This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft File: KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json) Hash identifier: dRssJmYP5adfLu3OD6n35/KVbUM+rK1B9v40Gvn8yOc= Subject key identifier: 65:2F:62:23:3A:46:6A:F7:0D:5E:79:A1:FD:2A:04:E1:76:E1:02:4A Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A Certificate issuer: /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Certificate serial: 019B488269E47D3BEBF5F0198F4A405DDD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft Manifest number: 178B Signing time: Tue 23 Dec 2025 00:01:04 +0000 Manifest this update: Tue 23 Dec 2025 00:01:04 +0000 Manifest next update: Wed 24 Dec 2025 00:01:04 +0000 Files and hashes: 1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: eNTGXitmkNACCcEnLbFwd3oetqV8FGt4jP67uR6SuZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:69:e4:7d:3b:eb:f5:f0:19:8f:4a:40:5d:dd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a Validity Not Before: Dec 23 00:01:04 2025 GMT Not After : Dec 24 00:01:04 2025 GMT Subject: CN=652f62233a466af70d5e79a1fd2a04e176e1024a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:51:d2:08:d6:91:ca:3f:1c:c0:6e:8a:00:e6: 53:8b:0e:03:0f:2c:e4:6a:07:17:50:33:eb:92:2f: 19:16:dd:89:42:8a:bc:21:83:55:a2:e8:18:ed:dc: f2:c0:0d:49:cd:04:dc:56:f5:06:80:10:c4:01:c6: ad:63:2b:f2:25:6f:07:f3:84:36:f3:91:ee:2f:b5: 31:46:38:56:36:d5:b8:01:ec:64:5f:cd:e8:c1:d4: a1:6c:0b:50:e4:29:47:47:00:d7:f4:c9:6e:cb:89: a3:d0:dd:1d:fc:c6:a4:48:ca:97:34:19:03:bd:e2: b8:df:b9:3c:c8:eb:54:24:b9:39:16:84:51:9f:75: 55:37:dd:d9:bf:e3:83:3c:64:16:dd:e0:92:77:92: 16:df:f9:3f:f0:86:f0:31:cb:2c:1f:77:af:d7:39: c5:19:fe:dc:40:f5:17:bd:db:9e:5d:a3:48:ce:31: f1:5f:d0:4d:09:82:f5:ad:92:e7:1d:3f:00:66:f9: 0b:8b:0e:61:62:0b:c5:64:56:ad:0e:36:fe:a4:b8: f2:bf:59:33:55:15:ea:fd:8f:42:6a:56:8c:18:7b: 8a:37:1c:62:94:75:bc:bf:22:b1:9b:46:44:06:ef: d7:96:58:48:26:62:fc:c6:8f:d4:1c:a7:0c:69:14: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:62:23:3A:46:6A:F7:0D:5E:79:A1:FD:2A:04:E1:76:E1:02:4A X509v3 Authority Key Identifier: keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1b:ae:f0:97:84:43:8b:59:ce:6e:68:04:86:90:59:d3:e5: 75:e4:67:c6:20:f4:39:fb:e4:38:99:32:93:0f:bd:53:20:82: cf:67:a5:d3:38:ea:c2:b9:b9:96:55:5d:2c:30:ec:f8:d9:f6: 6d:ea:d0:9e:83:fb:05:ee:7c:47:70:bf:28:d2:c3:98:25:02: 6c:33:a6:65:40:ff:f4:a3:4a:3c:85:62:3c:86:6b:4f:54:0c: 60:e2:64:65:3f:dd:bc:85:87:01:99:08:d4:02:7b:19:00:8a: 0e:a3:fa:c9:81:f9:30:b2:6b:21:74:1a:43:16:c2:7e:84:ef: 26:69:ea:c6:25:97:7f:5f:1c:fb:24:d7:6f:d6:07:58:2e:09: 80:62:dc:86:72:e8:9e:80:23:fd:2b:2f:fe:19:52:77:c8:ca: bb:1b:78:05:73:ec:a4:14:30:8b:bc:60:bb:d4:b6:03:6b:79: e8:c9:d8:4a:a3:1d:65:63:75:12:b0:41:ac:21:43:de:4b:16: 98:e4:98:5a:d9:f0:51:8d:c1:b2:e3:02:92:6b:41:17:c0:43: 31:52:c0:09:8c:1c:c9:33:0a:e0:b7:fa:d2:26:5e:dc:af:37: eb:4e:fd:c1:38:b7:99:ff:e7:0b:98:c0:ab:3a:18:7f:54:20: 29:36:9e:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgmnkfTvr9fAZj0pAXd1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj YTBkMGEwHhcNMjUxMjIzMDAwMTA0WhcNMjUxMjI0MDAwMTA0WjAzMTEwLwYDVQQD Eyg2NTJmNjIyMzNhNDY2YWY3MGQ1ZTc5YTFmZDJhMDRlMTc2ZTEwMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1HSCNaRyj8cwG6KAOZTiw4DDyzk agcXUDPrki8ZFt2JQoq8IYNVougY7dzywA1JzQTcVvUGgBDEAcatYyvyJW8H84Q2 85HuL7UxRjhWNtW4AexkX83owdShbAtQ5ClHRwDX9Mluy4mj0N0d/MakSMqXNBkD veK437k8yOtUJLk5FoRRn3VVN93Zv+ODPGQW3eCSd5IW3/k/8IbwMcssH3ev1znF Gf7cQPUXvdueXaNIzjHxX9BNCYL1rZLnHT8AZvkLiw5hYgvFZFatDjb+pLjyv1kz VRXq/Y9CalaMGHuKNxxilHW8vyKxm0ZEBu/XllhIJmL8xo/UHKcMaRTlJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUvYiM6Rmr3DV55of0qBOF24QJKMB8GA1UdIwQY MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3 LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRuu8JeE Q4tZzm5oBIaQWdPldeRnxiD0OfvkOJkykw+9UyCCz2el0zjqwrm5llVdLDDs+Nn2 berQnoP7Be58R3C/KNLDmCUCbDOmZUD/9KNKPIViPIZrT1QMYOJkZT/dvIWHAZkI 1AJ7GQCKDqP6yYH5MLJrIXQaQxbCfoTvJmnqxiWXf18c+yTXb9YHWC4JgGLchnLo noAj/Ssv/hlSd8jKuxt4BXPspBQwi7xgu9S2A2t56MnYSqMdZWN1ErBBrCFD3ksW mOSYWtnwUY3BsuMCkmtBF8BDMVLACYwcyTMK4Lf60iZe3K836079wTi3mf/nC5jA qzoYf1QgKTaeyw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:43 2025 by rpki-client