This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json) Hash identifier: cZlYb1gU9sU+NK9EKKbqdJusaoYfaoZNrEtqudbG8vg= Subject key identifier: D6:2F:5E:D6:BA:6E:79:B4:1C:EC:C2:B5:2D:3E:7B:E9:BA:21:7A:78 Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Certificate serial: 019B55D01422C2F8BDDDE7B16947CC00191B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft Manifest number: 0591 Signing time: Thu 25 Dec 2025 14:00:58 +0000 Manifest this update: Thu 25 Dec 2025 14:00:58 +0000 Manifest next update: Fri 26 Dec 2025 14:00:58 +0000 Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: EgPHlEmdRLtNfiotpO9LXi8fwlUSA+USkXgrjwj2VpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:14:22:c2:f8:bd:dd:e7:b1:69:47:cc:00:19:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Validity Not Before: Dec 25 14:00:58 2025 GMT Not After : Dec 26 14:00:58 2025 GMT Subject: CN=d62f5ed6ba6e79b41cecc2b52d3e7be9ba217a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:c1:a4:a4:b7:47:1c:a5:88:11:50:00:88: f0:cb:5f:3e:c4:99:e0:e8:15:de:72:ce:25:22:9d: 2c:9c:35:b4:ab:d1:4a:67:31:1c:6f:12:11:49:2c: da:18:b3:c9:7d:93:d7:d6:d2:ac:6b:7c:e7:ed:2f: 2f:30:7d:64:6b:65:b4:e7:67:e4:66:11:9a:2f:3d: 92:36:40:a1:b8:58:6d:40:b0:76:7a:98:fb:4f:37: 6a:0a:a3:a6:56:02:66:4c:8f:63:3a:e5:6a:88:24: df:5c:ec:8e:a6:af:eb:e1:c7:98:f5:66:87:8b:c7: ad:f5:e2:13:9d:a3:b3:40:f8:a4:fe:5b:38:87:9a: 9f:37:42:6d:f4:51:e1:e9:e2:6a:8e:13:c8:0d:73: 81:e3:3d:ca:5e:70:a6:59:21:4a:c6:e5:43:1e:15: 8c:dd:4f:20:ea:c9:ce:f4:8f:86:28:e9:ed:35:3e: 45:bd:ff:16:dd:c8:d5:c8:99:4d:c1:22:5d:02:a9: f2:81:fa:ee:57:d7:a0:87:82:4a:1d:9b:a4:f7:92: f0:c3:0b:48:ab:f3:eb:43:29:0e:0e:84:2b:5c:7e: ea:3b:2c:91:44:1d:aa:1c:5d:b0:5d:c2:9d:90:0a: c7:c7:b7:3d:d5:07:9c:8e:77:87:25:63:95:69:74: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2F:5E:D6:BA:6E:79:B4:1C:EC:C2:B5:2D:3E:7B:E9:BA:21:7A:78 X509v3 Authority Key Identifier: keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:db:d6:fd:8e:54:08:df:7d:eb:91:00:11:cd:2f:0a:56:7a: bc:e6:52:05:03:7f:2d:f0:62:d9:7f:b7:ae:cc:d3:52:b3:7c: 39:6c:a1:e1:59:75:8f:26:ef:4e:93:9a:90:68:5e:1e:59:72: af:5a:30:57:60:ca:ab:cd:67:0e:09:e3:83:60:de:9c:73:3a: 29:4b:19:87:b1:db:47:f3:72:a1:5a:d1:28:ba:a8:33:65:86: 56:6f:4a:99:cb:23:d4:10:73:76:38:38:cc:5d:fa:ef:f0:82: f3:1c:78:85:0a:6e:86:d1:2a:1d:48:24:ed:f5:e4:40:b7:2a: c2:b7:fe:0e:b3:ed:70:ad:c9:38:7c:3b:07:b5:d5:c5:72:c2: 00:10:30:8d:6b:40:ab:c4:8f:98:72:4e:a0:e5:06:64:87:a0: 92:11:eb:7c:19:2a:09:0c:b9:2f:60:3e:5b:02:9d:c5:26:b7: 82:4f:c9:b4:ec:10:cf:ec:14:fc:e7:23:11:75:f6:48:f0:9d: 03:15:0e:ca:e2:64:04:6d:d9:74:33:87:2a:ec:d8:2c:88:81: b0:f2:a9:f8:7a:ef:a0:8d:3a:79:1a:47:85:bc:97:a2:6b:8d: 0a:34:79:84:8f:aa:2c:84:61:c5:5e:da:fb:ac:8a:9d:34:33: 54:1f:91:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0BQiwvi93eexaUfMABkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2 NTRlNTkwHhcNMjUxMjI1MTQwMDU4WhcNMjUxMjI2MTQwMDU4WjAzMTEwLwYDVQQD EyhkNjJmNWVkNmJhNmU3OWI0MWNlY2MyYjUyZDNlN2JlOWJhMjE3YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m3BpKS3RxyliBFQAIjwy18+xJng 6BXecs4lIp0snDW0q9FKZzEcbxIRSSzaGLPJfZPX1tKsa3zn7S8vMH1ka2W052fk ZhGaLz2SNkChuFhtQLB2epj7TzdqCqOmVgJmTI9jOuVqiCTfXOyOpq/r4ceY9WaH i8et9eITnaOzQPik/ls4h5qfN0Jt9FHh6eJqjhPIDXOB4z3KXnCmWSFKxuVDHhWM 3U8g6snO9I+GKOntNT5Fvf8W3cjVyJlNwSJdAqnygfruV9egh4JKHZuk95LwwwtI q/PrQykODoQrXH7qOyyRRB2qHF2wXcKdkArHx7c91QecjneHJWOVaXSW+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYvXta6bnm0HOzCtS0+e+m6IXp4MB8GA1UdIwQY MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0 LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNvW/Y5U CN9965EAEc0vClZ6vOZSBQN/LfBi2X+3rszTUrN8OWyh4Vl1jybvTpOakGheHlly r1owV2DKq81nDgnjg2DenHM6KUsZh7HbR/NyoVrRKLqoM2WGVm9Kmcsj1BBzdjg4 zF367/CC8xx4hQpuhtEqHUgk7fXkQLcqwrf+DrPtcK3JOHw7B7XVxXLCABAwjWtA q8SPmHJOoOUGZIegkhHrfBkqCQy5L2A+WwKdxSa3gk/JtOwQz+wU/OcjEXX2SPCd AxUOyuJkBG3ZdDOHKuzYLIiBsPKp+HrvoI06eRpHhbyXomuNCjR5hI+qLIRhxV7a +6yKnTQzVB+RMQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:04 2025 by rpki-client