This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json) Hash identifier: gTsNrfiJnOkfG4/8r9uuJFnz5YhuEvrSQBzOrP0HZXs= Subject key identifier: 6B:CB:E4:2B:A6:18:32:C1:53:99:44:E0:A8:C7:A7:E4:9F:5B:54:95 Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Certificate serial: 019B39B3C5520376FD17EDA43C3248157349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 03:00:41 +0000 Manifest this update: Sat 20 Dec 2025 03:00:41 +0000 Manifest next update: Sun 21 Dec 2025 03:00:41 +0000 Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=) 2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: csaTYcU+P4mTB3MffQZkWoJK9Nzjm6qACfzDlw+uykI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:c5:52:03:76:fd:17:ed:a4:3c:32:48:15:73:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Validity Not Before: Dec 20 03:00:41 2025 GMT Not After : Dec 21 03:00:41 2025 GMT Subject: CN=6bcbe42ba61832c1539944e0a8c7a7e49f5b5495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:84:06:43:57:52:26:cb:a9:93:e3:d9:68: b2:1b:f4:0a:0e:aa:a2:ac:01:3a:fa:fd:d3:2b:49: 44:38:a1:02:a5:f8:4b:de:e7:f6:e5:fb:30:66:aa: bf:1b:61:0e:0c:7a:d4:6f:02:15:b7:5e:de:3a:f6: 6c:cc:b8:51:0a:31:97:72:5f:56:68:ca:cf:17:c3: 92:d1:c7:ff:ad:44:e3:d9:01:11:f5:ff:27:a3:8e: eb:13:4c:57:ed:a5:67:19:e7:bc:73:3a:84:d2:c3: a3:f5:47:3a:a1:19:03:79:b1:81:fb:94:fb:61:f2: a1:75:5b:6e:36:71:6c:87:4f:99:2d:66:99:5a:b7: 8d:14:59:20:c2:d9:6d:0c:c5:53:ea:79:11:6a:43: d7:e8:2e:7a:64:44:42:72:08:2d:67:ad:b4:cf:b3: 79:73:06:7a:04:0b:36:3e:8c:69:96:a5:54:54:66: 4c:4e:f4:a4:e5:ae:0d:7d:59:83:01:b0:bf:dd:47: 67:e7:ae:39:7b:6c:ea:da:dd:5f:77:cf:86:c9:bd: 36:3e:9a:9a:6b:c3:a6:16:68:9c:a1:46:4a:5a:bb: f9:8f:7a:20:e5:8e:d1:3e:67:e9:6f:5f:b3:94:19: 76:9e:46:6f:69:6d:66:8a:8d:00:8b:4c:b8:d5:ba: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:E4:2B:A6:18:32:C1:53:99:44:E0:A8:C7:A7:E4:9F:5B:54:95 X509v3 Authority Key Identifier: keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:07:51:1c:3a:cb:ee:ac:5a:8b:fa:95:24:6e:9c:23:bd:28: 60:2f:b9:62:31:8b:26:f4:a4:74:4b:e0:d6:3c:41:f3:b2:9a: 93:74:ac:95:75:bf:6d:dc:e3:4d:d1:3e:ef:1b:22:59:14:ac: 0b:62:1d:d9:07:36:c2:54:f1:f9:6e:08:3e:6e:e3:77:14:8c: 77:99:cc:af:6e:1a:a4:1e:28:db:bb:0c:cd:e7:93:54:d1:41: cc:1d:aa:31:7c:a2:0e:9b:78:0c:5e:ad:06:4a:29:b9:ca:c9: 78:97:ea:15:fb:6d:bb:e8:64:e8:65:6b:f0:6b:74:98:22:ac: db:90:d5:12:79:50:95:e5:8b:50:cb:e2:2b:0c:b7:3a:d0:b8: 2f:3f:7a:c1:e1:fa:58:b7:75:21:6c:aa:bb:f6:70:3e:32:7a: 6f:24:88:0f:1e:03:0f:8e:dc:6b:65:3e:2e:28:69:31:7f:ac: 02:f0:a1:d1:f7:bc:a8:da:80:dc:7d:1d:c8:f2:49:ec:83:16: 10:a6:f3:2d:d6:69:2b:50:33:e2:14:aa:32:b2:8e:e1:1a:45: 02:26:86:62:6f:d0:2e:1d:5b:ae:8b:19:27:ed:f4:a4:8f:cd: 6d:55:fe:c6:2a:c5:e7:6c:48:af:4a:57:f5:ba:75:70:1f:30: ea:f3:98:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8VSA3b9F+2kPDJIFXNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTEyZWJkOGZmZjJhNmIwNTRkZWQ5ZGUzZDhmNjVlYTYz NWZiODMwHhcNMjUxMjIwMDMwMDQxWhcNMjUxMjIxMDMwMDQxWjAzMTEwLwYDVQQD Eyg2YmNiZTQyYmE2MTgzMmMxNTM5OTQ0ZTBhOGM3YTdlNDlmNWI1NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYGEBkNXUibLqZPj2WiyG/QKDqqi rAE6+v3TK0lEOKECpfhL3uf25fswZqq/G2EODHrUbwIVt17eOvZszLhRCjGXcl9W aMrPF8OS0cf/rUTj2QER9f8no47rE0xX7aVnGee8czqE0sOj9Uc6oRkDebGB+5T7 YfKhdVtuNnFsh0+ZLWaZWreNFFkgwtltDMVT6nkRakPX6C56ZERCcggtZ620z7N5 cwZ6BAs2PoxplqVUVGZMTvSk5a4NfVmDAbC/3Udn5645e2zq2t1fd8+Gyb02Ppqa a8OmFmicoUZKWrv5j3og5Y7RPmfpb1+zlBl2nkZvaW1mio0Ai0y41bpnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvL5CumGDLBU5lE4KjHp+SfW1SVMB8GA1UdIwQY MBaAFHDhLr2P/yprBU3tnePY9l6mNfuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDct NTQyZDNhYTc2NTVlLzEvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDctNTQyZDNhYTc2NTVl LzEvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwdRHDrL 7qxai/qVJG6cI70oYC+5YjGLJvSkdEvg1jxB87Kak3SslXW/bdzjTdE+7xsiWRSs C2Id2Qc2wlTx+W4IPm7jdxSMd5nMr24apB4o27sMzeeTVNFBzB2qMXyiDpt4DF6t BkopucrJeJfqFfttu+hk6GVr8Gt0mCKs25DVEnlQleWLUMviKwy3OtC4Lz96weH6 WLd1IWyqu/ZwPjJ6bySIDx4DD47ca2U+LihpMX+sAvCh0fe8qNqA3H0dyPJJ7IMW EKbzLdZpK1Az4hSqMrKO4RpFAiaGYm/QLh1brosZJ+30pI/NbVX+xirF52xIr0pX 9bp1cB8w6vOYsA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:48:02 2025 by rpki-client