This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json) Hash identifier: sGKV+OPsgKwM2K7rqifsgzhnwa3V/sDao+bCRousjg0= Subject key identifier: BF:81:C9:95:74:A6:FC:F2:5D:4F:46:22:57:03:C5:EC:04:7D:F6:28 Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Certificate serial: 019B1013A86817F34D64F644883F24A38634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 01:01:22 +0000 Manifest this update: Fri 12 Dec 2025 01:01:22 +0000 Manifest next update: Sat 13 Dec 2025 01:01:22 +0000 Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: l/CQgsXX/ss675b7Tra4avJMxTwicZS5wvE6TKnj06s=) 2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:a8:68:17:f3:4d:64:f6:44:88:3f:24:a3:86:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Validity Not Before: Dec 12 01:01:22 2025 GMT Not After : Dec 13 01:01:22 2025 GMT Subject: CN=bf81c99574a6fcf25d4f46225703c5ec047df628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:d8:af:72:7b:29:43:23:a1:fe:90:9d:84: 4f:87:e8:10:df:49:f3:64:31:61:4f:58:a6:90:22: d5:fc:95:6c:0a:1a:62:ad:c6:73:68:86:6d:6f:d1: 98:c6:bc:e7:97:26:cb:17:70:8f:ff:1a:de:2d:e1: c7:e8:93:e6:f4:90:af:7c:73:6e:b1:8c:f8:3c:4c: 79:db:c6:91:06:b7:ad:c7:5a:d7:cd:d5:6b:70:fb: 1a:96:6b:a8:a4:5c:5a:6d:c7:15:9b:98:2f:8b:11: 06:8e:f0:76:3c:fe:4d:b0:0f:10:db:00:b8:97:ad: 93:25:c8:5a:97:1f:6b:da:26:b9:ce:85:89:01:b0: 54:4d:3c:69:49:63:70:66:46:f7:53:04:ba:bf:91: ab:cc:6f:fa:ef:f5:31:50:5e:6d:c1:c8:67:d5:ed: cf:d6:9c:8c:be:94:bb:23:0c:44:a6:d9:d5:f2:ef: 13:8c:bb:5e:4e:ec:c0:58:f5:aa:17:d6:3d:78:15: 5d:42:e3:9f:93:b8:84:c1:97:3f:04:22:5c:c0:b3: cc:e6:1e:6c:f7:ae:f3:2a:1d:77:50:da:f8:d6:b4: 0c:68:9b:d0:99:5b:01:55:95:a6:03:a3:34:4d:b9: ed:e0:a0:89:ad:eb:e1:5e:25:35:13:b5:47:48:ed: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:81:C9:95:74:A6:FC:F2:5D:4F:46:22:57:03:C5:EC:04:7D:F6:28 X509v3 Authority Key Identifier: keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c3:86:55:34:be:8c:1b:2b:b6:02:8a:cb:b7:73:ac:c3:ee: d7:05:51:43:c2:c6:a5:ab:9f:4d:14:7e:a7:e0:b1:e2:ce:d6: 22:87:66:ce:dc:a1:f2:63:37:35:01:ae:bc:8e:24:1e:3d:5e: e7:a4:f0:af:f1:13:60:40:ad:d2:c2:d4:01:96:ee:37:29:e6: 2c:53:a0:ef:69:ec:c9:58:1f:f5:c3:86:9c:73:1d:e6:92:87: f3:f3:18:a8:01:bf:a0:a0:91:12:d0:31:6b:e9:91:36:47:73: c5:4b:c1:ff:e1:93:4b:8c:9b:79:95:25:23:1c:60:7d:83:b4: fd:10:78:da:21:15:b7:93:f4:d1:3c:66:40:b9:16:78:ea:10: 05:e4:4d:98:47:90:28:16:7d:49:f5:89:d2:b8:a9:08:59:3b: f2:25:3d:de:78:5f:c6:f6:e9:21:cd:72:6b:57:23:54:f4:ab: 95:0c:cd:dc:dd:f8:c0:f4:49:36:f6:e0:9a:54:9c:9e:c3:97: b6:b8:63:1e:48:ae:61:4d:8c:46:b2:37:f1:9e:d2:01:58:44: c1:8e:2e:c0:79:05:68:a6:b3:0b:0d:a2:b5:84:e1:62:9b:5a: c1:78:4b:38:0b:ca:3d:30:ee:51:fc:de:95:24:83:20:ab:1d: c0:ee:03:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE6hoF/NNZPZEiD8ko4Y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5 YzVhMWMwHhcNMjUxMjEyMDEwMTIyWhcNMjUxMjEzMDEwMTIyWjAzMTEwLwYDVQQD EyhiZjgxYzk5NTc0YTZmY2YyNWQ0ZjQ2MjI1NzAzYzVlYzA0N2RmNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNDYr3J7KUMjof6QnYRPh+gQ30nz ZDFhT1imkCLV/JVsChpircZzaIZtb9GYxrznlybLF3CP/xreLeHH6JPm9JCvfHNu sYz4PEx528aRBretx1rXzdVrcPsalmuopFxabccVm5gvixEGjvB2PP5NsA8Q2wC4 l62TJchalx9r2ia5zoWJAbBUTTxpSWNwZkb3UwS6v5GrzG/67/UxUF5twchn1e3P 1pyMvpS7IwxEptnV8u8TjLteTuzAWPWqF9Y9eBVdQuOfk7iEwZc/BCJcwLPM5h5s 967zKh13UNr41rQMaJvQmVsBVZWmA6M0Tbnt4KCJrevhXiU1E7VHSO2/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+ByZV0pvzyXU9GIlcDxewEffYoMB8GA1UdIwQY MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt ZGMzYjYzMmU5ZTJiLzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8OGVTS+ jBsrtgKKy7dzrMPu1wVRQ8LGpaufTRR+p+Cx4s7WIodmztyh8mM3NQGuvI4kHj1e 56Twr/ETYECt0sLUAZbuNynmLFOg72nsyVgf9cOGnHMd5pKH8/MYqAG/oKCREtAx a+mRNkdzxUvB/+GTS4ybeZUlIxxgfYO0/RB42iEVt5P00TxmQLkWeOoQBeRNmEeQ KBZ9SfWJ0ripCFk78iU93nhfxvbpIc1ya1cjVPSrlQzN3N34wPRJNvbgmlScnsOX trhjHkiuYU2MRrI38Z7SAVhEwY4uwHkFaKazCw2itYThYptawXhLOAvKPTDuUfze lSSDIKsdwO4Dew== -----END CERTIFICATE-----Generated at Fri Dec 12 03:43:12 2025 by rpki-client