This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json) Hash identifier: YusFHrq0uytoYvEfKDhWOS9Qwd+5Wq8Ey56oy7XA/YM= Subject key identifier: 33:C6:5F:7B:02:BD:80:15:84:FC:B0:2E:A6:D9:5C:42:37:09:9E:FA Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Certificate serial: 019B10B83473C1FA4A7157C4761F18437FBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 04:01:05 +0000 Manifest this update: Fri 12 Dec 2025 04:01:05 +0000 Manifest next update: Sat 13 Dec 2025 04:01:05 +0000 Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=) 2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: o6WxgyAOBxdrroMhfy9/ZKWAw/zDDyuxvE5dhExLjYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:34:73:c1:fa:4a:71:57:c4:76:1f:18:43:7f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5 Validity Not Before: Dec 12 04:01:05 2025 GMT Not After : Dec 13 04:01:05 2025 GMT Subject: CN=33c65f7b02bd801584fcb02ea6d95c4237099efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:62:bd:5d:37:5d:1f:0a:58:66:38:eb:4b: 0d:c6:1a:e1:3a:c3:ab:cc:ca:7d:52:c5:00:44:32: 08:2e:6f:20:5e:c4:4d:c1:bd:ba:81:ca:6a:fc:67: 14:ca:61:15:1e:c7:9f:c4:16:ca:03:ec:fd:2e:de: e6:6a:a3:ad:92:56:46:0b:f7:85:8b:47:87:0d:a8: c5:53:d9:6a:b8:87:b4:40:41:dd:bb:34:dc:18:e8: ee:c5:66:fd:60:02:54:8b:73:d9:86:77:86:de:61: 50:07:cc:3d:5b:2e:26:00:bc:08:5e:c9:ec:13:1c: b8:4b:4a:99:71:0f:63:64:03:b5:c7:6a:38:a8:6b: 77:52:65:b3:9b:39:cd:ee:bb:69:f7:e2:16:24:a1: ca:5d:9b:67:72:29:61:92:70:40:a7:e0:b1:15:0b: 20:f0:a4:45:06:0f:e0:38:cd:19:60:2c:19:dc:00: e6:9e:30:ab:d9:a9:43:3f:03:9e:72:a6:99:76:18: a9:7b:8e:89:97:92:3b:63:9f:46:6c:f6:0a:ed:ea: 27:f6:f9:95:b1:7a:d1:a3:9c:be:fa:83:ff:a1:bf: 5e:c6:b4:a2:05:30:ba:32:88:aa:50:75:34:04:cd: e9:d0:e9:bd:48:fc:9b:a8:8e:23:b7:47:e4:90:c6: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C6:5F:7B:02:BD:80:15:84:FC:B0:2E:A6:D9:5C:42:37:09:9E:FA X509v3 Authority Key Identifier: keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0c:97:c1:ec:e9:3c:e9:8d:17:a0:f2:67:38:85:f9:f1:5b: 6c:e8:76:6b:35:92:3b:b6:ea:89:f4:21:23:94:95:9e:6d:94: 2d:e7:ad:0c:4b:80:05:ed:c4:01:d9:4a:3e:12:3f:a5:a6:47: 4f:db:dd:f5:6c:e6:19:e1:33:40:f6:83:a2:ae:5d:be:53:b1: 9d:d9:16:bb:a5:5a:ab:44:6e:7d:d7:6d:9b:bb:b5:05:74:67: 74:94:fc:1c:fb:78:64:93:fb:41:02:e5:62:cf:4d:4b:12:f6: 97:03:ed:a6:3a:9c:b6:c7:fe:0e:27:5c:96:7e:5c:24:4c:fa: 5a:74:c5:3e:7f:14:5c:9a:c4:12:b8:8f:bb:c8:b1:02:65:6e: ba:51:f4:2c:46:1f:77:5e:56:a2:77:01:63:86:f8:97:69:56: 36:e2:7e:fd:55:de:30:0f:3c:9c:8b:8a:0a:52:50:f5:89:24: 9c:61:04:ae:6a:00:d5:f5:96:01:f4:eb:67:1e:73:4d:a2:4e: 45:a2:dd:b6:e6:1d:ec:a6:ed:50:ad:ff:9a:0b:69:42:51:42: d3:05:b0:83:0e:c0:7e:6d:be:3e:85:23:76:fc:45:be:33:83: b1:ff:0a:27:9b:9f:0e:0b:9c:c8:d9:d1:59:58:5c:27:a1:d7: cb:ef:57:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuDRzwfpKcVfEdh8YQ3+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl MmY2YTUwHhcNMjUxMjEyMDQwMTA1WhcNMjUxMjEzMDQwMTA1WjAzMTEwLwYDVQQD EygzM2M2NWY3YjAyYmQ4MDE1ODRmY2IwMmVhNmQ5NWM0MjM3MDk5ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo25ivV03XR8KWGY460sNxhrhOsOr zMp9UsUARDIILm8gXsRNwb26gcpq/GcUymEVHsefxBbKA+z9Lt7maqOtklZGC/eF i0eHDajFU9lquIe0QEHduzTcGOjuxWb9YAJUi3PZhneG3mFQB8w9Wy4mALwIXsns Exy4S0qZcQ9jZAO1x2o4qGt3UmWzmznN7rtp9+IWJKHKXZtncilhknBAp+CxFQsg 8KRFBg/gOM0ZYCwZ3ADmnjCr2alDPwOecqaZdhipe46Jl5I7Y59GbPYK7eon9vmV sXrRo5y++oP/ob9exrSiBTC6MoiqUHU0BM3p0Om9SPybqI4jt0fkkMbAqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPGX3sCvYAVhPywLqbZXEI3CZ76MB8GA1UdIwQY MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgyXwezp POmNF6DyZziF+fFbbOh2azWSO7bqifQhI5SVnm2ULeetDEuABe3EAdlKPhI/paZH T9vd9WzmGeEzQPaDoq5dvlOxndkWu6Vaq0Rufddtm7u1BXRndJT8HPt4ZJP7QQLl Ys9NSxL2lwPtpjqctsf+Didcln5cJEz6WnTFPn8UXJrEEriPu8ixAmVuulH0LEYf d15WoncBY4b4l2lWNuJ+/VXeMA88nIuKClJQ9YkknGEErmoA1fWWAfTrZx5zTaJO RaLdtuYd7KbtUK3/mgtpQlFC0wWwgw7Afm2+PoUjdvxFvjODsf8KJ5ufDgucyNnR WVhcJ6HXy+9XMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:15:38 2025 by rpki-client