This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json) Hash identifier: 6DPNRgx4mpYWzEyBws2ZV16o6boqPht2bPNTwym0RCQ= Subject key identifier: 06:7A:FC:27:53:66:3D:0B:3D:B7:7A:89:E5:85:3F:28:4B:CA:BC:A7 Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Certificate serial: 019B3BD980936905101D471F4F8C54460812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft Manifest number: 0FE9 Signing time: Sat 20 Dec 2025 13:01:08 +0000 Manifest this update: Sat 20 Dec 2025 13:01:08 +0000 Manifest next update: Sun 21 Dec 2025 13:01:08 +0000 Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: y8F5xMsk5rzYa/KHvWWlpX+8OjQFj2Pp+NL4q9cPx0I=) 2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:80:93:69:05:10:1d:47:1f:4f:8c:54:46:08:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Validity Not Before: Dec 20 13:01:08 2025 GMT Not After : Dec 21 13:01:08 2025 GMT Subject: CN=067afc2753663d0b3db77a89e5853f284bcabca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:67:a7:89:16:74:26:87:60:0a:98:b3:56: 43:4b:bb:81:50:9c:de:ca:6d:86:d4:0b:c5:0a:7e: 68:b0:36:02:b8:2d:77:53:bf:b2:93:27:b4:10:63: 6b:0b:fd:b8:d3:59:08:75:2b:ef:05:73:d8:71:96: 2b:9d:ad:45:20:28:76:1a:6d:98:cd:bc:e9:d6:af: c3:c7:a9:a0:70:8d:40:55:40:47:6a:9a:a0:16:2e: 5e:a6:7f:ba:35:c9:2a:44:63:c7:9f:21:06:e4:03: 85:d3:d7:9d:f0:26:e9:e1:95:60:fd:3f:9c:d3:55: df:82:1d:6d:d1:77:bd:b2:61:e7:e8:19:6e:0c:ba: 96:72:73:c6:f7:00:38:df:16:fb:a5:9c:d4:91:53: 50:a1:80:2e:30:6b:0a:53:31:a9:6d:98:71:9b:eb: 9d:b0:0f:d5:0e:a4:05:7b:76:a6:60:bd:32:d4:a0: c8:38:20:dd:e8:43:3d:8d:29:af:83:15:ab:f7:82: e8:3c:e9:46:15:ee:9f:4f:43:7b:dd:a9:6c:0d:90: 5c:da:fb:da:3c:7a:bc:25:99:a9:d2:d7:a5:e1:20: 4c:05:0d:5c:fb:09:f4:36:a5:af:a4:04:10:fc:a6: 0e:45:8d:62:32:8d:74:77:99:44:4a:24:75:85:db: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:FC:27:53:66:3D:0B:3D:B7:7A:89:E5:85:3F:28:4B:CA:BC:A7 X509v3 Authority Key Identifier: keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5b:19:29:36:32:04:9a:e6:b4:a3:68:4b:87:c1:ea:a6:9c: fd:63:a4:0d:52:df:65:b0:fb:cd:7a:0e:74:e7:a2:1a:07:17: cb:23:7b:cb:51:4f:e3:44:c6:4a:9b:92:b4:4c:bc:91:ce:5d: 1e:d1:c5:be:b8:36:fe:e9:97:3e:9c:20:f1:e7:47:2a:00:6c: 73:62:72:f5:15:d3:76:cb:64:7b:67:14:9b:0e:b3:56:3f:87: bc:4f:45:02:c0:a7:79:9f:c6:16:f6:34:9a:b0:7a:29:02:5b: 7d:ec:2d:3d:02:42:ab:6a:e1:a9:bb:f2:e6:8c:34:6b:14:9f: b9:03:0a:ec:92:9d:e0:87:a9:e8:52:39:d0:81:74:58:6f:91: ed:35:e3:ef:f0:ee:0f:8e:c1:37:aa:00:4b:4b:3b:a5:0e:94: 00:82:45:74:13:06:b5:e0:9f:ed:16:06:f1:6c:80:bb:f0:42: d8:18:7d:2a:3d:df:05:8d:91:42:6c:68:b1:ca:84:05:7d:9e: 26:f6:7a:10:50:77:94:15:c8:95:c3:2a:23:2e:0d:0e:ac:a7: ed:dc:c2:7a:98:ff:2d:0d:35:9c:de:cf:9b:16:b4:ca:88:66: 42:a3:4b:93:bf:20:78:11:1d:29:e6:41:fc:06:82:3c:4a:3c: 5d:6d:52:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YCTaQUQHUcfT4xURggSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzliMDQwMTZmNmYwMjE4MzMwN2MxN2RmNjMwYTAyODll YzViYjUwHhcNMjUxMjIwMTMwMTA4WhcNMjUxMjIxMTMwMTA4WjAzMTEwLwYDVQQD EygwNjdhZmMyNzUzNjYzZDBiM2RiNzdhODllNTg1M2YyODRiY2FiY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAustnp4kWdCaHYAqYs1ZDS7uBUJze ym2G1AvFCn5osDYCuC13U7+ykye0EGNrC/2401kIdSvvBXPYcZYrna1FICh2Gm2Y zbzp1q/Dx6mgcI1AVUBHapqgFi5epn+6NckqRGPHnyEG5AOF09ed8Cbp4ZVg/T+c 01Xfgh1t0Xe9smHn6BluDLqWcnPG9wA43xb7pZzUkVNQoYAuMGsKUzGpbZhxm+ud sA/VDqQFe3amYL0y1KDIOCDd6EM9jSmvgxWr94LoPOlGFe6fT0N73alsDZBc2vva PHq8JZmp0tel4SBMBQ1c+wn0NqWvpAQQ/KYORY1iMo10d5lESiR1hdvMZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ6/CdTZj0LPbd6ieWFPyhLyrynMB8GA1UdIwQY MBaAFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et MWQ1OTFiYmQ0MDYwLzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw LzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFsZKTYy BJrmtKNoS4fB6qac/WOkDVLfZbD7zXoOdOeiGgcXyyN7y1FP40TGSpuStEy8kc5d HtHFvrg2/umXPpwg8edHKgBsc2Jy9RXTdstke2cUmw6zVj+HvE9FAsCneZ/GFvY0 mrB6KQJbfewtPQJCq2rhqbvy5ow0axSfuQMK7JKd4Iep6FI50IF0WG+R7TXj7/Du D47BN6oAS0s7pQ6UAIJFdBMGteCf7RYG8WyAu/BC2Bh9Kj3fBY2RQmxoscqEBX2e JvZ6EFB3lBXIlcMqIy4NDqyn7dzCepj/LQ01nN7Pmxa0yohmQqNLk78geBEdKeZB /AaCPEo8XW1ScA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:38 2025 by rpki-client