This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json) Hash identifier: sM6lrv2lFBFOvu+g70wKSmKU8I8wuFB0vdhHaNTpLKI= Subject key identifier: 82:59:23:31:E0:E8:51:05:E5:F7:B3:EB:31:04:9E:7B:10:64:D9:D1 Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Certificate serial: 019B40C9543C325A121F65552C2669B2ACBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 12:01:34 +0000 Manifest this update: Sun 21 Dec 2025 12:01:34 +0000 Manifest next update: Mon 22 Dec 2025 12:01:34 +0000 Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: QLxoabRwlJ2If//Ch875UZElsgBPeNKAczPFyD0UIps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:54:3c:32:5a:12:1f:65:55:2c:26:69:b2:ac:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Validity Not Before: Dec 21 12:01:34 2025 GMT Not After : Dec 22 12:01:34 2025 GMT Subject: CN=82592331e0e85105e5f7b3eb31049e7b1064d9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:bf:39:ca:5f:b1:d0:9c:b7:33:fb:cd:ab: 1b:5b:80:f0:ff:1a:70:56:d6:40:e5:9d:d7:09:5e: f9:dd:6b:55:6a:f0:ea:f0:29:06:f6:9f:b1:89:eb: 4c:b2:6a:69:fc:c9:2a:06:e7:db:c5:8e:ad:12:6d: 75:5c:22:15:b5:da:45:25:cc:62:32:bf:e8:ca:5c: 5d:81:52:d4:64:f7:76:b1:2c:77:64:55:fb:fc:c1: 96:d9:c3:60:bc:43:f2:e2:55:71:08:99:3e:d4:d5: fe:05:3f:5d:9a:da:12:67:a9:e2:34:71:70:94:05: ef:95:ca:8d:7c:a5:41:25:05:a7:0f:e8:c7:31:ce: 2a:c6:97:35:19:4e:2a:46:a8:cf:44:ae:d3:6f:0b: 91:df:4e:13:f4:bd:fd:a7:bb:76:3c:20:2c:94:27: 0e:18:e3:b5:23:ab:6c:45:18:c5:38:07:c9:06:33: b4:20:31:7b:ee:39:c6:eb:d2:b9:27:16:fa:4e:c0: ad:f0:7a:5a:46:c3:f9:f5:2a:9f:0e:5b:28:ca:fe: 17:fc:69:8f:55:1d:90:88:ba:b9:91:0f:a1:76:0d: 0b:51:b1:73:d8:fc:f5:2c:e1:5c:22:28:27:95:33: e8:18:c4:3e:e8:c4:93:4c:8c:b4:3b:ea:6a:71:bd: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:59:23:31:E0:E8:51:05:E5:F7:B3:EB:31:04:9E:7B:10:64:D9:D1 X509v3 Authority Key Identifier: keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:77:67:9e:56:c6:43:16:b8:14:2f:06:a5:9f:11:3e:1f:88: 60:13:a6:f9:b0:8e:ab:09:43:7c:0c:aa:11:18:a0:e0:cd:5b: b1:ea:8b:f7:bc:45:1d:17:ce:b3:c1:ed:2b:47:71:91:9a:24: 70:a7:20:e2:f8:91:d7:93:c1:5b:47:59:61:c4:23:bf:d0:86: dd:56:29:cd:fa:78:f0:aa:02:66:30:a0:d5:5b:2d:72:af:d6: 51:18:ca:2a:6a:26:f8:8f:1a:d2:3c:d7:9d:1b:84:7d:d6:16: 88:4e:07:fb:0e:6a:ac:c0:da:91:41:e5:85:57:71:45:03:60: 5e:b5:8d:39:f4:e0:a6:34:d8:9c:de:81:92:72:32:8e:5d:f1: 62:0e:66:32:e9:e6:a7:e5:27:4d:72:d4:2a:07:eb:6b:b7:33: 9c:c8:5a:50:84:56:5f:11:db:2f:72:ee:60:ef:24:41:74:8d: a5:3b:db:92:3a:65:f9:f4:7a:47:88:2c:67:da:9a:ba:d8:b0: d0:c9:30:b5:e1:b0:0c:e9:a2:bf:21:ce:e6:6b:16:fe:cc:ce: 85:c1:ab:9c:97:e8:b5:dd:f2:56:79:61:69:1d:f9:ab:38:e3: ba:22:09:32:03:a0:af:67:40:4a:21:98:a5:0d:24:4f:4f:5c: d2:ea:0a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyVQ8MloSH2VVLCZpsqy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj YTBkMGEwHhcNMjUxMjIxMTIwMTM0WhcNMjUxMjIyMTIwMTM0WjAzMTEwLwYDVQQD Eyg4MjU5MjMzMWUwZTg1MTA1ZTVmN2IzZWIzMTA0OWU3YjEwNjRkOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2a/OcpfsdCctzP7zasbW4Dw/xpw VtZA5Z3XCV753WtVavDq8CkG9p+xietMsmpp/MkqBufbxY6tEm11XCIVtdpFJcxi Mr/oylxdgVLUZPd2sSx3ZFX7/MGW2cNgvEPy4lVxCJk+1NX+BT9dmtoSZ6niNHFw lAXvlcqNfKVBJQWnD+jHMc4qxpc1GU4qRqjPRK7TbwuR304T9L39p7t2PCAslCcO GOO1I6tsRRjFOAfJBjO0IDF77jnG69K5Jxb6TsCt8HpaRsP59SqfDlsoyv4X/GmP VR2QiLq5kQ+hdg0LUbFz2Pz1LOFcIignlTPoGMQ+6MSTTIy0O+pqcb2VfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJZIzHg6FEF5fez6zEEnnsQZNnRMB8GA1UdIwQY MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3 LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXdnnlbG Qxa4FC8GpZ8RPh+IYBOm+bCOqwlDfAyqERig4M1bseqL97xFHRfOs8HtK0dxkZok cKcg4viR15PBW0dZYcQjv9CG3VYpzfp48KoCZjCg1Vstcq/WURjKKmom+I8a0jzX nRuEfdYWiE4H+w5qrMDakUHlhVdxRQNgXrWNOfTgpjTYnN6BknIyjl3xYg5mMunm p+UnTXLUKgfra7cznMhaUIRWXxHbL3LuYO8kQXSNpTvbkjpl+fR6R4gsZ9qautiw 0MkwteGwDOmivyHO5msW/szOhcGrnJfotd3yVnlhaR35qzjjuiIJMgOgr2dASiGY pQ0kT09c0uoKCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:35 2025 by rpki-client