This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json) Hash identifier: aI5J4YzvHehA/qO3t9F+kLRY1lkVLeVrW/TbfbkNAC4= Subject key identifier: 90:4D:20:3E:C2:8C:17:F4:5B:F3:87:A0:0C:A5:67:0C:11:36:6A:95 Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Certificate serial: 019B63C2A18626CBBB14828CE0FC422DBCC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft Manifest number: 0F48 Signing time: Sun 28 Dec 2025 07:00:58 +0000 Manifest this update: Sun 28 Dec 2025 07:00:58 +0000 Manifest next update: Mon 29 Dec 2025 07:00:58 +0000 Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: 2oE2hf0u+VSBxyyFu96KD5IxQq6wZejlMncUPJ/48ms=) 2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:c2:a1:86:26:cb:bb:14:82:8c:e0:fc:42:2d:bc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Validity Not Before: Dec 28 07:00:58 2025 GMT Not After : Dec 29 07:00:58 2025 GMT Subject: CN=904d203ec28c17f45bf387a00ca5670c11366a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:34:e2:90:ae:73:8d:84:70:7b:8d:90:c1: c1:a0:ff:81:2d:93:11:87:37:8f:7b:e8:74:61:f6: 21:f0:eb:57:76:81:c9:19:c4:af:7e:b6:6d:4e:70: 23:e6:2b:44:2e:80:78:a8:91:3a:83:92:49:48:59: 35:18:2b:83:c2:fc:2a:14:15:9d:fb:b8:7a:df:c4: 14:d8:3c:a5:b5:f0:d4:a6:28:ed:31:64:4f:cc:38: 04:85:a7:40:f1:5f:ee:dc:c1:c5:1a:1e:7c:df:db: 36:fe:2d:8a:a9:2e:fa:6b:27:51:f6:ea:b4:4a:49: 85:b9:0b:5f:55:34:80:96:21:bb:58:66:88:16:51: 4c:d5:11:df:42:fe:60:e5:ec:c8:f9:d8:e6:2f:ed: c6:b7:28:10:67:17:cf:8b:05:ba:9e:a7:86:35:cf: 1e:be:2a:6a:f0:08:17:1b:eb:e9:8b:66:23:c9:fd: 76:8d:d7:3c:d4:a1:a4:df:2e:0b:eb:ad:f6:aa:47: b6:5c:b9:80:c0:72:5b:05:53:ba:89:7b:11:56:c5: bc:d9:c5:e9:53:ad:e1:13:73:7b:f4:93:c1:6d:5c: 14:79:99:5d:38:8e:4d:ec:a1:c0:a3:5c:56:82:88: f9:9f:6b:a9:e3:5b:a6:fe:3a:36:27:a3:2f:89:f1: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4D:20:3E:C2:8C:17:F4:5B:F3:87:A0:0C:A5:67:0C:11:36:6A:95 X509v3 Authority Key Identifier: keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ea:0a:cd:fe:ae:97:20:bb:a7:bd:08:a6:c0:b4:95:94:25: 77:19:3e:b4:f5:9a:1f:a0:1f:d7:12:d8:c9:79:51:95:08:99: d0:30:e3:c9:57:cf:54:ea:3f:aa:6f:3e:50:a2:aa:8b:59:49: 91:0b:b5:91:c7:4f:cd:e5:92:33:13:d8:35:c3:a3:02:6f:50: e6:3f:9f:b2:d0:cc:b8:c3:9e:22:45:0b:c3:9d:71:2d:41:49: 76:ae:76:d8:4f:98:39:4e:d1:56:bc:55:62:b6:1a:c3:6f:d8: ed:f8:c4:2c:b3:c3:b2:b0:56:58:80:3b:34:f0:29:7e:7d:05: 59:6b:0c:25:98:cb:4c:2f:09:61:8f:0b:1f:fb:ba:af:2b:1d: 12:c7:46:04:38:91:be:c6:7b:bd:7f:4b:9c:47:10:5b:83:30: 28:ac:7c:10:e0:32:e5:39:9d:77:f1:65:53:7a:75:cc:b1:fd: b0:d4:2a:97:f7:f8:0f:27:83:40:de:08:aa:c8:c7:ae:64:0f: d6:b1:9f:f4:d4:ad:fe:d8:40:d6:70:0a:50:3c:40:5f:61:46: 36:83:14:28:d0:48:ad:c0:8e:49:79:a2:9f:03:ed:fc:04:41: d4:34:7d:9a:15:9d:46:b1:24:51:2c:71:fa:e7:97:c6:e1:66: 8d:a0:70:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjwqGGJsu7FIKM4PxCLbzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm MmZjMzQwHhcNMjUxMjI4MDcwMDU4WhcNMjUxMjI5MDcwMDU4WjAzMTEwLwYDVQQD Eyg5MDRkMjAzZWMyOGMxN2Y0NWJmMzg3YTAwY2E1NjcwYzExMzY2YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Y04pCuc42EcHuNkMHBoP+BLZMR hzePe+h0YfYh8OtXdoHJGcSvfrZtTnAj5itELoB4qJE6g5JJSFk1GCuDwvwqFBWd +7h638QU2DyltfDUpijtMWRPzDgEhadA8V/u3MHFGh5839s2/i2KqS76aydR9uq0 SkmFuQtfVTSAliG7WGaIFlFM1RHfQv5g5ezI+djmL+3GtygQZxfPiwW6nqeGNc8e vipq8AgXG+vpi2Yjyf12jdc81KGk3y4L6632qke2XLmAwHJbBVO6iXsRVsW82cXp U63hE3N79JPBbVwUeZldOI5N7KHAo1xWgoj5n2up41um/jo2J6MvifHruQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBNID7CjBf0W/OHoAylZwwRNmqVMB8GA1UdIwQY MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt MWU4ZDIxOWY4N2FmLzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOoKzf6u lyC7p70IpsC0lZQldxk+tPWaH6Af1xLYyXlRlQiZ0DDjyVfPVOo/qm8+UKKqi1lJ kQu1kcdPzeWSMxPYNcOjAm9Q5j+fstDMuMOeIkULw51xLUFJdq522E+YOU7RVrxV YrYaw2/Y7fjELLPDsrBWWIA7NPApfn0FWWsMJZjLTC8JYY8LH/u6rysdEsdGBDiR vsZ7vX9LnEcQW4MwKKx8EOAy5Tmdd/FlU3p1zLH9sNQql/f4DyeDQN4IqsjHrmQP 1rGf9NSt/thA1nAKUDxAX2FGNoMUKNBIrcCOSXminwPt/ARB1DR9mhWdRrEkUSxx +ueXxuFmjaBwsw== -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:05 2025 by rpki-client