This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json) Hash identifier: eFbuNbBIX1kb+yiUEVRGx3AbObkgJLhm4+oC1NfmF+8= Subject key identifier: 6A:02:EE:53:00:1F:E9:2B:AB:23:12:16:C4:DD:F8:FF:07:39:69:E0 Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Certificate serial: 019B19BB97827400B4F73EB2C109FC2A8E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft Manifest number: 1296 Signing time: Sat 13 Dec 2025 22:01:22 +0000 Manifest this update: Sat 13 Dec 2025 22:01:22 +0000 Manifest next update: Sun 14 Dec 2025 22:01:22 +0000 Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: aWRBtW7rNYCi22HSyPGR29aNLB0cv2RNkTI7U+ccTTQ=) 2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:97:82:74:00:b4:f7:3e:b2:c1:09:fc:2a:8e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Validity Not Before: Dec 13 22:01:22 2025 GMT Not After : Dec 14 22:01:22 2025 GMT Subject: CN=6a02ee53001fe92bab231216c4ddf8ff073969e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:7e:a3:33:f9:8c:b1:60:5b:d1:ba:d8:78: b1:6c:16:b7:1e:70:5d:3a:54:4d:7d:41:6b:da:a9: 83:b5:c4:86:e6:0c:f5:5e:fb:30:70:c7:5f:08:bb: 2c:52:8a:f7:3b:3e:6d:82:fe:af:60:27:cf:1a:ce: da:a9:de:79:9c:06:e0:64:80:1c:ce:00:13:2c:b1: 4d:8f:90:59:7f:67:19:7c:17:3e:39:0b:07:69:c3: fa:3d:ac:54:23:1b:c7:72:f0:88:10:ae:42:b4:d2: 6a:e0:78:51:19:4f:b2:3e:1c:9b:64:f2:3b:43:c1: dc:65:fe:74:0b:db:17:43:23:e9:43:35:03:3f:a6: 46:91:94:f7:9a:c0:63:d2:0c:84:35:99:a2:26:d7: 98:27:63:84:40:67:b6:47:aa:94:a1:42:8c:b5:a0: 40:b5:e3:f0:4d:b4:8c:18:f8:b2:b9:22:d7:3d:6b: 5e:7f:7b:16:10:84:d8:38:aa:5f:62:7d:a0:6e:8f: d7:47:84:44:39:f7:ab:94:d7:cd:bd:56:d9:c4:e5: d8:8b:b3:ac:b6:7b:b4:03:26:51:a6:66:55:be:75: 79:82:56:c4:0e:20:ed:04:fd:9c:2e:16:73:10:d2: 4e:7d:a4:87:7b:9b:5e:12:74:0a:aa:49:1f:33:09: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:EE:53:00:1F:E9:2B:AB:23:12:16:C4:DD:F8:FF:07:39:69:E0 X509v3 Authority Key Identifier: keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:83:5d:40:8b:50:8f:26:59:13:76:65:28:89:11:5b:2c:06: 16:42:7d:7f:40:85:38:fa:e2:0c:bf:dc:9a:c3:79:c1:ff:02: 6c:ba:65:da:ec:c9:2f:4d:1e:ae:8d:ea:88:05:34:2f:58:b2: 18:2f:a5:5e:63:f3:4a:74:df:94:38:c6:8e:c0:0a:37:29:2d: 75:e5:ce:f1:de:03:69:0b:53:35:17:b2:41:87:5d:fc:d4:b0: 15:df:6c:ea:45:3b:11:c7:8e:47:51:c0:5e:e8:95:9f:ac:32: 84:79:98:1e:44:e4:03:49:61:ee:ce:7d:f1:39:b9:5f:be:6c: a0:c3:f5:f0:cd:af:c4:ff:d8:a6:c4:a9:02:d8:01:96:fd:49: 0f:29:ab:d7:af:da:30:fb:2a:46:aa:42:21:53:22:da:a0:65: 76:58:f9:0a:c0:e3:41:45:ca:56:83:da:0e:c3:9e:ac:bb:09: ad:11:d1:c1:8f:9c:60:7b:41:c9:0b:05:26:8e:69:24:ac:73: c9:c8:01:2e:42:4a:25:a9:9a:62:be:30:5c:90:56:62:b3:34: df:e8:fc:1c:d6:69:ea:b7:d1:b4:48:c1:54:35:13:28:8c:27: e1:76:e3:79:28:a4:d6:a0:0e:65:64:ff:52:25:61:5c:46:cf: d1:80:a9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu5eCdAC09z6ywQn8Ko6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz NzNmMjcwHhcNMjUxMjEzMjIwMTIyWhcNMjUxMjE0MjIwMTIyWjAzMTEwLwYDVQQD Eyg2YTAyZWU1MzAwMWZlOTJiYWIyMzEyMTZjNGRkZjhmZjA3Mzk2OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb5+ozP5jLFgW9G62HixbBa3HnBd OlRNfUFr2qmDtcSG5gz1XvswcMdfCLssUor3Oz5tgv6vYCfPGs7aqd55nAbgZIAc zgATLLFNj5BZf2cZfBc+OQsHacP6PaxUIxvHcvCIEK5CtNJq4HhRGU+yPhybZPI7 Q8HcZf50C9sXQyPpQzUDP6ZGkZT3msBj0gyENZmiJteYJ2OEQGe2R6qUoUKMtaBA tePwTbSMGPiyuSLXPWtef3sWEITYOKpfYn2gbo/XR4REOferlNfNvVbZxOXYi7Os tnu0AyZRpmZVvnV5glbEDiDtBP2cLhZzENJOfaSHe5teEnQKqkkfMwnlsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoC7lMAH+krqyMSFsTd+P8HOWngMB8GA1UdIwQY MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYNdQItQ jyZZE3ZlKIkRWywGFkJ9f0CFOPriDL/cmsN5wf8CbLpl2uzJL00ero3qiAU0L1iy GC+lXmPzSnTflDjGjsAKNyktdeXO8d4DaQtTNReyQYdd/NSwFd9s6kU7EceOR1HA XuiVn6wyhHmYHkTkA0lh7s598Tm5X75soMP18M2vxP/YpsSpAtgBlv1JDymr16/a MPsqRqpCIVMi2qBldlj5CsDjQUXKVoPaDsOerLsJrRHRwY+cYHtByQsFJo5pJKxz ycgBLkJKJamaYr4wXJBWYrM03+j8HNZp6rfRtEjBVDUTKIwn4XbjeSik1qAOZWT/ UiVhXEbP0YCppQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:31 2025 by rpki-client