This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json) Hash identifier: sHh3agCt4sADiwAKlJ6599jv0WQ9UUvy1k5tFxb6gN0= Subject key identifier: BF:8C:93:C7:88:CE:01:7F:53:BA:E2:1C:21:9D:C3:EE:AD:68:F0:50 Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Certificate serial: 019AF0BF2751A4C5B6B175E56D5D48F4896B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft Manifest number: 12C8 Signing time: Fri 05 Dec 2025 23:00:50 +0000 Manifest this update: Fri 05 Dec 2025 23:00:50 +0000 Manifest next update: Sat 06 Dec 2025 23:00:50 +0000 Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: TjVak6IdV+GZa1prPTtFiYt2Nb6HtEoKI+c1Vj8QFX4=) 2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:27:51:a4:c5:b6:b1:75:e5:6d:5d:48:f4:89:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Validity Not Before: Dec 5 23:00:50 2025 GMT Not After : Dec 6 23:00:50 2025 GMT Subject: CN=bf8c93c788ce017f53bae21c219dc3eead68f050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:be:fa:89:8a:1d:8b:02:e3:c4:13:7a:3b: b1:3c:91:03:39:2c:a7:19:57:bf:8f:90:06:12:d2: f3:b1:a9:dd:51:a1:14:26:9b:00:a5:1d:94:62:1a: 6a:06:1e:0f:5b:c3:53:e3:1e:85:e9:ba:a2:f8:be: 82:1a:a4:8c:20:31:3e:5c:86:b5:f3:f2:cb:a9:19: c7:d7:18:e3:17:94:d4:b7:07:ba:df:49:7b:ec:76: eb:76:97:4e:89:98:91:ac:64:36:43:d8:3c:f4:f6: 89:29:cc:3f:b0:4b:e9:9d:4d:fa:5f:9b:81:b1:24: 49:75:67:4f:79:8d:72:0e:2c:2e:e2:54:da:4f:59: f2:b8:6a:8d:b8:f8:01:69:de:7c:66:c5:c7:c6:fa: e6:4a:7d:44:fd:33:09:70:cf:3f:b9:63:d5:d3:ca: 3d:f1:c6:44:e4:8f:32:f4:17:ba:39:ef:d1:8b:6c: 7e:03:24:c8:28:39:03:4f:a7:6d:dc:29:66:de:41: b1:7a:3c:65:69:08:7a:1e:59:3d:6a:46:25:dc:ac: dd:13:ea:93:51:3b:5f:57:41:96:de:56:01:db:a5: 17:aa:5e:2b:31:65:b2:7e:87:c6:9a:a5:fa:e5:a1: 09:17:ad:67:a8:e5:a7:85:c1:db:24:9b:99:d9:51: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:93:C7:88:CE:01:7F:53:BA:E2:1C:21:9D:C3:EE:AD:68:F0:50 X509v3 Authority Key Identifier: keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6b:aa:df:55:2c:89:72:ae:37:f7:48:3c:55:da:b4:6b:a7: 05:23:4a:d8:40:3e:b8:e7:be:4e:4a:91:a6:be:8b:49:79:b8: c1:08:9c:47:3f:b1:93:0c:3d:c0:39:22:a0:3f:e2:4f:1b:21: 70:dc:bc:89:64:56:47:e5:32:fb:ca:b0:87:fc:9e:dd:bc:f7: ce:c7:24:cb:d5:b9:57:46:74:25:3b:3b:83:3a:9d:3e:ee:8f: d9:db:81:97:02:77:eb:00:93:1c:4a:c4:90:4b:ae:bf:55:f5: 13:5e:53:c8:49:68:24:bb:3c:ca:60:63:30:0c:05:0f:53:91: dc:32:56:19:0a:a9:d6:ed:b4:4b:7f:5b:44:a5:58:04:6d:e0: fb:d5:ac:68:a9:e7:3b:69:1e:0c:c3:47:e8:24:1a:bc:8b:a9: 0b:79:9a:0b:0c:66:b8:bb:85:a9:d7:62:aa:ee:1b:93:81:9f: a6:cb:b7:02:a6:68:4e:70:59:a3:5b:4e:2b:ad:42:2d:be:92: 00:7d:33:ec:26:d3:44:83:1b:7d:94:4e:48:42:de:dc:c3:a8: 90:2f:11:e8:64:3c:44:0b:1a:17:fe:d9:a2:aa:e1:22:f9:2a: 18:e8:2d:5f:19:b2:e6:fb:54:37:64:26:ba:d2:97:be:c0:0d: fd:2b:f0:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvydRpMW2sXXlbV1I9IlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz ZWY4MmEwHhcNMjUxMjA1MjMwMDUwWhcNMjUxMjA2MjMwMDUwWjAzMTEwLwYDVQQD EyhiZjhjOTNjNzg4Y2UwMTdmNTNiYWUyMWMyMTlkYzNlZWFkNjhmMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjS++omKHYsC48QTejuxPJEDOSyn GVe/j5AGEtLzsandUaEUJpsApR2UYhpqBh4PW8NT4x6F6bqi+L6CGqSMIDE+XIa1 8/LLqRnH1xjjF5TUtwe630l77HbrdpdOiZiRrGQ2Q9g89PaJKcw/sEvpnU36X5uB sSRJdWdPeY1yDiwu4lTaT1nyuGqNuPgBad58ZsXHxvrmSn1E/TMJcM8/uWPV08o9 8cZE5I8y9Be6Oe/Ri2x+AyTIKDkDT6dt3Clm3kGxejxlaQh6Hlk9akYl3KzdE+qT UTtfV0GW3lYB26UXql4rMWWyfofGmqX65aEJF61nqOWnhcHbJJuZ2VHsFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+Mk8eIzgF/U7riHCGdw+6taPBQMB8GA1UdIwQY MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5 LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWuq31Us iXKuN/dIPFXatGunBSNK2EA+uOe+TkqRpr6LSXm4wQicRz+xkww9wDkioD/iTxsh cNy8iWRWR+Uy+8qwh/ye3bz3zscky9W5V0Z0JTs7gzqdPu6P2duBlwJ36wCTHErE kEuuv1X1E15TyEloJLs8ymBjMAwFD1OR3DJWGQqp1u20S39bRKVYBG3g+9WsaKnn O2keDMNH6CQavIupC3maCwxmuLuFqddiqu4bk4Gfpsu3AqZoTnBZo1tOK61CLb6S AH0z7CbTRIMbfZROSELe3MOokC8R6GQ8RAsaF/7ZoqrhIvkqGOgtXxmy5vtUN2Qm utKXvsAN/SvwJw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:51 2025 by rpki-client