This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json) Hash identifier: a9xCnvjmuuagKdcNB8xcA5o67YextKRAPxqYaInZYIQ= Subject key identifier: 8A:AC:A8:EF:FA:F7:E2:3A:17:66:C6:F2:FF:0D:01:CD:87:0A:CA:FD Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019B59765DCFC38E2B5BB7D0DB332F2B555E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 07:01:27 +0000 Manifest this update: Fri 26 Dec 2025 07:01:27 +0000 Manifest next update: Sat 27 Dec 2025 07:01:27 +0000 Files and hashes: 1: eIT32ZmD_Fr9lQPFnUP-_HGQsmc.roa (hash: IgyAOYuvEIPEY/4VEwvCRv4xZp0QVNPeSnZmgWxYe1k=) 2: hSwwAZmeTaolcY9O9J-gjnCspyc.roa (hash: GT5DIH9LX8Y0Myj2ZdVG14Q8npex7JbrhTK4BHXYqYY=) 3: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: 3636008Pxby7cKhqfBF+JLZO+S0NXQHP8LGjAYRLpOo=) 4: rPhc70wdg_DNFy8p_DFC0TNrzZE.roa (hash: izXtXZXXy5nvEOdPnUDtBt7NCMNBYID7xzPo2/E3HvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:5d:cf:c3:8e:2b:5b:b7:d0:db:33:2f:2b:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Dec 26 07:01:27 2025 GMT Not After : Dec 27 07:01:27 2025 GMT Subject: CN=8aaca8effaf7e23a1766c6f2ff0d01cd870acafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:e6:d2:d8:a5:a6:33:21:9b:5a:21:d3:98: c7:59:54:f9:d5:a3:f9:b6:13:00:ce:3b:20:1b:ed: b5:cf:bc:68:19:00:11:c9:ac:79:af:cf:9a:be:43: bf:65:c4:99:95:72:0d:ed:ed:80:f4:77:56:fd:4b: 83:b5:2e:60:06:a0:b6:14:1d:f4:cb:8d:2f:54:0a: ae:bd:a7:68:c4:4c:c7:09:6b:36:48:09:b8:be:bd: 25:ed:c4:02:02:53:33:5f:15:36:9b:28:ad:b2:a7: f8:84:8e:7a:a4:09:a6:69:71:32:67:55:42:81:50: 26:82:e4:b2:e4:ad:d2:4c:a1:9b:93:b7:34:f8:84: 03:68:c8:b5:03:cb:26:d4:d3:28:0b:dd:2a:23:a8: f1:a1:ec:29:50:72:ab:45:a7:8a:32:1e:1d:11:9e: 2e:05:a5:30:30:3e:61:11:00:fa:01:e5:1e:1d:ac: c8:9b:7e:89:89:bd:71:1e:31:98:e6:80:f9:1e:07: 05:d0:70:40:10:8d:31:1d:d3:ae:67:16:1a:15:a2: d0:d9:2c:eb:f3:e6:3b:f7:e0:59:97:64:49:59:39: 10:83:2e:96:c6:e2:63:60:f5:31:8c:26:d8:a1:6d: 05:31:c0:01:fb:46:4e:35:65:4a:80:7f:9b:99:62: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:A8:EF:FA:F7:E2:3A:17:66:C6:F2:FF:0D:01:CD:87:0A:CA:FD X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f4:2b:90:35:e9:c7:20:f8:6b:90:7b:79:c0:bd:da:1c:82: 6b:c5:97:ce:e4:31:12:76:5b:e9:ca:0e:82:bc:9e:cd:9a:54: 5f:fa:35:2c:17:51:49:37:b8:6d:b5:b9:3a:0b:1d:68:ef:05: da:e7:45:11:e8:5e:22:93:9b:e9:61:bb:46:61:57:32:4e:5f: 74:11:6f:57:31:f5:49:e5:34:43:22:28:ae:9b:dd:69:08:8f: 9d:88:6d:df:fc:bb:fb:40:8b:34:8a:54:8a:af:7f:22:fc:d2: d7:92:c2:e8:68:6d:ef:c4:2f:aa:f4:a1:7a:35:09:a6:9c:da: bd:52:e9:74:5e:45:79:19:c5:67:1b:49:4f:f1:a4:87:ef:7c: 1c:8e:26:0f:de:0c:dd:93:f5:d7:cc:cc:41:34:02:ce:9a:ed: 79:44:41:e5:84:de:c2:6e:90:f4:27:d9:2e:85:09:fb:b2:8f: 60:87:3e:79:44:81:58:48:06:af:47:7e:3e:88:21:71:28:ee: b2:d7:b3:a4:6b:d7:cd:52:80:ea:ec:6a:17:4a:39:e9:5e:2a: f9:7a:c7:1d:2c:24:3d:ab:f3:15:3e:cc:f5:81:1e:0d:e7:0f: 28:96:4c:06:c5:0c:fa:03:da:03:b3:ac:55:3e:d5:e2:f2:45: 56:b4:d5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdl3Pw44rW7fQ2zMvK1VeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjUxMjI2MDcwMTI3WhcNMjUxMjI3MDcwMTI3WjAzMTEwLwYDVQQD Eyg4YWFjYThlZmZhZjdlMjNhMTc2NmM2ZjJmZjBkMDFjZDg3MGFjYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+rm0tilpjMhm1oh05jHWVT51aP5 thMAzjsgG+21z7xoGQARyax5r8+avkO/ZcSZlXIN7e2A9HdW/UuDtS5gBqC2FB30 y40vVAquvadoxEzHCWs2SAm4vr0l7cQCAlMzXxU2myitsqf4hI56pAmmaXEyZ1VC gVAmguSy5K3STKGbk7c0+IQDaMi1A8sm1NMoC90qI6jxoewpUHKrRaeKMh4dEZ4u BaUwMD5hEQD6AeUeHazIm36Jib1xHjGY5oD5HgcF0HBAEI0xHdOuZxYaFaLQ2Szr 8+Y79+BZl2RJWTkQgy6WxuJjYPUxjCbYoW0FMcAB+0ZONWVKgH+bmWJxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqsqO/69+I6F2bG8v8NAc2HCsr9MB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvQrkDXp xyD4a5B7ecC92hyCa8WXzuQxEnZb6coOgryezZpUX/o1LBdRSTe4bbW5OgsdaO8F 2udFEeheIpOb6WG7RmFXMk5fdBFvVzH1SeU0QyIorpvdaQiPnYht3/y7+0CLNIpU iq9/IvzS15LC6Ght78QvqvShejUJppzavVLpdF5FeRnFZxtJT/Gkh+98HI4mD94M 3ZP118zMQTQCzprteURB5YTewm6Q9CfZLoUJ+7KPYIc+eUSBWEgGr0d+PoghcSju stezpGvXzVKA6uxqF0o56V4q+XrHHSwkPavzFT7M9YEeDecPKJZMBsUM+gPaA7Os VT7V4vJFVrTVzg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:25 2025 by rpki-client