This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft File: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json) Hash identifier: +gL0mjwO60fjIqlymNHjZ0XLjaHrsxHTg2ZK3wK/4QM= Subject key identifier: BE:13:39:AA:EC:E6:76:0C:1E:30:C7:E4:27:27:7E:B7:DD:30:12:FD Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Certificate serial: 019B20989C08C473604270C258CD7F621585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 06:00:30 +0000 Manifest this update: Mon 15 Dec 2025 06:00:30 +0000 Manifest next update: Tue 16 Dec 2025 06:00:30 +0000 Files and hashes: 1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: 3Zvy3XvQHVuQm6hLxH7LVQMOlbm6lkmmlY8FCCHnPcs=) 2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:9c:08:c4:73:60:42:70:c2:58:cd:7f:62:15:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Validity Not Before: Dec 15 06:00:30 2025 GMT Not After : Dec 16 06:00:30 2025 GMT Subject: CN=be1339aaece6760c1e30c7e427277eb7dd3012fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:75:1e:07:80:32:67:f0:18:8e:73:3d:f5: 6f:ec:b4:f7:dc:d6:f2:00:6d:f9:a5:c6:76:0b:5a: f7:ec:7d:43:53:a3:77:1f:43:c7:a9:80:cc:13:5c: 53:0b:26:2d:09:d9:0b:9c:0e:17:b1:37:d5:3d:5d: 5d:4e:e0:6a:48:c1:5a:62:8b:b9:f2:b1:a2:2c:8a: 60:bb:a6:5a:e8:64:89:6c:2d:ec:65:e4:0b:85:74: e9:15:97:53:41:82:e0:77:8e:cb:91:f1:6c:79:40: 48:de:1a:c9:d7:18:49:44:0b:28:6a:37:fd:2e:16: c8:bb:ac:ab:e2:e6:9e:37:90:dc:00:60:d3:ea:d2: 28:8d:47:2d:a1:2f:db:fd:78:5c:86:e0:0a:27:bf: 56:ed:ba:2a:79:5c:34:35:94:d9:2a:5c:b9:4d:f5: 38:76:3c:bd:bf:5e:d9:3e:52:17:ef:fb:c2:51:38: 9e:e7:90:dd:74:bc:2f:b5:cf:e6:ad:08:39:01:0c: 2d:c7:fe:38:b3:77:e0:cf:f4:ee:4c:82:9d:03:23: 23:7f:a2:e1:bf:6f:ca:71:a8:d9:c6:25:54:19:fa: 8e:b4:1f:f0:c0:b4:62:94:29:9c:d4:95:24:1f:90: 54:02:92:67:1f:45:df:56:b0:dc:94:54:1c:26:17: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:13:39:AA:EC:E6:76:0C:1E:30:C7:E4:27:27:7E:B7:DD:30:12:FD X509v3 Authority Key Identifier: keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9e:b9:af:58:21:ff:25:4c:03:13:81:57:64:1b:3e:b7:6e: ec:76:b1:25:78:be:83:8b:12:34:41:06:cb:ed:38:e6:1a:a1: 36:c4:08:a0:ab:74:7f:02:5c:b9:56:26:f9:e8:e0:40:e0:fa: d7:9d:03:c0:46:a5:04:0f:cf:c5:f5:06:b3:c3:d3:47:8e:f3: 83:4a:28:a2:8f:0e:e4:d7:22:53:42:40:b3:0a:cf:ff:83:d3: 30:7d:fc:fb:87:41:9e:d5:6c:ff:27:db:3f:c3:76:30:ad:41: 7f:61:4d:35:5a:b0:95:88:9b:cb:40:d0:d7:69:e2:db:fa:9f: 07:a0:0f:2c:54:a4:a6:b7:76:b0:22:56:f5:ed:d2:c5:1d:29: 3c:d4:34:10:69:85:dd:78:a4:76:dd:81:6e:1b:0b:a0:a0:2e: d5:d7:08:4c:29:9b:b5:f3:3a:f5:5b:f3:81:dc:11:c1:96:57: 37:d5:ae:81:62:c2:c0:73:75:4e:53:50:4f:22:be:e3:4a:a9: af:0a:6c:fb:ad:d6:b1:58:c0:ec:5b:92:d9:fc:60:9b:7b:9b: ae:8c:37:c0:d2:57:50:f8:a4:a1:5f:0e:d8:0b:c7:7a:bf:9f: a8:64:b3:c2:02:02:c0:71:e7:72:f7:b5:27:3e:bb:e0:f6:43: 13:9f:0e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmJwIxHNgQnDCWM1/YhWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZWY5NWQyY2YwZTdkODQwNThiNTI4ZTc5MDJkNjBiNDAz ZDdiNzYwHhcNMjUxMjE1MDYwMDMwWhcNMjUxMjE2MDYwMDMwWjAzMTEwLwYDVQQD EyhiZTEzMzlhYWVjZTY3NjBjMWUzMGM3ZTQyNzI3N2ViN2RkMzAxMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpd1HgeAMmfwGI5zPfVv7LT33Nby AG35pcZ2C1r37H1DU6N3H0PHqYDME1xTCyYtCdkLnA4XsTfVPV1dTuBqSMFaYou5 8rGiLIpgu6Za6GSJbC3sZeQLhXTpFZdTQYLgd47LkfFseUBI3hrJ1xhJRAsoajf9 LhbIu6yr4uaeN5DcAGDT6tIojUctoS/b/XhchuAKJ79W7boqeVw0NZTZKly5TfU4 djy9v17ZPlIX7/vCUTie55DddLwvtc/mrQg5AQwtx/44s3fgz/TuTIKdAyMjf6Lh v2/KcajZxiVUGfqOtB/wwLRilCmc1JUkH5BUApJnH0XfVrDclFQcJheBoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4TOars5nYMHjDH5CcnfrfdMBL9MB8GA1UdIwQY MBaAFHDvldLPDn2EBYtSjnkC1gtAPXt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEt YTA0MGM3YjZhNjcwLzEvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEtYTA0MGM3YjZhNjcw LzEvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZ65r1gh /yVMAxOBV2QbPrdu7HaxJXi+g4sSNEEGy+045hqhNsQIoKt0fwJcuVYm+ejgQOD6 150DwEalBA/PxfUGs8PTR47zg0oooo8O5NciU0JAswrP/4PTMH38+4dBntVs/yfb P8N2MK1Bf2FNNVqwlYiby0DQ12ni2/qfB6APLFSkprd2sCJW9e3SxR0pPNQ0EGmF 3Xikdt2BbhsLoKAu1dcITCmbtfM69VvzgdwRwZZXN9WugWLCwHN1TlNQTyK+40qp rwps+63WsVjA7FuS2fxgm3ubrow3wNJXUPikoV8O2AvHer+fqGSzwgICwHHncve1 Jz674PZDE58OlQ== -----END CERTIFICATE-----Generated at Mon Dec 15 09:40:08 2025 by rpki-client