This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json) Hash identifier: CklCQLwiSMbj5QBAzZweIDPLe0SFsdSWRSasBbtv4EE= Subject key identifier: 68:22:E4:EF:2D:24:6C:91:09:4B:ED:41:E6:11:27:EE:E4:F7:D4:58 Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Certificate serial: 019B39B42A8AE0E84ADE85B765D05E18D019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft Manifest number: 17A7 Signing time: Sat 20 Dec 2025 03:01:07 +0000 Manifest this update: Sat 20 Dec 2025 03:01:07 +0000 Manifest next update: Sun 21 Dec 2025 03:01:07 +0000 Files and hashes: 1: 6oMyL4Y_2Xcvd0ThcfssP_mVE20.roa (hash: JOsCREV0c9arO+BxSgqWMu5cq/6/bc73ElaebweULrs=) 2: EltWU6BPMuO1ItcZzbbDLhGIcyw.roa (hash: ErznFfmY/TRRK13oDADB0v3OAux59FUBMiU3vqEPAWQ=) 3: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=) 4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: 9GhszxqWPmvajuKbqYwaavEB+s8zC0wwr2/Y3EPdPRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:2a:8a:e0:e8:4a:de:85:b7:65:d0:5e:18:d0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Validity Not Before: Dec 20 03:01:07 2025 GMT Not After : Dec 21 03:01:07 2025 GMT Subject: CN=6822e4ef2d246c91094bed41e61127eee4f7d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:ec:67:c6:1a:74:5a:76:fb:1e:06:5c:96: c8:f0:3b:17:37:70:61:9a:8d:e5:c2:b3:b9:0c:74: a8:d8:9c:23:84:93:17:ee:aa:5b:55:c8:e4:df:7a: cf:db:1f:21:91:c4:8a:ea:de:9a:f3:80:2e:ff:ac: 66:bb:85:9c:fe:69:4c:8f:7a:78:b3:96:09:b0:a9: 1b:cd:81:f9:4f:93:e1:6d:43:cd:2c:8d:32:9d:d0: 11:39:9d:bd:61:ae:98:72:48:78:bf:fe:a3:d4:81: 22:2b:3a:65:69:9a:a0:66:11:61:c0:41:dd:d7:12: c5:da:1d:66:6d:d9:c1:7b:92:f0:7f:14:3a:f9:19: 49:89:f2:4c:03:06:40:74:c2:bd:3c:86:e8:51:7b: 6e:4a:f2:ee:74:ae:22:6f:e5:47:5d:4e:e2:5d:31: 8c:84:ac:ac:ba:6e:c5:ee:d1:4e:8c:d9:17:35:6a: 6f:db:bf:79:40:58:c6:9f:a3:f6:13:b5:62:81:2e: c0:b2:d3:07:ae:64:51:a8:cc:63:c9:96:4f:5b:a2: 33:ef:21:f6:93:65:86:bf:92:07:f8:75:8d:69:8f: a0:aa:bc:74:12:8f:64:59:45:ed:2c:ca:51:72:de: e5:60:c1:86:a8:b3:ba:f6:59:09:44:d9:5b:b7:01: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:22:E4:EF:2D:24:6C:91:09:4B:ED:41:E6:11:27:EE:E4:F7:D4:58 X509v3 Authority Key Identifier: keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c3:6a:0e:f7:44:1d:8d:5e:84:85:8f:3f:9a:6e:7c:6a:72: 08:7d:97:73:98:07:d2:32:8b:55:6c:76:c4:40:10:36:56:28: 53:d7:fb:18:7b:f1:13:7d:25:58:5b:4a:e2:f4:02:35:70:71: ed:a2:ca:8d:29:7e:28:7c:9c:a5:84:7c:88:4d:bd:67:12:f4: 34:2c:d6:27:86:a4:84:f3:07:77:90:a4:f1:e2:df:27:fe:a0: 0f:4e:e1:fb:1b:b0:6b:33:69:b5:77:ff:c0:09:78:9c:80:c7: 2e:3f:11:05:3d:3c:a8:6f:eb:d9:26:61:cc:77:20:8b:86:30: 46:80:cf:ce:b5:c1:66:43:4b:74:9e:4c:0f:a4:41:7b:44:e0: cd:c6:e9:eb:4b:c3:75:61:fa:1e:bb:c5:2a:60:aa:59:34:09: f2:56:72:35:bf:9a:92:15:69:eb:bf:6c:83:8c:d1:78:70:d5: 4e:7e:3e:07:e5:b4:d3:2b:68:f3:0a:e9:f5:5f:f8:9f:d2:64: 7c:ce:5a:22:57:b5:0b:6a:69:76:4f:fb:c1:af:f7:ef:1a:22: 14:13:f3:7f:0c:c5:cf:be:63:b3:68:83:cf:08:7a:b7:ea:3d: 5a:4d:89:d2:2e:b9:ed:ff:de:5f:75:73:ba:3a:3c:27:9b:6a: 03:a2:95:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCqK4OhK3oW3ZdBeGNAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj MmEwOTUwHhcNMjUxMjIwMDMwMTA3WhcNMjUxMjIxMDMwMTA3WjAzMTEwLwYDVQQD Eyg2ODIyZTRlZjJkMjQ2YzkxMDk0YmVkNDFlNjExMjdlZWU0ZjdkNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2DsZ8YadFp2+x4GXJbI8DsXN3Bh mo3lwrO5DHSo2JwjhJMX7qpbVcjk33rP2x8hkcSK6t6a84Au/6xmu4Wc/mlMj3p4 s5YJsKkbzYH5T5PhbUPNLI0yndAROZ29Ya6Yckh4v/6j1IEiKzplaZqgZhFhwEHd 1xLF2h1mbdnBe5LwfxQ6+RlJifJMAwZAdMK9PIboUXtuSvLudK4ib+VHXU7iXTGM hKysum7F7tFOjNkXNWpv2795QFjGn6P2E7VigS7AstMHrmRRqMxjyZZPW6Iz7yH2 k2WGv5IH+HWNaY+gqrx0Eo9kWUXtLMpRct7lYMGGqLO69lkJRNlbtwE29wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgi5O8tJGyRCUvtQeYRJ+7k99RYMB8GA1UdIwQY MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4 LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8NqDvdE HY1ehIWPP5pufGpyCH2Xc5gH0jKLVWx2xEAQNlYoU9f7GHvxE30lWFtK4vQCNXBx 7aLKjSl+KHycpYR8iE29ZxL0NCzWJ4akhPMHd5Ck8eLfJ/6gD07h+xuwazNptXf/ wAl4nIDHLj8RBT08qG/r2SZhzHcgi4YwRoDPzrXBZkNLdJ5MD6RBe0Tgzcbp60vD dWH6HrvFKmCqWTQJ8lZyNb+akhVp679sg4zReHDVTn4+B+W00yto8wrp9V/4n9Jk fM5aIle1C2ppdk/7wa/37xoiFBPzfwzFz75js2iDzwh6t+o9Wk2J0i657f/eX3Vz ujo8J5tqA6KV4g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:33 2025 by rpki-client