This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json) Hash identifier: ZnNmV7aMuUXHbsG3PjKGvnIxr1YhzamJ/bq4BOIyPPg= Subject key identifier: B5:B1:83:2B:46:7A:50:60:29:9F:6B:23:0C:41:60:4A:CA:5D:A0:B3 Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2 Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2 Certificate serial: 019AF2093C90081021379BC0ECD092BA07FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft Manifest number: 161B Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: +MNxrTrpgdTaQn9LUEKGjYASGEhFMAzvi5BDyBSlZ3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3c:90:08:10:21:37:9b:c0:ec:d0:92:ba:07:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=b5b1832b467a5060299f6b230c41604aca5da0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:cb:36:67:4e:8c:ca:a8:9c:cd:69:7e:cb: 81:a3:e7:05:3e:fd:c3:7a:cc:0d:11:ee:ff:75:e8: 7a:96:c7:b8:9a:14:e3:dc:e3:d9:5e:dc:99:d9:f5: 6f:fd:c6:91:c9:c5:34:26:5a:f0:ae:4a:71:13:7c: e7:73:96:9f:99:04:90:7b:1b:10:4a:33:a3:e3:74: 94:ea:88:c0:a7:c3:b8:28:01:12:c9:5c:4f:cc:ba: 30:8a:6e:26:57:61:b0:41:83:8e:a0:26:c5:85:67: be:82:48:36:24:33:16:08:5c:e0:b5:d3:85:05:b3: e5:58:20:eb:61:dc:7f:d8:a6:bf:db:f6:01:16:2c: ca:10:2f:5b:3f:f2:ff:c3:d7:fc:b2:0e:4b:38:28: dc:d9:8b:cc:f5:65:e8:ac:31:34:7e:2d:4b:6d:37: d1:d0:32:84:42:5a:d2:7b:76:b7:6b:7a:11:a4:13: d8:88:eb:bd:53:28:8a:12:71:c2:9f:39:d8:e0:aa: c7:91:fa:f6:2a:bf:65:21:21:f7:96:84:84:67:71: 42:3c:92:6d:b4:1b:bb:47:5c:1b:8e:63:e7:fd:86: 4f:dc:60:44:35:29:06:13:86:88:6c:db:fc:dc:94: 1f:e4:3b:95:a2:3a:b1:38:f5:ef:36:c6:f6:96:75: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:83:2B:46:7A:50:60:29:9F:6B:23:0C:41:60:4A:CA:5D:A0:B3 X509v3 Authority Key Identifier: keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d5:42:07:ef:14:28:db:ed:5f:86:77:d7:15:cd:c4:36:7b: 16:cf:96:29:d5:11:30:ac:bb:66:1b:f6:df:c1:5c:1d:98:b8: a0:89:a8:69:4c:3d:e2:86:bd:f8:b9:7a:41:4f:92:a9:f1:4b: 75:d5:26:d9:0c:a0:ad:38:2f:38:fe:25:43:33:18:66:55:4d: b5:07:9c:75:7e:27:14:d0:88:36:0e:8d:50:da:9b:29:60:45: 9c:71:a0:ce:64:c3:14:96:1a:3f:71:2a:25:23:ef:ff:10:5d: 26:ab:4a:ea:6a:69:1a:82:d3:43:8d:8a:42:90:db:0f:88:fb: 88:0b:a5:58:e5:01:ba:6a:11:50:8a:e3:67:15:b3:f5:29:ce: a5:8d:93:fd:8c:5b:16:49:70:b0:85:ad:38:04:f1:fc:b5:b2: c5:34:72:c0:ef:03:50:84:7f:6b:64:95:bd:c5:eb:50:d6:23: 3d:0e:7a:05:f2:72:71:d8:49:5b:c3:fd:70:0a:77:71:62:d3: a9:f1:4f:63:7d:80:fc:66:6d:d8:5a:6b:9a:ab:bd:03:21:06: fd:ae:49:f7:55:8f:d6:dd:7f:d8:f4:22:93:62:f1:8d:03:4c: f0:af:2b:06:d9:70:14:68:09:b9:14:5f:64:7b:6f:a5:bb:3e: 12:04:ba:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTyQCBAhN5vA7NCSugf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyODA5NmU4YWNkNzZlOWFhMTdmM2ViNjc4MDQwNmUzZGE1 NjNlZDIwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhiNWIxODMyYjQ2N2E1MDYwMjk5ZjZiMjMwYzQxNjA0YWNhNWRhMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFbLNmdOjMqonM1pfsuBo+cFPv3D eswNEe7/deh6lse4mhTj3OPZXtyZ2fVv/caRycU0JlrwrkpxE3znc5afmQSQexsQ SjOj43SU6ojAp8O4KAESyVxPzLowim4mV2GwQYOOoCbFhWe+gkg2JDMWCFzgtdOF BbPlWCDrYdx/2Ka/2/YBFizKEC9bP/L/w9f8sg5LOCjc2YvM9WXorDE0fi1LbTfR 0DKEQlrSe3a3a3oRpBPYiOu9UyiKEnHCnznY4KrHkfr2Kr9lISH3loSEZ3FCPJJt tBu7R1wbjmPn/YZP3GBENSkGE4aIbNv83JQf5DuVojqxOPXvNsb2lnXqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWxgytGelBgKZ9rIwxBYErKXaCzMB8GA1UdIwQY MBaAFHKAluis126aoX8+tngEBuPaVj7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iZjE0NGItYWFiNS00MDdlLTkwNGYt YzE3MzRkNTBjYjNiLzEvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iZjE0NGItYWFiNS00MDdlLTkwNGYtYzE3MzRkNTBjYjNi LzEvY29DVzZLelhicHFoZno2MmVBUUc0OXBXUHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNVCB+8U KNvtX4Z31xXNxDZ7Fs+WKdURMKy7Zhv238FcHZi4oImoaUw94oa9+Ll6QU+SqfFL ddUm2QygrTgvOP4lQzMYZlVNtQecdX4nFNCINg6NUNqbKWBFnHGgzmTDFJYaP3Eq JSPv/xBdJqtK6mppGoLTQ42KQpDbD4j7iAulWOUBumoRUIrjZxWz9SnOpY2T/Yxb FklwsIWtOATx/LWyxTRywO8DUIR/a2SVvcXrUNYjPQ56BfJycdhJW8P9cAp3cWLT qfFPY32A/GZt2Fprmqu9AyEG/a5J91WP1t1/2PQik2LxjQNM8K8rBtlwFGgJuRRf ZHtvpbs+EgS6ug== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:12 2025 by rpki-client