:78:67:84:85: 40:a6:fa:16:36:84:3f:13:5a:fe:f9:cd:2e:f8:2a: b6:2f:de:a9:eb:e9:e3:a7:bc:45:cf:99:73:30:1d: f6:92:29:ef:88:e8:e3:fb:b6:67:8b:90:82:72:c1: c7:dd:cb:cc:74:9f:c8:33:44:57:c8:53:a2:6d:27: 6c:f8:69:28:3c:8a:2f:e7:14:e8:36:9b:dc:fa:34: 4e:6c:e5:5d:9f:d5:f1:14:c0:13:0d:14:f8:8e:9a: 71:f7:75:40:e3:4c:e6:6e:01:8a:85:45:34:54:20: 66:14:34:91:2c:a8:af:e4:a9:7a:a4:90:bb:b7:89: 84:00:5b:10:16:2a:a8:d2:e7:19:54:08:9b:9e:83: 20:f2:08:9e:e4:85:16:e2:49:fa:bd:3a:78:e7:ff: ae:6e:f5:78:51:a9:f4:44:e2:0b:fe:a5:6c:d0:83: df:90:4c:f3:7e:bd:dc:84:d8:53:9d:b4:97:ec:c1: f3:13:47:87:49:38:e2:4a:d1:15:e6:87:af:7d:45: ea:dd:74:15:32:6c:e0:10:7d:e3:1d:c6:30:de:8a: 35:c3:df:7d:4c:5a:df:1a:63:da:49:b0:84:13:28: 11:23:c0:27:4d:b1:3b:51:39:76:a6:0d:8d:67:0b: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F6:94:41:5E:2E:D6:52:1A:A0:7A:76:E6:8D:54:03:89:6F:53:D1 X509v3 Authority Key Identifier: keyid:6B:F0:8E:D0:FA:6E:19:3B:9F:3A:50:BF:72:6B:41:D0:C3:29:B2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_CO0PpuGTufOlC_cmtB0MMpspc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/67a63a-1a03-4822-ac9e-3d4205f5e2d3/1/a_CO0PpuGTufOlC_cmtB0MMpspc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4c:c6:c1:03:76:70:e8:fd:b4:c0:d6:df:a7:19:fe:d5:cd: bc:c9:21:4d:09:c6:5c:39:73:62:c2:c6:aa:c9:9c:1d:4c:86: 18:54:9b:f2:65:89:16:b8:71:82:43:3d:ad:80:82:42:95:c6: 69:0a:19:d6:1e:9b:49:1c:a1:c6:11:2d:0e:22:37:f4:d1:3c: ae:92:e5:f2:1a:50:d1:13:25:b3:67:41:bb:ca:cf:cf:1d:fa: 26:24:e1:10:af:45:89:ae:75:d8:5f:57:03:cb:63:40:ec:89: f0:13:cf:f4:5f:07:20:f2:80:b2:f7:31:0d:09:2c:44:a0:2b: 17:0e:d4:f5:36:35:e4:fd:ee:65:93:29:89:35:37:02:d2:c5: 45:39:cd:d1:50:99:29:e9:db:d3:22:9b:45:98:a7:80:d7:e5: d8:d3:81:8d:d4:f2:2c:6b:59:c1:93:60:c1:71:5d:81:9f:28: 62:48:0c:37:96:85:6b:45:76:16:78:b8:d0:1b:d2:0d:03:9c: 3e:8c:10:22:9b:f8:91:70:5e:b0:c7:cb:fc:04:fc:f4:49:85: 35:86:24:cc:64:f0:40:c2:79:66:9b:ac:c1:72:e1:65:76:63: 5f:82:9d:cb:12:61:8b:26:7a:ae:f1:4d:31:2c:2c:c6:24:79: 72:82:3c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk42GijQoy1WZpL0VpUtxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjA4ZWQwZmE2ZTE5M2I5ZjNhNTBiZjcyNmI0MWQwYzMy OWIyOTcwHhcNMjUxMjE2MDIwMDQwWhcNMjUxMjE3MDIwMDQwWjAzMTEwLwYDVQQD Eyg4NmY2OTQ0MTVlMmVkNjUyMWFhMDdhNzZlNjhkNTQwMzg5NmY1M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6T8bXbSSfVykXhnhIVApvoWNoQ/ E1r++c0u+Cq2L96p6+njp7xFz5lzMB32kinviOjj+7Zni5CCcsHH3cvMdJ/IM0RX yFOibSds+GkoPIov5xToNpvc+jRObOVdn9XxFMATDRT4jppx93VA40zmbgGKhUU0 VCBmFDSRLKiv5Kl6pJC7t4mEAFsQFiqo0ucZVAibnoMg8gie5IUW4kn6vTp45/+u bvV4Uan0ROIL/qVs0IPfkEzzfr3chNhTnbSX7MHzE0eHSTjiStEV5oevfUXq3XQV MmzgEH3jHcYw3oo1w999TFrfGmPaSbCEEygRI8AnTbE7UTl2pg2NZwsmrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb2lEFeLtZSGqB6duaNVAOJb1PRMB8GA1UdIwQY MBaAFGvwjtD6bhk7nzpQv3JrQdDDKbKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82N2E2M2EtMWEwMy00ODIyLWFjOWUt M2Q0MjA1ZjVlMmQzLzEvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC82N2E2M2EtMWEwMy00ODIyLWFjOWUtM2Q0MjA1ZjVlMmQz LzEvYV9DTzBQcHVHVHVmT2xDX2NtdEIwTU1wc3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEzGwQN2 cOj9tMDW36cZ/tXNvMkhTQnGXDlzYsLGqsmcHUyGGFSb8mWJFrhxgkM9rYCCQpXG aQoZ1h6bSRyhxhEtDiI39NE8rpLl8hpQ0RMls2dBu8rPzx36JiThEK9Fia512F9X A8tjQOyJ8BPP9F8HIPKAsvcxDQksRKArFw7U9TY15P3uZZMpiTU3AtLFRTnN0VCZ Kenb0yKbRZingNfl2NOBjdTyLGtZwZNgwXFdgZ8oYkgMN5aFa0V2Fni40BvSDQOc PowQIpv4kXBesMfL/AT89EmFNYYkzGTwQMJ5ZpuswXLhZXZjX4KdyxJhiyZ6rvFN MSwsxiR5coI8rw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:26 2025 by rpki-client