This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json) Hash identifier: HLN71MU1vFvp+qBtFxt7tsj0D6WaY2HqdtZ42UiYSkQ= Subject key identifier: BC:48:CE:B2:D4:BD:46:5A:3A:E0:FF:A9:50:98:9D:59:57:DA:02:D3 Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Certificate serial: 019AF19B360D72DFABAE56D649F8DFBD488B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft Manifest number: 16CA Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=) 2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: gg8Vz36aflhwvUNCUbMJmb/nn1Lzbgi1QLSr/suSN5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:0d:72:df:ab:ae:56:d6:49:f8:df:bd:48:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=bc48ceb2d4bd465a3ae0ffa950989d5957da02d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:58:9f:1b:0e:b8:b3:20:3b:d5:8d:1f:b6:90: 79:84:b3:bb:d7:7c:d4:a0:46:68:ce:a5:a1:7d:9e: 5a:92:c7:c2:09:c5:a4:fa:9a:05:00:73:30:55:81: 8c:9f:4e:ea:7b:18:82:dc:d1:a7:d7:88:da:a4:9b: dc:0b:d5:eb:3a:a5:b5:36:79:53:27:45:d8:ad:3e: 66:df:9b:4a:4e:17:2f:c5:45:e8:f9:3b:14:b4:99: 60:fa:b9:0a:0a:6d:3b:f2:af:d0:4a:75:40:c2:4e: 00:e1:f8:f5:d8:34:8e:a6:5a:52:f5:c7:da:0f:95: d6:85:2b:96:4b:53:3c:1a:4a:fa:17:75:b4:6b:e1: 66:49:8b:d7:e6:cf:87:68:88:15:1b:88:1f:d6:de: f6:27:88:34:64:a1:8b:d2:c2:08:36:af:ef:c4:ef: fc:d7:82:a9:86:59:7a:98:24:04:9b:56:72:57:c9: 05:a7:1a:37:69:2c:ec:73:2b:0a:b9:64:85:a4:31: bb:7e:02:0f:77:df:b5:1f:43:85:d8:65:99:6d:71: c4:f5:b6:3f:1a:be:7c:32:48:e3:93:8e:c3:dc:37: 8c:2f:c9:08:a1:77:56:0c:1e:a4:19:32:61:82:6c: 0c:ba:00:d7:c8:9c:5a:66:97:dc:21:3d:81:0b:82: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:CE:B2:D4:BD:46:5A:3A:E0:FF:A9:50:98:9D:59:57:DA:02:D3 X509v3 Authority Key Identifier: keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f0:ab:2a:fe:56:bb:46:23:69:41:3c:86:88:25:d2:8a:9d: 79:9a:fd:fa:71:0c:cd:91:10:cc:fa:30:d8:3c:58:ed:9e:f5: 27:64:81:be:5d:ad:c9:da:32:31:ca:06:d4:38:08:63:96:2b: 56:be:36:6f:9b:3a:5a:cc:5b:4f:6e:d2:f5:a5:2e:94:6b:07: 51:b9:51:dc:ec:e6:c3:e4:3f:1b:c4:ae:f0:46:d6:ec:53:97: ba:13:98:59:aa:37:b6:81:20:6b:97:6f:82:6b:5e:f7:3e:96: aa:36:27:eb:7d:a9:68:a5:f3:7d:b7:bc:aa:a7:64:48:93:c1: 25:33:5d:5a:ac:c1:fa:db:a1:b8:b5:0f:81:5e:34:d7:fa:df: 10:dc:e4:24:1d:12:c0:a3:66:af:74:b4:69:de:2d:5f:cb:5b: a0:8a:de:9a:e2:e5:94:e0:f1:0f:e5:a8:3d:f1:a1:58:69:07: c5:c2:e1:2a:a3:d0:ea:0e:db:f4:0d:f2:28:48:df:45:9c:8d: 0b:20:b8:09:dd:71:08:4a:57:78:9e:d8:37:20:38:f9:0e:b9: 2a:3e:27:c1:62:a7:ea:f4:04:fe:09:c2:a9:a3:a8:4b:60:1f: 9b:33:e8:e1:d5:98:45:4c:1d:cf:14:15:59:39:9d:6b:3d:82: 21:37:84:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzYNct+rrlbWSfjfvUiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMjlhZDIyNTc5YTY4MDVjMWZmOGIxZWU1ZDczNTI5MGMw MTM0MGIwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EyhiYzQ4Y2ViMmQ0YmQ0NjVhM2FlMGZmYTk1MDk4OWQ1OTU3ZGEwMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFifGw64syA71Y0ftpB5hLO713zU oEZozqWhfZ5aksfCCcWk+poFAHMwVYGMn07qexiC3NGn14japJvcC9XrOqW1NnlT J0XYrT5m35tKThcvxUXo+TsUtJlg+rkKCm078q/QSnVAwk4A4fj12DSOplpS9cfa D5XWhSuWS1M8Gkr6F3W0a+FmSYvX5s+HaIgVG4gf1t72J4g0ZKGL0sIINq/vxO/8 14Kphll6mCQEm1ZyV8kFpxo3aSzscysKuWSFpDG7fgIPd9+1H0OF2GWZbXHE9bY/ Gr58Mkjjk47D3DeML8kIoXdWDB6kGTJhgmwMugDXyJxaZpfcIT2BC4JXwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxIzrLUvUZaOuD/qVCYnVlX2gLTMB8GA1UdIwQY MBaAFJAprSJXmmgFwf+LHuXXNSkMATQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2It Yzc5OWQ2ZDYxNDRhLzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2ItYzc5OWQ2ZDYxNDRh LzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvCrKv5W u0YjaUE8hogl0oqdeZr9+nEMzZEQzPow2DxY7Z71J2SBvl2tydoyMcoG1DgIY5Yr Vr42b5s6WsxbT27S9aUulGsHUblR3Ozmw+Q/G8Su8EbW7FOXuhOYWao3toEga5dv gmte9z6WqjYn632paKXzfbe8qqdkSJPBJTNdWqzB+tuhuLUPgV401/rfENzkJB0S wKNmr3S0ad4tX8tboIremuLllODxD+WoPfGhWGkHxcLhKqPQ6g7b9A3yKEjfRZyN CyC4Cd1xCEpXeJ7YNyA4+Q65Kj4nwWKn6vQE/gnCqaOoS2AfmzPo4dWYRUwdzxQV WTmdaz2CITeE3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:43 2025 by rpki-client