This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json) Hash identifier: r+WYMeB5hY44iPSAYun7v/AwQiq/FAJLUsbuvhAtqQ0= Subject key identifier: AE:D4:BE:D6:2F:27:1E:5A:C4:D6:26:88:E2:B6:4A:65:74:8C:8D:B7 Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Certificate serial: 019B3EDB0535A06F5A69C6EC2098B72DD1B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 03:01:39 +0000 Manifest this update: Sun 21 Dec 2025 03:01:39 +0000 Manifest next update: Mon 22 Dec 2025 03:01:39 +0000 Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: 1jewuIH1USQY2rRH3rEubrlSlQKEjFOTuYhCor3MZrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:05:35:a0:6f:5a:69:c6:ec:20:98:b7:2d:d1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Validity Not Before: Dec 21 03:01:39 2025 GMT Not After : Dec 22 03:01:39 2025 GMT Subject: CN=aed4bed62f271e5ac4d62688e2b64a65748c8db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:d6:5c:f3:ed:70:70:75:67:c2:28:f2:9e: 7b:8d:74:03:eb:89:b5:57:e6:0d:1d:54:a3:20:90: 5a:13:b1:74:1d:6e:5e:9d:40:64:67:36:c8:b9:4d: 91:e1:48:d3:9b:30:5b:f2:55:2f:dc:c9:21:d9:af: 3a:fe:39:e6:9c:bc:28:fa:76:97:db:f2:78:3d:97: 0d:1c:64:40:23:08:22:81:4b:04:a1:e2:8d:52:33: c5:5a:a1:66:63:00:89:f6:91:3b:e5:7c:b8:ae:41: 21:ab:73:55:27:aa:b1:79:e1:30:48:7b:45:95:b1: 53:bd:00:61:84:ca:45:51:03:be:9e:13:57:16:81: 73:94:0c:51:3e:33:83:1c:f1:ed:8a:7b:43:69:3a: bc:a0:eb:5d:22:fd:ab:80:68:f0:8a:3b:80:2e:13: e0:62:54:7c:8a:e8:0d:01:8a:12:a8:51:3d:ea:2a: 78:16:af:de:95:72:0f:64:34:ca:91:83:c4:0a:f0: 7b:bb:ad:54:be:0b:65:21:fe:0f:84:3e:5c:6b:38: 35:3a:80:10:cb:1b:53:12:ab:79:d9:0d:35:da:21: 8a:3c:98:e2:e2:38:63:e9:a9:90:fc:7b:42:61:d0: 19:22:ab:f6:4b:a8:71:34:26:9d:e1:79:93:91:56: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:BE:D6:2F:27:1E:5A:C4:D6:26:88:E2:B6:4A:65:74:8C:8D:B7 X509v3 Authority Key Identifier: keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a1:58:eb:d0:c4:6c:ba:5e:83:0e:bf:5e:0c:94:65:85:ea: f9:57:73:f5:97:11:84:f6:fb:bc:97:51:dc:f8:d4:45:2e:45: cd:43:43:b1:19:e1:7c:63:6f:85:82:df:2e:8c:85:e3:2f:bb: a5:1d:1d:d7:56:2d:6d:75:25:09:10:90:d2:f4:52:dc:a1:20: ba:06:f9:bc:3d:4b:50:0b:37:34:05:60:09:f0:dc:80:7f:ba: 59:fd:14:9f:32:bd:ab:d4:72:81:66:c7:44:33:16:40:64:4b: c4:86:1c:d7:d6:cb:ff:1b:34:2e:76:63:7e:92:e1:96:b5:7e: 22:46:01:3b:47:ea:43:c4:0b:04:bb:75:99:05:54:32:10:1a: f0:8d:05:41:7e:57:c6:9f:a9:da:48:87:19:23:52:e4:bd:65: cc:11:d3:2f:95:20:e4:2f:17:13:5d:06:69:33:ad:8a:68:9d: d4:8a:25:76:a5:8b:92:dd:d5:f0:0d:19:f3:93:d1:bf:75:9b: cb:00:c4:89:15:b6:d4:94:f6:96:58:a0:96:83:49:61:fb:ab: e6:90:89:62:57:ad:f9:fa:5b:28:a4:5c:f8:4c:bb:4a:c6:12: df:c5:39:65:8e:2d:ff:32:af:bd:b0:b9:57:11:5b:5c:b2:aa: 76:f2:11:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wU1oG9aacbsIJi3LdG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj YTBkMGEwHhcNMjUxMjIxMDMwMTM5WhcNMjUxMjIyMDMwMTM5WjAzMTEwLwYDVQQD EyhhZWQ0YmVkNjJmMjcxZTVhYzRkNjI2ODhlMmI2NGE2NTc0OGM4ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm/WXPPtcHB1Z8Io8p57jXQD64m1 V+YNHVSjIJBaE7F0HW5enUBkZzbIuU2R4UjTmzBb8lUv3Mkh2a86/jnmnLwo+naX 2/J4PZcNHGRAIwgigUsEoeKNUjPFWqFmYwCJ9pE75Xy4rkEhq3NVJ6qxeeEwSHtF lbFTvQBhhMpFUQO+nhNXFoFzlAxRPjODHPHtintDaTq8oOtdIv2rgGjwijuALhPg YlR8iugNAYoSqFE96ip4Fq/elXIPZDTKkYPECvB7u61UvgtlIf4PhD5cazg1OoAQ yxtTEqt52Q012iGKPJji4jhj6amQ/HtCYdAZIqv2S6hxNCad4XmTkVYrPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7UvtYvJx5axNYmiOK2SmV0jI23MB8GA1UdIwQY MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3 LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKFY69DE bLpegw6/XgyUZYXq+Vdz9ZcRhPb7vJdR3PjURS5FzUNDsRnhfGNvhYLfLoyF4y+7 pR0d11YtbXUlCRCQ0vRS3KEgugb5vD1LUAs3NAVgCfDcgH+6Wf0UnzK9q9RygWbH RDMWQGRLxIYc19bL/xs0LnZjfpLhlrV+IkYBO0fqQ8QLBLt1mQVUMhAa8I0FQX5X xp+p2kiHGSNS5L1lzBHTL5Ug5C8XE10GaTOtimid1IoldqWLkt3V8A0Z85PRv3Wb ywDEiRW21JT2lligloNJYfur5pCJYlet+fpbKKRc+Ey7SsYS38U5ZY4t/zKvvbC5 VxFbXLKqdvIRbg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:16 2025 by rpki-client