This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json) Hash identifier: CWkRGsmZScCiFE7Ns11NHWRI0P1LPcV3mPwXufaTQgs= Subject key identifier: 69:DC:88:CE:19:F5:65:F5:48:4E:22:49:85:78:6B:1B:52:D2:A1:E1 Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Certificate serial: 019B41DB9A3F2776CE76B12BE23BE81F102C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft Manifest number: 030A Signing time: Sun 21 Dec 2025 17:01:09 +0000 Manifest this update: Sun 21 Dec 2025 17:01:09 +0000 Manifest next update: Mon 22 Dec 2025 17:01:09 +0000 Files and hashes: 1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: Zk3Eou+rDFU+PYa9BnxEb2GFOGgJGvAhjH4X1w0vrBY=) 2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:9a:3f:27:76:ce:76:b1:2b:e2:3b:e8:1f:10:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Validity Not Before: Dec 21 17:01:09 2025 GMT Not After : Dec 22 17:01:09 2025 GMT Subject: CN=69dc88ce19f565f5484e224985786b1b52d2a1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:2b:cb:98:7e:de:46:3c:e6:de:6c:87:8c: 0b:5b:15:65:e3:96:8f:0a:50:29:ef:7d:04:33:7a: be:80:8f:3a:1c:60:1e:5e:cd:6f:a7:b8:2d:b3:8e: f1:7b:56:d7:ec:39:99:cb:e0:15:79:83:a2:f8:32: dd:64:9d:5a:4c:56:b1:76:f7:a7:ce:2d:48:0c:0b: 8e:3e:00:69:e4:48:e4:8b:d2:b8:6f:1b:b5:72:c2: 5c:58:96:96:f0:9a:9c:df:a0:5f:62:0e:4c:ff:75: 58:9b:49:72:b9:86:90:24:02:92:af:f8:59:1c:6a: 6b:e7:02:fb:e9:b6:c8:7f:6c:f9:9a:1c:15:ac:00: 85:0d:9e:05:94:63:05:fd:c7:5b:9b:42:42:70:f2: 5d:27:4e:ce:f9:02:88:68:be:46:db:6e:d6:e5:90: 7c:95:72:ee:cc:24:5e:43:77:17:04:ed:fd:f1:51: e3:c9:8e:10:6b:7d:8e:a3:53:42:b0:21:c5:41:f9: 6d:95:29:fc:e6:91:00:89:80:03:f6:7e:7d:cd:6f: bc:90:4b:74:16:6a:39:02:fa:19:c3:c9:bf:04:df: 63:06:0c:9e:a5:2f:c9:96:ce:e1:25:08:d0:69:39: 42:b5:60:2c:09:3f:c9:d6:c3:68:8e:48:7b:ee:bf: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:88:CE:19:F5:65:F5:48:4E:22:49:85:78:6B:1B:52:D2:A1:E1 X509v3 Authority Key Identifier: keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:98:cb:a1:4b:9d:0d:a7:97:3d:6b:d6:77:1c:46:25:c6:05: dc:9a:90:40:de:8a:12:b2:e8:ac:1d:29:ac:c0:9d:88:35:3b: 94:61:56:88:cb:9a:90:d2:b8:48:9c:00:7b:88:b4:0b:c0:9c: 1e:e3:35:10:d2:f4:a6:e6:e2:b4:af:56:9e:e1:28:04:c8:cf: 8e:ae:3b:24:d8:0a:fd:b3:3e:f5:3b:44:0f:6a:c4:e2:55:93: b0:fa:c4:f6:b4:ec:f7:8d:43:3e:df:b5:d2:30:a4:c8:d3:78: 5b:56:fd:42:6e:6a:73:b0:af:c4:fb:3d:4d:cf:da:09:fe:8e: ec:61:27:71:61:74:81:4d:32:c0:2c:b1:00:72:d0:33:c8:92: 5a:90:80:e1:f2:88:1a:f2:8a:0c:d9:89:6a:b5:73:a0:1c:98: 84:15:b0:6a:60:b8:2c:77:a6:da:14:46:ba:9c:c6:61:d0:b3: d1:2d:82:9b:a7:21:f5:9c:f6:e0:01:e1:63:c2:df:6a:b1:a4: ef:99:33:04:84:37:3e:b0:cc:9a:cd:7a:0f:2d:42:0e:27:28: ca:61:e4:39:55:09:95:2e:c5:f5:14:c2:48:10:04:23:87:e6: f7:90:5a:a8:a1:14:45:19:76:a9:57:2c:2e:2c:0c:c0:78:97: 7e:32:ca:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25o/J3bOdrEr4jvoHxAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZWQxYTU2ODZiYTY4Mjg5YzZjZmU0YzdjMzZlMDM3YWRl MTFlY2EwHhcNMjUxMjIxMTcwMTA5WhcNMjUxMjIyMTcwMTA5WjAzMTEwLwYDVQQD Eyg2OWRjODhjZTE5ZjU2NWY1NDg0ZTIyNDk4NTc4NmIxYjUyZDJhMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfwry5h+3kY85t5sh4wLWxVl45aP ClAp730EM3q+gI86HGAeXs1vp7gts47xe1bX7DmZy+AVeYOi+DLdZJ1aTFaxdven zi1IDAuOPgBp5Ejki9K4bxu1csJcWJaW8Jqc36BfYg5M/3VYm0lyuYaQJAKSr/hZ HGpr5wL76bbIf2z5mhwVrACFDZ4FlGMF/cdbm0JCcPJdJ07O+QKIaL5G227W5ZB8 lXLuzCReQ3cXBO398VHjyY4Qa32Oo1NCsCHFQfltlSn85pEAiYAD9n59zW+8kEt0 Fmo5AvoZw8m/BN9jBgyepS/Jls7hJQjQaTlCtWAsCT/J1sNojkh77r+khwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnciM4Z9WX1SE4iSYV4axtS0qHhMB8GA1UdIwQY MBaAFAjtGlaGumgonGz+THw24Det4R7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQt OTBhYjc5ZTdlZTIzLzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQtOTBhYjc5ZTdlZTIz LzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZjLoUud DaeXPWvWdxxGJcYF3JqQQN6KErLorB0prMCdiDU7lGFWiMuakNK4SJwAe4i0C8Cc HuM1ENL0pubitK9WnuEoBMjPjq47JNgK/bM+9TtED2rE4lWTsPrE9rTs941DPt+1 0jCkyNN4W1b9Qm5qc7CvxPs9Tc/aCf6O7GEncWF0gU0ywCyxAHLQM8iSWpCA4fKI GvKKDNmJarVzoByYhBWwamC4LHem2hRGupzGYdCz0S2Cm6ch9Zz24AHhY8LfarGk 75kzBIQ3PrDMms16Dy1CDicoymHkOVUJlS7F9RTCSBAEI4fm95BaqKEURRl2qVcs LiwMwHiXfjLK0A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:04 2025 by rpki-client