This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json) Hash identifier: 7jHsCrflaaxsJDUsuMyGGE5Rzg9bRLYz1Vh+dxx1MsQ= Subject key identifier: 42:2A:EC:86:6E:B9:F7:F0:A9:E3:87:A4:7D:6D:61:FE:B1:15:0A:98 Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Certificate serial: 019B5261555BADABCC1A0AB06747C119060C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft Manifest number: 14BE Signing time: Wed 24 Dec 2025 22:01:09 +0000 Manifest this update: Wed 24 Dec 2025 22:01:09 +0000 Manifest next update: Thu 25 Dec 2025 22:01:09 +0000 Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=) 2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 3NiNKZf4y3u8pGux+ReoLthoDW9jqUqW3ToR1YVFKDI=) 3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:55:5b:ad:ab:cc:1a:0a:b0:67:47:c1:19:06:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Validity Not Before: Dec 24 22:01:09 2025 GMT Not After : Dec 25 22:01:09 2025 GMT Subject: CN=422aec866eb9f7f0a9e387a47d6d61feb1150a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:b3:18:d7:82:dc:3a:67:fc:9d:52:76:82: f0:b8:03:e4:12:2c:82:b4:de:76:45:d4:a8:63:77: 1f:7f:6a:73:63:6b:09:8e:5e:4a:e4:1e:4f:43:6e: 98:78:25:59:a5:c7:6b:f8:b2:dd:af:cf:9d:73:73: e6:37:aa:69:8a:d5:b2:e6:94:bd:98:15:85:81:8c: 8f:4a:a2:7f:b0:f7:de:4a:e8:ae:a9:30:b7:68:93: c0:fb:28:b9:31:6f:45:8d:50:b6:90:52:7e:78:de: 18:b1:02:80:f8:26:7b:1a:ea:0e:16:04:a7:ce:b5: 9f:25:c3:ad:9f:88:8e:bb:a6:fa:6b:69:78:9b:da: b0:21:a0:e4:85:c9:0f:3e:b0:16:e8:a1:58:84:df: e6:8b:65:1f:12:b1:d4:99:ed:2e:8b:89:3d:f9:f4: 2a:98:b5:1f:4c:e6:a3:bd:6b:43:d5:56:9a:88:e3: 95:25:87:fe:27:c3:02:3e:ac:bf:e7:98:db:5a:23: 24:cc:aa:49:d8:ca:fc:ae:13:61:de:b5:c5:68:fb: 8f:5f:19:f1:94:dd:19:a2:b4:4b:55:25:50:bd:6a: 52:97:3e:c9:21:ff:29:87:22:d3:c0:02:55:a1:29: b1:74:27:16:f8:fc:27:13:11:b9:9e:25:c6:f4:fc: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:EC:86:6E:B9:F7:F0:A9:E3:87:A4:7D:6D:61:FE:B1:15:0A:98 X509v3 Authority Key Identifier: keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:dd:a5:5d:9b:e9:5a:db:02:03:25:51:c8:79:3f:24:6e:cd: 36:83:2c:fc:d0:3d:16:cd:18:5e:26:66:a7:70:a2:4b:40:48: 6e:e5:14:04:0c:ca:15:9f:51:17:e9:e1:1b:bf:1e:3e:88:c9: e7:5a:9d:62:1c:4f:fb:52:5b:33:5b:32:e9:80:75:0e:26:df: 91:37:3e:30:b7:d4:24:cf:6a:5d:fa:6a:a4:8f:c0:21:ce:7c: bb:52:6a:6d:c9:5a:66:c1:71:44:04:d4:e7:00:ee:29:47:15: 71:7e:c7:16:e3:d0:44:dc:4c:2e:35:c7:63:04:19:a8:86:c3: 55:fd:ef:7d:44:b4:e0:80:b0:3f:e6:c0:d2:17:ab:60:a4:2a: ea:67:72:39:48:fb:b5:0f:14:cc:8e:77:46:bc:9d:c8:4c:5a: dc:b3:6c:b8:52:b1:fe:fd:a2:8a:bc:c1:b5:d3:b8:ae:26:b8: bd:fb:f0:6f:70:55:76:ae:5c:1c:bd:39:ee:74:73:d3:b2:cc: 7a:55:e7:9e:e6:2c:8d:3c:1f:7b:ee:76:24:6c:bd:15:db:61: ff:c4:ec:97:95:1e:1e:58:c3:26:3b:37:22:92:9f:32:5d:c5: 9a:fc:b9:8c:08:9e:25:9e:df:3e:b5:9e:88:c6:f5:3f:24:77: f4:83:7c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYVVbravMGgqwZ0fBGQYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi YzJjOWMwHhcNMjUxMjI0MjIwMTA5WhcNMjUxMjI1MjIwMTA5WjAzMTEwLwYDVQQD Eyg0MjJhZWM4NjZlYjlmN2YwYTllMzg3YTQ3ZDZkNjFmZWIxMTUwYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9azGNeC3Dpn/J1SdoLwuAPkEiyC tN52RdSoY3cff2pzY2sJjl5K5B5PQ26YeCVZpcdr+LLdr8+dc3PmN6ppitWy5pS9 mBWFgYyPSqJ/sPfeSuiuqTC3aJPA+yi5MW9FjVC2kFJ+eN4YsQKA+CZ7GuoOFgSn zrWfJcOtn4iOu6b6a2l4m9qwIaDkhckPPrAW6KFYhN/mi2UfErHUme0ui4k9+fQq mLUfTOajvWtD1VaaiOOVJYf+J8MCPqy/55jbWiMkzKpJ2Mr8rhNh3rXFaPuPXxnx lN0ZorRLVSVQvWpSlz7JIf8phyLTwAJVoSmxdCcW+PwnExG5niXG9Px+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIq7IZuuffwqeOHpH1tYf6xFQqYMB8GA1UdIwQY MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN2lXZvp WtsCAyVRyHk/JG7NNoMs/NA9Fs0YXiZmp3CiS0BIbuUUBAzKFZ9RF+nhG78ePojJ 51qdYhxP+1JbM1sy6YB1DibfkTc+MLfUJM9qXfpqpI/AIc58u1JqbclaZsFxRATU 5wDuKUcVcX7HFuPQRNxMLjXHYwQZqIbDVf3vfUS04ICwP+bA0herYKQq6mdyOUj7 tQ8UzI53RrydyExa3LNsuFKx/v2iirzBtdO4ria4vfvwb3BVdq5cHL057nRz07LM elXnnuYsjTwfe+52JGy9Fdth/8Tsl5UeHljDJjs3IpKfMl3Fmvy5jAieJZ7fPrWe iMb1PyR39IN8IA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:07 2025 by rpki-client