This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json) Hash identifier: YVqQHY8WIBjwEgDz7MSqEGSJYtfBx42yMs26p3NHbLI= Subject key identifier: 68:01:E0:85:F5:EB:2E:4D:EA:20:3E:5E:80:E0:07:46:95:39:F8:DF Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df Certificate serial: 019AF388F603F1EC4B15D476ACED7529DF98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft Manifest number: 16A9 Signing time: Sat 06 Dec 2025 12:00:30 +0000 Manifest this update: Sat 06 Dec 2025 12:00:30 +0000 Manifest next update: Sun 07 Dec 2025 12:00:30 +0000 Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: NL8LG8k7vrcZStY8/dd8IUtJOuQYZLkgKUcocua4oSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:f6:03:f1:ec:4b:15:d4:76:ac:ed:75:29:df:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df Validity Not Before: Dec 6 12:00:30 2025 GMT Not After : Dec 7 12:00:30 2025 GMT Subject: CN=6801e085f5eb2e4dea203e5e80e007469539f8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:1a:9e:e8:6d:21:fb:3a:1b:87:db:c2:8d: f9:72:b4:9b:9b:96:a2:c5:34:6a:0f:1a:c5:cc:ed: 2b:67:99:5d:7c:46:4b:20:24:a5:ac:5e:54:98:68: d5:63:20:12:44:d1:b4:6d:4f:44:f3:a0:0d:35:a6: 32:04:84:db:6a:be:d7:e6:ab:90:64:e1:10:b3:fe: 4e:32:d3:b6:a7:38:5e:f3:be:18:c7:16:ef:75:e6: 0a:eb:3c:96:d3:0e:9f:31:47:4d:f3:53:3c:9d:e9: 33:98:69:dd:3e:a8:9e:b0:da:89:4f:2c:79:47:ce: a0:63:b2:35:46:a4:00:2e:46:4e:8b:ee:68:2e:ee: da:8b:28:f5:94:4f:68:02:73:29:b8:c2:36:e3:80: 12:6b:23:84:20:2c:c3:15:54:ce:14:6a:62:27:78: 36:d8:4f:d5:ad:39:85:4c:ad:a7:a7:16:a3:a3:87: b8:e7:db:d7:da:54:6c:81:18:7b:67:cc:f6:f0:49: 45:9b:ce:48:c0:34:d1:44:54:79:b2:2d:6c:19:36: 20:4e:e2:16:5d:30:22:d2:bd:f5:1b:2d:fa:b6:e3: 08:ce:96:b6:b8:99:69:ee:f0:08:46:b0:10:a5:c2: a7:45:c1:b6:ae:af:2c:a5:86:fa:db:b4:73:6a:8d: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:E0:85:F5:EB:2E:4D:EA:20:3E:5E:80:E0:07:46:95:39:F8:DF X509v3 Authority Key Identifier: keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:df:bb:97:df:2b:33:f7:fa:f6:ea:b8:e4:cd:21:5a:7b: d3:88:82:91:5d:70:50:47:ec:c5:1e:57:74:97:e8:57:38:24: 0d:c1:1e:24:05:eb:37:75:9e:ee:dd:11:93:d3:9f:d6:74:b2: d2:72:96:f4:00:25:52:d9:04:93:e7:c9:99:6b:5a:f9:e3:91: b2:a9:0b:54:fb:47:f6:22:55:02:6b:0c:43:d7:3e:0d:b3:7a: 8d:65:7b:30:00:5c:0a:5f:c4:03:5d:41:49:f1:74:17:b3:5e: 90:2d:90:49:12:69:87:da:01:8c:26:69:4c:2f:2f:eb:cb:a7: 96:1f:38:66:96:1a:92:ca:cf:5a:87:f4:2e:1a:1c:cc:2e:10: 72:b5:63:06:cd:48:cd:41:4e:a0:e4:34:71:ea:ad:e9:da:66: 88:14:68:b6:e4:d9:63:eb:3c:86:0e:1b:cc:f3:68:6f:fc:51: 68:6b:c7:9c:bf:29:48:cc:e0:1c:6f:b2:88:69:fe:54:a9:db: 08:38:1f:ac:4d:de:bc:c5:19:35:b5:db:99:74:74:be:ba:76: 66:8a:09:6d:42:1a:41:e8:59:5f:fe:33:0e:81:9a:b8:b2:f7: d7:be:ec:5e:91:35:ae:a8:6b:c6:14:12:9c:1b:18:b8:fe:d5: 5c:6c:02:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPYD8exLFdR2rO11Kd+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZWEyMTUzNTM2YTgyMzgwOTlhZWE2NjgwODAxZmE0NDVi ZmE5ZGYwHhcNMjUxMjA2MTIwMDMwWhcNMjUxMjA3MTIwMDMwWjAzMTEwLwYDVQQD Eyg2ODAxZTA4NWY1ZWIyZTRkZWEyMDNlNWU4MGUwMDc0Njk1MzlmOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z8anuhtIfs6G4fbwo35crSbm5ai xTRqDxrFzO0rZ5ldfEZLICSlrF5UmGjVYyASRNG0bU9E86ANNaYyBITbar7X5quQ ZOEQs/5OMtO2pzhe874YxxbvdeYK6zyW0w6fMUdN81M8nekzmGndPqiesNqJTyx5 R86gY7I1RqQALkZOi+5oLu7aiyj1lE9oAnMpuMI244ASayOEICzDFVTOFGpiJ3g2 2E/VrTmFTK2npxajo4e459vX2lRsgRh7Z8z28ElFm85IwDTRRFR5si1sGTYgTuIW XTAi0r31Gy36tuMIzpa2uJlp7vAIRrAQpcKnRcG2rq8spYb627Rzao236QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgB4IX16y5N6iA+XoDgB0aVOfjfMB8GA1UdIwQY MBaAFAjqIVNTaoI4CZrqZoCAH6RFv6nfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09vaFUxTnFnamdKbXVwbWdJQWZwRVdfcWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MWYwYTYtODRmMi00MDEzLWI4Y2It YWUzN2JhMGExMDgxLzEvQ09vaFUxTnFnamdKbXVwbWdJQWZwRVdfcWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MWYwYTYtODRmMi00MDEzLWI4Y2ItYWUzN2JhMGExMDgx LzEvQ09vaFUxTnFnamdKbXVwbWdJQWZwRVdfcWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl/fu5ff KzP3+vbquOTNIVp704iCkV1wUEfsxR5XdJfoVzgkDcEeJAXrN3We7t0Rk9Of1nSy 0nKW9AAlUtkEk+fJmWta+eORsqkLVPtH9iJVAmsMQ9c+DbN6jWV7MABcCl/EA11B SfF0F7NekC2QSRJph9oBjCZpTC8v68unlh84ZpYaksrPWof0LhoczC4QcrVjBs1I zUFOoOQ0ceqt6dpmiBRotuTZY+s8hg4bzPNob/xRaGvHnL8pSMzgHG+yiGn+VKnb CDgfrE3evMUZNbXbmXR0vrp2ZooJbUIaQehZX/4zDoGauLL3177sXpE1rqhrxhQS nBsYuP7VXGwC6A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:40 2025 by rpki-client