This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json) Hash identifier: nprEaITwCVS6ngiwI+abFX4Chq7QF9fUd6nAGwfrBtk= Subject key identifier: AC:ED:77:73:00:AE:B5:85:4B:20:63:F9:EE:C7:BA:6D:8B:49:6A:69 Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Certificate serial: 019B3DC7AA248475FF489120E196171FFEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft Manifest number: 0FEA Signing time: Sat 20 Dec 2025 22:00:53 +0000 Manifest this update: Sat 20 Dec 2025 22:00:53 +0000 Manifest next update: Sun 21 Dec 2025 22:00:53 +0000 Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: wLob5oZeWYwmMUL+ulQzINFt7SqqrxjXSHW8UJMLNhY=) 2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:aa:24:84:75:ff:48:91:20:e1:96:17:1f:fe:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Validity Not Before: Dec 20 22:00:53 2025 GMT Not After : Dec 21 22:00:53 2025 GMT Subject: CN=aced777300aeb5854b2063f9eec7ba6d8b496a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:cd:4b:37:28:b7:e9:87:f4:d4:4a:d2:81: 10:64:2b:ee:29:94:75:f2:96:1e:a7:d4:7f:50:c2: 51:6d:8a:0c:50:70:98:2b:55:9d:51:59:b5:b5:91: d8:aa:5b:f3:42:20:ef:f2:1d:16:6b:1b:41:0e:6d: 22:3e:57:23:71:24:fe:b5:59:cd:ea:2a:1e:27:3e: 53:3a:1e:17:e2:81:21:e5:a3:5e:30:48:cf:5d:11: cf:83:b9:b5:77:3d:f8:65:f1:91:9f:58:06:8f:bd: 81:85:4b:6d:ee:8e:b8:82:65:43:0e:59:b9:05:e6: a9:96:49:de:11:60:d4:b2:18:96:63:94:a1:39:b0: 0e:ed:22:16:81:27:78:f0:03:39:4c:4a:ca:ae:05: ff:c2:92:58:d8:15:58:31:f9:80:37:fc:02:8b:56: cc:08:3f:4b:ce:40:6c:7d:65:8a:ff:fc:48:02:1d: 77:1e:36:61:e4:50:c4:27:37:ae:71:12:92:dd:56: 59:99:a5:a1:d8:0d:6f:d3:ad:41:7b:a2:a3:45:85: 91:70:a2:62:58:0e:3b:a4:be:ca:7e:ed:60:4e:57: 90:0a:79:14:fc:4a:bc:46:51:e6:6e:80:aa:df:72: 91:79:29:db:eb:78:62:6a:c5:d9:72:38:5b:78:db: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:ED:77:73:00:AE:B5:85:4B:20:63:F9:EE:C7:BA:6D:8B:49:6A:69 X509v3 Authority Key Identifier: keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7e:b0:02:1d:bf:81:5f:69:47:0c:31:66:7f:14:f9:a1:46: bd:a3:01:78:d8:fa:67:1f:2f:66:ff:62:51:d2:5a:df:94:4c: de:fd:e8:5a:0a:38:a7:20:c8:f2:e6:82:d7:46:06:a6:80:8a: 92:7f:a1:d8:fa:3e:1c:af:7f:b6:bb:d0:14:d7:1f:a3:db:65: b1:7e:ee:c1:8a:45:b8:28:46:f3:b1:3d:46:7e:83:30:74:9b: e4:72:5a:a1:a9:c6:9b:bf:d7:e6:ce:2f:1c:de:8a:5f:4f:79: 1e:4c:16:fe:f6:ad:94:fe:75:98:8f:de:60:4f:76:91:ae:fa: 15:30:cb:20:ec:b6:8b:7f:43:6e:8b:4d:e0:b6:0c:4b:8b:19: ae:19:09:96:45:66:ca:d8:60:0e:86:8d:a1:b6:0f:0e:bf:5b: c9:b6:15:3b:26:ff:15:18:2c:37:71:ea:2e:b4:02:a4:a5:f2: bc:e2:9c:c7:38:03:41:6d:6e:e3:df:f2:38:fa:74:36:71:e0: ac:18:b8:1f:8a:46:49:f9:fc:bd:08:62:f2:27:b2:ab:82:3a: 64:b8:ae:6e:ed:c5:23:f2:f3:3d:5f:d8:ea:c8:ad:dd:88:59: 96:6c:fd:87:84:fc:95:97:2e:99:c4:75:be:cd:6a:9e:e1:8d: 6c:45:77:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6okhHX/SJEg4ZYXH/7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzliMDQwMTZmNmYwMjE4MzMwN2MxN2RmNjMwYTAyODll YzViYjUwHhcNMjUxMjIwMjIwMDUzWhcNMjUxMjIxMjIwMDUzWjAzMTEwLwYDVQQD EyhhY2VkNzc3MzAwYWViNTg1NGIyMDYzZjllZWM3YmE2ZDhiNDk2YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6HNSzcot+mH9NRK0oEQZCvuKZR1 8pYep9R/UMJRbYoMUHCYK1WdUVm1tZHYqlvzQiDv8h0WaxtBDm0iPlcjcST+tVnN 6ioeJz5TOh4X4oEh5aNeMEjPXRHPg7m1dz34ZfGRn1gGj72BhUtt7o64gmVDDlm5 BeaplkneEWDUshiWY5ShObAO7SIWgSd48AM5TErKrgX/wpJY2BVYMfmAN/wCi1bM CD9LzkBsfWWK//xIAh13HjZh5FDEJzeucRKS3VZZmaWh2A1v061Be6KjRYWRcKJi WA47pL7Kfu1gTleQCnkU/Eq8RlHmboCq33KReSnb63hiasXZcjhbeNuWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKztd3MArrWFSyBj+e7Hum2LSWppMB8GA1UdIwQY MBaAFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et MWQ1OTFiYmQ0MDYwLzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw LzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn6wAh2/ gV9pRwwxZn8U+aFGvaMBeNj6Zx8vZv9iUdJa35RM3v3oWgo4pyDI8uaC10YGpoCK kn+h2Po+HK9/trvQFNcfo9tlsX7uwYpFuChG87E9Rn6DMHSb5HJaoanGm7/X5s4v HN6KX095HkwW/vatlP51mI/eYE92ka76FTDLIOy2i39DbotN4LYMS4sZrhkJlkVm ythgDoaNobYPDr9bybYVOyb/FRgsN3HqLrQCpKXyvOKcxzgDQW1u49/yOPp0NnHg rBi4H4pGSfn8vQhi8ieyq4I6ZLiubu3FI/LzPV/Y6sit3YhZlmz9h4T8lZcumcR1 vs1qnuGNbEV36A== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:58 2025 by rpki-client