This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json) Hash identifier: +EKL2rDDSTRbSBTdGbNtk9ooFVBdk+vNsmY2LSRvvfY= Subject key identifier: A5:86:CD:2C:44:34:E0:65:5B:63:34:E2:95:58:A1:1B:94:4C:81:BC Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36 Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236 Certificate serial: 019B31FABCD60AAB9BDC30B52E0F7EF7BBA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft Manifest number: 06DE Signing time: Thu 18 Dec 2025 15:01:14 +0000 Manifest this update: Thu 18 Dec 2025 15:01:14 +0000 Manifest next update: Fri 19 Dec 2025 15:01:14 +0000 Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: 4I52snVICrydPDzVEZjRcpNVOQRAcmi5VE6aMN8i99I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:bc:d6:0a:ab:9b:dc:30:b5:2e:0f:7e:f7:bb:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236 Validity Not Before: Dec 18 15:01:14 2025 GMT Not After : Dec 19 15:01:14 2025 GMT Subject: CN=a586cd2c4434e0655b6334e29558a11b944c81bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:5a:92:e3:24:f3:ab:3e:ba:72:ed:79:b4: 6a:c5:89:55:54:0d:c9:12:17:79:1c:a1:f4:b8:e8: 8b:dd:3b:7e:0b:3d:4b:cd:2d:01:3d:03:fc:7a:50: 50:0f:60:63:e4:2d:c4:35:af:46:7b:71:3d:fa:f9: 0f:48:ad:80:27:9a:5a:53:06:d5:16:3d:bf:a8:44: 89:86:a5:48:4d:4d:68:27:6f:70:3e:4c:28:7d:95: 15:7f:29:72:91:a8:21:69:25:26:f4:2c:86:0d:0f: ba:1d:4c:0f:9c:e1:0b:3b:4b:5b:4a:7b:03:02:c4: b6:5b:dd:b7:98:61:6c:7f:5e:b0:43:be:cd:ba:a7: 56:ce:72:71:75:5c:23:b1:1c:40:d5:dc:fc:ca:6f: 52:6d:2f:f6:63:e6:ec:d5:ea:0c:5f:4c:0d:8c:48: 00:6a:83:04:fa:b2:15:f7:2d:0b:95:ec:5e:b1:78: 19:3d:15:0b:5e:e4:d1:eb:92:8a:f3:b6:28:15:5f: e9:7e:bb:3f:64:d4:d2:b7:d4:31:73:8f:ba:47:39: 4d:3b:24:8f:7f:3a:4f:79:d0:ba:97:d1:b5:d6:55: 22:63:96:d2:7d:fa:0e:6e:fb:38:7e:44:76:2f:d6: 28:2c:9e:e1:03:12:b0:54:32:3c:d1:9d:af:0e:d9: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:CD:2C:44:34:E0:65:5B:63:34:E2:95:58:A1:1B:94:4C:81:BC X509v3 Authority Key Identifier: keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:61:6f:89:4c:c7:e9:95:00:94:89:a4:cd:73:eb:2a:ad: 0f:5e:1a:28:cf:e9:ab:59:e4:c5:fc:e6:80:5d:04:45:4d:8d: 0c:cb:89:c8:10:8f:3f:2c:6e:71:c8:b1:0f:92:26:bb:a1:cf: 83:2e:b7:f5:3e:02:1e:d7:d5:5c:c9:aa:a9:62:9f:63:b6:5a: 72:b7:fd:97:20:fd:d1:c3:24:6f:8c:fe:a5:09:3a:0f:28:bc: 03:d3:8e:be:34:b5:08:21:81:84:c5:ae:25:24:97:11:1d:1f: 1c:31:5a:ad:8d:b0:62:8c:25:e4:bb:e6:c7:23:a7:31:cc:fd: 08:2d:3f:fb:f9:ec:7e:14:7d:64:11:6f:7d:2a:49:67:d9:0e: b1:83:68:99:aa:f6:23:86:2b:5c:3c:1b:01:26:92:88:00:b6: e9:fc:6d:35:03:10:7e:5f:91:26:73:5f:bd:62:5a:11:04:e9: 2d:e1:70:82:48:2e:84:65:e8:cb:20:85:bc:83:15:b9:9f:5b: b6:33:b0:ba:41:e2:6e:96:6c:7d:eb:97:25:e4:b3:1b:f0:cf: 91:37:77:24:d2:5f:63:65:61:7e:bf:32:af:ea:5e:16:15:b7: 16:43:f6:bd:c4:1c:40:dd:c9:e2:37:84:57:72:20:b2:d3:35: cb:2a:1c:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+rzWCqub3DC1Lg9+97uhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZTI4ZDA1YzkwMTg1ZmU3ZTYyYWYxY2VlMjVjODgzYjZm ZTIyMzYwHhcNMjUxMjE4MTUwMTE0WhcNMjUxMjE5MTUwMTE0WjAzMTEwLwYDVQQD EyhhNTg2Y2QyYzQ0MzRlMDY1NWI2MzM0ZTI5NTU4YTExYjk0NGM4MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm35akuMk86s+unLtebRqxYlVVA3J Ehd5HKH0uOiL3Tt+Cz1LzS0BPQP8elBQD2Bj5C3ENa9Ge3E9+vkPSK2AJ5paUwbV Fj2/qESJhqVITU1oJ29wPkwofZUVfylykaghaSUm9CyGDQ+6HUwPnOELO0tbSnsD AsS2W923mGFsf16wQ77NuqdWznJxdVwjsRxA1dz8ym9SbS/2Y+bs1eoMX0wNjEgA aoME+rIV9y0LlexesXgZPRULXuTR65KK87YoFV/pfrs/ZNTSt9Qxc4+6RzlNOySP fzpPedC6l9G11lUiY5bSffoObvs4fkR2L9YoLJ7hAxKwVDI80Z2vDtm6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWGzSxENOBlW2M04pVYoRuUTIG8MB8GA1UdIwQY MBaAFAjijQXJAYX+fmKvHO4lyIO2/iI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZDJiYTctYzZiNy00NzBiLTg1YWEt MGM0N2E0MWYzYTkwLzEvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84ZDJiYTctYzZiNy00NzBiLTg1YWEtMGM0N2E0MWYzYTkw LzEvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuBhb4lM x+mVAJSJpM1z6yqtD14aKM/pq1nkxfzmgF0ERU2NDMuJyBCPPyxuccixD5Imu6HP gy639T4CHtfVXMmqqWKfY7Zacrf9lyD90cMkb4z+pQk6Dyi8A9OOvjS1CCGBhMWu JSSXER0fHDFarY2wYowl5LvmxyOnMcz9CC0/+/nsfhR9ZBFvfSpJZ9kOsYNomar2 I4YrXDwbASaSiAC26fxtNQMQfl+RJnNfvWJaEQTpLeFwgkguhGXoyyCFvIMVuZ9b tjOwukHibpZsfeuXJeSzG/DPkTd3JNJfY2Vhfr8yr+peFhW3FkP2vcQcQN3J4jeE V3IgstM1yyocrg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:27 2025 by rpki-client