This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json) Hash identifier: ZLOI8F73WFtwoNhZAUyxAOEDNXHwY9XM/vd+6vt+IIc= Subject key identifier: CF:24:4A:8E:69:31:BF:E2:9B:FB:79:40:F4:16:B1:1F:00:2C:72:43 Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Certificate serial: 019AF0BF994611F5B661188C08EAB261A7E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft Manifest number: 02E0 Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: iv8SyAOcRvl0nQo7gtPdgo7n3uCNNVZuf1F5ExC9e10=) 2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:99:46:11:f5:b6:61:18:8c:08:ea:b2:61:a7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=cf244a8e6931bfe29bfb7940f416b11f002c7243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:bc:05:c7:6d:60:43:ae:63:c4:16:77:93: 36:84:8a:72:2c:00:af:63:30:1d:74:9c:89:53:6d: 05:21:84:22:50:5f:57:79:5c:69:70:90:e1:6f:ad: b5:d8:8b:e1:8c:68:df:7c:26:33:1d:34:9a:9a:ef: cd:5d:43:9b:31:52:b1:ba:50:31:ee:e4:9c:dd:4f: 3f:44:16:27:23:c1:be:8b:11:b0:c0:73:80:24:b1: c9:45:53:e2:7e:82:43:c4:5d:35:25:83:d4:7e:dd: 4e:af:3c:9d:f0:e4:9c:d7:74:a6:66:75:f9:0d:e8: 2e:3e:aa:54:b7:5a:81:99:23:4f:9e:d9:7b:ec:99: 1b:cf:cc:bf:d7:5a:41:fe:a2:8a:9b:38:2a:87:eb: 5c:3c:f2:c4:7d:6c:af:31:d8:27:82:23:55:af:40: 8b:6f:15:f0:f0:0e:38:55:2f:a7:b1:80:e1:e9:46: 21:0b:6c:66:34:4e:14:13:10:05:b9:fb:e4:e6:4d: f0:9a:6e:99:a6:28:ec:98:13:47:d0:01:c5:c8:ba: ee:23:8b:56:71:bf:a5:c9:a0:6e:7d:21:de:fd:31: 88:34:ca:47:1c:80:77:e2:36:a7:1a:06:d9:65:b0: cb:cb:c4:56:3f:64:39:ba:2a:9a:7d:2c:12:f1:3c: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:24:4A:8E:69:31:BF:E2:9B:FB:79:40:F4:16:B1:1F:00:2C:72:43 X509v3 Authority Key Identifier: keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:58:6a:c7:f0:ad:55:e7:30:c5:35:8f:a6:f5:87:91:69:d0: 29:49:47:7a:ae:75:ba:67:df:67:12:74:87:4d:4a:85:cc:0e: 61:fd:58:c9:5d:64:7c:31:e1:b4:3b:bc:f8:1f:14:cc:71:85: 47:a6:87:fe:4d:e5:6d:60:d9:38:d5:b0:24:d3:74:52:7d:35: 5a:2d:a8:51:16:8a:d4:87:6b:e9:12:d0:2a:58:45:7d:cc:4f: ea:b5:66:84:6e:af:2e:b7:ee:57:9a:93:af:bb:94:44:a6:71: 0f:e5:7d:32:12:c5:90:d7:36:a6:33:55:3f:91:fe:f7:f4:a2: d5:23:ac:81:22:55:3f:9f:ad:ea:86:7d:61:7d:8e:2b:4d:47: e5:a2:2d:22:39:28:2b:96:b3:b8:50:bc:45:a7:07:cb:41:e4: 25:d0:58:c9:f9:1a:d4:f7:ae:ff:19:77:4a:d5:b4:81:4f:ff: 6b:94:ce:9e:85:9c:eb:74:bf:5b:ab:27:50:da:b5:d5:c4:f7: 8d:c3:db:00:30:4d:0f:25:7c:f4:fd:bf:ee:34:a4:b9:ae:c5: 36:64:c2:a9:22:79:2a:18:a2:29:82:d8:e8:22:3b:93:67:a1: 19:08:12:a1:95:e1:d3:80:3c:ea:23:61:5f:e3:48:86:92:b8: f1:fb:13:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5lGEfW2YRiMCOqyYafpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZWQxYTU2ODZiYTY4Mjg5YzZjZmU0YzdjMzZlMDM3YWRl MTFlY2EwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EyhjZjI0NGE4ZTY5MzFiZmUyOWJmYjc5NDBmNDE2YjExZjAwMmM3MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcm8BcdtYEOuY8QWd5M2hIpyLACv YzAddJyJU20FIYQiUF9XeVxpcJDhb6212IvhjGjffCYzHTSamu/NXUObMVKxulAx 7uSc3U8/RBYnI8G+ixGwwHOAJLHJRVPifoJDxF01JYPUft1Orzyd8OSc13SmZnX5 DeguPqpUt1qBmSNPntl77Jkbz8y/11pB/qKKmzgqh+tcPPLEfWyvMdgngiNVr0CL bxXw8A44VS+nsYDh6UYhC2xmNE4UExAFufvk5k3wmm6ZpijsmBNH0AHFyLruI4tW cb+lyaBufSHe/TGINMpHHIB34janGgbZZbDLy8RWP2Q5uiqafSwS8Tw7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8kSo5pMb/im/t5QPQWsR8ALHJDMB8GA1UdIwQY MBaAFAjtGlaGumgonGz+THw24Det4R7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQt OTBhYjc5ZTdlZTIzLzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQtOTBhYjc5ZTdlZTIz LzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1hqx/Ct VecwxTWPpvWHkWnQKUlHeq51umffZxJ0h01KhcwOYf1YyV1kfDHhtDu8+B8UzHGF R6aH/k3lbWDZONWwJNN0Un01Wi2oURaK1Idr6RLQKlhFfcxP6rVmhG6vLrfuV5qT r7uURKZxD+V9MhLFkNc2pjNVP5H+9/Si1SOsgSJVP5+t6oZ9YX2OK01H5aItIjko K5azuFC8RacHy0HkJdBYyfka1Peu/xl3StW0gU//a5TOnoWc63S/W6snUNq11cT3 jcPbADBNDyV89P2/7jSkua7FNmTCqSJ5KhiiKYLY6CI7k2ehGQgSoZXh04A86iNh X+NIhpK48fsTQw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:17 2025 by rpki-client