This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json) Hash identifier: jOYkBkDVc7vlyHPplM3k5kT30y3ZdZ42jTeQLLz+qJ4= Subject key identifier: 22:D4:04:21:5B:71:01:37:12:54:31:44:A9:98:D7:93:DC:0D:E6:DE Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Certificate serial: 019B3268D9B153DB0FC6CF254E96D2F29134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft Manifest number: 0302 Signing time: Thu 18 Dec 2025 17:01:30 +0000 Manifest this update: Thu 18 Dec 2025 17:01:30 +0000 Manifest next update: Fri 19 Dec 2025 17:01:30 +0000 Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: WazTSThGRKoOXBbqLLjbxDmueGve7UTZHbmvQRdlc0Q=) 2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:d9:b1:53:db:0f:c6:cf:25:4e:96:d2:f2:91:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Validity Not Before: Dec 18 17:01:30 2025 GMT Not After : Dec 19 17:01:30 2025 GMT Subject: CN=22d404215b71013712543144a998d793dc0de6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:ad:fd:d8:5b:f3:b4:75:86:77:a5:60:82: 65:17:28:27:7f:d3:27:b0:da:73:b8:04:73:d3:7e: 44:b5:2a:97:f1:c3:10:5e:9b:00:8a:55:84:14:ec: 8c:3f:92:39:a5:59:34:51:b6:bf:43:51:bb:a8:83: ae:ad:46:9a:61:e2:40:cb:b2:65:4c:39:26:68:2d: cc:5f:65:73:ce:17:2f:4b:aa:43:cf:4b:27:25:e0: 6a:9f:7f:64:a8:04:e0:46:f9:9a:9e:d7:b9:1c:c6: d2:4e:35:03:8d:73:ed:60:a5:96:4f:4e:c2:83:bb: a5:c7:a3:04:35:92:6b:68:94:2a:de:ab:48:f5:1f: ea:9f:c3:c3:b0:06:b8:8d:9e:bb:50:a0:1d:b0:e8: d2:4f:59:4e:e2:1d:f0:c2:bb:fe:cd:59:2e:23:c6: f6:9d:b8:cc:3b:43:f3:8c:d1:14:25:34:c3:8e:40: 6c:90:6f:86:d8:90:9f:18:81:f2:07:f0:1a:cb:b8: 28:6f:60:f4:95:e1:69:b7:05:3c:bb:13:ab:e4:57: f9:5b:f5:0c:27:47:27:20:ae:0d:e1:58:4c:a1:00: 96:a1:9a:02:d9:66:a8:10:cc:e8:6a:d8:db:b2:29: b0:2c:89:17:15:d4:95:0b:9f:e7:47:df:8d:4e:3e: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:04:21:5B:71:01:37:12:54:31:44:A9:98:D7:93:DC:0D:E6:DE X509v3 Authority Key Identifier: keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d0:89:8e:eb:cd:ef:12:aa:0d:f4:1c:6a:a2:cf:cb:6f:57: 24:80:3a:cb:f9:b5:87:12:ca:9b:ee:4d:ff:6b:a1:78:e6:27: 7b:a9:77:a5:e2:a4:2a:64:00:af:ec:6b:24:7e:ee:9a:4e:03: 0b:a8:b5:0d:54:8b:83:60:29:42:e7:ee:96:26:27:fc:f0:da: e2:10:cb:57:28:e3:58:64:9d:dc:db:8b:2c:b5:c6:c0:17:48: 7a:4c:9a:96:68:35:d6:d0:81:62:e3:c3:78:82:4d:26:4f:c6: f5:7d:f7:2c:32:13:25:5e:0f:0d:5f:18:82:06:5a:4d:11:89: 7b:07:c2:5e:62:96:a1:c8:b9:8a:e0:b5:0f:35:05:b9:f7:31: 13:67:5c:d8:32:de:33:3b:1a:f6:25:b5:83:e5:57:a3:1d:45: b3:7e:3d:ed:04:88:a7:e1:61:1c:22:d2:88:f3:17:c9:a8:9d: e4:d7:f7:29:04:ba:56:36:a4:53:60:eb:a2:e8:e4:ca:ae:ba: 44:81:fa:f1:33:39:dd:3b:d8:cc:2d:7a:a9:10:43:2e:6f:81: 51:84:e1:f2:40:9d:b4:22:11:5a:b3:cf:6b:76:6a:67:03:9e: ea:83:41:3c:1d:00:cf:fc:37:d9:be:7a:51:17:da:e9:64:31: 3e:e1:2f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaNmxU9sPxs8lTpbS8pE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZWQxYTU2ODZiYTY4Mjg5YzZjZmU0YzdjMzZlMDM3YWRl MTFlY2EwHhcNMjUxMjE4MTcwMTMwWhcNMjUxMjE5MTcwMTMwWjAzMTEwLwYDVQQD EygyMmQ0MDQyMTViNzEwMTM3MTI1NDMxNDRhOTk4ZDc5M2RjMGRlNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYWt/dhb87R1hnelYIJlFygnf9Mn sNpzuARz035EtSqX8cMQXpsAilWEFOyMP5I5pVk0Uba/Q1G7qIOurUaaYeJAy7Jl TDkmaC3MX2VzzhcvS6pDz0snJeBqn39kqATgRvmante5HMbSTjUDjXPtYKWWT07C g7ulx6MENZJraJQq3qtI9R/qn8PDsAa4jZ67UKAdsOjST1lO4h3wwrv+zVkuI8b2 nbjMO0PzjNEUJTTDjkBskG+G2JCfGIHyB/Aay7gob2D0leFptwU8uxOr5Ff5W/UM J0cnIK4N4VhMoQCWoZoC2WaoEMzoatjbsimwLIkXFdSVC5/nR9+NTj72xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLUBCFbcQE3ElQxRKmY15PcDebeMB8GA1UdIwQY MBaAFAjtGlaGumgonGz+THw24Det4R7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQt OTBhYjc5ZTdlZTIzLzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQtOTBhYjc5ZTdlZTIz LzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONCJjuvN 7xKqDfQcaqLPy29XJIA6y/m1hxLKm+5N/2uheOYne6l3peKkKmQAr+xrJH7umk4D C6i1DVSLg2ApQufuliYn/PDa4hDLVyjjWGSd3NuLLLXGwBdIekyalmg11tCBYuPD eIJNJk/G9X33LDITJV4PDV8YggZaTRGJewfCXmKWoci5iuC1DzUFufcxE2dc2DLe Mzsa9iW1g+VXox1Fs3497QSIp+FhHCLSiPMXyaid5Nf3KQS6VjakU2Droujkyq66 RIH68TM53TvYzC16qRBDLm+BUYTh8kCdtCIRWrPPa3ZqZwOe6oNBPB0Az/w32b56 URfa6WQxPuEvRA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:30:54 2025 by rpki-client