This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json) Hash identifier: YuwVdt0nVI/VqJbt6bP0VBwSqk/TVsHF4mYEpQufIqw= Subject key identifier: 81:87:32:2F:5C:4B:21:58:48:AB:95:A5:D0:76:17:8E:80:61:40:3D Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Certificate serial: 019B44A599E2CA34AA5E44805EED7054B543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft Manifest number: 16F5 Signing time: Mon 22 Dec 2025 06:01:02 +0000 Manifest this update: Mon 22 Dec 2025 06:01:02 +0000 Manifest next update: Tue 23 Dec 2025 06:01:02 +0000 Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=) 2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: vt0rnctZIeiV/seVPvr1cr7vhYUnBLLeRfa+eNr+JC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:99:e2:ca:34:aa:5e:44:80:5e:ed:70:54:b5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Validity Not Before: Dec 22 06:01:02 2025 GMT Not After : Dec 23 06:01:02 2025 GMT Subject: CN=8187322f5c4b215848ab95a5d076178e8061403d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:d2:b9:a9:e8:25:53:ad:4e:c7:f0:a2:8e: a6:fe:85:d9:33:7f:8c:74:49:33:c6:4f:fc:1d:76: 5d:73:8f:61:c1:10:d9:36:b9:6d:7b:4a:5d:da:a0: 06:69:5f:68:0d:41:f7:57:74:61:17:f4:26:aa:32: 96:c7:fe:f9:55:1e:78:5d:f1:07:fc:4b:46:8c:fe: 2b:a9:2c:3e:e9:4f:2a:c7:37:ff:e3:87:07:11:9b: 9b:ff:3d:f4:f8:c9:56:37:b5:86:c8:9e:88:24:3c: 01:d3:ca:f0:ae:af:04:b9:74:45:11:92:04:3e:ff: 35:f2:3a:34:36:13:da:34:91:7e:a7:7b:08:52:bb: ab:f0:67:99:9b:8c:cb:42:cd:ad:48:2b:b4:9b:b2: 62:21:bf:7b:00:4c:fb:8d:94:ef:0a:e2:b1:74:e1: 6b:dc:ec:97:74:d6:b2:da:d6:b3:3a:08:83:0e:0a: c6:d2:82:ce:05:49:52:40:e8:eb:6c:a6:fc:2c:13: 55:18:52:fe:5f:66:3c:fe:8c:1b:d8:70:12:c6:6e: 38:c0:c1:13:1c:7d:99:12:6c:5a:b9:24:5f:6c:67: 7a:94:61:e9:b9:b7:c8:95:d2:d2:fc:ce:a3:bc:97: 2f:0e:56:7f:4c:e0:db:1b:a3:92:b1:df:68:a1:1c: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:32:2F:5C:4B:21:58:48:AB:95:A5:D0:76:17:8E:80:61:40:3D X509v3 Authority Key Identifier: keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6b:5d:9c:c9:a6:2e:94:54:13:79:6f:5f:9a:bc:de:03:2e: 35:a4:b7:04:8f:d3:03:db:1c:f7:0f:e4:91:7a:ec:95:eb:00: f6:ae:67:4c:94:f0:a7:07:c2:f1:b0:c2:5b:55:5c:84:e4:24: 99:14:6b:8f:4b:8f:8a:4e:d2:b7:b7:a0:f8:20:45:d1:d5:ef: e6:4a:5a:e2:b7:6c:f5:e5:98:41:e0:4f:37:69:8b:98:b0:7f: c8:c9:fa:a0:77:8c:45:63:dc:5e:b3:d3:ac:cb:a8:fd:04:3b: 24:26:a1:37:54:5f:18:71:a8:56:ac:46:aa:e5:2b:2e:b5:ad: d6:a5:6a:23:f6:0e:cf:eb:50:46:db:18:1e:a6:75:b5:49:dd: 20:23:4b:33:66:56:f3:27:74:37:52:e4:af:2d:1f:0c:ba:23: 0f:b8:6b:e2:61:5b:ba:f6:e5:b0:14:2b:07:c2:d7:d2:b0:68: 36:a9:a7:ab:6b:71:34:d7:f2:9e:38:a7:87:78:cc:e8:5e:7a: 6b:36:c2:2c:d8:8d:05:63:4a:af:ea:9f:12:f6:cc:f1:80:e0: 11:c2:81:98:3a:b0:b3:90:16:1f:b2:d6:c6:b9:79:bb:b6:72: e0:09:cb:bc:34:cd:a4:37:eb:35:36:c5:f2:63:db:8c:7e:fb: 75:2e:a1:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpZniyjSqXkSAXu1wVLVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMjlhZDIyNTc5YTY4MDVjMWZmOGIxZWU1ZDczNTI5MGMw MTM0MGIwHhcNMjUxMjIyMDYwMTAyWhcNMjUxMjIzMDYwMTAyWjAzMTEwLwYDVQQD Eyg4MTg3MzIyZjVjNGIyMTU4NDhhYjk1YTVkMDc2MTc4ZTgwNjE0MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsADSuanoJVOtTsfwoo6m/oXZM3+M dEkzxk/8HXZdc49hwRDZNrlte0pd2qAGaV9oDUH3V3RhF/QmqjKWx/75VR54XfEH /EtGjP4rqSw+6U8qxzf/44cHEZub/z30+MlWN7WGyJ6IJDwB08rwrq8EuXRFEZIE Pv818jo0NhPaNJF+p3sIUrur8GeZm4zLQs2tSCu0m7JiIb97AEz7jZTvCuKxdOFr 3OyXdNay2tazOgiDDgrG0oLOBUlSQOjrbKb8LBNVGFL+X2Y8/owb2HASxm44wMET HH2ZEmxauSRfbGd6lGHpubfIldLS/M6jvJcvDlZ/TODbG6OSsd9ooRwOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGHMi9cSyFYSKuVpdB2F46AYUA9MB8GA1UdIwQY MBaAFJAprSJXmmgFwf+LHuXXNSkMATQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2It Yzc5OWQ2ZDYxNDRhLzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2ItYzc5OWQ2ZDYxNDRh LzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmtdnMmm LpRUE3lvX5q83gMuNaS3BI/TA9sc9w/kkXrslesA9q5nTJTwpwfC8bDCW1VchOQk mRRrj0uPik7St7eg+CBF0dXv5kpa4rds9eWYQeBPN2mLmLB/yMn6oHeMRWPcXrPT rMuo/QQ7JCahN1RfGHGoVqxGquUrLrWt1qVqI/YOz+tQRtsYHqZ1tUndICNLM2ZW 8yd0N1Lkry0fDLojD7hr4mFbuvblsBQrB8LX0rBoNqmnq2txNNfynjinh3jM6F56 azbCLNiNBWNKr+qfEvbM8YDgEcKBmDqws5AWH7LWxrl5u7Zy4AnLvDTNpDfrNTbF 8mPbjH77dS6hpA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:48:08 2025 by rpki-client