This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json) Hash identifier: KqJuZDFboJJdW+ckNLk55ALfnHmCYL2pt3qGU6aQbJY= Subject key identifier: B8:03:44:72:E9:81:3F:7A:07:AC:F4:BA:11:1E:21:5A:7A:8A:BC:A3 Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Certificate serial: 019B3A21C5B99776866A0B475927CE8542C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft Manifest number: 12EE Signing time: Sat 20 Dec 2025 05:00:50 +0000 Manifest this update: Sat 20 Dec 2025 05:00:50 +0000 Manifest next update: Sun 21 Dec 2025 05:00:50 +0000 Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: xxfh0ZY80LcMUr40rjDUdJRIYroRdAgwzRTWyq+7z7U=) 2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:c5:b9:97:76:86:6a:0b:47:59:27:ce:85:42:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Validity Not Before: Dec 20 05:00:50 2025 GMT Not After : Dec 21 05:00:50 2025 GMT Subject: CN=b8034472e9813f7a07acf4ba111e215a7a8abca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:55:bf:99:f4:80:bc:c6:7d:7f:74:32:5f: 67:96:0d:82:03:ee:21:ad:07:00:0f:38:17:b6:b2: a4:f6:79:ed:ec:71:97:e8:f7:d6:cf:b3:0e:b0:46: a7:e9:11:5b:23:8c:03:b8:24:4f:33:87:69:d6:81: f0:e6:06:5f:75:3f:27:4f:6d:48:b4:13:08:07:55: f3:99:77:17:aa:d1:e5:27:81:4f:c3:57:d5:51:87: 70:57:a8:19:0c:74:e8:c1:0b:0a:02:43:00:e1:26: ce:c0:87:16:38:e1:70:6a:3c:ac:15:cc:38:34:0a: d0:50:c4:1d:f9:e9:b4:03:c8:54:4d:3f:b7:a7:51: 27:03:1e:a2:2d:a4:4e:d8:b3:a9:c3:4c:ab:af:11: 73:34:8e:4b:d2:2f:c5:72:18:5a:8a:44:2b:01:4f: cc:83:4a:9a:51:b3:f1:33:cb:d7:f3:85:e8:36:28: a9:aa:44:b2:f3:ce:68:fe:0a:03:8c:32:35:91:0d: 66:d6:4c:d8:6a:e5:a3:77:1f:9d:10:df:04:cb:5e: 2a:cb:bb:79:e3:18:82:88:96:77:06:3e:46:5c:41: 09:4d:20:9a:17:76:ab:e4:52:3b:e1:a4:c6:3c:2c: f9:c9:c6:57:14:71:ba:1d:f7:e6:dc:a0:bb:1a:32: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:03:44:72:E9:81:3F:7A:07:AC:F4:BA:11:1E:21:5A:7A:8A:BC:A3 X509v3 Authority Key Identifier: keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:27:12:44:62:31:73:27:d7:3f:8d:25:ca:06:42:47:f8:96: 26:2a:e7:94:99:20:db:2b:ea:13:ed:c2:55:df:1e:39:9a:63: 3b:be:20:f3:51:7e:37:8d:7b:33:07:7b:21:a0:f4:78:24:8b: f3:f3:f2:78:f8:19:b1:cb:97:27:d5:80:f6:72:31:b7:1f:8e: f9:ad:24:21:cb:22:81:5b:29:cb:a9:fa:6b:1f:fe:46:c2:a6: 97:d3:44:72:2e:19:f2:0d:20:3f:d9:2b:6e:84:9a:33:c4:40: 6e:1b:01:6e:d2:b3:0e:8a:24:3e:f8:41:b0:b3:42:b7:ff:ec: 98:15:a6:91:4f:bc:97:fa:87:c7:dd:3e:7a:0d:6a:01:68:fe: 0d:d7:fd:5f:7a:44:8b:90:09:b8:c5:9a:6c:e7:3c:7e:5f:6d: bb:30:c3:f9:2e:0d:5d:df:8f:ee:fa:ae:25:15:a0:59:7c:c0: dd:cf:0e:ee:33:97:fa:8b:28:46:5b:8b:75:51:1c:8b:38:6c: 3c:d8:da:24:82:74:14:32:1b:1d:0e:81:9f:ae:16:22:84:f2: 58:97:60:ef:77:12:0c:b5:e0:21:c6:c7:ba:69:0e:e7:3b:e1: 5e:a1:e4:d3:e3:d5:33:7e:15:27:37:2c:73:d6:88:33:08:57: 06:ee:4f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IcW5l3aGagtHWSfOhULEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz ZWY4MmEwHhcNMjUxMjIwMDUwMDUwWhcNMjUxMjIxMDUwMDUwWjAzMTEwLwYDVQQD EyhiODAzNDQ3MmU5ODEzZjdhMDdhY2Y0YmExMTFlMjE1YTdhOGFiY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zRVv5n0gLzGfX90Ml9nlg2CA+4h rQcADzgXtrKk9nnt7HGX6PfWz7MOsEan6RFbI4wDuCRPM4dp1oHw5gZfdT8nT21I tBMIB1XzmXcXqtHlJ4FPw1fVUYdwV6gZDHTowQsKAkMA4SbOwIcWOOFwajysFcw4 NArQUMQd+em0A8hUTT+3p1EnAx6iLaRO2LOpw0yrrxFzNI5L0i/FchhaikQrAU/M g0qaUbPxM8vX84XoNiipqkSy885o/goDjDI1kQ1m1kzYauWjdx+dEN8Ey14qy7t5 4xiCiJZ3Bj5GXEEJTSCaF3ar5FI74aTGPCz5ycZXFHG6Hffm3KC7GjL+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgDRHLpgT96B6z0uhEeIVp6iryjMB8GA1UdIwQY MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5 LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgycSRGIx cyfXP40lygZCR/iWJirnlJkg2yvqE+3CVd8eOZpjO74g81F+N417Mwd7IaD0eCSL 8/PyePgZscuXJ9WA9nIxtx+O+a0kIcsigVspy6n6ax/+RsKml9NEci4Z8g0gP9kr boSaM8RAbhsBbtKzDookPvhBsLNCt//smBWmkU+8l/qHx90+eg1qAWj+Ddf9X3pE i5AJuMWabOc8fl9tuzDD+S4NXd+P7vquJRWgWXzA3c8O7jOX+osoRluLdVEcizhs PNjaJIJ0FDIbHQ6Bn64WIoTyWJdg73cSDLXgIcbHumkO5zvhXqHk0+PVM34VJzcs c9aIMwhXBu5PUw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:48 2025 by rpki-client