This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json) Hash identifier: FooB+Etrcj5A95wWyh0+rwzBgN7zL64ujmW3eTg5Yd8= Subject key identifier: 18:B7:9A:7D:5A:E0:B8:F7:92:50:46:8F:67:96:C8:6C:04:CB:3F:BA Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36 Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236 Certificate serial: 019B5A88A6D06258B8BD83BE2B4F628313C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft Manifest number: 06F3 Signing time: Fri 26 Dec 2025 12:01:03 +0000 Manifest this update: Fri 26 Dec 2025 12:01:03 +0000 Manifest next update: Sat 27 Dec 2025 12:01:03 +0000 Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: UjA9YfKXD0NwR5zneX7sOnGydwDAMMGWoJ6D4vKDrAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a6:d0:62:58:b8:bd:83:be:2b:4f:62:83:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236 Validity Not Before: Dec 26 12:01:03 2025 GMT Not After : Dec 27 12:01:03 2025 GMT Subject: CN=18b79a7d5ae0b8f79250468f6796c86c04cb3fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:4d:37:13:dd:25:b8:a1:8b:80:7c:4d:ed: 6c:ff:5a:46:b8:d0:53:ce:dc:2c:1c:0e:c6:9f:5d: 01:07:d0:a1:9f:c8:48:3e:1e:ed:47:c4:5c:99:96: 79:36:03:2f:5d:ee:e4:86:09:5e:f2:2e:d3:15:55: 3b:e5:59:1d:f6:a6:4b:23:a7:9e:29:b6:59:82:b1: 15:c1:ad:9c:4f:b5:48:c1:2a:00:d5:0f:97:d8:eb: 52:d7:55:d0:72:1d:91:98:a2:71:1b:0d:09:e4:88: 9b:4c:94:64:a2:4e:c8:ef:23:6d:49:84:ae:57:7a: 8c:67:1a:77:2d:06:58:70:a0:0c:7b:97:85:c5:fd: d0:81:8f:3d:36:79:ad:52:9f:65:a9:1e:bc:bd:38: cb:d3:08:f4:05:b4:df:fe:56:a7:1a:02:b1:ca:60: d5:db:8e:aa:f9:b4:c2:8c:ef:23:f0:1a:00:30:28: ec:b9:49:1d:1f:eb:3d:48:e6:28:7d:80:e3:3d:06: 80:22:d9:0a:04:6c:ff:71:d4:0d:21:60:00:ee:c1: 01:59:ee:7e:e9:92:f5:f9:9a:ea:6b:12:02:c7:52: 1b:28:b9:a6:e2:00:a2:a1:ed:28:b2:98:fa:9b:d2: 63:40:b0:68:c1:95:7b:05:f3:c8:e5:20:68:34:b4: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:9A:7D:5A:E0:B8:F7:92:50:46:8F:67:96:C8:6C:04:CB:3F:BA X509v3 Authority Key Identifier: keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:57:cc:a1:59:67:c1:c2:93:bd:f5:fe:1f:d3:fd:b0:05:68: c2:8f:b1:7d:c2:ee:a7:e8:d2:77:a6:da:5a:30:09:a5:cf:3d: 38:62:b3:0c:05:4b:7e:40:7a:88:40:cd:ff:8d:a6:79:61:51: c8:15:8c:0c:ec:27:d6:23:83:a2:8a:22:82:3f:17:e3:23:9a: 14:d7:ec:eb:88:ee:48:47:46:13:7e:79:54:64:7f:91:7f:83: 2a:f8:fb:61:62:6d:55:af:63:97:93:10:78:cb:b1:2c:b7:62: e2:31:2c:d5:d6:56:30:7b:c9:e7:ac:4c:03:b0:34:fe:07:da: 54:d9:e2:24:c1:40:b7:b3:97:21:52:d0:4b:33:41:11:32:14: 9a:b6:18:03:be:77:00:a5:49:bc:2a:5c:a0:52:12:1c:76:bc: c6:f0:d7:56:e2:cc:cb:c0:88:09:8b:f9:a6:ec:96:f6:03:2f: 7a:c0:b0:b5:41:20:ce:3b:10:e9:f3:be:95:da:b1:43:f3:5e: ad:ad:1e:2c:70:7f:0e:7b:73:6e:c7:35:8c:6f:72:40:72:75: c7:5c:59:e9:fd:b2:c8:77:f4:1e:69:1e:9a:41:66:2a:6b:01: b2:5c:68:ca:9b:63:c3:c5:7b:38:26:fb:f4:39:c9:a9:f0:98: 96:da:4b:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKbQYli4vYO+K09igxPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZTI4ZDA1YzkwMTg1ZmU3ZTYyYWYxY2VlMjVjODgzYjZm ZTIyMzYwHhcNMjUxMjI2MTIwMTAzWhcNMjUxMjI3MTIwMTAzWjAzMTEwLwYDVQQD EygxOGI3OWE3ZDVhZTBiOGY3OTI1MDQ2OGY2Nzk2Yzg2YzA0Y2IzZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MJNNxPdJbihi4B8Te1s/1pGuNBT ztwsHA7Gn10BB9Chn8hIPh7tR8RcmZZ5NgMvXe7khgle8i7TFVU75Vkd9qZLI6ee KbZZgrEVwa2cT7VIwSoA1Q+X2OtS11XQch2RmKJxGw0J5IibTJRkok7I7yNtSYSu V3qMZxp3LQZYcKAMe5eFxf3QgY89NnmtUp9lqR68vTjL0wj0BbTf/lanGgKxymDV 246q+bTCjO8j8BoAMCjsuUkdH+s9SOYofYDjPQaAItkKBGz/cdQNIWAA7sEBWe5+ 6ZL1+ZrqaxICx1IbKLmm4gCioe0ospj6m9JjQLBowZV7BfPI5SBoNLTUdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi3mn1a4Lj3klBGj2eWyGwEyz+6MB8GA1UdIwQY MBaAFAjijQXJAYX+fmKvHO4lyIO2/iI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZDJiYTctYzZiNy00NzBiLTg1YWEt MGM0N2E0MWYzYTkwLzEvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84ZDJiYTctYzZiNy00NzBiLTg1YWEtMGM0N2E0MWYzYTkw LzEvQ09LTkJja0JoZjUtWXE4YzdpWElnN2ItSWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlfMoVln wcKTvfX+H9P9sAVowo+xfcLup+jSd6baWjAJpc89OGKzDAVLfkB6iEDN/42meWFR yBWMDOwn1iODoooigj8X4yOaFNfs64juSEdGE355VGR/kX+DKvj7YWJtVa9jl5MQ eMuxLLdi4jEs1dZWMHvJ56xMA7A0/gfaVNniJMFAt7OXIVLQSzNBETIUmrYYA753 AKVJvCpcoFISHHa8xvDXVuLMy8CICYv5puyW9gMvesCwtUEgzjsQ6fO+ldqxQ/Ne ra0eLHB/Dntzbsc1jG9yQHJ1x1xZ6f2yyHf0HmkemkFmKmsBslxoyptjw8V7OCb7 9DnJqfCYltpLKw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:33 2025 by rpki-client