This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft File: COfXs7xMB5HAz_4_FVWrdz4-0W4.mft (raw, json) Hash identifier: GmXMLkOLNCJIWvEjU3a8GYPX8Ei6LUfMZCBWFnJx2sw= Subject key identifier: 3D:29:92:C7:4C:E3:6C:BF:D2:6D:5D:C8:C0:56:33:4D:1B:DC:24:C1 Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e Certificate serial: 019AF0F5E6A7CE2B14AD27DFC11448EBC813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft Manifest number: 098F Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: 3a2aA3phNWUF0g57WpzFbueiUww.roa (hash: yZ0tZQ4HobZpCClXrhnqNAtC3/BMDlKJP+hoj005BvE=) 2: COfXs7xMB5HAz_4_FVWrdz4-0W4.crl (hash: 4iXagwmDgWYnfENo0SzqCruq9SV6qStdfkCbIea00Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e6:a7:ce:2b:14:ad:27:df:c1:14:48:eb:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=3d2992c74ce36cbfd26d5dc8c056334d1bdc24c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:2f:79:7e:32:61:11:ca:d6:9a:b5:9d:cd: 87:24:4a:86:36:15:cd:21:3b:82:a0:c2:c9:ce:0a: 7c:cb:1b:1f:23:cd:e9:d2:a1:11:3e:4b:bd:9c:79: b2:15:48:7d:93:68:d6:a4:68:db:7b:32:77:64:18: 11:ce:0b:35:6e:ba:0f:bc:88:4f:37:e7:56:cb:c4: 94:db:06:53:21:45:a1:f8:e5:bf:ba:92:98:2c:49: a5:ef:7c:a5:97:73:69:64:ac:62:7f:2b:81:49:ae: 0a:76:48:3d:e7:b9:d3:92:1e:22:02:cb:ec:cf:18: 2f:6f:cd:9b:1e:97:79:94:39:94:a9:bf:0c:7b:85: 6f:5b:09:5f:a2:3d:b9:a3:3b:76:56:6c:09:49:50: d0:91:a1:1c:19:eb:51:2a:df:4a:2d:d7:83:7d:65: db:76:3c:2a:1b:74:07:e7:9b:7f:ce:f3:7c:2e:9e: 7f:e2:e9:c3:84:39:da:86:b8:d7:68:3d:05:70:d5: 9b:de:2c:2b:9e:e9:07:fc:3a:9f:79:8f:7d:86:f3: ae:b7:f1:10:84:b9:00:9e:a6:ee:1f:8d:f9:e8:e5: 2c:5c:11:75:6c:e0:9a:b7:ef:70:33:7b:a4:03:07: ce:d7:b8:37:a8:9b:d3:52:10:ab:ad:27:8b:74:ec: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:29:92:C7:4C:E3:6C:BF:D2:6D:5D:C8:C0:56:33:4D:1B:DC:24:C1 X509v3 Authority Key Identifier: keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b7:db:35:80:da:75:2c:13:0a:fe:39:3a:b0:a9:56:19:41: 21:bc:22:18:7b:30:f0:54:53:c5:d0:86:12:31:9c:7a:88:0e: 00:31:33:e0:11:1d:1e:79:00:5a:ac:6c:69:47:6f:4c:bf:be: ca:bd:6c:55:01:53:04:07:af:a3:72:06:b2:93:6b:79:c4:cd: 0a:e6:34:cc:10:98:cb:1a:84:db:e3:91:c1:25:df:e6:99:9c: 69:49:7b:6b:41:58:d8:9d:34:61:23:1a:2d:45:58:d5:a2:88: 9c:1e:ec:f3:56:6a:37:ac:1b:73:97:86:1e:a9:d4:cf:91:d2: 08:3c:43:71:ce:f1:92:84:d9:3f:e5:a6:65:54:c9:df:9d:8b: ce:07:16:13:38:99:7e:4e:0a:f4:96:dc:4a:55:d5:61:db:ac: 24:70:76:3d:14:71:a3:00:ea:f9:ad:ae:f7:22:21:08:5f:76: e4:a6:94:aa:23:07:dc:a9:b7:f4:47:5d:bb:ce:9b:3a:e4:2b: a8:8a:3d:dd:5c:fa:84:d8:76:89:c9:73:ec:7b:9f:f4:68:7e: 98:fa:32:23:54:78:03:7f:b1:5b:37:67:98:d7:a6:f8:23:16: 21:49:38:fa:9a:c6:6b:1b:09:42:bd:e4:02:64:6d:27:b1:d7: b9:fc:e2:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eanzisUrSffwRRI68gTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZTdkN2IzYmM0YzA3OTFjMGNmZmUzZjE1NTVhYjc3M2Uz ZWQxNmUwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD EygzZDI5OTJjNzRjZTM2Y2JmZDI2ZDVkYzhjMDU2MzM0ZDFiZGMyNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EEveX4yYRHK1pq1nc2HJEqGNhXN ITuCoMLJzgp8yxsfI83p0qERPku9nHmyFUh9k2jWpGjbezJ3ZBgRzgs1broPvIhP N+dWy8SU2wZTIUWh+OW/upKYLEml73yll3NpZKxifyuBSa4Kdkg957nTkh4iAsvs zxgvb82bHpd5lDmUqb8Me4VvWwlfoj25ozt2VmwJSVDQkaEcGetRKt9KLdeDfWXb djwqG3QH55t/zvN8Lp5/4unDhDnahrjXaD0FcNWb3iwrnukH/DqfeY99hvOut/EQ hLkAnqbuH4356OUsXBF1bOCat+9wM3ukAwfO17g3qJvTUhCrrSeLdOwE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0pksdM42y/0m1dyMBWM00b3CTBMB8GA1UdIwQY MBaAFAjn17O8TAeRwM/+PxVVq3c+PtFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMt MmZjMzVjZDFhYzJhLzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMtMmZjMzVjZDFhYzJh LzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbfbNYDa dSwTCv45OrCpVhlBIbwiGHsw8FRTxdCGEjGceogOADEz4BEdHnkAWqxsaUdvTL++ yr1sVQFTBAevo3IGspNrecTNCuY0zBCYyxqE2+ORwSXf5pmcaUl7a0FY2J00YSMa LUVY1aKInB7s81ZqN6wbc5eGHqnUz5HSCDxDcc7xkoTZP+WmZVTJ352LzgcWEziZ fk4K9JbcSlXVYdusJHB2PRRxowDq+a2u9yIhCF925KaUqiMH3Km39Eddu86bOuQr qIo93Vz6hNh2iclz7Huf9Gh+mPoyI1R4A3+xWzdnmNem+CMWIUk4+prGaxsJQr3k AmRtJ7HXufziCw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:45 2025 by rpki-client