This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json) Hash identifier: W2Ospm7imud7bAqYKYXpNpqmrPnmOeJuxhGqTrDNBGs= Subject key identifier: A2:0A:6E:5B:10:25:AB:CE:EC:D1:B1:AD:8C:86:2A:9E:C8:A8:9F:AF Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b Certificate serial: 019AF19B0FE0FED4EBB64E6FA94E602875D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=) 2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: aEM4corM/sBK1QFgykQGSzKU6LvuFMDijjuQCDo8obo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0f:e0:fe:d4:eb:b6:4e:6f:a9:4e:60:28:75:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=a20a6e5b1025abceecd1b1ad8c862a9ec8a89faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:25:58:43:5d:1d:b7:18:17:06:7b:ee:cb: f1:49:2b:70:2a:8f:02:bc:ad:ed:93:ad:10:00:f6: 82:0d:9d:9d:81:25:74:69:92:7f:cb:5b:3f:df:f3: 6c:c7:48:7c:b6:3e:34:74:ef:c8:a0:84:c9:50:a6: c0:3c:64:bb:d5:2f:45:ac:08:d5:ca:f4:50:bb:1f: 07:c6:24:87:20:16:97:90:4a:cc:ba:ab:80:e7:b6: a7:24:16:67:e1:38:83:81:b4:53:30:8c:d2:2d:b3: de:39:b8:54:a1:a5:30:e6:bc:c8:51:58:a4:7a:be: f0:d9:34:13:48:e3:0f:32:a6:e3:54:43:6a:8c:62: 46:ea:fd:29:ef:c6:08:12:86:d4:01:12:83:7a:65: 31:db:0a:24:ba:b7:eb:db:b6:eb:3e:c6:64:30:f9: e5:2a:5b:7b:97:2c:86:06:1e:7c:1c:35:b1:d7:27: 90:20:2f:be:ce:29:9b:10:1b:64:d4:66:51:09:89: 6b:69:6c:a0:76:b4:63:d7:86:24:3c:70:a2:62:f5: 2b:9c:ec:ed:2e:bc:3c:6c:9d:ac:b7:31:1a:82:d7: 7a:77:6b:45:99:f2:2b:9a:89:0e:ce:d0:09:36:c9: 48:5e:b2:4d:97:3c:89:3d:39:a4:ff:c9:f8:fa:f9: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:6E:5B:10:25:AB:CE:EC:D1:B1:AD:8C:86:2A:9E:C8:A8:9F:AF X509v3 Authority Key Identifier: keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a9:d9:13:32:3e:79:b8:8f:9e:45:3f:01:e1:c1:e4:82:f2: 13:8d:e5:52:2f:f0:31:95:83:12:76:b2:29:fb:e4:76:51:f1: a3:eb:cb:56:5c:31:e7:cb:e1:9d:b4:9c:4c:67:b2:66:42:ef: cc:d0:84:61:da:ea:97:75:44:06:94:c6:99:3a:43:d2:1b:02: 81:5d:a6:4e:5a:81:b6:1f:30:c3:ba:03:f1:b7:72:12:5a:86: d0:a3:2a:34:b3:dc:30:7a:1f:9d:5c:cd:fa:43:62:98:6a:84: 8e:8b:a0:ae:11:cf:c4:47:7c:69:29:82:dc:cb:a2:34:7b:0b: ae:fd:f8:f5:b5:a7:ee:1b:d6:76:24:bb:9e:27:d2:83:e6:55: 98:69:4a:d5:e0:4c:30:fd:85:62:b8:d0:99:e2:17:80:a3:c3: 83:2e:af:9a:14:dc:1a:f1:51:98:99:64:33:b4:0a:6f:b2:0d: 9f:80:4b:5c:59:bf:74:d9:1e:5c:cc:55:9a:29:f0:76:46:07: 95:75:f6:55:d0:ed:c9:a4:99:1e:fc:47:06:12:1a:dd:d3:18: 20:ca:70:56:0f:b5:83:ab:53:88:d2:4a:e1:e5:a5:46:e3:1f: 05:92:1c:07:26:40:2b:bd:cc:1f:37:40:31:e1:71:45:e8:22: 24:89:0e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw/g/tTrtk5vqU5gKHXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx NjFiOWIwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EyhhMjBhNmU1YjEwMjVhYmNlZWNkMWIxYWQ4Yzg2MmE5ZWM4YTg5ZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgclWENdHbcYFwZ77svxSStwKo8C vK3tk60QAPaCDZ2dgSV0aZJ/y1s/3/Nsx0h8tj40dO/IoITJUKbAPGS71S9FrAjV yvRQux8HxiSHIBaXkErMuquA57anJBZn4TiDgbRTMIzSLbPeObhUoaUw5rzIUVik er7w2TQTSOMPMqbjVENqjGJG6v0p78YIEobUARKDemUx2wokurfr27brPsZkMPnl Klt7lyyGBh58HDWx1yeQIC++zimbEBtk1GZRCYlraWygdrRj14YkPHCiYvUrnOzt Lrw8bJ2stzEagtd6d2tFmfIrmokOztAJNslIXrJNlzyJPTmk/8n4+vnVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIKblsQJavO7NGxrYyGKp7IqJ+vMB8GA1UdIwQY MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtanZEzI+ ebiPnkU/AeHB5ILyE43lUi/wMZWDEnayKfvkdlHxo+vLVlwx58vhnbScTGeyZkLv zNCEYdrql3VEBpTGmTpD0hsCgV2mTlqBth8ww7oD8bdyElqG0KMqNLPcMHofnVzN +kNimGqEjougrhHPxEd8aSmC3MuiNHsLrv349bWn7hvWdiS7nifSg+ZVmGlK1eBM MP2FYrjQmeIXgKPDgy6vmhTcGvFRmJlkM7QKb7INn4BLXFm/dNkeXMxVminwdkYH lXX2VdDtyaSZHvxHBhIa3dMYIMpwVg+1g6tTiNJK4eWlRuMfBZIcByZAK73MHzdA MeFxRegiJIkOmA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:54 2025 by rpki-client