This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json) Hash identifier: utf3tooa1kjjqpn/N46ov5x9net2yzoXBCWWRimdA1o= Subject key identifier: AF:CD:31:68:AD:DC:B2:4B:8E:C6:51:87:E5:61:2A:CB:8B:DA:8E:4A Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Certificate serial: 019AF50B4B72A1698C1D7DECAF925D950C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: tzcUGhyVLrApz574qUszQ7YP74k7Jx0ubvhaYvTQUCs=) 2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4b:72:a1:69:8c:1d:7d:ec:af:92:5d:95:0c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=afcd3168addcb24b8ec65187e5612acb8bda8e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:d8:32:96:96:ea:7b:55:8a:7c:3a:fc:45: 6b:9c:ac:31:f7:59:f3:1c:24:bb:e6:12:3e:45:b2: c8:61:97:d8:45:55:4a:2b:07:9e:0e:5d:c4:86:61: 88:73:19:7d:64:b0:07:2a:f7:58:34:c1:1e:ff:c0: 39:b3:27:aa:ad:5c:fb:29:56:6a:b5:5c:18:35:2b: ba:c9:99:f2:8a:d8:01:8e:35:90:1d:86:bf:0a:a2: 11:31:fb:6b:d4:a3:b2:7e:f6:57:5d:6a:33:a5:d5: 35:80:b2:33:0a:8d:0d:fe:ef:5b:33:3d:91:7f:c2: de:7a:01:f8:06:4c:82:8e:3d:4f:9a:d5:91:a8:28: 75:57:04:36:0b:39:5c:73:1f:bb:48:c2:40:c8:e5: 1d:dc:ef:fe:44:78:fc:b6:47:0d:e4:a2:ab:62:9b: 26:4c:8c:ee:c6:6d:2c:80:cb:0c:01:b0:0f:3f:e8: 55:57:be:bd:3a:45:c2:19:f9:38:ed:2a:45:8b:a8: 54:bd:42:4f:b9:b1:1e:9b:88:65:21:ce:04:66:ca: f4:8c:63:1f:69:75:ae:e1:de:a9:9a:e8:d9:d5:51: 19:4a:3e:4b:3f:61:3f:c8:c4:26:8f:15:93:d3:e6: 57:c9:70:62:0f:c1:62:0a:57:64:b7:01:50:0e:d7: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CD:31:68:AD:DC:B2:4B:8E:C6:51:87:E5:61:2A:CB:8B:DA:8E:4A X509v3 Authority Key Identifier: keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:69:fb:82:3c:c1:e4:c3:06:97:0f:c6:78:6a:48:ea:df:f2: 78:91:ce:77:ce:06:9c:2b:19:31:56:04:51:a8:93:a1:28:16: 3e:82:99:99:2f:f6:df:88:f5:1f:6b:37:b9:9c:27:f4:44:95: f1:b1:69:ef:d5:4e:a3:18:d0:30:86:4a:74:1e:45:45:c4:3f: 79:1a:25:85:d5:62:cb:fc:c2:51:07:a5:3b:52:58:7c:dc:0a: c5:6c:10:11:a6:51:52:da:fd:17:9e:42:ef:e9:5d:77:b6:39: fc:4a:a2:98:e3:e2:d3:21:0c:58:21:73:10:c1:b2:90:c3:65: a3:1b:1d:25:ad:86:8e:dc:bb:25:99:bf:eb:56:36:b6:4a:77: 43:e6:ac:23:50:46:c4:4b:e5:a3:69:d1:a4:12:6d:9a:ed:37: 84:4c:30:22:c3:f4:5a:40:16:1c:8f:77:77:f4:b6:e9:35:7e: d1:e7:53:07:56:bc:1b:33:4d:19:4b:d3:6e:01:36:12:6d:1f: c1:0b:51:16:ac:6a:cb:14:0d:0a:5a:91:b8:a2:df:47:a8:e2: 7e:68:b5:91:38:44:9c:9c:d0:c4:e2:e6:bc:7b:20:21:51:47: 9d:7e:11:4f:4c:c8:92:b2:e3:b9:37:57:ff:16:df:c7:d6:58: 74:13:5a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0tyoWmMHX3sr5JdlQwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5 YzVhMWMwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD EyhhZmNkMzE2OGFkZGNiMjRiOGVjNjUxODdlNTYxMmFjYjhiZGE4ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWLYMpaW6ntVinw6/EVrnKwx91nz HCS75hI+RbLIYZfYRVVKKweeDl3EhmGIcxl9ZLAHKvdYNMEe/8A5syeqrVz7KVZq tVwYNSu6yZnyitgBjjWQHYa/CqIRMftr1KOyfvZXXWozpdU1gLIzCo0N/u9bMz2R f8LeegH4BkyCjj1PmtWRqCh1VwQ2Czlccx+7SMJAyOUd3O/+RHj8tkcN5KKrYpsm TIzuxm0sgMsMAbAPP+hVV769OkXCGfk47SpFi6hUvUJPubEem4hlIc4EZsr0jGMf aXWu4d6pmujZ1VEZSj5LP2E/yMQmjxWT0+ZXyXBiD8FiCldktwFQDte45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/NMWit3LJLjsZRh+VhKsuL2o5KMB8GA1UdIwQY MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt ZGMzYjYzMmU5ZTJiLzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2n7gjzB 5MMGlw/GeGpI6t/yeJHOd84GnCsZMVYEUaiToSgWPoKZmS/234j1H2s3uZwn9ESV 8bFp79VOoxjQMIZKdB5FRcQ/eRolhdViy/zCUQelO1JYfNwKxWwQEaZRUtr9F55C 7+ldd7Y5/EqimOPi0yEMWCFzEMGykMNloxsdJa2Gjty7JZm/61Y2tkp3Q+asI1BG xEvlo2nRpBJtmu03hEwwIsP0WkAWHI93d/S26TV+0edTB1a8GzNNGUvTbgE2Em0f wQtRFqxqyxQNClqRuKLfR6jifmi1kThEnJzQxOLmvHsgIVFHnX4RT0zIkrLjuTdX /xbfx9ZYdBNaMg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:07 2025 by rpki-client