This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json) Hash identifier: gOZmly4lfU6mUgADCGitXEe2fsL3V2IM3YO8wDlp+pI= Subject key identifier: 36:91:D5:63:6E:24:FD:DC:E5:EF:05:57:5C:8C:C2:FB:2C:3B:23:97 Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Certificate serial: 019B766E210C9153DA1F47F7C8ABFE0F60EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft Manifest number: 12C6 Signing time: Wed 31 Dec 2025 22:01:27 +0000 Manifest this update: Wed 31 Dec 2025 22:01:27 +0000 Manifest next update: Thu 01 Jan 2026 22:01:27 +0000 Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: tZBg+ICeIBj8IlZ5rw+WCI53sWMO5R3Z9Tzhn9fKL4Y=) 2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:21:0c:91:53:da:1f:47:f7:c8:ab:fe:0f:60:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27 Validity Not Before: Dec 31 22:01:27 2025 GMT Not After : Jan 1 22:01:27 2026 GMT Subject: CN=3691d5636e24fddce5ef05575c8cc2fb2c3b2397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:6f:d7:c9:40:06:9a:55:67:64:f3:d5:7f: 18:5b:ca:39:31:4c:03:11:74:f1:75:0f:50:f3:43: e3:85:e4:e9:e1:59:b7:9b:11:81:25:02:dd:3c:77: 68:77:94:bd:07:35:1a:6a:ea:68:0a:f9:5d:98:89: db:87:86:2e:df:07:e6:17:38:2a:40:56:e7:05:19: 90:d3:3e:8b:09:60:54:89:14:fa:57:0b:91:8f:ba: 30:c6:24:dd:4b:97:71:64:83:b0:04:f5:4b:58:aa: 5f:0f:2c:ac:50:b3:bc:b3:01:b8:f4:fc:e0:db:eb: cd:8a:8c:e5:e3:63:9f:85:82:22:43:81:a0:8b:d9: 2a:ff:f7:65:23:82:fc:29:24:46:84:be:9a:6d:69: 0d:59:03:80:4d:1d:74:7c:01:9e:89:c5:8b:ce:d6: d7:57:5b:95:95:8f:18:09:3b:67:78:f5:c8:0d:42: 93:d3:0c:ba:be:cb:53:54:39:a5:b6:c0:55:67:ce: 01:b2:bc:f3:74:2b:66:c7:3b:24:93:35:bd:75:a9: be:2e:26:5d:d4:68:35:a9:b0:6b:03:f5:a3:ef:94: f1:b5:46:98:28:18:dd:b4:71:23:60:de:ce:28:f1: ab:16:58:2b:58:c3:4a:fc:b4:31:96:ac:8e:6e:af: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:D5:63:6E:24:FD:DC:E5:EF:05:57:5C:8C:C2:FB:2C:3B:23:97 X509v3 Authority Key Identifier: keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:79:cc:ba:9e:ca:9b:e6:9e:01:dd:90:1d:65:06:b2:8c:e0: fc:44:e9:2a:4e:fd:9f:e0:0a:f9:8d:5b:fb:c5:a2:90:23:f6: ee:58:2d:a7:49:44:7b:71:02:db:0b:a7:78:d3:49:4a:da:a5: f9:7c:d8:2f:59:88:bc:21:5f:47:19:92:7d:94:b0:65:af:d5: 1e:8b:e1:a9:e1:5a:68:7b:f7:2b:9b:3a:37:df:64:85:7c:ef: a4:04:71:d5:aa:4a:8b:f1:87:b0:61:a4:87:f9:c7:91:e5:fb: 21:38:1e:21:04:fb:19:e9:62:02:8d:1a:0e:18:c6:94:9d:e9: 5b:25:5c:94:0b:fd:fb:39:bc:82:a7:39:2b:b1:9b:ba:bc:5f: 1e:bc:67:6f:3a:65:92:30:77:a0:a8:10:1d:24:84:ef:35:98: 64:15:82:98:bd:2f:62:3e:58:d6:b5:4b:08:92:27:12:db:92: 5c:94:da:8c:b0:00:e0:63:f6:fe:8b:d9:f5:2d:b4:f6:eb:7a: a3:88:e6:f4:92:4f:86:b5:43:0c:35:a4:78:2a:b7:0f:11:94: 3b:60:76:10:a4:40:2e:5c:ce:45:7b:37:ee:a3:12:85:02:d0: 2f:c6:a8:8a:a3:b7:60:ec:f4:a9:f5:d6:a2:38:4d:06:52:ff: a9:55:ea:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2biEMkVPaH0f3yKv+D2DvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGJjYTFhMGU4NjQ0OGI3M2RhNTRjNDJjYjBkNzU3NjUz NzNmMjcwHhcNMjUxMjMxMjIwMTI3WhcNMjYwMTAxMjIwMTI3WjAzMTEwLwYDVQQD EygzNjkxZDU2MzZlMjRmZGRjZTVlZjA1NTc1YzhjYzJmYjJjM2IyMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXlv18lABppVZ2Tz1X8YW8o5MUwD EXTxdQ9Q80PjheTp4Vm3mxGBJQLdPHdod5S9BzUaaupoCvldmInbh4Yu3wfmFzgq QFbnBRmQ0z6LCWBUiRT6VwuRj7owxiTdS5dxZIOwBPVLWKpfDyysULO8swG49Pzg 2+vNiozl42OfhYIiQ4Ggi9kq//dlI4L8KSRGhL6abWkNWQOATR10fAGeicWLztbX V1uVlY8YCTtnePXIDUKT0wy6vstTVDmltsBVZ84BsrzzdCtmxzskkzW9dam+LiZd 1Gg1qbBrA/Wj75TxtUaYKBjdtHEjYN7OKPGrFlgrWMNK/LQxlqyObq9NwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaR1WNuJP3c5e8FV1yMwvssOyOXMB8GA1UdIwQY MBaAFAqLyhoOhkSLc9pUxCyw11dlNz8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAt YTc5OTA2MjU4OWEzLzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xODZmZDQtM2M2NC00ZGJmLWE5MDAtYTc5OTA2MjU4OWEz LzEvQ292S0dnNkdSSXR6MmxURUxMRFhWMlUzUHljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHnMup7K m+aeAd2QHWUGsozg/ETpKk79n+AK+Y1b+8WikCP27lgtp0lEe3EC2wuneNNJStql +XzYL1mIvCFfRxmSfZSwZa/VHovhqeFaaHv3K5s6N99khXzvpARx1apKi/GHsGGk h/nHkeX7ITgeIQT7GeliAo0aDhjGlJ3pWyVclAv9+zm8gqc5K7GburxfHrxnbzpl kjB3oKgQHSSE7zWYZBWCmL0vYj5Y1rVLCJInEtuSXJTajLAA4GP2/ovZ9S209ut6 o4jm9JJPhrVDDDWkeCq3DxGUO2B2EKRALlzORXs37qMShQLQL8aoiqO3YOz0qfXW ojhNBlL/qVXqEw== -----END CERTIFICATE-----Generated at Thu Jan 1 00:46:32 2026 by rpki-client