This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json) Hash identifier: YM5Q9WQk9YSXcat60vb5mNSeBPTfau6Qxz0z7gx3xow= Subject key identifier: 06:02:90:A7:50:04:F5:D3:12:52:6E:59:8C:74:C7:37:F6:5F:71:32 Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c Certificate serial: 019B25F5F60C6D29E1D239F3AB90729B0B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft Manifest number: 039B Signing time: Tue 16 Dec 2025 07:00:34 +0000 Manifest this update: Tue 16 Dec 2025 07:00:34 +0000 Manifest next update: Wed 17 Dec 2025 07:00:34 +0000 Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: Ys6Vi0Jx3Xi2zDbydhNH+z6ATwgrjmwYFi6eayNUnxs=) 2: WZzhEpaA95Ez0phxnjpQh59XWdg.roa (hash: rNbkHKD1F2pmZbtIEu+jRxIqu+6kK3Eh8JznaVaKxmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f5:f6:0c:6d:29:e1:d2:39:f3:ab:90:72:9b:0b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c Validity Not Before: Dec 16 07:00:34 2025 GMT Not After : Dec 17 07:00:34 2025 GMT Subject: CN=060290a75004f5d312526e598c74c737f65f7132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:de:78:1f:30:8d:98:1c:37:96:5f:a1:80: bd:ec:d8:94:53:1b:d7:6e:77:0f:31:8c:e0:97:d5: 89:08:ea:22:87:f2:97:3b:c1:cf:20:51:a9:36:cf: 0f:6e:05:63:a2:05:64:28:be:36:fd:9f:9c:ba:81: 17:38:14:55:8b:3e:4a:d9:94:59:18:f3:bf:e8:de: 11:97:eb:8f:56:24:8f:bf:25:7e:e0:01:80:e1:77: 3d:b4:86:a6:d0:c6:2e:9e:64:bd:8c:61:50:f9:13: 7a:e7:69:b2:b0:fe:1a:4c:34:6f:37:63:3a:d0:93: 6d:3d:74:ce:d7:dd:a2:8f:07:c3:93:93:46:f6:36: db:e0:0d:c9:ce:77:d8:14:13:e0:a2:85:64:b2:8b: 6b:15:2d:05:3f:89:6d:34:cd:07:6a:a6:07:4c:85: be:14:24:98:13:01:ea:d6:d3:15:62:80:37:f7:c7: 60:5d:b9:9b:52:68:8d:4a:f8:01:02:af:da:2a:91: 56:4e:10:54:0e:65:66:13:4f:f3:fb:58:ab:17:a0: 3f:86:e3:cf:65:24:6d:fd:b3:45:be:19:84:c1:67: 23:c8:14:a3:b4:c5:2e:df:54:fa:53:e1:7f:35:f5: 0e:59:6f:61:0f:80:ca:8c:10:d3:0f:bd:9d:ed:b8: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:90:A7:50:04:F5:D3:12:52:6E:59:8C:74:C7:37:F6:5F:71:32 X509v3 Authority Key Identifier: keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a6:31:1f:05:c4:34:19:94:02:ec:f5:69:e6:a3:e8:ea:78: 33:92:10:8b:e3:e6:23:78:ec:c2:99:fc:bc:5b:fc:06:65:0f: 77:14:d0:50:b2:76:d1:f7:56:af:1c:96:99:89:c9:a2:2f:fe: 60:6b:bd:04:ed:a2:24:90:3b:36:11:fd:be:cc:4d:69:a9:87: 5d:3c:f2:c3:a3:b8:89:cd:18:b0:ba:1c:80:93:d8:99:3e:09: a6:64:9c:d9:fe:e9:f0:4d:f2:fe:ca:ea:fa:f5:ec:c8:e4:c6: 0f:be:ef:8d:c0:0c:0d:1b:c4:83:64:16:52:1f:c4:f4:07:cf: 85:ee:60:35:e5:61:d4:76:85:ed:b7:9e:cc:49:95:2d:53:57: dc:c8:bc:f1:7d:da:a0:98:9e:3d:38:91:9d:69:e1:3a:a2:d9: 76:c4:0f:a2:54:3c:fc:40:d3:3e:f5:7b:73:f9:12:43:67:e9: c8:bf:98:68:9d:b2:64:7c:de:b6:76:04:aa:75:3d:91:c4:d4: df:c9:a3:6d:bb:d8:16:8e:d9:e7:b9:47:9e:e2:d1:08:eb:0f: a1:be:51:52:e5:9e:8d:ca:5c:11:46:72:59:e8:71:d7:16:6a: 21:79:45:0e:7c:7b:a8:d5:88:63:ac:92:5a:e8:70:a6:e2:b5: b5:01:cf:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9fYMbSnh0jnzq5BymwsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZTc1NGMzYTNkYjJlZDE0YWE2YzA2YTk5ZDc5NzI5MTcw MjAwMWMwHhcNMjUxMjE2MDcwMDM0WhcNMjUxMjE3MDcwMDM0WjAzMTEwLwYDVQQD EygwNjAyOTBhNzUwMDRmNWQzMTI1MjZlNTk4Yzc0YzczN2Y2NWY3MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi7eeB8wjZgcN5ZfoYC97NiUUxvX bncPMYzgl9WJCOoih/KXO8HPIFGpNs8PbgVjogVkKL42/Z+cuoEXOBRViz5K2ZRZ GPO/6N4Rl+uPViSPvyV+4AGA4Xc9tIam0MYunmS9jGFQ+RN652mysP4aTDRvN2M6 0JNtPXTO192ijwfDk5NG9jbb4A3JznfYFBPgooVksotrFS0FP4ltNM0HaqYHTIW+ FCSYEwHq1tMVYoA398dgXbmbUmiNSvgBAq/aKpFWThBUDmVmE0/z+1irF6A/huPP ZSRt/bNFvhmEwWcjyBSjtMUu31T6U+F/NfUOWW9hD4DKjBDTD72d7bg1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYCkKdQBPXTElJuWYx0xzf2X3EyMB8GA1UdIwQY MBaAFAjnVMOj2y7RSqbAapnXlykXAgAcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMTZlZmMtOTI1NS00Y2FiLWJmOWEt OGVkYzUyZGM2MGNmLzEvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wMTZlZmMtOTI1NS00Y2FiLWJmOWEtOGVkYzUyZGM2MGNm LzEvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6YxHwXE NBmUAuz1aeaj6Op4M5IQi+PmI3jswpn8vFv8BmUPdxTQULJ20fdWrxyWmYnJoi/+ YGu9BO2iJJA7NhH9vsxNaamHXTzyw6O4ic0YsLocgJPYmT4JpmSc2f7p8E3y/srq +vXsyOTGD77vjcAMDRvEg2QWUh/E9AfPhe5gNeVh1HaF7beezEmVLVNX3Mi88X3a oJiePTiRnWnhOqLZdsQPolQ8/EDTPvV7c/kSQ2fpyL+YaJ2yZHzetnYEqnU9kcTU 38mjbbvYFo7Z57lHnuLRCOsPob5RUuWejcpcEUZyWehx1xZqIXlFDnx7qNWIY6yS WuhwpuK1tQHP6w== -----END CERTIFICATE-----Generated at Tue Dec 16 10:41:27 2025 by rpki-client