This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json) Hash identifier: P2IvrfqWeGuUZmWb2pOTGDtvpZFiX/GG1wIo7ErBM3s= Subject key identifier: E2:4E:F5:C6:22:63:CC:FB:B3:30:7B:7C:EE:14:3C:22:18:0B:F3:97 Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b Certificate serial: 019B44A60925AE39D1102B774B308FFE77AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 06:01:30 +0000 Manifest this update: Mon 22 Dec 2025 06:01:30 +0000 Manifest next update: Tue 23 Dec 2025 06:01:30 +0000 Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=) 2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: 2ezz6nKgx8ft/FZjqzWVhUA3xcPPdoy8Vid+S7Wb7Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:09:25:ae:39:d1:10:2b:77:4b:30:8f:fe:77:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b Validity Not Before: Dec 22 06:01:30 2025 GMT Not After : Dec 23 06:01:30 2025 GMT Subject: CN=e24ef5c62263ccfbb3307b7cee143c22180bf397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:ff:d1:f5:17:ce:92:8d:51:71:1d:66:d7: 87:91:15:08:c7:c4:c7:ab:9d:ec:4e:89:9c:03:f4: 36:40:40:00:e1:00:b7:11:02:aa:0b:ba:4f:51:75: f2:fd:af:cb:4b:a7:82:de:cf:84:fd:57:7d:03:99: 9f:5b:4a:3f:98:be:e2:30:91:ec:a3:79:63:4d:dd: c4:40:01:57:94:08:ce:03:0c:31:be:e1:1c:76:99: b9:0c:8d:8d:61:2c:e2:ca:71:fe:ff:e7:15:f5:11: 96:87:67:37:ff:e5:ce:b0:55:17:f7:f4:ba:21:41: 54:16:2c:44:18:7b:6c:87:51:33:c7:10:aa:90:10: 37:3c:66:36:c0:02:e9:0c:96:9d:72:33:98:78:96: 4a:8b:f6:00:29:b9:e1:7a:c0:d0:76:50:84:dc:20: aa:db:2d:63:dd:30:58:20:43:2d:d0:50:91:8a:d7: a3:fa:7b:c5:7f:17:26:75:ef:b2:fa:41:b2:ea:fb: 7a:88:3f:aa:dc:9c:b8:65:f2:b6:c4:18:95:19:89: d7:37:78:82:2c:10:0b:c3:ee:0b:05:eb:b3:0a:9a: 94:af:e5:a4:56:05:8b:17:16:56:c3:4d:77:e5:81: 5a:96:f3:5d:bc:ca:69:b6:c5:ab:71:fc:de:ee:6b: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:F5:C6:22:63:CC:FB:B3:30:7B:7C:EE:14:3C:22:18:0B:F3:97 X509v3 Authority Key Identifier: keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:53:9a:8f:ab:1c:55:e2:f5:39:30:57:00:bc:76:26:05: 65:d1:9d:6b:5a:dc:bf:8e:b2:38:91:b8:5d:a2:fe:61:e3:7f: 40:d7:dc:05:f0:c0:e6:33:02:b8:b3:ac:56:f4:d3:ed:98:2c: 48:e3:5e:d0:5b:a0:bd:77:fd:4b:f7:16:b5:2a:d0:85:99:0a: 40:a5:a8:e4:0f:33:99:f3:04:74:4e:92:88:f1:d6:d8:23:e1: 17:cb:fc:ae:41:20:da:e1:ce:86:3a:34:50:51:d0:df:32:2d: 48:78:6a:87:8a:58:42:fd:3e:4e:a8:74:9e:a7:6f:8b:af:10: 5b:ee:af:ae:8f:82:01:e8:aa:c5:b2:fc:62:53:93:09:4f:87: 89:33:49:6d:dd:2a:93:5c:24:a6:f6:f4:54:d0:15:19:25:4b: 5d:42:fc:e0:70:ff:90:f6:dd:1d:ee:72:52:f4:8a:0c:e0:34: e0:ef:d8:1b:1c:a0:97:38:28:0c:88:a8:b5:a2:ef:d0:23:1a: 7e:06:17:3b:ab:a8:ab:91:4f:ea:fd:a1:eb:6f:bc:da:01:b5: c9:fc:28:7b:d9:53:33:9e:45:fb:6d:1d:4f:61:91:87:7c:6f: 62:38:99:86:7c:b8:8b:50:94:9b:05:3d:a9:1a:1a:9b:ca:e8: 0d:cb:01:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpgklrjnRECt3SzCP/neuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx NjFiOWIwHhcNMjUxMjIyMDYwMTMwWhcNMjUxMjIzMDYwMTMwWjAzMTEwLwYDVQQD EyhlMjRlZjVjNjIyNjNjY2ZiYjMzMDdiN2NlZTE0M2MyMjE4MGJmMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MP/0fUXzpKNUXEdZteHkRUIx8TH q53sTomcA/Q2QEAA4QC3EQKqC7pPUXXy/a/LS6eC3s+E/Vd9A5mfW0o/mL7iMJHs o3ljTd3EQAFXlAjOAwwxvuEcdpm5DI2NYSziynH+/+cV9RGWh2c3/+XOsFUX9/S6 IUFUFixEGHtsh1EzxxCqkBA3PGY2wALpDJadcjOYeJZKi/YAKbnhesDQdlCE3CCq 2y1j3TBYIEMt0FCRitej+nvFfxcmde+y+kGy6vt6iD+q3Jy4ZfK2xBiVGYnXN3iC LBALw+4LBeuzCpqUr+WkVgWLFxZWw0135YFalvNdvMpptsWrcfze7mvCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJO9cYiY8z7szB7fO4UPCIYC/OXMB8GA1UdIwQY MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTdTmo+r HFXi9TkwVwC8diYFZdGda1rcv46yOJG4XaL+YeN/QNfcBfDA5jMCuLOsVvTT7Zgs SONe0FugvXf9S/cWtSrQhZkKQKWo5A8zmfMEdE6SiPHW2CPhF8v8rkEg2uHOhjo0 UFHQ3zItSHhqh4pYQv0+Tqh0nqdvi68QW+6vro+CAeiqxbL8YlOTCU+HiTNJbd0q k1wkpvb0VNAVGSVLXUL84HD/kPbdHe5yUvSKDOA04O/YGxyglzgoDIiotaLv0CMa fgYXO6uoq5FP6v2h62+82gG1yfwoe9lTM55F+20dT2GRh3xvYjiZhny4i1CUmwU9 qRoam8roDcsB2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 10:04:32 2025 by rpki-client