This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json) Hash identifier: FLP9pecK4PRq3ParxmtkEbjVekQUudzucwkjBL4zy6Y= Subject key identifier: E5:D1:D4:56:1F:1A:28:CE:BE:0E:A9:9B:E4:92:E3:4B:A7:24:52:C5 Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Certificate serial: 019AF31BF04F2D013919CFD1FDFC50FF956C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft Manifest number: 1282 Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: MwIXXvKaSW1rclgwLVCFnRUo5Q4aPQ5tLh57DdxWbn8=) 2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f0:4f:2d:01:39:19:cf:d1:fd:fc:50:ff:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=e5d1d4561f1a28cebe0ea99be492e34ba72452c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:d5:5e:66:45:43:b1:4f:b3:80:94:ca:74: 63:53:cb:46:86:b2:4d:77:35:c3:f9:95:63:c1:d3: bd:4e:be:77:69:67:a1:88:be:57:0c:22:7c:70:0f: 4c:0e:85:25:0d:4a:4a:55:43:67:9e:10:e9:d5:ad: da:97:ec:38:ee:d1:e0:da:15:a9:e6:95:62:5d:ed: 5d:08:a3:20:39:de:60:f5:3c:f9:23:bc:3c:b8:07: 2e:75:e1:af:28:12:31:0e:9e:1c:30:4a:cd:c8:ae: 7d:54:c1:0b:4b:7a:94:8a:f7:21:ad:43:5c:14:ed: ba:a4:ec:2d:24:f0:ec:10:34:09:b0:89:3b:8d:9d: 1a:a9:8b:ac:68:9f:2d:f7:87:b7:86:71:77:79:2a: d6:60:7e:3f:4c:35:69:b7:61:fa:58:d5:ec:b8:85: a1:bf:8a:98:b0:90:dc:6f:21:b8:af:3f:15:49:ee: 43:a9:21:dd:5d:f7:7d:fa:99:a5:82:e3:3b:d0:c0: a4:53:ba:17:b9:f5:b9:79:0e:89:32:10:5e:77:a3: 0d:6b:75:08:6f:f0:2c:bd:fd:1e:db:97:d2:20:bc: b4:0d:d5:02:39:51:2e:4e:e4:47:74:75:11:25:bf: cb:6f:ee:cb:80:8e:9a:97:cd:d8:3c:2b:4e:75:21: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:D4:56:1F:1A:28:CE:BE:0E:A9:9B:E4:92:E3:4B:A7:24:52:C5 X509v3 Authority Key Identifier: keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:38:7b:2c:83:35:cc:c3:44:38:42:f3:74:e5:bb:4d:67:15: 4c:9c:96:09:08:9a:22:b5:32:3b:e4:9e:22:84:10:fd:b9:f4: ca:49:93:e0:b6:3a:7a:9a:66:ef:d0:e2:95:f9:00:ee:c9:72: a9:6c:a1:f0:7b:71:c0:b1:19:de:fe:3a:e2:54:de:3f:2c:94: 23:e3:d2:ee:a4:58:08:45:73:b4:00:5a:59:0c:eb:87:63:d4: f5:8d:7f:34:0a:a2:03:db:03:3d:ad:42:a6:fb:01:43:67:9b: b0:cc:35:b8:07:94:08:7f:b8:79:24:be:0e:a1:cf:c5:21:e5: 99:94:92:36:6a:6c:1a:ea:a3:32:bf:47:ee:45:da:18:7d:c8: 31:0f:26:b9:80:02:95:60:36:96:66:82:52:7e:a9:de:b6:22: 12:43:f6:86:b5:43:77:53:19:be:7d:06:f3:a4:99:10:2d:f4: 73:b5:09:c2:6d:c1:79:e4:ae:0e:40:3e:81:03:1e:96:02:31: c0:f9:6a:30:05:68:6f:b2:cd:f4:77:f7:38:60:a8:d3:80:25: d2:84:09:f1:b0:77:8b:13:4a:d8:68:12:02:ea:57:d0:a3:d6: 51:3d:b9:aa:f3:f1:f7:99:2c:43:1e:3f:13:01:6d:1b:89:d8: bf:19:97:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/BPLQE5Gc/R/fxQ/5VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz NzNmMjcwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD EyhlNWQxZDQ1NjFmMWEyOGNlYmUwZWE5OWJlNDkyZTM0YmE3MjQ1MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnvVXmZFQ7FPs4CUynRjU8tGhrJN dzXD+ZVjwdO9Tr53aWehiL5XDCJ8cA9MDoUlDUpKVUNnnhDp1a3al+w47tHg2hWp 5pViXe1dCKMgOd5g9Tz5I7w8uAcudeGvKBIxDp4cMErNyK59VMELS3qUivchrUNc FO26pOwtJPDsEDQJsIk7jZ0aqYusaJ8t94e3hnF3eSrWYH4/TDVpt2H6WNXsuIWh v4qYsJDcbyG4rz8VSe5DqSHdXfd9+pmlguM70MCkU7oXufW5eQ6JMhBed6MNa3UI b/Asvf0e25fSILy0DdUCOVEuTuRHdHURJb/Lb+7LgI6al83YPCtOdSGVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXR1FYfGijOvg6pm+SS40unJFLFMB8GA1UdIwQY MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDh7LIM1 zMNEOELzdOW7TWcVTJyWCQiaIrUyO+SeIoQQ/bn0ykmT4LY6eppm79DilfkA7sly qWyh8HtxwLEZ3v464lTePyyUI+PS7qRYCEVztABaWQzrh2PU9Y1/NAqiA9sDPa1C pvsBQ2ebsMw1uAeUCH+4eSS+DqHPxSHlmZSSNmpsGuqjMr9H7kXaGH3IMQ8muYAC lWA2lmaCUn6p3rYiEkP2hrVDd1MZvn0G86SZEC30c7UJwm3BeeSuDkA+gQMelgIx wPlqMAVob7LN9Hf3OGCo04Al0oQJ8bB3ixNK2GgSAupX0KPWUT25qvPx95ksQx4/ EwFtG4nYvxmXyw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:59 2025 by rpki-client