This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json) Hash identifier: ADvCCVrNVBnNig2DkzMUAhuh+pqrIED/Q/nFRoybfi8= Subject key identifier: 04:7F:84:64:B5:D9:AE:28:26:90:2F:B4:58:6D:1F:A0:C0:45:B9:55 Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Certificate serial: 019AF24012B4B4AD74E580A1CACA1CAA30A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=) 2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: 5aSGRkJfmttJIZOjbXK9zwOW0iCW7NxKMzMWitxSsnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:12:b4:b4:ad:74:e5:80:a1:ca:ca:1c:aa:30:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83 Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=047f8464b5d9ae2826902fb4586d1fa0c045b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:c6:b2:a1:15:6b:1e:90:b2:a3:de:f4:33: 04:ef:c1:7f:c0:40:c7:5d:ae:3e:af:af:a5:08:8e: 69:ba:9c:42:74:74:f3:38:bc:ec:d5:46:55:18:8c: e7:c0:81:d6:5e:87:90:3d:ce:5f:8a:77:36:d1:c2: 9d:83:66:8c:74:58:95:18:be:62:62:2f:c9:65:99: 22:94:34:20:54:de:ef:2e:0e:2f:46:0a:5c:71:2f: 46:03:8b:25:f8:4c:50:2e:6c:28:b7:72:1a:54:eb: e0:bd:5a:e2:d7:86:66:99:c1:42:da:b0:48:9b:97: 5f:40:a6:15:ff:94:68:ed:76:4f:88:a1:05:7f:9f: f4:b4:3c:7a:18:dd:70:99:62:d1:1c:4c:10:81:97: ba:88:b6:2d:9d:59:c6:9c:70:f8:b1:58:d2:74:83: 9d:74:74:f5:9e:32:47:44:27:94:38:10:eb:0e:7f: e2:8b:fa:54:35:48:a0:18:89:93:9d:bc:b8:62:01: 8b:f3:bb:e1:0b:8a:55:a8:dd:5f:b8:34:21:6a:0b: 54:22:2b:50:1b:b2:c5:e2:3d:cb:ba:52:68:64:62: 01:d5:bf:18:3b:3d:7a:f1:54:14:59:32:a5:fc:cd: a1:02:18:79:1b:8f:a2:93:6c:99:04:0b:8f:25:1e: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7F:84:64:B5:D9:AE:28:26:90:2F:B4:58:6D:1F:A0:C0:45:B9:55 X509v3 Authority Key Identifier: keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6a:f8:13:71:84:ec:18:c3:18:6a:3d:dc:93:4d:0f:3a:d4: 95:70:5c:cf:f2:b4:bb:61:b8:47:af:c5:da:45:b3:db:db:ca: 7e:55:34:45:11:d0:8a:0a:c9:33:2a:69:f7:3c:22:d1:35:2a: 22:4f:b7:59:af:81:d5:78:98:02:e3:08:2b:8d:08:fd:2a:30: 93:f5:53:36:b6:af:0c:9c:05:fc:00:a1:59:71:05:9f:34:57: da:9a:04:7a:30:65:2a:5c:7f:fe:bd:b8:c7:83:8f:86:27:1b: 67:be:0c:68:0e:ae:56:a5:5e:89:06:49:63:06:b9:ff:57:65: c4:df:c6:ac:53:82:46:f2:91:10:66:3c:db:04:ce:48:bb:86: a3:e9:52:ca:c7:dc:65:6f:e3:2a:e2:b0:d2:b9:b0:bc:8f:ad: 00:23:b6:58:7c:5b:e1:3b:3d:b8:d7:86:b7:bb:44:52:7e:7c: a8:a3:d5:fe:0e:5d:96:5f:eb:ce:a6:44:0d:fc:ea:04:c1:f6: f9:cb:54:e3:c3:16:a7:5b:2d:1e:3e:a7:12:2a:d8:80:50:64: 97:f9:15:e7:09:eb:52:9a:32:8b:a1:28:8e:0c:97:a4:05:94: 0c:7d:01:fc:c7:73:f9:21:bf:49:0f:15:00:16:bd:52:42:e8: ac:66:aa:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBK0tK105YChysocqjClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTEyZWJkOGZmZjJhNmIwNTRkZWQ5ZGUzZDhmNjVlYTYz NWZiODMwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EygwNDdmODQ2NGI1ZDlhZTI4MjY5MDJmYjQ1ODZkMWZhMGMwNDViOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33LGsqEVax6QsqPe9DME78F/wEDH Xa4+r6+lCI5pupxCdHTzOLzs1UZVGIznwIHWXoeQPc5finc20cKdg2aMdFiVGL5i Yi/JZZkilDQgVN7vLg4vRgpccS9GA4sl+ExQLmwot3IaVOvgvVri14ZmmcFC2rBI m5dfQKYV/5Ro7XZPiKEFf5/0tDx6GN1wmWLRHEwQgZe6iLYtnVnGnHD4sVjSdIOd dHT1njJHRCeUOBDrDn/ii/pUNUigGImTnby4YgGL87vhC4pVqN1fuDQhagtUIitQ G7LF4j3LulJoZGIB1b8YOz168VQUWTKl/M2hAhh5G4+ik2yZBAuPJR6FAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR/hGS12a4oJpAvtFhtH6DARblVMB8GA1UdIwQY MBaAFHDhLr2P/yprBU3tnePY9l6mNfuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDct NTQyZDNhYTc2NTVlLzEvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81MGE1MjYtYzkwZS00YTM5LTgyNDctNTQyZDNhYTc2NTVl LzEvY09FdXZZX19LbXNGVGUyZDQ5ajJYcVkxLTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmr4E3GE 7BjDGGo93JNNDzrUlXBcz/K0u2G4R6/F2kWz29vKflU0RRHQigrJMypp9zwi0TUq Ik+3Wa+B1XiYAuMIK40I/Sowk/VTNravDJwF/AChWXEFnzRX2poEejBlKlx//r24 x4OPhicbZ74MaA6uVqVeiQZJYwa5/1dlxN/GrFOCRvKREGY82wTOSLuGo+lSysfc ZW/jKuKw0rmwvI+tACO2WHxb4Ts9uNeGt7tEUn58qKPV/g5dll/rzqZEDfzqBMH2 +ctU48MWp1stHj6nEirYgFBkl/kV5wnrUpoyi6EojgyXpAWUDH0B/Mdz+SG/SQ8V ABa9UkLorGaqcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:12 2025 by rpki-client