This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json) Hash identifier: wimFxGDo4GszoSvsrEqj94QUqrM1wPyFRTTra/29uBI= Subject key identifier: 1A:D3:56:A6:BC:8C:A0:7D:AC:0E:0B:28:4A:90:9C:5E:10:BF:EA:EC Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Certificate serial: 019AF12F4201CF05AF091A6CCF424413B75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft Manifest number: 0466 Signing time: Sat 06 Dec 2025 01:03:17 +0000 Manifest this update: Sat 06 Dec 2025 01:03:17 +0000 Manifest next update: Sun 07 Dec 2025 01:03:17 +0000 Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: 3z87ND4d00yAH4jqrLtc76bOmfk7wMH3c7a+2nRH/UA=) 2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=) 3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:42:01:cf:05:af:09:1a:6c:cf:42:44:13:b7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Validity Not Before: Dec 6 01:03:17 2025 GMT Not After : Dec 7 01:03:17 2025 GMT Subject: CN=1ad356a6bc8ca07dac0e0b284a909c5e10bfeaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:7b:38:79:0e:af:4a:4a:e6:be:54:45:c3: 0d:47:c8:07:6a:77:4a:b1:07:8f:c5:b6:4e:e6:09: dd:46:f0:96:91:08:b2:ad:83:f3:10:5f:ac:9e:67: 7b:74:78:ab:a6:0e:73:42:75:f0:4c:da:01:3e:de: b9:47:05:db:65:26:e5:94:6e:3e:e4:43:49:29:f2: 0a:60:ae:13:c5:2e:22:bf:47:e6:bd:24:5b:cb:e4: 5b:ae:dc:81:e4:ab:ae:4a:42:32:bd:02:b1:3c:c1: a0:6b:72:9a:f3:22:be:1d:f9:a6:76:55:b0:8c:d9: 79:0b:a4:26:a5:6f:ec:79:c9:18:70:95:e6:11:f1: c3:a1:79:2b:d6:32:56:2b:10:73:e6:97:c1:78:f3: 69:93:58:44:2f:85:64:53:a8:af:f8:64:00:9c:f5: aa:de:5e:db:1e:93:66:6b:c5:c2:02:94:91:08:71: f3:26:84:a6:79:0d:47:46:b7:4c:85:4b:c7:ed:65: 2f:37:28:f8:e5:35:58:c8:b3:17:e0:cd:95:fd:f1: bc:61:ad:a9:81:05:be:f0:25:6a:94:3e:28:c0:4d: 2d:80:ed:db:a0:4f:f7:98:00:55:9e:12:5a:cf:65: 59:af:f4:25:3a:33:a0:84:52:d8:73:08:d7:ca:c2: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:56:A6:BC:8C:A0:7D:AC:0E:0B:28:4A:90:9C:5E:10:BF:EA:EC X509v3 Authority Key Identifier: keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d9:81:8e:46:e0:40:f7:1e:74:80:2c:a8:72:63:48:b1:3d: ff:44:c6:a4:89:67:2d:60:57:a1:47:56:f1:58:3e:0b:83:62: e6:84:36:9d:d3:1f:37:5c:45:dc:41:03:00:98:7e:80:c9:bb: e1:48:2d:ff:42:b4:b7:aa:78:f5:94:dc:7f:f5:dc:46:50:df: a1:bc:95:7b:49:92:4d:10:bd:47:e7:b7:f4:cd:df:da:cd:03: 80:c5:93:42:68:79:64:e3:77:16:f9:9b:3d:1b:84:c3:0b:f9: e4:31:ef:1c:0a:0e:9b:c4:9d:89:9d:a5:a7:0d:f5:de:22:b7: a6:b2:0c:24:ca:c3:ee:98:40:40:08:17:1c:ce:d2:4d:44:14: 6f:24:6b:b4:c6:77:37:ac:ad:a9:81:c8:03:3a:9e:61:9c:8f: 56:8d:36:bd:dd:6c:4c:d5:f3:dd:d9:78:2c:68:64:fb:a3:71: 94:46:82:da:a7:ab:26:b5:bb:48:e3:83:e5:ca:cb:67:b9:af: 21:f6:a4:a1:a3:20:9f:5d:f2:b1:0e:30:9e:e7:5e:f6:8e:9c: 9a:cf:75:a7:cd:4f:96:0f:3a:7a:4e:ff:21:27:7d:3e:61:e8: f3:5d:56:e9:5b:f3:54:e6:91:51:8f:b5:c9:b4:2e:ef:2b:79: 4f:96:1e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxL0IBzwWvCRpsz0JEE7deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU5M2YxOTYxYmViYzEwMDA5Y2IyNjVjMGJhZjM0NzAy YTNkYWIwHhcNMjUxMjA2MDEwMzE3WhcNMjUxMjA3MDEwMzE3WjAzMTEwLwYDVQQD EygxYWQzNTZhNmJjOGNhMDdkYWMwZTBiMjg0YTkwOWM1ZTEwYmZlYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlF7OHkOr0pK5r5URcMNR8gHandK sQePxbZO5gndRvCWkQiyrYPzEF+snmd7dHirpg5zQnXwTNoBPt65RwXbZSbllG4+ 5ENJKfIKYK4TxS4iv0fmvSRby+RbrtyB5KuuSkIyvQKxPMGga3Ka8yK+HfmmdlWw jNl5C6QmpW/seckYcJXmEfHDoXkr1jJWKxBz5pfBePNpk1hEL4VkU6iv+GQAnPWq 3l7bHpNma8XCApSRCHHzJoSmeQ1HRrdMhUvH7WUvNyj45TVYyLMX4M2V/fG8Ya2p gQW+8CVqlD4owE0tgO3boE/3mABVnhJaz2VZr/QlOjOghFLYcwjXysJ1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrTVqa8jKB9rA4LKEqQnF4Qv+rsMB8GA1UdIwQY MBaAFAqOk/GWG+vBAAnLJlwLrzRwKj2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODkt YjkzNTZlNjFmNzNhLzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODktYjkzNTZlNjFmNzNh LzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdmBjkbg QPcedIAsqHJjSLE9/0TGpIlnLWBXoUdW8Vg+C4Ni5oQ2ndMfN1xF3EEDAJh+gMm7 4Ugt/0K0t6p49ZTcf/XcRlDfobyVe0mSTRC9R+e39M3f2s0DgMWTQmh5ZON3Fvmb PRuEwwv55DHvHAoOm8SdiZ2lpw313iK3prIMJMrD7phAQAgXHM7STUQUbyRrtMZ3 N6ytqYHIAzqeYZyPVo02vd1sTNXz3dl4LGhk+6NxlEaC2qerJrW7SOOD5crLZ7mv IfakoaMgn13ysQ4wnude9o6cms91p81Plg86ek7/ISd9PmHo811W6VvzVOaRUY+1 ybQu7yt5T5YeDA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:52 2025 by rpki-client