This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json) Hash identifier: 3bydqVnW/vLtGvSBuxrigkG0CnxZTbEhM7xT+UV9fm0= Subject key identifier: FC:9B:5E:D2:89:E1:5B:0B:53:96:32:31:21:AD:87:02:CD:FB:00:0F Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51 Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251 Certificate serial: 019AF12DA10D405057D38E0249171CEDDE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft Manifest number: 1550 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=) 2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: 4cwOf7wmdvO2qxT7CjnE4uO6+SxleSamE4VupihAAX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a1:0d:40:50:57:d3:8e:02:49:17:1c:ed:de:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=fc9b5ed289e15b0b5396323121ad8702cdfb000f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:52:af:fe:d5:e6:dd:67:34:d3:e7:e8:46: 89:12:61:97:eb:9c:2c:d5:de:d7:28:86:6d:2b:c5: c1:fb:1f:14:9d:0d:7f:e2:04:61:af:81:22:a5:e1: 9d:b0:7d:7e:ab:10:ee:be:91:0e:f4:b2:ad:4d:9f: 32:e5:4d:c0:6d:ce:78:6a:88:ab:59:73:35:21:7b: 2f:03:c2:ac:4f:79:a5:00:02:37:57:af:63:79:9b: b4:1a:49:5b:83:b1:95:6b:80:d9:19:8e:fe:df:ba: f5:df:c7:73:cf:61:85:09:5b:cd:70:f5:31:89:51: 50:81:e5:81:6b:88:09:25:5b:d7:cb:a2:40:f1:88: 43:d9:22:41:a9:81:df:d8:ea:57:af:88:7d:f4:34: f4:39:2b:61:e0:9e:94:88:96:fb:5f:c8:c5:dd:ad: 41:a4:10:91:30:45:91:50:c6:6e:66:c0:61:e5:46: f5:7c:4e:4f:b8:42:6c:c3:18:c2:54:9d:48:93:14: 59:a7:8b:c0:0d:c6:7e:ab:6b:71:60:97:6e:ce:e0: 15:09:26:bf:d1:44:9b:09:58:14:31:21:c1:3a:d8: e5:b9:c5:bc:87:6c:78:63:ea:c6:c3:26:84:de:9a: 77:4c:59:5b:ae:05:cd:30:33:02:8d:1c:58:c8:20: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9B:5E:D2:89:E1:5B:0B:53:96:32:31:21:AD:87:02:CD:FB:00:0F X509v3 Authority Key Identifier: keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d7:b3:d7:6d:09:6d:7f:1e:42:31:7c:33:b2:9e:05:48:64: c3:91:6f:d4:47:1f:9a:5d:1f:b3:16:f7:18:f8:e9:d8:c5:e7: 4a:a2:92:66:b1:fc:4c:bb:29:02:53:21:80:f2:bb:26:5d:17: 6d:6a:ef:30:35:99:5e:0d:f8:36:b3:ba:70:a0:93:ff:8a:e7: 6f:f2:e3:e1:3f:07:a5:b8:03:d4:24:25:75:f6:e6:ce:2d:67: 4b:ce:28:72:1a:00:16:bc:32:09:74:91:47:a4:7c:e7:e3:3f: 21:9a:fb:a8:4d:05:3d:af:f0:db:72:dd:0c:f9:fa:17:cf:1a: ea:77:d9:47:79:4e:3c:29:48:60:cc:d5:a0:35:67:91:fc:96: b6:08:25:ec:18:70:fd:2f:84:1b:39:d4:ee:dc:f4:55:e9:78: 6e:48:88:8e:6c:a5:29:8a:10:02:c0:bf:5f:c4:57:a1:74:a5: 6b:7e:81:03:8a:66:aa:35:40:34:25:a8:95:db:72:c2:84:22: 61:37:56:40:39:41:95:ce:0a:36:69:09:e3:4c:80:7c:78:d7: e5:12:f3:f2:4e:c4:63:5a:33:eb:b8:06:d1:5b:0f:d9:28:c1: da:41:10:51:0a:29:5b:1f:b9:f6:e1:69:7b:74:c2:eb:bd:b0: 1a:4e:59:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaENQFBX044CSRcc7d51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzNhOWEzYWQzMjBhOGZjNjFiNWY4Nzg5ZjUyNWQwN2U1 YmUyNTEwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD EyhmYzliNWVkMjg5ZTE1YjBiNTM5NjMyMzEyMWFkODcwMmNkZmIwMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj1Sr/7V5t1nNNPn6EaJEmGX65ws 1d7XKIZtK8XB+x8UnQ1/4gRhr4EipeGdsH1+qxDuvpEO9LKtTZ8y5U3Abc54aoir WXM1IXsvA8KsT3mlAAI3V69jeZu0Gklbg7GVa4DZGY7+37r138dzz2GFCVvNcPUx iVFQgeWBa4gJJVvXy6JA8YhD2SJBqYHf2OpXr4h99DT0OSth4J6UiJb7X8jF3a1B pBCRMEWRUMZuZsBh5Ub1fE5PuEJswxjCVJ1IkxRZp4vADcZ+q2txYJduzuAVCSa/ 0USbCVgUMSHBOtjlucW8h2x4Y+rGwyaE3pp3TFlbrgXNMDMCjRxYyCA9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPybXtKJ4VsLU5YyMSGthwLN+wAPMB8GA1UdIwQY MBaAFHLDqaOtMgqPxhtfh4n1JdB+W+JRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQt ZDI5ZjQ1Zjc5M2M3LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQtZDI5ZjQ1Zjc5M2M3 LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9ez120J bX8eQjF8M7KeBUhkw5Fv1Ecfml0fsxb3GPjp2MXnSqKSZrH8TLspAlMhgPK7Jl0X bWrvMDWZXg34NrO6cKCT/4rnb/Lj4T8HpbgD1CQldfbmzi1nS84ochoAFrwyCXSR R6R85+M/IZr7qE0FPa/w23LdDPn6F88a6nfZR3lOPClIYMzVoDVnkfyWtggl7Bhw /S+EGznU7tz0Vel4bkiIjmylKYoQAsC/X8RXoXSla36BA4pmqjVANCWoldtywoQi YTdWQDlBlc4KNmkJ40yAfHjX5RLz8k7EY1oz67gG0VsP2SjB2kEQUQopWx+59uFp e3TC672wGk5ZQA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:11 2025 by rpki-client