This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft File: cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json) Hash identifier: 3BCYHLUCW+o8zUEHDAe+a+OEIZVf7KImcZn/ih8pqiY= Subject key identifier: A7:4D:C8:ED:63:29:07:F9:F9:42:DE:F6:52:AE:13:B1:15:86:80:5E Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1 Certificate issuer: /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1 Certificate serial: 019AF509EA28A936C1833FEBFE001AA69050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft Manifest number: 1122 Signing time: Sat 06 Dec 2025 19:00:58 +0000 Manifest this update: Sat 06 Dec 2025 19:00:58 +0000 Manifest next update: Sun 07 Dec 2025 19:00:58 +0000 Files and hashes: 1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: diHCbB7DowUuz1b2PwCsBDprvA5b52Hlq6xlfHRKf/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ea:28:a9:36:c1:83:3f:eb:fe:00:1a:a6:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1 Validity Not Before: Dec 6 19:00:58 2025 GMT Not After : Dec 7 19:00:58 2025 GMT Subject: CN=a74dc8ed632907f9f942def652ae13b11586805e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:71:0a:ff:97:b9:b8:13:cf:48:f8:37:9f: c8:d6:fc:7d:e3:4e:eb:59:11:27:b5:a0:c2:ae:87: 9e:03:66:e6:4d:46:9d:08:06:d3:e0:62:6d:31:e0: 5c:7a:e6:88:e1:14:b5:3e:56:6c:f9:12:41:fb:a0: be:9f:15:c9:71:b5:1e:1a:e3:d6:e4:ab:84:79:bd: ca:bd:ac:cc:86:4b:25:ae:19:75:11:96:78:15:1e: df:e3:d4:d4:7e:c2:f1:98:ba:99:b0:d0:26:22:2b: d9:7a:a1:51:36:62:32:c1:ac:54:cf:97:8c:db:b5: 6e:cd:59:a5:5c:f1:06:10:61:0d:47:9d:a7:9b:7d: 38:8b:43:5b:c7:06:ec:db:cd:2a:ef:03:46:03:44: ed:74:2d:23:3a:ba:01:82:f1:b7:6e:1a:0b:23:58: 6d:99:67:d5:cd:e7:fd:8f:ec:4e:53:81:b4:86:1b: 50:ea:89:05:7e:9b:81:d6:65:6d:b4:4c:6b:3a:ba: 5f:1a:fa:e8:25:58:75:c9:b5:ba:a5:ef:34:50:75: b9:8a:d6:6e:0f:84:41:90:17:ec:99:0f:15:1b:e4: 79:2e:14:01:aa:bd:3c:67:1a:8a:2b:fa:b3:88:e5: 49:ea:b4:11:c3:20:06:ff:9c:e6:34:c9:23:5a:cd: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4D:C8:ED:63:29:07:F9:F9:42:DE:F6:52:AE:13:B1:15:86:80:5E X509v3 Authority Key Identifier: keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a4:3f:c7:bc:98:6a:66:c8:5a:d3:3f:67:81:c0:0f:3a:bc: 6f:f2:2a:f9:25:b7:a5:a4:95:cf:91:40:b7:cb:61:c2:12:ef: d6:ec:c7:b2:98:a2:4e:5e:97:5c:d0:6b:e5:a8:84:0f:15:e7: fc:b4:3a:dd:4a:77:77:16:79:a8:0f:38:a5:94:b4:fe:0e:b2: 00:8d:1f:d1:04:3f:b5:d9:57:6f:96:a3:ac:1a:3b:48:c0:31: 9f:42:84:30:ab:00:85:78:9c:8e:da:4a:aa:e7:8e:ae:eb:11: a4:26:0b:64:79:ea:f8:7d:bf:cf:b9:ab:40:ff:25:fa:4d:f3: 75:37:61:b4:f3:24:92:23:a0:71:74:fb:19:62:bc:f1:37:78: db:f8:b6:db:7b:f3:98:8e:c3:37:5d:04:ec:14:b5:f7:a7:d8: ac:25:b5:da:d4:64:ae:4b:9a:a9:d3:17:00:ff:51:f2:1f:5b: 42:88:59:70:b1:82:98:af:bf:ba:ce:d7:0c:e3:4a:c3:86:16: fd:28:ad:60:93:dd:43:2d:c3:e0:50:c5:bc:a0:77:27:7b:a1: ed:c3:4d:4d:97:f8:90:80:d5:ac:c8:42:3f:b3:32:39:f3:b6: 6b:ae:8d:55:27:2f:7e:57:0a:67:91:5c:cc:32:5f:8d:d4:4e: ae:85:3b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CeooqTbBgz/r/gAappBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOGE3NTViZmY2OWRiNGI2MDVhNTE0M2E2NWI3ZGMzOWNi YWJiYjEwHhcNMjUxMjA2MTkwMDU4WhcNMjUxMjA3MTkwMDU4WjAzMTEwLwYDVQQD EyhhNzRkYzhlZDYzMjkwN2Y5Zjk0MmRlZjY1MmFlMTNiMTE1ODY4MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0BxCv+XubgTz0j4N5/I1vx9407r WREntaDCroeeA2bmTUadCAbT4GJtMeBceuaI4RS1PlZs+RJB+6C+nxXJcbUeGuPW 5KuEeb3KvazMhkslrhl1EZZ4FR7f49TUfsLxmLqZsNAmIivZeqFRNmIywaxUz5eM 27VuzVmlXPEGEGENR52nm304i0Nbxwbs280q7wNGA0TtdC0jOroBgvG3bhoLI1ht mWfVzef9j+xOU4G0hhtQ6okFfpuB1mVttExrOrpfGvroJVh1ybW6pe80UHW5itZu D4RBkBfsmQ8VG+R5LhQBqr08ZxqKK/qziOVJ6rQRwyAG/5zmNMkjWs2yrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdNyO1jKQf5+ULe9lKuE7EVhoBeMB8GA1UdIwQY MBaAFHKKdVv/adtLYFpRQ6ZbfcOcuruxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OGNjYmMtMmI3My00MTc2LWI5YWEt OGMzNzhhZTE4NjBiLzEvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81OGNjYmMtMmI3My00MTc2LWI5YWEtOGMzNzhhZTE4NjBi LzEvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKQ/x7yY ambIWtM/Z4HADzq8b/Iq+SW3paSVz5FAt8thwhLv1uzHspiiTl6XXNBr5aiEDxXn /LQ63Up3dxZ5qA84pZS0/g6yAI0f0QQ/tdlXb5ajrBo7SMAxn0KEMKsAhXicjtpK queOrusRpCYLZHnq+H2/z7mrQP8l+k3zdTdhtPMkkiOgcXT7GWK88Td42/i223vz mI7DN10E7BS196fYrCW12tRkrkuaqdMXAP9R8h9bQohZcLGCmK+/us7XDONKw4YW /SitYJPdQy3D4FDFvKB3J3uh7cNNTZf4kIDVrMhCP7MyOfO2a66NVScvflcKZ5Fc zDJfjdROroU78w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:09 2025 by rpki-client