This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json) Hash identifier: UcWoE/M+tLe3sdZDIpDZTA43zoF3e/R0D0iNrKd/zgo= Subject key identifier: F8:A8:3E:A4:CC:93:E2:BC:A0:C9:44:88:CE:61:BC:28:49:CC:54:86 Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Certificate serial: 019AF19AED820EA8C38A15EAB1FA5FD8EB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: qECJXj3qhpbxGvS842dZa3NBAPVuQVilqxCEmuDRfVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:82:0e:a8:c3:8a:15:ea:b1:fa:5f:d8:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=f8a83ea4cc93e2bca0c94488ce61bc2849cc5486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:bb:a9:bf:2c:98:3e:b2:6f:41:4e:78:2a: 8b:2f:c0:d9:f8:ce:b5:54:97:34:0d:54:fb:f0:08: 74:f6:d7:6f:1a:ab:7c:8c:f2:c9:8e:55:96:e7:a6: 2a:27:f9:6c:7d:50:65:2d:4f:95:29:76:e6:bf:b6: e1:7a:c5:6f:de:3f:0d:96:a3:4d:36:7a:f6:59:b7: f0:20:80:df:33:39:1f:1e:be:07:ea:99:b4:92:d6: b2:bb:54:3b:9d:58:2a:98:16:25:bd:7d:51:cd:4f: 11:03:ed:ac:f7:0b:b9:69:ab:6b:f9:8f:b0:18:65: f1:b5:04:d1:51:45:eb:2b:7c:03:c7:db:45:58:1d: 3c:c0:21:b3:e4:a2:76:0d:3f:a0:b3:35:b7:60:9e: 23:22:1e:bf:21:68:d2:cb:e9:a1:2a:c8:9e:ba:16: 98:e5:06:f7:9e:ed:b3:eb:36:ff:04:0b:2b:c1:69: fb:12:89:7d:89:8e:37:09:f4:34:a1:32:2a:d9:e5: e0:a8:aa:12:65:f2:a1:b3:da:61:93:85:5d:bd:45: cf:49:35:39:25:44:82:d7:98:15:d1:5e:54:51:ed: 66:2a:ac:5d:4f:ee:96:2a:80:0a:e4:27:86:dc:a6: 9c:12:45:09:74:9f:fc:4f:35:dc:3c:d9:d7:f5:b1: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:3E:A4:CC:93:E2:BC:A0:C9:44:88:CE:61:BC:28:49:CC:54:86 X509v3 Authority Key Identifier: keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:18:c7:57:8b:25:f8:53:81:24:7f:fa:f2:24:2a:5b:43:e5: eb:ec:c6:e6:2b:d6:8a:c0:e1:a5:53:6f:68:6f:37:4b:bd:b6: 4a:18:93:a9:14:a3:d9:0b:95:a3:3d:83:b1:eb:0b:df:99:a6: 79:83:3b:b8:73:ef:fa:6f:ee:c7:8f:c8:17:bf:26:c4:3c:e7: 93:0d:56:2c:44:be:55:33:56:b2:42:7a:87:f3:9b:8b:33:a4: 86:fb:81:05:12:06:15:e2:1a:9c:43:ee:22:51:bb:90:7e:3f: ae:4e:c9:c1:98:e4:c8:97:66:fe:11:78:ad:35:00:00:40:24: ad:1b:67:19:00:94:ff:19:bf:0d:e1:1d:2f:25:d1:78:3c:27: 68:5e:a8:e6:56:a1:c2:a7:c3:5f:6d:d9:93:15:64:6a:fb:c2: 31:49:ed:87:f5:50:d2:a7:41:91:21:d4:f0:bd:27:a3:3e:b8: d8:f5:f3:e5:24:ba:b0:98:1b:7b:e9:c3:5d:79:df:c8:ec:b6: 4a:7f:41:6a:4e:6c:be:35:ac:bf:24:73:b9:a9:ea:c5:cb:5c: e9:7d:e9:71:75:8c:bc:fb:e5:50:bb:84:a6:31:1f:a0:0d:f0: 3c:54:ce:7c:4e:12:c0:30:41:50:54:82:14:5b:92:9c:b4:34: c7:e5:0a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu2CDqjDihXqsfpf2OuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj YTBkMGEwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD EyhmOGE4M2VhNGNjOTNlMmJjYTBjOTQ0ODhjZTYxYmMyODQ5Y2M1NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiq7qb8smD6yb0FOeCqLL8DZ+M61 VJc0DVT78Ah09tdvGqt8jPLJjlWW56YqJ/lsfVBlLU+VKXbmv7bhesVv3j8NlqNN Nnr2WbfwIIDfMzkfHr4H6pm0ktayu1Q7nVgqmBYlvX1RzU8RA+2s9wu5aatr+Y+w GGXxtQTRUUXrK3wDx9tFWB08wCGz5KJ2DT+gszW3YJ4jIh6/IWjSy+mhKsieuhaY 5Qb3nu2z6zb/BAsrwWn7Eol9iY43CfQ0oTIq2eXgqKoSZfKhs9phk4VdvUXPSTU5 JUSC15gV0V5UUe1mKqxdT+6WKoAK5CeG3KacEkUJdJ/8TzXcPNnX9bHzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPioPqTMk+K8oMlEiM5hvChJzFSGMB8GA1UdIwQY MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3 LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRjHV4sl +FOBJH/68iQqW0Pl6+zG5ivWisDhpVNvaG83S722ShiTqRSj2QuVoz2DsesL35mm eYM7uHPv+m/ux4/IF78mxDznkw1WLES+VTNWskJ6h/ObizOkhvuBBRIGFeIanEPu IlG7kH4/rk7JwZjkyJdm/hF4rTUAAEAkrRtnGQCU/xm/DeEdLyXReDwnaF6o5lah wqfDX23ZkxVkavvCMUnth/VQ0qdBkSHU8L0noz642PXz5SS6sJgbe+nDXXnfyOy2 Sn9Bak5svjWsvyRzuanqxctc6X3pcXWMvPvlULuEpjEfoA3wPFTOfE4SwDBBUFSC FFuSnLQ0x+UKmw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:06 2025 by rpki-client