This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json) Hash identifier: lTGGmVQAkcZG0I13pm5SPn7E1wLtE2fffbz8O5/pZrU= Subject key identifier: EC:A3:CE:9E:7B:14:FD:3B:EA:C0:FE:3B:5B:33:12:26:7C:8A:00:39 Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Certificate serial: 019AF2ADD0E9708B88FB954AEE48AB60E6F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: mLUX2OfKsjBDTnKluMCTC0IHo7mQtY0+dL7EBb2e1TA=) 2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d0:e9:70:8b:88:fb:95:4a:ee:48:ab:60:e6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=eca3ce9e7b14fd3beac0fe3b5b3312267c8a0039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:fd:3a:d5:a9:12:d8:ab:b5:0a:08:52:8b: 6b:9a:fd:ff:8e:99:48:66:0e:92:cb:92:66:c7:7b: 30:28:8b:6e:59:76:eb:e1:d7:c4:97:7d:4f:aa:c4: fc:d4:91:fc:f0:c5:24:48:31:b6:1f:bc:68:93:c2: 08:ba:5a:cb:a4:c3:27:3e:49:0f:fd:03:e1:15:22: 40:ae:e2:22:8b:35:dc:4f:44:de:d7:b5:f5:9f:82: 98:aa:d2:ac:cb:1d:40:87:18:be:98:cc:2b:42:c0: d5:96:c8:c6:d3:5d:e0:6c:50:70:21:d6:cc:eb:e5: c1:21:7d:1d:f9:c2:f5:22:a0:66:cc:80:e4:a6:4f: 50:40:d9:b9:c4:e2:af:45:46:e4:09:66:b3:95:78: af:43:ae:42:e1:34:99:a9:ec:ea:e7:5a:28:ab:54: ac:8e:63:89:89:e0:1c:47:56:c4:02:52:8b:dd:f6: 06:94:fe:a2:2d:ce:70:da:07:61:04:0a:56:2d:bc: cc:43:05:d1:75:61:d6:2d:db:6d:70:de:2a:f6:45: 47:fd:4d:f8:a7:e4:bd:74:e6:ae:a4:13:1a:3f:9e: f9:11:ee:25:ab:aa:58:01:4e:a7:45:6f:57:6e:4b: 4c:75:fd:fe:db:e2:dd:b9:7a:37:ac:8c:a2:1d:22: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A3:CE:9E:7B:14:FD:3B:EA:C0:FE:3B:5B:33:12:26:7C:8A:00:39 X509v3 Authority Key Identifier: keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:c9:a9:2b:50:e7:7f:ea:e4:cf:26:5f:ca:94:4b:53:24: cf:ff:23:b0:bb:8d:9f:06:8e:af:24:9f:86:20:d0:d2:1a:87: 33:f0:db:34:b1:a4:7d:d0:91:d9:16:24:ad:7a:7f:57:42:0c: fd:1d:b9:22:83:23:98:0f:36:75:2d:73:9a:b0:ea:2a:47:d3: 0a:c5:af:6a:5e:b9:f6:17:41:cd:0d:0c:c4:50:87:b6:80:3d: b4:4f:7a:99:f6:a0:59:c5:ce:36:97:96:1b:4f:22:34:79:d0: dd:ac:d7:67:b0:fb:5c:97:e3:11:b7:39:41:8c:d5:f7:6f:4b: c0:e2:e4:bb:01:05:9f:a2:22:e8:fa:5e:e8:af:6e:ee:1a:07: 70:87:ff:09:63:36:96:20:5e:d9:7e:4d:0e:be:e9:2c:03:f6: 88:06:79:76:d3:a8:12:15:f4:73:0a:12:01:be:80:86:0f:18: 15:0b:6b:90:32:05:ec:1b:48:b1:15:b7:3c:dd:ce:79:0e:4c: 5e:47:1c:68:41:18:01:26:60:bd:b8:02:e5:31:9c:39:90:6d: ea:ef:88:81:6f:f1:8a:85:04:44:88:cc:0c:66:70:85:17:a9: 04:ab:cf:e2:f9:ef:9d:4a:a2:4b:28:b5:6e:d0:d6:45:3c:9a: 5c:8f:98:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdDpcIuI+5VK7kirYOb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5 OWIxMGEwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EyhlY2EzY2U5ZTdiMTRmZDNiZWFjMGZlM2I1YjMzMTIyNjdjOGEwMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUb9OtWpEtirtQoIUotrmv3/jplI Zg6Sy5Jmx3swKItuWXbr4dfEl31PqsT81JH88MUkSDG2H7xok8IIulrLpMMnPkkP /QPhFSJAruIiizXcT0Te17X1n4KYqtKsyx1Ahxi+mMwrQsDVlsjG013gbFBwIdbM 6+XBIX0d+cL1IqBmzIDkpk9QQNm5xOKvRUbkCWazlXivQ65C4TSZqezq51ooq1Ss jmOJieAcR1bEAlKL3fYGlP6iLc5w2gdhBApWLbzMQwXRdWHWLdttcN4q9kVH/U34 p+S9dOaupBMaP575Ee4lq6pYAU6nRW9XbktMdf3+2+LduXo3rIyiHSIdUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyjzp57FP076sD+O1szEiZ8igA5MB8GA1UdIwQY MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt YTQ3ZWI5MzI5NTk3LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3 LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7vJqStQ 53/q5M8mX8qUS1Mkz/8jsLuNnwaOrySfhiDQ0hqHM/DbNLGkfdCR2RYkrXp/V0IM /R25IoMjmA82dS1zmrDqKkfTCsWval659hdBzQ0MxFCHtoA9tE96mfagWcXONpeW G08iNHnQ3azXZ7D7XJfjEbc5QYzV929LwOLkuwEFn6Ii6Ppe6K9u7hoHcIf/CWM2 liBe2X5NDr7pLAP2iAZ5dtOoEhX0cwoSAb6Ahg8YFQtrkDIF7BtIsRW3PN3OeQ5M XkccaEEYASZgvbgC5TGcOZBt6u+IgW/xioUERIjMDGZwhRepBKvP4vnvnUqiSyi1 btDWRTyaXI+YZg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:33 2025 by rpki-client