This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json) Hash identifier: ZJFyUOpGZgjnjNdGDw5B8tr0BWRNAE+XKpaPnIacCuI= Subject key identifier: 8D:4D:DC:A5:1F:37:69:0E:55:A4:A1:35:3E:1B:C5:EE:B8:03:74:6C Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Certificate serial: 019AF1D1CA43541D251B0F7D4C530CEF343F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft Manifest number: 0F0D Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: XIUbjRYwt2u8We9KzUdSkn8PhY94/+X/kanzS3jI4xI=) 2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:43:54:1d:25:1b:0f:7d:4c:53:0c:ef:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=8d4ddca51f37690e55a4a1353e1bc5eeb803746c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:74:b5:d4:b6:dd:66:b5:b8:e7:ee:99:84: 0a:ca:9b:48:39:a7:90:91:e7:89:63:62:a1:d5:cf: 39:f8:71:de:e9:fe:0d:27:6f:df:d8:c1:6d:3e:01: 28:94:0e:ab:55:ab:1e:39:d1:78:c6:1c:0e:7a:24: 7e:fc:9e:d4:65:52:a5:67:27:ff:e4:d9:61:bc:86: 46:09:e1:4f:cd:ba:f9:58:a1:60:e6:e3:23:b4:97: 87:48:12:41:a7:ac:2a:4e:c8:ac:48:b7:48:82:07: 90:a5:9f:b9:49:7e:a1:a6:53:9b:8e:50:6f:91:d7: 6c:c4:b6:7f:c6:45:6d:d0:9b:0e:a0:8a:5b:03:d9: 74:64:2a:19:2d:08:a8:73:8b:3a:08:7b:f7:57:ee: bb:c9:ff:cf:f8:f1:c9:e9:42:98:39:78:98:42:be: b2:be:c2:5d:f0:66:20:88:96:21:b0:57:ec:c0:79: 14:9b:30:cb:08:7e:f0:29:99:e6:e8:21:ab:aa:01: d0:7f:68:3d:e1:18:18:6e:36:79:f2:7e:0e:06:07: 3f:2e:04:36:95:fa:f0:a2:f6:ed:c0:6e:ce:dc:da: 23:4d:96:ff:a9:c1:71:27:1b:b8:89:12:bb:af:ac: df:0d:16:54:1b:f9:c1:fc:9f:42:20:5d:4a:09:fc: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:DC:A5:1F:37:69:0E:55:A4:A1:35:3E:1B:C5:EE:B8:03:74:6C X509v3 Authority Key Identifier: keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9b:7d:d4:44:74:a7:a2:f0:86:d9:1b:6b:35:b7:93:02:2b: 28:3b:53:2a:c0:46:2d:86:d6:c6:37:9a:5d:a7:32:f8:e0:60: ef:e3:f2:b6:00:bf:f7:67:22:d8:cf:2c:53:52:e0:b9:ab:53: ec:13:39:16:85:ce:91:9c:94:4b:8b:69:f5:f2:42:7c:4d:4c: 87:a7:33:38:80:a6:97:85:18:a4:3c:bd:6c:bb:10:c4:f5:0e: 08:79:34:0c:23:f4:ba:f1:9e:59:00:70:a9:c0:a4:64:4c:b5: 03:c7:8a:fb:ad:6f:fb:91:59:54:77:94:43:e1:4c:fb:af:1f: 79:19:f7:f9:cb:3a:bc:64:6f:84:2c:71:f5:4d:e9:0a:76:45: 03:fb:d1:51:84:40:ba:74:c1:27:b4:2c:5c:71:e1:0c:c1:c1: 15:7f:38:bc:fa:02:d5:0d:77:45:1e:76:9d:aa:30:1a:16:a6: e4:1f:5c:5b:8a:33:16:7a:18:fd:ca:11:ee:1f:bf:96:df:4c: 4f:58:07:5e:14:2e:cc:c1:9a:c3:96:34:28:d2:c8:0a:8b:28: 83:03:96:b0:d6:ab:79:77:80:d0:13:f0:e2:ea:d7:b0:8d:c7: 06:a3:15:9d:6e:cf:e1:21:6f:89:fb:55:ff:be:bb:f1:b3:d6: 5b:1f:c2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cpDVB0lGw99TFMM7zQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm MmZjMzQwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg4ZDRkZGNhNTFmMzc2OTBlNTVhNGExMzUzZTFiYzVlZWI4MDM3NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpF0tdS23Wa1uOfumYQKyptIOaeQ keeJY2Kh1c85+HHe6f4NJ2/f2MFtPgEolA6rVaseOdF4xhwOeiR+/J7UZVKlZyf/ 5NlhvIZGCeFPzbr5WKFg5uMjtJeHSBJBp6wqTsisSLdIggeQpZ+5SX6hplObjlBv kddsxLZ/xkVt0JsOoIpbA9l0ZCoZLQioc4s6CHv3V+67yf/P+PHJ6UKYOXiYQr6y vsJd8GYgiJYhsFfswHkUmzDLCH7wKZnm6CGrqgHQf2g94RgYbjZ58n4OBgc/LgQ2 lfrwovbtwG7O3NojTZb/qcFxJxu4iRK7r6zfDRZUG/nB/J9CIF1KCfy4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1N3KUfN2kOVaShNT4bxe64A3RsMB8GA1UdIwQY MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt MWU4ZDIxOWY4N2FmLzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5t91ER0 p6LwhtkbazW3kwIrKDtTKsBGLYbWxjeaXacy+OBg7+PytgC/92ci2M8sU1LguatT 7BM5FoXOkZyUS4tp9fJCfE1Mh6czOICml4UYpDy9bLsQxPUOCHk0DCP0uvGeWQBw qcCkZEy1A8eK+61v+5FZVHeUQ+FM+68feRn3+cs6vGRvhCxx9U3pCnZFA/vRUYRA unTBJ7QsXHHhDMHBFX84vPoC1Q13RR52naowGham5B9cW4ozFnoY/coR7h+/lt9M T1gHXhQuzMGaw5Y0KNLICosogwOWsNareXeA0BPw4urXsI3HBqMVnW7P4SFviftV /7678bPWWx/CaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:28 2025 by rpki-client