This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json) Hash identifier: KzE+TtvTzUzkPxToI1x8R/TM/konAfyq9HLEd5DTiXg= Subject key identifier: B6:B8:9D:54:A3:18:4A:08:FA:43:1E:25:2A:9A:B8:58:7A:08:D7:2C Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Certificate serial: 019B40917EF4979C8E4D1162936E2769BE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft Manifest number: 0586 Signing time: Sun 21 Dec 2025 11:00:35 +0000 Manifest this update: Sun 21 Dec 2025 11:00:35 +0000 Manifest next update: Mon 22 Dec 2025 11:00:35 +0000 Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: yyIUKLpHCKVPlYWpYiXSg9dzEFhGa1no4udF2V0tAq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:7e:f4:97:9c:8e:4d:11:62:93:6e:27:69:be:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Validity Not Before: Dec 21 11:00:35 2025 GMT Not After : Dec 22 11:00:35 2025 GMT Subject: CN=b6b89d54a3184a08fa431e252a9ab8587a08d72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:41:e5:2a:b8:d7:95:7a:eb:32:9a:72:1d: fc:f3:cc:07:9b:49:19:b7:4c:b8:4f:bc:e0:dd:ff: eb:ed:d5:7c:06:8e:45:fe:52:c9:9b:16:f0:6a:91: 80:3f:d0:c6:4b:58:58:bb:8a:83:d3:ad:3a:75:bc: 2f:12:f8:e8:8f:e7:9c:31:cb:dd:e5:89:8e:9f:ff: 88:04:0b:31:0a:92:00:a3:6e:46:26:34:8a:e3:83: db:d3:73:35:d5:24:52:dc:aa:4d:04:d0:03:ed:7e: 61:ca:5d:46:79:d4:94:de:ad:54:dd:da:0d:f0:b0: 6d:f0:d9:71:ab:b3:12:67:e6:a9:18:45:1d:7c:83: ac:c0:28:4c:55:fd:4d:ed:79:27:7d:7f:ca:00:38: 2a:2e:30:14:95:55:d7:d3:1c:63:af:d4:49:ce:41: db:64:52:84:df:12:f4:c2:81:c1:22:6b:2f:90:be: 6e:2c:f9:64:53:e8:de:cb:74:a4:35:22:69:09:f1: 31:47:2d:5d:35:de:eb:1b:0d:22:da:04:89:d0:6d: e5:80:19:e7:5c:c1:98:1e:ab:f7:c4:17:99:6d:05: da:3a:d7:ea:eb:07:4b:4e:cf:b7:02:bd:c0:9c:9f: 40:6d:95:9a:0b:5d:b9:bd:33:ae:70:29:be:22:46: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:9D:54:A3:18:4A:08:FA:43:1E:25:2A:9A:B8:58:7A:08:D7:2C X509v3 Authority Key Identifier: keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:53:6b:d4:64:e3:35:72:2f:c8:34:9a:e4:f4:47:cf:d1:ed: 51:e4:a2:7a:7c:0f:c4:3c:2a:5b:ad:74:00:9f:84:d9:24:bb: 7f:41:ea:51:7e:ce:a8:2b:f8:e8:09:4d:eb:e2:8b:b7:c4:f9: 65:ed:a0:55:79:28:fc:e6:3f:36:7c:e3:f8:4d:4e:11:ee:db: 0f:03:46:d5:f2:27:22:3b:0e:04:52:49:47:90:01:ab:47:18: 8f:87:68:69:b5:ed:4a:c3:2d:eb:5a:19:1a:f3:8e:65:30:b6: 99:4f:ae:b3:3c:b9:6a:6c:b9:9c:14:0e:cd:6d:07:fe:9d:3c: d4:44:01:a5:a3:b9:d3:8a:3f:81:b8:ac:ef:d8:d6:9e:52:84: 6c:bf:bf:d3:c6:f8:21:b9:39:ae:4b:4c:80:43:2b:ec:a6:46: 4a:83:cd:44:2c:f5:ad:0a:f3:8a:e1:9b:d3:a8:f1:b0:5b:0b: de:53:76:15:79:f3:76:fe:b2:36:1d:fc:7a:b1:40:9b:8d:1d: 46:f3:65:01:4f:a6:6e:6e:58:6e:5f:06:3b:46:1c:12:c6:42: fa:5e:dc:ff:3c:1a:cc:c1:03:3d:aa:60:73:24:37:86:aa:d5: f0:0c:92:d3:28:fb:32:cd:e4:e7:a8:9f:3f:f1:44:00:37:35: e6:7c:11:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkX70l5yOTRFik24nab4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2 NTRlNTkwHhcNMjUxMjIxMTEwMDM1WhcNMjUxMjIyMTEwMDM1WjAzMTEwLwYDVQQD EyhiNmI4OWQ1NGEzMTg0YTA4ZmE0MzFlMjUyYTlhYjg1ODdhMDhkNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvtB5Sq415V66zKach3888wHm0kZ t0y4T7zg3f/r7dV8Bo5F/lLJmxbwapGAP9DGS1hYu4qD0606dbwvEvjoj+ecMcvd 5YmOn/+IBAsxCpIAo25GJjSK44Pb03M11SRS3KpNBNAD7X5hyl1GedSU3q1U3doN 8LBt8Nlxq7MSZ+apGEUdfIOswChMVf1N7XknfX/KADgqLjAUlVXX0xxjr9RJzkHb ZFKE3xL0woHBImsvkL5uLPlkU+jey3SkNSJpCfExRy1dNd7rGw0i2gSJ0G3lgBnn XMGYHqv3xBeZbQXaOtfq6wdLTs+3Ar3AnJ9AbZWaC125vTOucCm+IkZHXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa4nVSjGEoI+kMeJSqauFh6CNcsMB8GA1UdIwQY MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0 LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlNr1GTj NXIvyDSa5PRHz9HtUeSienwPxDwqW610AJ+E2SS7f0HqUX7OqCv46AlN6+KLt8T5 Ze2gVXko/OY/Nnzj+E1OEe7bDwNG1fInIjsOBFJJR5ABq0cYj4doabXtSsMt61oZ GvOOZTC2mU+uszy5amy5nBQOzW0H/p081EQBpaO504o/gbis79jWnlKEbL+/08b4 Ibk5rktMgEMr7KZGSoPNRCz1rQrziuGb06jxsFsL3lN2FXnzdv6yNh38erFAm40d RvNlAU+mbm5Ybl8GO0YcEsZC+l7c/zwazMEDPapgcyQ3hqrV8AyS0yj7Ms3k56if P/FEADc15nwR/A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:56 2025 by rpki-client