This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json) Hash identifier: 79MKoht17WEmoVYjKaDpeRiBb5RESOxQ9sCh8QrJtIQ= Subject key identifier: C7:B1:4E:12:E4:8E:B3:C4:97:FD:FF:4E:B2:FB:C4:39:30:00:76:BD Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019AF31B8036C68122F015FF6DE127276911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=) 2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=) 3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: aqqxonXJ9puFZui3AgAZki6FCyNUVEPgjJPLqoAhGFk=) 4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:36:c6:81:22:f0:15:ff:6d:e1:27:27:69:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=c7b14e12e48eb3c497fdff4eb2fbc439300076bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:b4:cf:0d:29:27:b6:02:6a:2e:c8:22:3b: 0c:33:cb:5a:de:5d:f9:04:42:4e:eb:44:c5:2b:b5: 58:c1:3a:1a:1b:90:a8:ce:ff:c4:f8:f0:ed:05:90: c3:43:59:24:54:8e:f8:6b:de:af:44:e5:19:2b:85: 8e:0a:83:b3:f3:ab:89:92:f2:c5:ad:66:e9:fe:e8: 6e:c7:55:bf:03:40:67:94:76:5c:64:16:2f:db:1f: 4b:81:91:fb:7c:0d:fc:bd:8d:b4:b4:17:6c:d8:6b: 67:2a:83:ed:55:dd:8f:77:88:a8:6b:0d:ea:be:2f: f0:27:51:66:78:b9:a0:7d:98:83:a6:14:48:fa:68: 8d:66:41:f1:6d:47:c2:7f:54:68:16:ec:9e:36:42: 1f:d5:58:fd:a5:dd:ad:10:27:0d:ec:28:c2:2e:8c: 29:b3:b2:4d:41:5c:ff:b3:cd:da:87:83:04:68:b0: 8d:d4:e0:e8:50:b1:fd:0e:8c:c9:48:b4:21:49:10: ad:61:f5:3f:6d:23:e1:db:d3:95:ec:37:f0:d2:be: 3f:5d:98:b7:7b:0f:42:60:6c:ac:d7:c8:3a:98:61: a4:83:0a:02:ae:36:8a:a1:7e:fb:91:dc:01:f6:88: d3:f6:68:ab:9e:bf:f7:1f:4f:86:1d:ae:10:b1:b2: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:4E:12:E4:8E:B3:C4:97:FD:FF:4E:B2:FB:C4:39:30:00:76:BD X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:03:2a:b1:85:58:e3:cc:48:4d:7f:c7:8d:e1:29:51:e8:3c: f3:26:08:ed:63:f1:e4:3d:ea:2a:f3:6e:b4:ad:b8:a0:25:13: 0c:36:ce:d9:41:2e:99:9a:9c:a0:53:93:0e:62:d0:9b:3f:ee: cf:1b:a8:80:7e:fa:68:cb:55:9a:14:05:64:f6:28:46:e8:23: 69:2c:d7:3d:6d:7f:d7:d6:0e:3a:7d:e7:39:ba:6a:44:40:ce: 87:96:39:7b:fe:c5:4f:7a:ab:21:ae:a6:5b:f4:65:66:38:ce: b9:bd:fd:4f:71:7c:ff:c2:40:fc:e7:fd:09:07:0b:6d:22:03: 13:60:cc:09:7b:9f:0e:cb:da:5b:95:71:2f:6d:b5:58:22:46: 61:d6:b7:25:e4:7f:79:a0:86:f9:26:8b:13:bf:47:dc:bf:56: b5:d6:c2:5c:3f:de:2e:81:dc:34:a2:f7:09:7d:3d:38:ad:55: aa:dc:38:c6:5d:11:f3:4d:0d:53:75:32:4f:d7:f2:69:37:8a: e3:e7:ce:1e:9f:1c:6e:43:50:2a:fa:d3:45:e6:bc:5c:a0:9a: 9a:e2:56:60:02:58:1a:a6:2b:0a:60:9e:b1:f5:ab:50:79:20: 92:6e:86:98:01:5c:39:8a:09:19:04:3e:af:08:0d:99:0e:89: 83:ed:32:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4A2xoEi8BX/beEnJ2kRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD EyhjN2IxNGUxMmU0OGViM2M0OTdmZGZmNGViMmZiYzQzOTMwMDA3NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqa0zw0pJ7YCai7IIjsMM8ta3l35 BEJO60TFK7VYwToaG5Cozv/E+PDtBZDDQ1kkVI74a96vROUZK4WOCoOz86uJkvLF rWbp/uhux1W/A0BnlHZcZBYv2x9LgZH7fA38vY20tBds2GtnKoPtVd2Pd4ioaw3q vi/wJ1FmeLmgfZiDphRI+miNZkHxbUfCf1RoFuyeNkIf1Vj9pd2tECcN7CjCLowp s7JNQVz/s83ah4MEaLCN1ODoULH9DozJSLQhSRCtYfU/bSPh29OV7Dfw0r4/XZi3 ew9CYGys18g6mGGkgwoCrjaKoX77kdwB9ojT9mirnr/3H0+GHa4QsbJu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMexThLkjrPEl/3/TrL7xDkwAHa9MB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwMqsYVY 48xITX/HjeEpUeg88yYI7WPx5D3qKvNutK24oCUTDDbO2UEumZqcoFOTDmLQmz/u zxuogH76aMtVmhQFZPYoRugjaSzXPW1/19YOOn3nObpqREDOh5Y5e/7FT3qrIa6m W/RlZjjOub39T3F8/8JA/Of9CQcLbSIDE2DMCXufDsvaW5VxL221WCJGYda3JeR/ eaCG+SaLE79H3L9WtdbCXD/eLoHcNKL3CX09OK1Vqtw4xl0R800NU3UyT9fyaTeK 4+fOHp8cbkNQKvrTRea8XKCamuJWYAJYGqYrCmCesfWrUHkgkm6GmAFcOYoJGQQ+ rwgNmQ6Jg+0yoA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:13 2025 by rpki-client