This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json) Hash identifier: bedWgBc37r4zUAR0tX2jacJ9Jm90LH+99O109X1S4HQ= Subject key identifier: F1:6E:7D:C8:5D:36:52:70:8F:AC:82:12:35:F3:DF:38:F6:5C:56:21 Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Certificate serial: 019B57197E8EAF390089A1CA03550857FD01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft Manifest number: 0479 Signing time: Thu 25 Dec 2025 20:00:47 +0000 Manifest this update: Thu 25 Dec 2025 20:00:47 +0000 Manifest next update: Fri 26 Dec 2025 20:00:47 +0000 Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: ad5F2KldUVq1Wx4JsT55Z3a7zdkj6XvvQtYVKDJx0og=) 2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:19:7e:8e:af:39:00:89:a1:ca:03:55:08:57:fd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a Validity Not Before: Dec 25 20:00:47 2025 GMT Not After : Dec 26 20:00:47 2025 GMT Subject: CN=f16e7dc85d3652708fac821235f3df38f65c5621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:dd:21:c4:a9:7a:ca:5c:7f:80:2d:fd:87: dc:b4:20:12:4d:df:ee:3f:ef:2a:53:7c:05:d6:8c: 34:96:52:19:02:f5:55:81:70:c1:e1:fd:f4:bc:5c: f0:69:68:5d:02:18:07:ac:a3:76:33:68:68:47:44: a4:cb:ec:10:12:b2:86:95:3c:73:55:fc:43:93:3e: 15:14:ab:9e:60:12:55:f8:0e:29:d9:6c:c8:ec:22: 2a:93:3b:a3:9f:24:44:90:78:2f:80:e1:e2:a3:b6: c9:0f:c3:bf:3d:89:f6:57:39:44:a0:f0:e6:af:de: 79:ce:c3:cc:a3:cd:0c:a4:a5:0d:45:cc:48:9f:0a: 63:1a:69:3b:db:8b:ff:5d:75:e7:74:44:2d:0d:24: fc:a6:e9:35:dd:c5:0d:62:05:93:fc:6a:96:6a:8e: 2e:64:1f:48:0d:f7:b8:e1:78:99:b7:e0:e0:7d:9d: 8c:e9:6f:01:f1:02:d6:79:b8:5c:a6:a0:a1:06:34: 2b:48:2e:4d:b1:a0:5a:ed:62:75:af:51:81:d1:a0: 43:4b:cd:7e:dd:5d:2f:1b:22:5e:dd:9a:8c:9c:f8: b3:7a:a6:85:21:88:83:29:e6:c3:58:d8:5f:11:93: fd:c7:c7:97:df:3f:3c:35:48:28:d0:3f:58:07:e6: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6E:7D:C8:5D:36:52:70:8F:AC:82:12:35:F3:DF:38:F6:5C:56:21 X509v3 Authority Key Identifier: keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:e9:7e:81:12:0e:43:0c:53:74:43:d3:1d:c0:37:9e:6e: a7:e2:de:cd:db:07:9e:65:b6:93:2a:6a:5c:46:65:d3:9a:52: 6c:24:17:aa:10:c4:c1:b4:46:0b:cd:9f:2e:80:11:a3:f4:0d: 0a:9b:71:7e:7e:ca:6e:34:eb:cf:a6:fe:cd:d3:aa:f6:c9:1b: 78:d3:a2:72:bc:1b:3f:45:03:e6:98:ea:54:24:52:b9:b5:51: 26:e5:93:48:be:22:36:27:59:ca:fa:58:22:9a:d3:ee:43:56: 6d:b9:d6:94:cd:0c:4d:e7:fc:63:21:da:05:76:fb:da:34:5d: ef:ef:51:39:aa:ba:8c:a4:6e:e9:27:01:3a:38:c8:b2:45:90: 87:8a:c6:a2:89:7e:04:82:01:6e:5a:af:d5:99:10:eb:c1:58: 9a:4e:4a:0c:91:93:a4:20:eb:ef:17:c7:ba:d8:a9:12:f9:fa: ef:d5:9c:8d:67:07:40:75:d4:8d:dd:f3:98:d0:a8:c7:04:eb: 99:60:44:1f:17:f0:cc:db:b7:c4:20:ec:28:e6:c1:22:11:ac: 2c:8c:b7:a7:c4:01:b9:ae:8e:c4:cd:10:14:c0:7f:8d:19:dd: 9e:b9:e9:65:d3:ed:ba:5e:cf:b8:91:e2:ac:0e:ae:cc:02:8a: f3:5e:ae:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXGX6OrzkAiaHKA1UIV/0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU3ZGZjZDIwMGM4NWViM2NhYzY2Zjg1OWI3MTEwYWI5 OWIxMGEwHhcNMjUxMjI1MjAwMDQ3WhcNMjUxMjI2MjAwMDQ3WjAzMTEwLwYDVQQD EyhmMTZlN2RjODVkMzY1MjcwOGZhYzgyMTIzNWYzZGYzOGY2NWM1NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTHdIcSpespcf4At/YfctCASTd/u P+8qU3wF1ow0llIZAvVVgXDB4f30vFzwaWhdAhgHrKN2M2hoR0Sky+wQErKGlTxz VfxDkz4VFKueYBJV+A4p2WzI7CIqkzujnyREkHgvgOHio7bJD8O/PYn2VzlEoPDm r955zsPMo80MpKUNRcxInwpjGmk724v/XXXndEQtDST8puk13cUNYgWT/GqWao4u ZB9IDfe44XiZt+DgfZ2M6W8B8QLWebhcpqChBjQrSC5NsaBa7WJ1r1GB0aBDS81+ 3V0vGyJe3ZqMnPizeqaFIYiDKebDWNhfEZP9x8eX3z88NUgo0D9YB+Z49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFufchdNlJwj6yCEjXz3zj2XFYhMB8GA1UdIwQY MBaAFAqOffzSAMhes8rGb4WbcRCrmbEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQt YTQ3ZWI5MzI5NTk3LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjllZmYtYjYwOC00MWRmLTkxZDQtYTQ3ZWI5MzI5NTk3 LzEvQ281OV9OSUF5RjZ6eXNadmhadHhFS3Vac1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2rpfoES DkMMU3RD0x3AN55up+LezdsHnmW2kypqXEZl05pSbCQXqhDEwbRGC82fLoARo/QN Cptxfn7KbjTrz6b+zdOq9skbeNOicrwbP0UD5pjqVCRSubVRJuWTSL4iNidZyvpY IprT7kNWbbnWlM0MTef8YyHaBXb72jRd7+9ROaq6jKRu6ScBOjjIskWQh4rGool+ BIIBblqv1ZkQ68FYmk5KDJGTpCDr7xfHutipEvn679WcjWcHQHXUjd3zmNCoxwTr mWBEHxfwzNu3xCDsKObBIhGsLIy3p8QBua6OxM0QFMB/jRndnrnpZdPtul7PuJHi rA6uzAKK816uww== -----END CERTIFICATE-----Generated at Thu Dec 25 22:17:29 2025 by rpki-client