This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json) Hash identifier: IQ2v2Jq/JeqbO1hhLtQRlMk2HFHIMqiu/fjm0gtSbD4= Subject key identifier: 8F:F4:B0:CE:AE:4D:D0:FA:E1:0E:95:62:0F:29:C1:3B:49:B4:D7:BD Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Certificate serial: 019AF19B691B937FCFD17686C640B1DB3E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft Manifest number: 12E0 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: NlyiN0MkmnH4MwfDXvHtbFZrf+IpQUyAJJyPoAn9EZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:1b:93:7f:cf:d1:76:86:c6:40:b1:db:3e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=8ff4b0ceae4dd0fae10e95620f29c13b49b4d7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:86:69:51:af:f8:dc:cb:13:a8:29:8b:a8: 8b:b4:2c:c9:8e:0c:3b:f9:48:82:e9:17:a9:85:f5: 64:5a:e1:5b:4e:3e:8e:08:a5:67:d1:f7:fe:e9:0f: 10:a5:a2:73:25:0f:b6:a6:5d:ad:2f:cf:de:f4:89: 50:bd:59:f2:f8:a8:01:a0:b4:83:69:5a:bc:c7:f4: a9:a0:de:b4:dc:30:b7:17:36:df:d4:e4:38:8f:2c: 38:c5:1b:57:42:19:f4:9f:32:8d:eb:bb:dc:34:97: 7d:c1:28:66:a2:b0:b1:11:0f:b2:09:7e:3a:6f:32: 1b:ba:24:d5:46:62:57:7c:cf:53:c3:b6:3d:58:af: 6f:4a:4b:61:b2:4f:a1:3d:5c:66:11:fe:5a:23:d0: 99:f8:46:53:62:ad:f3:92:e1:0c:b8:8f:0e:48:b4: 75:97:e4:2b:06:52:64:9b:ce:4c:45:cd:75:85:f3: 1a:d5:25:22:6d:7e:98:ed:5f:f1:a5:ed:8b:7d:70: 8c:ce:ce:48:f0:76:ba:f2:bb:59:22:4b:60:17:e8: 58:1e:f3:2b:87:35:25:c1:e3:b6:0a:ad:dc:c6:f2: 32:4f:15:38:4b:c0:0c:52:97:81:15:cb:7e:f1:92: d4:df:86:bd:fb:96:7d:d1:4c:58:01:c8:25:92:f7: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:B0:CE:AE:4D:D0:FA:E1:0E:95:62:0F:29:C1:3B:49:B4:D7:BD X509v3 Authority Key Identifier: keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c3:67:69:cd:50:70:72:51:48:2e:bc:9d:f5:64:30:34:b5: f9:32:b2:d0:ef:d4:2f:ea:c8:aa:26:70:11:b1:5e:68:44:c0: 3e:e6:59:3e:1e:5b:72:d9:6f:6f:d6:df:4c:f0:9b:69:3f:a9: a3:cb:a9:29:9c:28:3e:cb:13:44:5b:b8:32:a7:ae:cd:64:18: cc:69:0d:49:1d:c3:4a:d1:17:2f:81:0f:98:bb:41:fd:ce:eb: e2:f6:e4:4e:28:4d:ac:4d:48:c2:a4:2d:f7:e5:1a:d0:f4:05: 6d:f2:22:98:5f:93:ed:fe:f9:37:18:68:6f:cd:b5:8f:37:f0: 34:90:4d:48:87:eb:a5:00:52:53:d0:b6:60:ae:75:e0:b0:ea: c7:2f:c3:de:66:a8:87:2b:df:37:be:09:4a:e3:3f:84:e7:70: d5:a9:9e:37:c1:03:47:94:8e:1e:52:59:a3:27:21:fd:28:f1: d2:b2:63:7d:0e:17:69:d2:2e:42:f8:01:04:76:19:57:24:5b: df:b4:88:b4:a1:6a:28:b5:2c:ba:94:76:da:53:4a:8f:b5:f1: 19:2d:67:01:a6:2f:8d:37:00:1b:95:db:81:c8:6b:f1:34:de: ac:4f:26:f9:b1:00:05:fe:f4:71:b2:57:4e:bc:63:58:5d:e8: f0:ed:83:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2kbk3/P0XaGxkCx2z5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmEwOTA0NDVmYTM5Y2Q2ZmZlMGZjZjQ0YTE0NDA3OTI0 OTg5NzYwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg4ZmY0YjBjZWFlNGRkMGZhZTEwZTk1NjIwZjI5YzEzYjQ5YjRkN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF2GaVGv+NzLE6gpi6iLtCzJjgw7 +UiC6RephfVkWuFbTj6OCKVn0ff+6Q8QpaJzJQ+2pl2tL8/e9IlQvVny+KgBoLSD aVq8x/SpoN603DC3Fzbf1OQ4jyw4xRtXQhn0nzKN67vcNJd9wShmorCxEQ+yCX46 bzIbuiTVRmJXfM9Tw7Y9WK9vSkthsk+hPVxmEf5aI9CZ+EZTYq3zkuEMuI8OSLR1 l+QrBlJkm85MRc11hfMa1SUibX6Y7V/xpe2LfXCMzs5I8Ha68rtZIktgF+hYHvMr hzUlweO2Cq3cxvIyTxU4S8AMUpeBFct+8ZLU34a9+5Z90UxYAcglkvdapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/0sM6uTdD64Q6VYg8pwTtJtNe9MB8GA1UdIwQY MBaAFPwqCQRF+jnNb/4Pz0ShRAeSSYl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWIt MzU4OGQ3OTBiYTA3LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWItMzU4OGQ3OTBiYTA3 LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsNnac1Q cHJRSC68nfVkMDS1+TKy0O/UL+rIqiZwEbFeaETAPuZZPh5bctlvb9bfTPCbaT+p o8upKZwoPssTRFu4MqeuzWQYzGkNSR3DStEXL4EPmLtB/c7r4vbkTihNrE1IwqQt 9+Ua0PQFbfIimF+T7f75Nxhob821jzfwNJBNSIfrpQBSU9C2YK514LDqxy/D3mao hyvfN74JSuM/hOdw1ameN8EDR5SOHlJZoych/Sjx0rJjfQ4XadIuQvgBBHYZVyRb 37SItKFqKLUsupR22lNKj7XxGS1nAaYvjTcAG5Xbgchr8TTerE8m+bEABf70cbJX TrxjWF3o8O2D3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:26 2025 by rpki-client