This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json) Hash identifier: xRs1QPoYG0HgEKjCFYIcTGcMlLs7nPNVuCk+STCi334= Subject key identifier: 9B:81:32:3B:99:84:16:1C:61:00:3F:F4:A6:2B:BC:5F:FA:82:D8:DE Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Certificate serial: 019B0F37E2ED45DC1E2CEA316730B2C73878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft Manifest number: 1791 Signing time: Thu 11 Dec 2025 21:01:19 +0000 Manifest this update: Thu 11 Dec 2025 21:01:19 +0000 Manifest next update: Fri 12 Dec 2025 21:01:19 +0000 Files and hashes: 1: 6oMyL4Y_2Xcvd0ThcfssP_mVE20.roa (hash: JOsCREV0c9arO+BxSgqWMu5cq/6/bc73ElaebweULrs=) 2: EltWU6BPMuO1ItcZzbbDLhGIcyw.roa (hash: ErznFfmY/TRRK13oDADB0v3OAux59FUBMiU3vqEPAWQ=) 3: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=) 4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: 7Vgu/fGd/lLJLboIs/uTezaluPpZx7z56gW/Xp3owuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:e2:ed:45:dc:1e:2c:ea:31:67:30:b2:c7:38:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Validity Not Before: Dec 11 21:01:19 2025 GMT Not After : Dec 12 21:01:19 2025 GMT Subject: CN=9b81323b9984161c61003ff4a62bbc5ffa82d8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:a4:48:ed:8a:42:4e:7e:70:a9:05:c5:3e: 73:fa:73:91:fc:6b:af:9c:aa:e1:17:f9:84:46:61: 3b:16:18:9f:92:92:25:cd:fa:ad:ef:40:22:62:d7: 98:00:9a:4b:4c:b7:5b:d0:d9:ef:0d:2b:ce:52:f4: fa:87:21:fb:ef:13:6a:97:90:f8:ca:01:a5:19:d5: ef:e6:aa:02:43:47:62:d8:26:dc:75:5e:21:3a:74: 0c:be:cf:f6:79:e7:5c:0c:45:85:00:c7:53:7a:f8: fd:01:ae:f6:3a:00:f6:13:c1:e6:7d:2c:c5:6a:db: 23:6c:4c:cc:04:d8:72:b9:70:b3:88:c8:6e:00:41: 09:0b:5d:aa:af:21:6d:38:4e:d7:77:ea:e3:c0:a5: 1b:77:91:69:49:7a:a5:59:25:92:8b:b0:38:2f:fb: b1:44:67:ee:02:bc:e5:79:df:51:a0:d3:10:cf:76: 29:85:f9:2d:e1:31:5e:67:7e:08:13:9c:42:b2:53: c5:4c:39:e6:a3:e9:de:91:8b:a0:8c:de:57:a5:70: 99:ac:64:f4:63:4d:0b:f9:8e:38:07:2b:44:b9:01: 45:3b:09:c6:80:63:0f:60:0d:1b:b1:ea:ca:b8:a0: 50:64:b6:4a:98:9e:9b:56:5c:72:59:4a:2d:81:71: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:32:3B:99:84:16:1C:61:00:3F:F4:A6:2B:BC:5F:FA:82:D8:DE X509v3 Authority Key Identifier: keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:86:08:fc:13:17:b5:fb:a2:8c:e0:db:00:45:95:fa:3d:6e: fa:fd:ca:81:cb:d6:c2:bb:53:0b:f9:8f:9c:d2:55:bd:b2:c3: df:22:18:c5:a8:93:a4:5e:6c:f6:d3:3f:58:cd:92:d5:13:67: 43:4f:c3:88:5c:48:a0:0c:b1:1a:e8:98:1e:9e:e9:79:03:ad: 0f:74:c8:c0:0a:73:fd:ed:d6:30:37:43:67:7b:8e:90:a9:9c: 29:f9:a9:20:bc:66:d7:cf:85:cd:8a:10:6f:b9:29:18:66:4d: 8b:29:17:a5:39:e9:5b:1c:8e:ea:94:b1:b9:99:04:a6:a5:e1: fc:b5:41:17:c3:d9:1d:1a:26:69:ae:23:e4:6c:4e:7e:25:33: 2e:8d:31:f6:49:05:7d:ce:96:35:eb:06:b8:f3:85:c1:6a:c6: 26:0e:57:5e:63:8d:91:b6:90:79:db:74:6d:a6:2f:7b:ab:6e: 95:f4:ab:d2:55:21:86:dc:31:bf:14:e5:0d:8a:7b:45:b2:56: cb:29:86:f0:85:59:25:78:fd:fd:3d:d3:b3:60:a2:b3:1c:5f: ab:ae:fd:14:70:07:26:68:82:dd:40:76:f0:c8:49:4a:46:36: 5d:83:84:dd:f8:af:37:dd:e7:39:02:6e:d7:7f:a6:64:f1:34: 53:ad:a3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN+LtRdweLOoxZzCyxzh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj MmEwOTUwHhcNMjUxMjExMjEwMTE5WhcNMjUxMjEyMjEwMTE5WjAzMTEwLwYDVQQD Eyg5YjgxMzIzYjk5ODQxNjFjNjEwMDNmZjRhNjJiYmM1ZmZhODJkOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMKkSO2KQk5+cKkFxT5z+nOR/Guv nKrhF/mERmE7FhifkpIlzfqt70AiYteYAJpLTLdb0NnvDSvOUvT6hyH77xNql5D4 ygGlGdXv5qoCQ0di2CbcdV4hOnQMvs/2eedcDEWFAMdTevj9Aa72OgD2E8HmfSzF atsjbEzMBNhyuXCziMhuAEEJC12qryFtOE7Xd+rjwKUbd5FpSXqlWSWSi7A4L/ux RGfuArzled9RoNMQz3Yphfkt4TFeZ34IE5xCslPFTDnmo+nekYugjN5XpXCZrGT0 Y00L+Y44BytEuQFFOwnGgGMPYA0bserKuKBQZLZKmJ6bVlxyWUotgXF0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuBMjuZhBYcYQA/9KYrvF/6gtjeMB8GA1UdIwQY MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4 LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIYI/BMX tfuijODbAEWV+j1u+v3KgcvWwrtTC/mPnNJVvbLD3yIYxaiTpF5s9tM/WM2S1RNn Q0/DiFxIoAyxGuiYHp7peQOtD3TIwApz/e3WMDdDZ3uOkKmcKfmpILxm18+FzYoQ b7kpGGZNiykXpTnpWxyO6pSxuZkEpqXh/LVBF8PZHRomaa4j5GxOfiUzLo0x9kkF fc6WNesGuPOFwWrGJg5XXmONkbaQedt0baYve6tulfSr0lUhhtwxvxTlDYp7RbJW yymG8IVZJXj9/T3Ts2Cisxxfq679FHAHJmiC3UB28MhJSkY2XYOE3fivN93nOQJu 13+mZPE0U62jmw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:38 2025 by rpki-client