This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json) Hash identifier: khjsarKACdX72VE8AhJ+rE/vfjjZZAI7KMJ4rQJCf0U= Subject key identifier: CF:B1:AE:90:8E:8A:CB:73:96:27:93:B6:86:AB:8C:1E:94:F2:55:21 Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Certificate serial: 019B3B34D83171E6A7036B107F79957F7ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft Manifest number: 0D07 Signing time: Sat 20 Dec 2025 10:01:17 +0000 Manifest this update: Sat 20 Dec 2025 10:01:17 +0000 Manifest next update: Sun 21 Dec 2025 10:01:17 +0000 Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: D8SX/07GVUd6vJP9r6jadbMEBE96srZCmch/3ZAEIVM=) 2: Uj6BezAzB94GByjzrVUNlk0ht78.roa (hash: dN/7lNPFzPzip+lXMHPQrtHop8fW612WIaM/9STYSBo=) 3: i6d_wSF6B7XpMiMocY9g5Bflzus.roa (hash: Ie39FF54w1T4xPfnonYM6fmqfVN96lUmKfBb590VzVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:d8:31:71:e6:a7:03:6b:10:7f:79:95:7f:7a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Validity Not Before: Dec 20 10:01:17 2025 GMT Not After : Dec 21 10:01:17 2025 GMT Subject: CN=cfb1ae908e8acb73962793b686ab8c1e94f25521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:89:0a:6d:9f:14:f6:6b:86:d7:47:04:77:e2: ba:0c:45:35:46:0d:43:6c:0c:07:e2:e6:8b:3a:ed: 58:b2:7a:1e:38:81:9f:ca:e9:bb:ff:16:cc:86:d1: 63:e9:e3:b8:57:0a:4e:c2:0b:08:6b:e3:73:82:51: 27:47:c8:20:17:c3:64:d4:ff:8d:d3:3d:35:cf:3e: 88:11:38:27:08:ad:aa:55:4f:b8:d2:f7:fb:2a:ad: ef:34:75:33:11:78:2a:70:89:ec:9c:c3:6b:76:c5: af:0e:e1:30:d5:75:c6:41:ac:0d:a8:79:e7:5c:20: 25:c2:53:10:37:e5:0f:5b:b7:79:f2:6b:66:48:56: b5:cf:90:ad:d6:84:a3:02:cd:22:3e:8b:32:6a:da: 6f:6f:f8:61:9c:da:d2:fb:74:e8:cd:1a:6e:1a:42: d3:35:6b:aa:31:87:bf:0f:fe:f9:17:d3:54:94:0f: 11:b8:e3:9f:95:81:14:78:cf:d6:22:60:30:45:0b: a5:10:5a:ca:c2:41:62:d9:e3:b8:a7:2a:1d:d8:ec: d3:68:94:51:0a:cb:17:5b:95:62:48:66:2e:9e:35: 9d:74:02:67:bf:a7:dc:7b:5e:32:0f:02:07:8e:06: 7f:3b:cb:01:94:d8:5e:88:79:00:18:b5:f1:d9:2e: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:AE:90:8E:8A:CB:73:96:27:93:B6:86:AB:8C:1E:94:F2:55:21 X509v3 Authority Key Identifier: keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:12:bc:6c:2c:75:4d:f0:6d:1a:8f:0a:ad:cd:ca:d8:48: 52:17:57:96:1b:50:a1:f1:46:7c:ab:28:18:f8:ed:ce:11:d2: dd:44:2a:14:a3:5a:e6:c7:8a:00:d4:13:f8:dc:e1:d7:72:39: f7:30:05:1e:5e:68:d2:35:85:a7:41:af:0c:6f:59:57:7d:fa: 6a:d0:fb:f9:18:d5:a5:a5:1e:e1:86:85:21:32:6b:8a:b0:87: b0:fa:52:7c:79:f5:56:9d:19:9c:90:23:14:5a:43:29:e6:e9: 37:88:0e:fa:e3:e6:07:30:f2:35:90:d9:88:1e:d3:0f:21:87: 1b:96:99:1d:3e:0d:79:11:6e:60:a3:ce:18:91:77:21:9e:bf: 13:58:6c:6c:11:03:a3:96:8d:28:75:0f:09:db:0e:b8:70:78: 63:63:0f:4a:a6:b1:8a:e6:0a:60:b0:9c:b7:12:0e:bb:49:10: 21:e5:b1:56:ac:67:ab:07:1d:96:1f:eb:78:bb:a3:03:3a:ec: ca:aa:51:aa:74:76:92:75:02:cd:72:57:b4:90:51:17:60:83: c1:89:39:e2:47:2d:a6:f6:cb:e6:0d:11:8a:db:f6:b4:2f:8c: 43:d6:96:b7:29:93:65:34:68:73:e1:06:92:15:8f:61:c4:3f: 4e:64:29:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNgxceanA2sQf3mVf3rNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl NzU4MjAwHhcNMjUxMjIwMTAwMTE3WhcNMjUxMjIxMTAwMTE3WjAzMTEwLwYDVQQD EyhjZmIxYWU5MDhlOGFjYjczOTYyNzkzYjY4NmFiOGMxZTk0ZjI1NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5okKbZ8U9muG10cEd+K6DEU1Rg1D bAwH4uaLOu1YsnoeOIGfyum7/xbMhtFj6eO4VwpOwgsIa+NzglEnR8ggF8Nk1P+N 0z01zz6IETgnCK2qVU+40vf7Kq3vNHUzEXgqcInsnMNrdsWvDuEw1XXGQawNqHnn XCAlwlMQN+UPW7d58mtmSFa1z5Ct1oSjAs0iPosyatpvb/hhnNrS+3TozRpuGkLT NWuqMYe/D/75F9NUlA8RuOOflYEUeM/WImAwRQulEFrKwkFi2eO4pyod2OzTaJRR CssXW5ViSGYunjWddAJnv6fce14yDwIHjgZ/O8sBlNheiHkAGLXx2S4bLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+xrpCOistzlieTtoarjB6U8lUhMB8GA1UdIwQY MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4 LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaoSvGws dU3wbRqPCq3NythIUhdXlhtQofFGfKsoGPjtzhHS3UQqFKNa5seKANQT+Nzh13I5 9zAFHl5o0jWFp0GvDG9ZV336atD7+RjVpaUe4YaFITJrirCHsPpSfHn1Vp0ZnJAj FFpDKebpN4gO+uPmBzDyNZDZiB7TDyGHG5aZHT4NeRFuYKPOGJF3IZ6/E1hsbBED o5aNKHUPCdsOuHB4Y2MPSqaxiuYKYLCctxIOu0kQIeWxVqxnqwcdlh/reLujAzrs yqpRqnR2knUCzXJXtJBRF2CDwYk54kctpvbL5g0Ritv2tC+MQ9aWtymTZTRoc+EG khWPYcQ/TmQpkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:10 2025 by rpki-client