This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft File: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json) Hash identifier: OOT4cnuhV8pQeFmibhRYkb/z5NZqug/5JwiQ5G8S2cY= Subject key identifier: 2D:5B:77:63:C0:00:94:1D:49:E3:12:A9:BA:F4:B0:2D:48:99:85:0D Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Certificate serial: 019B33E9234B03290A08170A31C154F54E91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 00:01:15 +0000 Manifest this update: Fri 19 Dec 2025 00:01:15 +0000 Manifest next update: Sat 20 Dec 2025 00:01:15 +0000 Files and hashes: 1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: CfUnhz/9GdhTHNDXoaTrUVeBVhu9CdsO9cZv/rsYlOw=) 2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:23:4b:03:29:0a:08:17:0a:31:c1:54:f5:4e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76 Validity Not Before: Dec 19 00:01:15 2025 GMT Not After : Dec 20 00:01:15 2025 GMT Subject: CN=2d5b7763c000941d49e312a9baf4b02d4899850d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:fa:db:b7:33:9c:d6:9c:cc:27:cc:36:cc: 63:e8:b5:ad:b3:03:ef:dc:66:21:6c:39:c8:11:de: b5:a2:c2:82:90:4e:fc:c5:d2:2e:99:08:dc:40:dd: 62:22:5d:4e:08:e9:76:06:08:6c:d3:0b:38:af:43: f2:9c:16:94:fa:13:98:31:8c:13:d8:59:4e:3b:2a: 65:bf:64:e6:b9:0c:c2:be:06:21:a1:0c:61:c5:0f: 3a:dc:40:09:11:af:1a:28:31:fc:16:3c:51:0b:39: 48:fc:25:00:dc:de:76:02:96:86:3f:63:4e:d1:d1: 00:3f:7d:c2:6c:0c:b8:8a:39:ea:7d:b1:e6:aa:99: e3:aa:47:33:70:f5:51:ed:e1:ea:04:a6:aa:89:10: d8:c6:0e:76:03:95:56:03:f6:22:d2:ef:b5:9f:22: eb:c5:77:45:d2:d8:4c:0b:4f:88:8a:e4:fb:f3:fa: 93:01:95:4d:81:79:1b:a9:e5:2a:63:39:26:e9:c8: 44:e4:ae:6f:fe:88:95:51:73:2f:75:b2:b4:9d:77: e8:64:c9:9d:e2:c6:35:7d:c0:72:c4:b8:71:f1:f4: 28:4c:29:ea:e8:29:67:5f:e3:f8:9c:94:9d:e9:11: bf:4f:c8:4c:2a:59:1b:1a:03:43:c4:64:a3:ef:54: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:77:63:C0:00:94:1D:49:E3:12:A9:BA:F4:B0:2D:48:99:85:0D X509v3 Authority Key Identifier: keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:01:59:05:ec:fb:b6:bd:06:18:fd:af:2a:2d:df:f5:2d: bf:5a:0d:15:8d:0a:22:ea:7a:e7:61:6b:81:c4:47:83:c8:42: 77:60:54:ea:51:49:06:ca:3d:39:b0:56:0a:a6:84:3d:91:f7: e7:05:36:94:44:76:be:5a:25:d6:fc:ea:35:63:eb:6a:46:cf: be:12:d1:85:5d:f8:d6:ea:db:58:b5:20:b1:97:ac:bf:5e:e7: 11:02:63:bb:37:a1:5c:1e:c8:01:e0:de:59:f0:54:a0:66:66: 82:a3:8c:6e:15:77:79:9e:0e:23:11:ea:32:93:b7:dc:78:cd: 4c:1e:3c:c2:2c:86:e6:85:9e:99:7f:aa:22:eb:3c:bf:93:92: 6a:d6:ed:72:31:2a:b9:a9:5a:f1:f5:22:c0:bb:04:31:1c:7c: fb:18:3b:da:d4:74:11:7a:c4:45:89:8a:3f:85:dd:d9:6c:00: 17:9c:e2:28:15:94:4d:5d:5b:a3:c7:be:62:1e:02:5b:7d:3f: 9e:6d:39:01:f5:1e:1f:a1:0c:dc:12:6c:42:96:a3:89:88:f7: 57:07:ba:ef:13:9e:5b:c0:29:0b:47:7b:63:c1:47:ad:91:4b: fc:96:ba:ec:27:ef:a9:74:4b:17:5b:60:9a:e5:7a:2f:9a:74: 33:82:d0:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6SNLAykKCBcKMcFU9U6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZWY5NWQyY2YwZTdkODQwNThiNTI4ZTc5MDJkNjBiNDAz ZDdiNzYwHhcNMjUxMjE5MDAwMTE1WhcNMjUxMjIwMDAwMTE1WjAzMTEwLwYDVQQD EygyZDViNzc2M2MwMDA5NDFkNDllMzEyYTliYWY0YjAyZDQ4OTk4NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo3627cznNaczCfMNsxj6LWtswPv 3GYhbDnIEd61osKCkE78xdIumQjcQN1iIl1OCOl2Bghs0ws4r0PynBaU+hOYMYwT 2FlOOyplv2TmuQzCvgYhoQxhxQ863EAJEa8aKDH8FjxRCzlI/CUA3N52ApaGP2NO 0dEAP33CbAy4ijnqfbHmqpnjqkczcPVR7eHqBKaqiRDYxg52A5VWA/Yi0u+1nyLr xXdF0thMC0+IiuT78/qTAZVNgXkbqeUqYzkm6chE5K5v/oiVUXMvdbK0nXfoZMmd 4sY1fcByxLhx8fQoTCnq6ClnX+P4nJSd6RG/T8hMKlkbGgNDxGSj71Q4WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1bd2PAAJQdSeMSqbr0sC1ImYUNMB8GA1UdIwQY MBaAFHDvldLPDn2EBYtSjnkC1gtAPXt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEt YTA0MGM3YjZhNjcwLzEvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNTNlZTItYmE4NC00NDliLTgxZmEtYTA0MGM3YjZhNjcw LzEvY08tVjBzOE9mWVFGaTFLT2VRTFdDMEE5ZTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLMBWQXs +7a9Bhj9ryot3/Utv1oNFY0KIup652FrgcRHg8hCd2BU6lFJBso9ObBWCqaEPZH3 5wU2lER2vlol1vzqNWPrakbPvhLRhV341urbWLUgsZesv17nEQJjuzehXB7IAeDe WfBUoGZmgqOMbhV3eZ4OIxHqMpO33HjNTB48wiyG5oWemX+qIus8v5OSatbtcjEq uala8fUiwLsEMRx8+xg72tR0EXrERYmKP4Xd2WwAF5ziKBWUTV1bo8e+Yh4CW30/ nm05AfUeH6EM3BJsQpajiYj3Vwe67xOeW8ApC0d7Y8FHrZFL/Ja67CfvqXRLF1tg muV6L5p0M4LQbw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:59 2025 by rpki-client