This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json) Hash identifier: 3Y6BUetacXn58d1INA6t4mbNgf8et2HKFONOHgiKtwU= Subject key identifier: B9:48:90:BC:B8:0D:3E:0B:B4:46:0E:12:F5:DD:2E:3B:6C:7A:A8:53 Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Certificate serial: 019B1013E23AB7544BBD8B8E78D22BCC6395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft Manifest number: 1291 Signing time: Fri 12 Dec 2025 01:01:37 +0000 Manifest this update: Fri 12 Dec 2025 01:01:37 +0000 Manifest next update: Sat 13 Dec 2025 01:01:37 +0000 Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: 3me7ra9fWY0FslqfxR9Q8MBFvXryA/7gq10DviAYmFM=) 2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:e2:3a:b7:54:4b:bd:8b:8e:78:d2:2b:cc:63:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Validity Not Before: Dec 12 01:01:37 2025 GMT Not After : Dec 13 01:01:37 2025 GMT Subject: CN=b94890bcb80d3e0bb4460e12f5dd2e3b6c7aa853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:4a:54:d7:68:84:f9:3b:1e:c5:eb:8a:a4: 56:e3:d0:15:cc:68:c7:e6:2e:fb:9f:81:d4:8d:59: 2a:67:a5:7b:13:e1:12:0b:8f:d1:4a:55:2c:7a:1a: 6a:e6:bf:3e:f5:dc:b7:c4:f6:51:c4:5e:79:4c:eb: 1b:e2:37:c8:f8:f7:3b:65:12:8f:67:fa:c1:cc:8f: c4:18:0d:47:da:2f:56:18:27:47:c9:1e:3b:79:2e: 6a:28:ba:d3:64:d9:db:80:aa:98:f1:04:ee:6d:33: ef:fd:c7:5b:19:38:18:fc:c7:12:45:db:c7:e6:b6: 82:64:c4:86:f7:e6:8d:2b:59:05:9a:bf:49:49:f4: 6d:a8:f3:6c:92:d5:4a:ce:21:6b:e0:79:ee:08:e3: 5c:e8:5f:e3:5d:0b:91:59:d6:e9:86:77:72:97:eb: 12:4d:be:3f:35:8a:f2:e7:6d:b2:39:ed:5b:a1:b9: 73:f4:83:74:71:b8:2c:da:3c:47:02:3d:50:85:7f: d2:03:af:db:85:c4:fc:4e:cf:9b:bb:b2:27:e7:a2: cb:7a:ec:63:7e:da:20:29:d6:57:06:3a:da:4b:77: 3e:18:6c:ed:1e:fa:c4:4c:a3:90:85:3c:49:b8:20: 07:12:4e:75:5f:b0:86:c9:c3:bd:5e:7e:96:6e:25: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:90:BC:B8:0D:3E:0B:B4:46:0E:12:F5:DD:2E:3B:6C:7A:A8:53 X509v3 Authority Key Identifier: keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:78:5a:4b:53:be:3b:46:43:1f:67:bb:26:b4:9d:e6:4c: 9f:fc:85:95:2f:d4:f0:87:4b:57:f9:c3:da:89:b0:f1:40:54: 48:90:65:69:85:93:28:a3:c0:ac:a2:b7:b0:53:86:70:26:b5: 0f:58:fe:9f:27:93:a6:50:0b:36:3a:c9:c9:a1:00:af:e7:e4: da:9a:8a:99:5e:41:7d:47:86:1b:df:34:93:f0:87:78:82:f4: e5:ff:a6:6c:6f:d7:06:c8:47:34:73:ca:67:c2:d3:d1:3c:3e: 03:71:52:9c:29:b9:bc:14:a0:9f:74:ad:31:fd:ad:6e:de:65: e7:75:33:2f:aa:e8:ac:c3:e9:8f:54:c8:72:7e:54:38:93:ed: ee:2f:63:14:ac:a5:45:07:8f:71:7d:a5:6f:8f:4f:87:e3:52: ec:9a:4e:de:16:9b:ff:6e:24:f3:f7:0b:64:7d:84:be:0b:da: 02:3f:0e:2a:54:0c:a1:16:e2:5d:0a:ba:67:df:3f:ae:90:dc: 2f:da:47:c2:bf:b3:60:19:72:1c:54:35:34:0e:b3:59:b9:ea: dd:87:20:38:88:dd:78:3a:b0:4f:8b:99:a8:66:b5:89:f2:79: 4f:eb:0c:f3:06:8f:cc:44:f0:99:24:46:8d:92:f1:0d:40:d7: 36:87:9f:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE+I6t1RLvYuOeNIrzGOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz NzNmMjcwHhcNMjUxMjEyMDEwMTM3WhcNMjUxMjEzMDEwMTM3WjAzMTEwLwYDVQQD EyhiOTQ4OTBiY2I4MGQzZTBiYjQ0NjBlMTJmNWRkMmUzYjZjN2FhODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OdKVNdohPk7HsXriqRW49AVzGjH 5i77n4HUjVkqZ6V7E+ESC4/RSlUsehpq5r8+9dy3xPZRxF55TOsb4jfI+Pc7ZRKP Z/rBzI/EGA1H2i9WGCdHyR47eS5qKLrTZNnbgKqY8QTubTPv/cdbGTgY/McSRdvH 5raCZMSG9+aNK1kFmr9JSfRtqPNsktVKziFr4HnuCONc6F/jXQuRWdbphndyl+sS Tb4/NYry522yOe1boblz9IN0cbgs2jxHAj1QhX/SA6/bhcT8Ts+bu7In56LLeuxj ftogKdZXBjraS3c+GGztHvrETKOQhTxJuCAHEk51X7CGycO9Xn6WbiUo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlIkLy4DT4LtEYOEvXdLjtseqhTMB8GA1UdIwQY MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilt4WktT vjtGQx9nuya0neZMn/yFlS/U8IdLV/nD2omw8UBUSJBlaYWTKKPArKK3sFOGcCa1 D1j+nyeTplALNjrJyaEAr+fk2pqKmV5BfUeGG980k/CHeIL05f+mbG/XBshHNHPK Z8LT0Tw+A3FSnCm5vBSgn3StMf2tbt5l53UzL6rorMPpj1TIcn5UOJPt7i9jFKyl RQePcX2lb49Ph+NS7JpO3hab/24k8/cLZH2EvgvaAj8OKlQMoRbiXQq6Z98/rpDc L9pHwr+zYBlyHFQ1NA6zWbnq3YcgOIjdeDqwT4uZqGa1ifJ5T+sM8waPzETwmSRG jZLxDUDXNoefoA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:12:49 2025 by rpki-client