This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json) Hash identifier: xfW9PcBme7M5NiO+05S6m61B8vMlQYbeFf6Xgoeu1Y0= Subject key identifier: 9C:E0:A6:48:E0:CD:BD:EF:17:C9:7A:7F:67:2E:2C:80:D7:3B:0A:9A Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Certificate serial: 019AF3C093B66DC97B16441013872AFD12E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft Manifest number: 148D Signing time: Sat 06 Dec 2025 13:01:15 +0000 Manifest this update: Sat 06 Dec 2025 13:01:15 +0000 Manifest next update: Sun 07 Dec 2025 13:01:15 +0000 Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=) 2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 8PibDcmWR/XeMRoRX5FmdDvW46ThRKAl4hsv5s+tibc=) 3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:93:b6:6d:c9:7b:16:44:10:13:87:2a:fd:12:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Validity Not Before: Dec 6 13:01:15 2025 GMT Not After : Dec 7 13:01:15 2025 GMT Subject: CN=9ce0a648e0cdbdef17c97a7f672e2c80d73b0a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:8b:7a:cd:bc:b4:a1:47:1a:9d:20:40:19: 56:20:18:e6:2d:2f:7f:49:60:65:14:8f:30:71:03: 0f:13:f2:57:42:52:7d:4b:f0:b7:30:10:03:02:49: 64:78:e7:8b:37:9c:70:05:25:b8:e8:e7:d7:c6:de: 7f:a6:b1:52:3b:49:4c:fe:4e:a6:b5:5e:ee:58:1e: 30:82:21:b8:2f:ec:2e:fe:9c:ca:c2:d0:a0:90:54: 81:6c:ed:b7:80:87:a8:a6:45:ca:49:46:60:e6:22: 08:d9:af:be:38:31:a5:08:f4:91:89:58:0a:ea:ea: 92:81:3c:58:4b:a1:82:cf:ad:f2:01:ba:27:1b:bf: 10:fa:07:40:30:58:c3:47:50:86:02:69:b9:54:5c: 17:8a:83:d4:03:c0:c6:38:8f:34:a9:1a:8c:69:13: 87:d9:57:26:45:70:5b:f1:08:c4:9e:e9:44:65:88: 8d:5c:de:5b:45:9d:8d:c3:fa:cd:8b:36:02:d7:9a: 62:3c:ab:6c:53:4d:23:09:59:8a:08:de:dc:84:b5: 7a:a2:10:d9:99:f5:1c:7e:de:bb:64:05:f9:c0:75: 63:dc:9c:da:62:c6:4e:4b:47:b7:ac:83:67:70:02: c9:44:29:41:b1:c9:19:22:0d:ee:f2:2a:d3:e8:fb: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:A6:48:E0:CD:BD:EF:17:C9:7A:7F:67:2E:2C:80:D7:3B:0A:9A X509v3 Authority Key Identifier: keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:45:f8:5d:5a:f5:64:c4:e5:77:ff:8f:a2:35:40:21:68:9e: c7:51:6f:06:5d:ab:e7:7e:a1:60:c3:4e:9d:5b:bb:aa:d8:35: a0:0c:3a:d6:14:99:61:9c:ed:e5:c3:9a:a5:14:ec:82:aa:ec: d0:bc:89:56:79:83:52:f5:2a:2e:69:5a:de:48:8a:a1:8d:8d: f2:cf:f9:fc:e5:f7:51:e1:29:96:dd:a1:13:d4:e0:7c:2e:37: bd:da:bf:56:04:29:61:2f:d3:29:42:fe:da:53:b6:be:24:0a: ad:af:70:0a:a5:2b:9e:11:48:45:d7:85:63:d2:54:17:2e:a1: 61:1e:87:f8:aa:d6:00:10:f1:fd:d9:05:ec:20:b2:ac:0b:cb: 20:8c:cd:da:b2:97:a1:79:ce:ee:af:38:e0:b0:f5:83:04:df: 57:45:62:96:ef:7f:6a:e2:80:30:33:ce:38:53:03:e9:65:71: 66:10:97:27:19:0e:ce:61:5f:3c:9e:f5:07:06:5b:e7:79:f2: 81:08:81:28:d5:3e:78:a7:8f:8b:d2:d7:aa:8c:9d:a2:31:e5: 5d:11:79:1a:23:0e:77:93:ca:b1:29:5e:2c:5f:49:fd:32:15: 8d:e7:d6:ed:b3:7b:c0:f6:85:ab:a6:42:a4:9e:62:67:09:3c: 46:ec:91:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJO2bcl7FkQQE4cq/RLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi YzJjOWMwHhcNMjUxMjA2MTMwMTE1WhcNMjUxMjA3MTMwMTE1WjAzMTEwLwYDVQQD Eyg5Y2UwYTY0OGUwY2RiZGVmMTdjOTdhN2Y2NzJlMmM4MGQ3M2IwYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5iLes28tKFHGp0gQBlWIBjmLS9/ SWBlFI8wcQMPE/JXQlJ9S/C3MBADAklkeOeLN5xwBSW46OfXxt5/prFSO0lM/k6m tV7uWB4wgiG4L+wu/pzKwtCgkFSBbO23gIeopkXKSUZg5iII2a++ODGlCPSRiVgK 6uqSgTxYS6GCz63yAbonG78Q+gdAMFjDR1CGAmm5VFwXioPUA8DGOI80qRqMaROH 2VcmRXBb8QjEnulEZYiNXN5bRZ2Nw/rNizYC15piPKtsU00jCVmKCN7chLV6ohDZ mfUcft67ZAX5wHVj3JzaYsZOS0e3rINncALJRClBsckZIg3u8irT6PvGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzgpkjgzb3vF8l6f2cuLIDXOwqaMB8GA1UdIwQY MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0X4XVr1 ZMTld/+PojVAIWiex1FvBl2r536hYMNOnVu7qtg1oAw61hSZYZzt5cOapRTsgqrs 0LyJVnmDUvUqLmla3kiKoY2N8s/5/OX3UeEplt2hE9TgfC43vdq/VgQpYS/TKUL+ 2lO2viQKra9wCqUrnhFIRdeFY9JUFy6hYR6H+KrWABDx/dkF7CCyrAvLIIzN2rKX oXnO7q844LD1gwTfV0Vilu9/auKAMDPOOFMD6WVxZhCXJxkOzmFfPJ71BwZb53ny gQiBKNU+eKePi9LXqoydojHlXRF5GiMOd5PKsSleLF9J/TIVjefW7bN7wPaFq6ZC pJ5iZwk8RuyRqw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:01 2025 by rpki-client