This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json) Hash identifier: vT1/J6q4AAcV2JaQiNFHoaqGhSaFjTmgNTrswVDGFtE= Subject key identifier: FA:7F:58:88:25:51:76:EB:42:60:3C:50:99:50:B3:1E:29:D7:F7:97 Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Certificate serial: 019B2EFAF4CE2C718C8086B0C57DFB7D4861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 01:02:37 +0000 Manifest this update: Thu 18 Dec 2025 01:02:37 +0000 Manifest next update: Fri 19 Dec 2025 01:02:37 +0000 Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=) 2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 23cQRxRQX/pdKTQxmLEHDPfitxezecb3tMW+eTb2Vk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:f4:ce:2c:71:8c:80:86:b0:c5:7d:fb:7d:48:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Validity Not Before: Dec 18 01:02:37 2025 GMT Not After : Dec 19 01:02:37 2025 GMT Subject: CN=fa7f5888255176eb42603c509950b31e29d7f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:2f:5f:4a:d8:de:05:39:71:d8:e8:e1:8d: 15:90:9b:d0:96:51:62:85:2b:e1:3f:52:fe:7d:89: 23:58:f2:d5:24:a7:be:8c:64:7c:b4:d5:e7:96:82: a7:d8:1b:3b:d0:bc:14:97:0e:35:12:06:7f:6b:8c: 6e:4a:03:74:3c:70:e4:24:2a:6f:cb:72:ab:22:e0: 48:ab:ea:ad:9d:5e:80:c9:11:10:f0:5f:e1:a8:05: 4c:9a:ae:af:64:7e:75:dc:4a:75:7f:27:8e:b1:6e: 5d:b3:98:c1:bf:e0:be:d1:a1:61:7f:d9:38:ef:c9: e1:07:fe:56:a9:63:16:f0:da:7e:93:a5:fd:05:8b: 85:83:04:57:65:de:71:5f:7a:7a:30:5e:e7:87:9c: de:8a:1f:cf:8f:73:3b:6c:f8:73:19:91:06:39:4c: 81:8c:4e:81:ff:ad:07:16:b5:a3:cc:ae:a2:26:06: d4:00:57:a4:25:25:b8:af:fc:9f:ad:46:de:f8:ba: 38:8b:76:b3:7b:c4:0c:fd:15:27:b3:6d:93:20:0a: 02:6a:b2:13:d1:2d:41:90:bd:a8:18:5b:d2:ce:53: cf:76:7f:5c:04:0f:dc:87:c6:ee:b1:0e:ae:3e:ba: f8:8b:89:cf:d6:5c:4c:92:c3:2a:87:45:67:74:43: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:58:88:25:51:76:EB:42:60:3C:50:99:50:B3:1E:29:D7:F7:97 X509v3 Authority Key Identifier: keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:18:95:ea:d4:4e:96:31:8b:ab:ff:46:ad:4d:1d:bb:68:c5: 17:33:3e:9e:60:e7:ac:70:9c:d7:ef:18:e2:c0:c9:ed:af:8b: 80:07:ba:63:fe:15:a7:ff:72:7f:a9:e2:ce:cb:15:02:26:91: 6d:6a:9b:d2:96:ac:1b:df:aa:f0:53:da:6c:78:0d:9d:0b:05: 1a:ce:d6:8c:76:0b:23:45:cf:95:17:e0:8b:b3:fc:60:1d:c2: a4:dc:cf:b3:88:37:54:7d:8c:7b:26:24:85:81:6a:88:b5:1f: f4:79:8d:54:10:71:76:05:de:86:86:a9:2a:44:b0:b8:49:f4: de:90:bb:3c:b2:3c:31:fe:1b:af:a7:ad:51:16:e6:01:4c:a3: bc:ea:79:f4:77:eb:24:9c:71:44:98:51:ff:83:6f:4b:e0:3f: 73:6a:cb:e7:e9:fd:53:3f:0e:d1:20:0b:eb:b1:b2:f3:38:b6: 69:3f:ff:9e:ce:c6:cf:63:96:dd:17:45:6b:24:21:80:1e:08: e6:53:8e:bd:e4:00:cb:7d:0d:12:b6:35:6d:46:64:07:cf:f1: 0b:7b:1d:56:7e:b6:5c:4c:64:c2:a9:43:1d:3c:43:02:6d:fd: 45:be:9a:b9:67:f2:3e:90:74:48:81:c9:be:d4:60:21:2d:e7: a5:05:d9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+vTOLHGMgIawxX37fUhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk N2YzNjYwHhcNMjUxMjE4MDEwMjM3WhcNMjUxMjE5MDEwMjM3WjAzMTEwLwYDVQQD EyhmYTdmNTg4ODI1NTE3NmViNDI2MDNjNTA5OTUwYjMxZTI5ZDdmNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1cvX0rY3gU5cdjo4Y0VkJvQllFi hSvhP1L+fYkjWPLVJKe+jGR8tNXnloKn2Bs70LwUlw41EgZ/a4xuSgN0PHDkJCpv y3KrIuBIq+qtnV6AyREQ8F/hqAVMmq6vZH513Ep1fyeOsW5ds5jBv+C+0aFhf9k4 78nhB/5WqWMW8Np+k6X9BYuFgwRXZd5xX3p6MF7nh5zeih/Pj3M7bPhzGZEGOUyB jE6B/60HFrWjzK6iJgbUAFekJSW4r/yfrUbe+Lo4i3aze8QM/RUns22TIAoCarIT 0S1BkL2oGFvSzlPPdn9cBA/ch8busQ6uPrr4i4nP1lxMksMqh0VndEOg8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp/WIglUXbrQmA8UJlQsx4p1/eXMB8GA1UdIwQY MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRiV6tRO ljGLq/9GrU0du2jFFzM+nmDnrHCc1+8Y4sDJ7a+LgAe6Y/4Vp/9yf6nizssVAiaR bWqb0pasG9+q8FPabHgNnQsFGs7WjHYLI0XPlRfgi7P8YB3CpNzPs4g3VH2MeyYk hYFqiLUf9HmNVBBxdgXehoapKkSwuEn03pC7PLI8Mf4br6etURbmAUyjvOp59Hfr JJxxRJhR/4NvS+A/c2rL5+n9Uz8O0SAL67Gy8zi2aT//ns7Gz2OW3RdFayQhgB4I 5lOOveQAy30NErY1bUZkB8/xC3sdVn62XExkwqlDHTxDAm39Rb6auWfyPpB0SIHJ vtRgIS3npQXZug== -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:53 2025 by rpki-client