This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json) Hash identifier: Awj19n4yxNFv8hH6K7llySeFLCglNpzKkLRLlLZbrDw= Subject key identifier: 9A:87:BE:DB:22:F2:B6:02:D9:26:50:58:93:23:95:DA:8D:80:97:28 Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Certificate serial: 019B31C38E63A4BB67404C3C30B107F60BFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft Manifest number: 05BB Signing time: Thu 18 Dec 2025 14:00:58 +0000 Manifest this update: Thu 18 Dec 2025 14:00:58 +0000 Manifest next update: Fri 19 Dec 2025 14:00:58 +0000 Files and hashes: 1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=) 2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: vpaDnxu4pnlC5Iqo0i6TbaJLWdNxSaL0uAZVmcF7r+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:8e:63:a4:bb:67:40:4c:3c:30:b1:07:f6:0b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Validity Not Before: Dec 18 14:00:58 2025 GMT Not After : Dec 19 14:00:58 2025 GMT Subject: CN=9a87bedb22f2b602d9265058932395da8d809728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:99:fc:48:c6:16:67:23:b2:36:43:86:b4: 2c:63:96:8b:51:fe:b3:64:8d:ed:7d:ef:e0:2c:b5: 02:14:69:20:2e:cd:a7:34:b9:8f:d1:76:03:00:b7: db:53:db:bd:c2:88:eb:b9:87:26:01:2b:c5:9c:47: 7a:57:d9:27:18:e0:f2:1c:1a:26:92:f8:44:52:7b: 38:0d:47:b5:27:fd:22:15:ec:a8:b0:c4:7d:64:53: 06:35:3d:ef:5b:58:ea:c1:08:fa:d0:43:e4:6d:5d: 8e:17:37:89:d4:f1:54:20:9c:70:f4:b5:c0:ba:50: dc:7b:bd:48:ea:b5:d9:02:aa:fa:6c:ab:72:68:cc: 7a:37:e2:df:a3:45:3c:58:e6:f1:74:c5:14:6a:ca: fb:65:5f:cc:a6:e1:97:e8:ed:19:13:96:49:0e:40: c9:7d:3c:da:90:a4:38:6a:4d:f6:ae:b4:08:ae:96: 61:e1:35:a3:d4:08:5b:d8:5e:14:1e:1f:03:9a:6c: 8f:6f:3e:99:d0:aa:94:8e:99:de:9e:eb:c8:eb:1e: 9d:67:20:41:99:0f:e4:42:46:78:67:30:89:f2:ba: ce:96:ff:a2:8e:f4:82:30:52:cc:c3:6d:27:f4:2d: dc:cd:b8:86:52:38:67:90:9d:33:a3:29:46:b7:ad: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:87:BE:DB:22:F2:B6:02:D9:26:50:58:93:23:95:DA:8D:80:97:28 X509v3 Authority Key Identifier: keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:18:17:49:ec:e3:bb:45:b5:28:3c:df:f9:9b:89:e9:7f:31: 5e:74:10:12:25:53:85:57:6d:a0:87:d5:b9:d4:b4:f9:e0:6d: 53:1d:b0:5d:9f:cd:db:2f:d6:8c:c3:70:a5:05:6f:22:3a:3c: 2b:cb:71:a5:0f:ce:95:14:52:5c:9a:5c:2f:3a:d9:f1:98:57: d8:fa:94:f6:d0:69:72:d6:86:aa:dc:a0:00:4b:73:76:06:d1: 1c:dc:6b:04:e4:f8:f3:6c:7f:f0:fb:07:a8:80:56:86:66:c5: 6a:fa:53:44:c5:c1:15:c6:2a:1a:eb:95:5d:c8:6c:df:e4:2a: 37:34:4a:51:89:44:fd:09:3b:e4:6a:40:53:98:01:af:c0:dd: 3c:fb:9c:3b:bc:5b:d7:0c:40:61:1e:f7:98:2c:c5:da:70:89: 26:87:72:1e:67:be:dd:eb:ae:52:9c:d6:ea:60:68:0d:f5:a7: 9f:e5:2e:50:15:a4:24:75:cc:56:a6:20:f4:b2:77:98:3a:ab: f3:30:9e:b8:96:53:49:01:65:f2:3d:83:92:ac:a5:94:f9:0e: 8f:2d:7a:a8:70:7e:52:9c:b4:8b:b4:b2:b1:4b:88:f4:20:68: ef:d9:fa:f2:e9:96:cc:b9:5c:fb:37:56:6f:b8:d1:fd:7e:ff: ab:51:0c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw45jpLtnQEw8MLEH9gv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5 NjlmYjkwHhcNMjUxMjE4MTQwMDU4WhcNMjUxMjE5MTQwMDU4WjAzMTEwLwYDVQQD Eyg5YTg3YmVkYjIyZjJiNjAyZDkyNjUwNTg5MzIzOTVkYThkODA5NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7SZ/EjGFmcjsjZDhrQsY5aLUf6z ZI3tfe/gLLUCFGkgLs2nNLmP0XYDALfbU9u9wojruYcmASvFnEd6V9knGODyHBom kvhEUns4DUe1J/0iFeyosMR9ZFMGNT3vW1jqwQj60EPkbV2OFzeJ1PFUIJxw9LXA ulDce71I6rXZAqr6bKtyaMx6N+Lfo0U8WObxdMUUasr7ZV/MpuGX6O0ZE5ZJDkDJ fTzakKQ4ak32rrQIrpZh4TWj1Ahb2F4UHh8DmmyPbz6Z0KqUjpnenuvI6x6dZyBB mQ/kQkZ4ZzCJ8rrOlv+ijvSCMFLMw20n9C3czbiGUjhnkJ0zoylGt62KzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqHvtsi8rYC2SZQWJMjldqNgJcoMB8GA1UdIwQY MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt YThhOTExYTNlMmUwLzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxgXSezj u0W1KDzf+ZuJ6X8xXnQQEiVThVdtoIfVudS0+eBtUx2wXZ/N2y/WjMNwpQVvIjo8 K8txpQ/OlRRSXJpcLzrZ8ZhX2PqU9tBpctaGqtygAEtzdgbRHNxrBOT482x/8PsH qIBWhmbFavpTRMXBFcYqGuuVXchs3+QqNzRKUYlE/Qk75GpAU5gBr8DdPPucO7xb 1wxAYR73mCzF2nCJJodyHme+3euuUpzW6mBoDfWnn+UuUBWkJHXMVqYg9LJ3mDqr 8zCeuJZTSQFl8j2DkqyllPkOjy16qHB+Upy0i7SysUuI9CBo79n68umWzLlc+zdW b7jR/X7/q1EMOg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:41 2025 by rpki-client