This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json) Hash identifier: ZPmweH0q1f1nUieN3xE7xdy/rs4acCZms+5ijebCBGk= Subject key identifier: D7:AB:CE:77:9B:BB:11:40:C6:34:92:53:32:1C:FA:53:1D:22:09:EE Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Certificate serial: 019B0FA57F321F8F1011A8CC7C80D941933A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft Manifest number: 12D8 Signing time: Thu 11 Dec 2025 23:01:02 +0000 Manifest this update: Thu 11 Dec 2025 23:01:02 +0000 Manifest next update: Fri 12 Dec 2025 23:01:02 +0000 Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: NYdQykOsiAs7jF6c+unmkfBQzgdlc3egX7T5zDKbJ2I=) 2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:7f:32:1f:8f:10:11:a8:cc:7c:80:d9:41:93:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Validity Not Before: Dec 11 23:01:02 2025 GMT Not After : Dec 12 23:01:02 2025 GMT Subject: CN=d7abce779bbb1140c6349253321cfa531d2209ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a3:f5:ef:9b:5b:87:12:e9:84:5a:e7:04:54: f9:8b:80:cf:e4:1c:70:d8:05:31:03:84:fb:ce:2c: f7:4f:b0:91:b6:b6:11:b3:16:1e:17:7e:9b:b2:fa: 9a:77:8a:3a:bc:da:5a:e9:1b:f4:49:fe:22:4e:bc: c6:8e:85:34:ac:17:ba:43:8f:31:34:51:d7:41:5b: 2c:f7:df:16:99:24:7a:70:71:a8:a8:40:32:eb:1d: fb:fd:9d:1d:24:d4:44:cd:40:66:3f:dc:89:db:27: cf:e1:5b:76:33:84:f6:77:22:09:fd:22:7c:87:cc: 03:d9:67:d3:1e:7f:67:90:4c:09:24:48:bb:26:fe: af:0f:58:9d:95:4e:72:9e:c8:69:d8:b2:a3:13:c4: 68:64:98:b7:df:9c:00:0c:8e:20:a2:c4:a6:9d:ed: 22:79:b6:43:9e:9f:7e:de:c1:05:c6:9c:53:a1:db: 3f:63:a5:50:e2:d5:99:b2:1b:e2:14:6d:12:be:37: e1:88:37:25:f4:4b:e4:85:3c:6d:24:be:b4:8b:02: 0d:90:dd:75:11:a6:71:2b:4b:23:e4:dc:cb:7c:5b: 7e:11:0f:21:aa:b4:9e:57:bd:0b:13:88:33:81:80: 97:27:f6:70:46:ab:ab:63:bf:0f:4a:b3:4c:91:e9: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:CE:77:9B:BB:11:40:C6:34:92:53:32:1C:FA:53:1D:22:09:EE X509v3 Authority Key Identifier: keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:0b:83:52:86:17:c1:0f:2d:ec:b6:53:cf:a9:e6:1e:74: ba:4d:f9:80:e4:92:93:53:d2:01:be:5b:83:07:e0:ae:6f:a9: 71:db:1d:de:e2:47:4b:ba:6e:21:05:5d:1c:82:db:58:14:ef: 89:7d:8b:cb:b7:73:67:9f:c1:40:5d:28:15:07:b2:10:42:7e: 17:40:f9:7c:2e:02:5f:a7:18:65:b8:9d:9e:f3:3a:9a:bf:d3: ed:f8:20:49:84:dc:cf:d9:13:62:58:f5:00:5f:98:f5:f3:9a: b7:06:96:2d:ea:7e:66:bc:bc:0a:d5:0d:2a:b8:ce:37:93:69: 9b:5a:45:59:5c:34:5b:84:69:86:45:4d:00:d3:cd:ed:ab:9e: b3:7a:4c:1e:d6:b6:34:41:50:f0:d4:5b:80:c9:6b:79:c6:b4: 56:6c:8e:27:60:db:50:d1:59:9e:97:9a:5a:2b:58:21:6b:f6: 79:38:32:eb:87:f4:d1:7a:3d:bf:7b:d3:6b:60:83:50:31:27: 7c:34:4e:9e:7d:81:12:7e:fe:42:e7:84:25:d6:86:98:17:57: da:c9:a6:7b:19:0c:e0:3a:52:ac:30:92:63:9e:a8:a9:bb:e6: 9f:f7:20:92:82:c2:91:68:56:fb:c0:ff:ac:a5:83:a1:d9:0d: 57:45:b3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpX8yH48QEajMfIDZQZM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz ZWY4MmEwHhcNMjUxMjExMjMwMTAyWhcNMjUxMjEyMjMwMTAyWjAzMTEwLwYDVQQD EyhkN2FiY2U3NzliYmIxMTQwYzYzNDkyNTMzMjFjZmE1MzFkMjIwOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56P175tbhxLphFrnBFT5i4DP5Bxw 2AUxA4T7ziz3T7CRtrYRsxYeF36bsvqad4o6vNpa6Rv0Sf4iTrzGjoU0rBe6Q48x NFHXQVss998WmSR6cHGoqEAy6x37/Z0dJNREzUBmP9yJ2yfP4Vt2M4T2dyIJ/SJ8 h8wD2WfTHn9nkEwJJEi7Jv6vD1idlU5ynshp2LKjE8RoZJi335wADI4gosSmne0i ebZDnp9+3sEFxpxTods/Y6VQ4tWZshviFG0SvjfhiDcl9EvkhTxtJL60iwINkN11 EaZxK0sj5NzLfFt+EQ8hqrSeV70LE4gzgYCXJ/ZwRqurY78PSrNMkel3CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNerznebuxFAxjSSUzIc+lMdIgnuMB8GA1UdIwQY MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5 LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAwLg1KG F8EPLey2U8+p5h50uk35gOSSk1PSAb5bgwfgrm+pcdsd3uJHS7puIQVdHILbWBTv iX2Ly7dzZ5/BQF0oFQeyEEJ+F0D5fC4CX6cYZbidnvM6mr/T7fggSYTcz9kTYlj1 AF+Y9fOatwaWLep+Zry8CtUNKrjON5Npm1pFWVw0W4RphkVNANPN7aues3pMHta2 NEFQ8NRbgMlreca0VmyOJ2DbUNFZnpeaWitYIWv2eTgy64f00Xo9v3vTa2CDUDEn fDROnn2BEn7+QueEJdaGmBdX2smmexkM4DpSrDCSY56oqbvmn/cgkoLCkWhW+8D/ rKWDodkNV0WzMA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:10:09 2025 by rpki-client