This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: FLP9pecK4PRq3ParxmtkEbjVekQUudzucwkjBL4zy6Y=
Subject key identifier: E5:D1:D4:56:1F:1A:28:CE:BE:0E:A9:9B:E4:92:E3:4B:A7:24:52:C5
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019AF31BF04F2D013919CFD1FDFC50FF956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1282
Signing time: Sat 06 Dec 2025 10:01:25 +0000
Manifest this update: Sat 06 Dec 2025 10:01:25 +0000
Manifest next update: Sun 07 Dec 2025 10:01:25 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: MwIXXvKaSW1rclgwLVCFnRUo5Q4aPQ5tLh57DdxWbn8=)
2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:f0:4f:2d:01:39:19:cf:d1:fd:fc:50:ff:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Dec 6 10:01:25 2025 GMT
Not After : Dec 7 10:01:25 2025 GMT
Subject: CN=e5d1d4561f1a28cebe0ea99be492e34ba72452c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:d5:5e:66:45:43:b1:4f:b3:80:94:ca:74:
63:53:cb:46:86:b2:4d:77:35:c3:f9:95:63:c1:d3:
bd:4e:be:77:69:67:a1:88:be:57:0c:22:7c:70:0f:
4c:0e:85:25:0d:4a:4a:55:43:67:9e:10:e9:d5:ad:
da:97:ec:38:ee:d1:e0:da:15:a9:e6:95:62:5d:ed:
5d:08:a3:20:39:de:60:f5:3c:f9:23:bc:3c:b8:07:
2e:75:e1:af:28:12:31:0e:9e:1c:30:4a:cd:c8:ae:
7d:54:c1:0b:4b:7a:94:8a:f7:21:ad:43:5c:14:ed:
ba:a4:ec:2d:24:f0:ec:10:34:09:b0:89:3b:8d:9d:
1a:a9:8b:ac:68:9f:2d:f7:87:b7:86:71:77:79:2a:
d6:60:7e:3f:4c:35:69:b7:61:fa:58:d5:ec:b8:85:
a1:bf:8a:98:b0:90:dc:6f:21:b8:af:3f:15:49:ee:
43:a9:21:dd:5d:f7:7d:fa:99:a5:82:e3:3b:d0:c0:
a4:53:ba:17:b9:f5:b9:79:0e:89:32:10:5e:77:a3:
0d:6b:75:08:6f:f0:2c:bd:fd:1e:db:97:d2:20:bc:
b4:0d:d5:02:39:51:2e:4e:e4:47:74:75:11:25:bf:
cb:6f:ee:cb:80:8e:9a:97:cd:d8:3c:2b:4e:75:21:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:D4:56:1F:1A:28:CE:BE:0E:A9:9B:E4:92:E3:4B:A7:24:52:C5
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:38:7b:2c:83:35:cc:c3:44:38:42:f3:74:e5:bb:4d:67:15:
4c:9c:96:09:08:9a:22:b5:32:3b:e4:9e:22:84:10:fd:b9:f4:
ca:49:93:e0:b6:3a:7a:9a:66:ef:d0:e2:95:f9:00:ee:c9:72:
a9:6c:a1:f0:7b:71:c0:b1:19:de:fe:3a:e2:54:de:3f:2c:94:
23:e3:d2:ee:a4:58:08:45:73:b4:00:5a:59:0c:eb:87:63:d4:
f5:8d:7f:34:0a:a2:03:db:03:3d:ad:42:a6:fb:01:43:67:9b:
b0:cc:35:b8:07:94:08:7f:b8:79:24:be:0e:a1:cf:c5:21:e5:
99:94:92:36:6a:6c:1a:ea:a3:32:bf:47:ee:45:da:18:7d:c8:
31:0f:26:b9:80:02:95:60:36:96:66:82:52:7e:a9:de:b6:22:
12:43:f6:86:b5:43:77:53:19:be:7d:06:f3:a4:99:10:2d:f4:
73:b5:09:c2:6d:c1:79:e4:ae:0e:40:3e:81:03:1e:96:02:31:
c0:f9:6a:30:05:68:6f:b2:cd:f4:77:f7:38:60:a8:d3:80:25:
d2:84:09:f1:b0:77:8b:13:4a:d8:68:12:02:ea:57:d0:a3:d6:
51:3d:b9:aa:f3:f1:f7:99:2c:43:1e:3f:13:01:6d:1b:89:d8:
bf:19:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:00:59 2025 by rpki-client