This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json) Hash identifier: UFkrI7hpt5buV1q1yGok5tY5cQqRLWDBbsJG8k+wZn4= Subject key identifier: F5:C2:C5:26:13:22:1F:BE:33:BC:52:76:DB:40:57:BE:F2:F0:9B:A1 Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Certificate serial: 019B2F679BF88C3675ACED31875C80963365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft Manifest number: 1300 Signing time: Thu 18 Dec 2025 03:01:17 +0000 Manifest this update: Thu 18 Dec 2025 03:01:17 +0000 Manifest next update: Fri 19 Dec 2025 03:01:17 +0000 Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: TaFEQLPHvhex4NdZTJRlcwXATi03BFbqYGf4Iuy8eTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:9b:f8:8c:36:75:ac:ed:31:87:5c:80:96:33:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Validity Not Before: Dec 18 03:01:17 2025 GMT Not After : Dec 19 03:01:17 2025 GMT Subject: CN=f5c2c52613221fbe33bc5276db4057bef2f09ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:b3:fe:98:60:df:3b:7c:1e:99:44:16:96: bc:74:1a:05:a2:09:ee:0b:01:17:ca:e5:fb:96:f0: ea:f2:5a:88:cf:54:83:75:5b:11:6f:68:8e:35:6a: 40:bc:2a:b1:98:b7:ca:78:7e:cf:a4:b0:14:96:d6: 2d:ea:fa:f8:9c:6c:d5:7f:75:05:66:3c:5e:49:6d: 23:fc:a5:c7:76:57:a0:08:59:dc:3e:02:4b:9e:b1: c3:5c:6f:a8:c0:6b:e3:1d:8f:33:79:45:16:65:89: 87:6a:d4:dd:5b:c0:49:58:8e:25:55:5f:01:18:91: 41:8e:f4:85:9e:d1:38:b0:fd:93:5b:09:05:8d:e0: 0e:e8:64:ec:99:55:19:5d:2c:a4:b4:ba:1b:fb:ff: 0f:98:48:43:e1:56:90:21:80:ee:37:24:f0:a8:1f: da:7e:39:dd:e4:04:4b:d8:6a:6d:dd:53:44:9c:86: ef:bb:f2:5d:23:ef:b7:71:4f:20:1c:e5:1d:92:45: 3a:bf:d5:a7:51:1d:49:f1:b5:48:9a:30:62:65:41: 74:a7:74:41:d3:8d:f7:bf:5b:0b:95:94:91:6c:fb: 3c:bd:d3:7c:c2:a4:c4:19:e4:c0:fa:8f:6f:f1:c8: f4:8b:e5:2d:32:53:92:f7:a3:66:7c:85:1d:0a:f8: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C2:C5:26:13:22:1F:BE:33:BC:52:76:DB:40:57:BE:F2:F0:9B:A1 X509v3 Authority Key Identifier: keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:82:a4:20:7f:b3:21:e7:b7:69:9a:14:b9:eb:80:f6:63: d4:33:1f:9f:12:9b:61:68:b1:60:93:2a:57:37:39:6d:ec:d1: 68:4e:c4:dd:55:ac:04:c0:e1:50:60:d2:e3:b2:bf:03:1f:f0: b6:a3:19:98:9d:a9:e3:df:a8:75:e7:98:b1:58:34:bf:d9:98: 37:3d:68:54:99:9a:93:83:67:55:fc:07:dd:81:e1:87:d8:18: 59:08:e7:73:5c:30:d2:56:9d:c6:53:81:e2:9c:37:2b:39:57: 58:bd:59:a4:79:92:a2:da:b4:e8:ef:3b:8a:ba:57:09:ae:50: 3c:5c:f3:94:ad:1e:c4:25:35:92:30:92:9e:29:69:57:26:cd: e2:9a:ce:c3:fb:d8:78:eb:b7:b9:fd:bd:52:a8:61:10:f4:e6: a4:e1:34:8a:44:79:e1:69:a5:86:47:bf:60:03:4a:b0:ef:4b: 53:32:5b:43:b4:02:2f:d6:3c:74:40:0f:ec:a3:fd:e2:d6:8a: 5c:b6:19:b7:6e:2a:bd:86:66:32:e2:f0:c7:a3:88:55:87:64: 05:af:0a:ac:1e:a7:ed:82:da:b5:b6:95:38:d6:97:22:5c:ea: bb:4d:e6:02:8d:09:71:a3:13:cb:5c:ec:4e:19:e1:80:4f:45: a8:ab:b9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ5v4jDZ1rO0xh1yAljNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmEwOTA0NDVmYTM5Y2Q2ZmZlMGZjZjQ0YTE0NDA3OTI0 OTg5NzYwHhcNMjUxMjE4MDMwMTE3WhcNMjUxMjE5MDMwMTE3WjAzMTEwLwYDVQQD EyhmNWMyYzUyNjEzMjIxZmJlMzNiYzUyNzZkYjQwNTdiZWYyZjA5YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaKz/phg3zt8HplEFpa8dBoFognu CwEXyuX7lvDq8lqIz1SDdVsRb2iONWpAvCqxmLfKeH7PpLAUltYt6vr4nGzVf3UF ZjxeSW0j/KXHdlegCFncPgJLnrHDXG+owGvjHY8zeUUWZYmHatTdW8BJWI4lVV8B GJFBjvSFntE4sP2TWwkFjeAO6GTsmVUZXSyktLob+/8PmEhD4VaQIYDuNyTwqB/a fjnd5ARL2Gpt3VNEnIbvu/JdI++3cU8gHOUdkkU6v9WnUR1J8bVImjBiZUF0p3RB 0433v1sLlZSRbPs8vdN8wqTEGeTA+o9v8cj0i+UtMlOS96NmfIUdCvjMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXCxSYTIh++M7xSdttAV77y8JuhMB8GA1UdIwQY MBaAFPwqCQRF+jnNb/4Pz0ShRAeSSYl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWIt MzU4OGQ3OTBiYTA3LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWItMzU4OGQ3OTBiYTA3 LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgaCpCB/ syHnt2maFLnrgPZj1DMfnxKbYWixYJMqVzc5bezRaE7E3VWsBMDhUGDS47K/Ax/w tqMZmJ2p49+odeeYsVg0v9mYNz1oVJmak4NnVfwH3YHhh9gYWQjnc1ww0ladxlOB 4pw3KzlXWL1ZpHmSotq06O87irpXCa5QPFzzlK0exCU1kjCSnilpVybN4prOw/vY eOu3uf29UqhhEPTmpOE0ikR54Wmlhke/YANKsO9LUzJbQ7QCL9Y8dEAP7KP94taK XLYZt24qvYZmMuLwx6OIVYdkBa8KrB6n7YLatbaVONaXIlzqu03mAo0JcaMTy1zs ThnhgE9FqKu5qA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:23:53 2025 by rpki-client