This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json) Hash identifier: SR9c9ABgWML4FMKcj4kontenSv6IMIwElrFI6TrnrgA= Subject key identifier: 60:FA:F7:B3:3B:35:B4:A5:82:7D:99:69:15:70:55:3A:EC:5C:B5:B3 Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62 Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962 Certificate serial: 019AF12DB29A7E1070D9E5E1059FBDDFAC4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: MtPnrks9WgDpMKGHCkWyCAxm0RA+rchf0jlL5NifZzM=) 2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b2:9a:7e:10:70:d9:e5:e1:05:9f:bd:df:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=60faf7b33b35b4a5827d99691570553aec5cb5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:88:6c:66:a0:d2:d0:58:c1:80:b8:4a:90: bf:3a:1e:c0:60:db:42:08:01:4a:6f:2e:1a:f7:f4: e6:e2:80:39:c6:b1:c0:7b:2f:21:01:59:29:8d:59: d5:eb:ee:51:a3:f5:a9:b0:88:f3:12:8e:41:d0:f3: b6:93:2d:c6:82:44:1d:c0:a8:16:33:29:75:e5:00: 34:15:27:77:3b:4c:5f:9b:1c:1a:d7:4a:c4:63:be: 11:a8:c0:9a:ed:ef:2e:3a:d4:cc:9f:57:f1:7f:e4: 3d:80:57:f5:b6:7e:40:81:9b:62:d2:c7:b7:99:68: 3c:97:77:53:5f:d7:0f:14:cf:65:f0:70:80:f4:41: 3d:8c:d5:db:23:10:56:87:4f:92:a5:7d:3a:24:f8: 03:f0:b1:fa:55:20:d0:6a:e3:c9:9f:d2:47:33:54: 77:3b:46:e6:c5:95:a6:72:d6:35:e4:a4:7c:87:6f: 32:3c:fa:88:35:af:24:e7:a3:6a:9d:81:9e:21:15: 71:7b:1e:07:75:02:d4:ea:fe:09:5f:24:f5:12:25: 55:69:55:f9:f9:97:15:1c:01:92:51:53:0c:5f:d5: 49:ce:a0:1f:6c:7d:90:70:0a:dd:d3:8f:0c:6d:dc: 47:03:24:ed:75:fc:fd:49:eb:2c:bb:f2:08:ea:52: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FA:F7:B3:3B:35:B4:A5:82:7D:99:69:15:70:55:3A:EC:5C:B5:B3 X509v3 Authority Key Identifier: keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:82:fa:c3:b1:4e:42:11:e9:04:48:e1:c2:84:49:e2:c3:52: ed:9d:8e:85:12:3e:36:4c:19:37:8a:65:42:00:cd:94:b9:2e: 65:03:26:76:e3:29:03:99:b9:97:c5:2a:ad:5f:46:f0:ab:09: d7:40:7a:6d:3c:2a:3d:ac:47:1d:f4:72:46:a7:85:d5:16:97: 2d:bf:fb:95:37:11:28:28:80:19:92:fe:4c:ad:b2:c3:f4:2a: db:e2:f8:2d:ca:dc:c4:f4:d5:f3:ce:60:d3:7f:4d:04:fb:ed: a9:3f:b0:53:7c:27:cd:45:30:0a:08:0d:fe:8f:b0:05:6e:07: 76:d2:33:f6:25:16:59:9b:0f:21:ce:3b:3e:67:73:85:23:e7: f0:cb:30:b6:8a:79:bd:18:9e:21:76:aa:cd:fa:5b:24:c1:eb: fe:b0:e8:cb:75:ab:db:76:a2:e5:dd:5e:55:ba:c3:99:10:e6: 0f:af:d5:4a:11:68:59:cb:ab:62:95:33:ec:12:a6:77:c5:48: af:23:78:f7:75:6f:48:ee:a4:4a:b1:92:7e:18:9e:3c:c9:b5: 9e:66:61:05:dc:11:be:28:13:97:02:2b:df:1a:51:1c:4f:84: ad:fa:17:ea:88:0e:89:50:ad:a0:23:b7:24:cc:7c:77:8f:43: 50:e9:0c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbKafhBw2eXhBZ+936xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMjM4ZTIyODc3ZjczMDM5NjQwMDdjZTNlMzQwNmY1ZmFk OTQ5NjIwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD Eyg2MGZhZjdiMzNiMzViNGE1ODI3ZDk5NjkxNTcwNTUzYWVjNWNiNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnziIbGag0tBYwYC4SpC/Oh7AYNtC CAFKby4a9/Tm4oA5xrHAey8hAVkpjVnV6+5Ro/WpsIjzEo5B0PO2ky3GgkQdwKgW Myl15QA0FSd3O0xfmxwa10rEY74RqMCa7e8uOtTMn1fxf+Q9gFf1tn5AgZti0se3 mWg8l3dTX9cPFM9l8HCA9EE9jNXbIxBWh0+SpX06JPgD8LH6VSDQauPJn9JHM1R3 O0bmxZWmctY15KR8h28yPPqINa8k56NqnYGeIRVxex4HdQLU6v4JXyT1EiVVaVX5 +ZcVHAGSUVMMX9VJzqAfbH2QcArd048MbdxHAyTtdfz9Sessu/II6lI2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD697M7NbSlgn2ZaRVwVTrsXLWzMB8GA1UdIwQY MBaAFOAjjiKHf3MDlkAHzj40BvX62UliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmIt NTYxMTc1ZjA0ZDhlLzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmItNTYxMTc1ZjA0ZDhl LzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoL6w7FO QhHpBEjhwoRJ4sNS7Z2OhRI+NkwZN4plQgDNlLkuZQMmduMpA5m5l8UqrV9G8KsJ 10B6bTwqPaxHHfRyRqeF1RaXLb/7lTcRKCiAGZL+TK2yw/Qq2+L4LcrcxPTV885g 039NBPvtqT+wU3wnzUUwCggN/o+wBW4HdtIz9iUWWZsPIc47PmdzhSPn8Mswtop5 vRieIXaqzfpbJMHr/rDoy3Wr23ai5d1eVbrDmRDmD6/VShFoWcurYpUz7BKmd8VI ryN493VvSO6kSrGSfhiePMm1nmZhBdwRvigTlwIr3xpRHE+ErfoX6ogOiVCtoCO3 JMx8d49DUOkMHA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:31 2025 by rpki-client