This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json) Hash identifier: 0FtL7SkwuARqZdfZS562yQcBrqmZeYYWelst989wWVQ= Subject key identifier: A0:CF:30:06:9F:93:18:5E:91:0D:6C:46:47:67:E6:93:38:C3:B1:4F Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Certificate serial: 019AF50B6E0FAC8AEF2171F872DC1C0A5A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:02:38 +0000 Manifest this update: Sat 06 Dec 2025 19:02:38 +0000 Manifest next update: Sun 07 Dec 2025 19:02:38 +0000 Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=) 2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: P+MiLCNnepdvZCdfwzDe6nwKXi8tIp9avQ/ST8jPEIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:6e:0f:ac:8a:ef:21:71:f8:72:dc:1c:0a:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Validity Not Before: Dec 6 19:02:38 2025 GMT Not After : Dec 7 19:02:38 2025 GMT Subject: CN=a0cf30069f93185e910d6c464767e69338c3b14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:4c:e1:dd:b7:76:e5:0a:8e:bc:ac:0a:2e: df:0e:25:dc:dc:f3:ea:15:16:cc:13:c7:72:a3:ea: 6b:88:cc:68:84:b9:15:ab:e6:4f:6b:62:1d:79:57: fe:68:e3:6c:df:08:ec:bf:f6:f9:8c:50:d1:c2:47: 8c:0f:c4:d0:cd:55:77:34:27:30:7a:8e:ef:77:fd: da:a2:d3:11:88:c9:0b:24:54:dd:21:c5:ec:f8:91: ab:23:6d:80:e0:bb:d7:b0:47:96:1d:76:bf:a9:7c: 10:a1:fd:30:79:fb:af:72:c4:5b:b2:57:58:82:36: 27:46:95:ab:f9:a7:8e:01:8b:af:d0:a2:73:1e:83: 9b:f8:04:cb:5e:3e:2f:68:d8:79:34:e0:e2:a4:98: 65:5f:eb:38:e9:7c:c1:68:b2:d4:75:0e:04:17:d8: d3:05:bb:f4:90:8d:8f:fb:dc:37:d6:8d:7d:91:ef: 57:3c:3a:7f:2d:0e:3a:e2:21:92:f9:33:65:a6:52: 59:40:02:fa:c9:d8:31:8e:27:ff:0e:8c:68:bb:13: 12:9c:cd:4d:8f:53:5a:d1:43:1c:73:c1:d3:81:b0: a1:d8:d0:c6:a2:d4:22:12:99:dc:a7:28:7c:63:ec: 0a:12:e2:54:cb:1d:27:02:b3:ed:d9:b9:81:ee:d0: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:30:06:9F:93:18:5E:91:0D:6C:46:47:67:E6:93:38:C3:B1:4F X509v3 Authority Key Identifier: keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4e:b1:e6:03:cb:12:21:3d:cf:22:56:5e:55:1b:83:01:9b: b9:d6:f9:f9:7e:17:50:bb:7f:62:08:0e:9d:eb:95:ae:8a:83: d2:63:6a:65:9f:21:00:dd:25:c5:5d:8a:96:2a:b4:33:19:e8: 7f:59:72:c0:eb:35:62:eb:e7:a1:15:27:15:b3:e2:44:e1:5f: 7c:4b:a6:36:19:85:29:07:fc:fa:2b:00:2a:e9:08:19:bf:b6: 1d:77:dd:13:b2:d4:c8:99:94:cf:00:d6:04:6a:a4:a9:b0:78: 63:25:fd:1b:05:13:b8:10:c0:32:f0:93:de:13:74:fd:55:34: 8a:11:e8:76:d7:eb:ad:ca:32:7e:21:7d:cc:9d:11:5f:0b:d4: d6:64:1d:61:72:2c:8a:b0:1d:54:7a:0e:ab:f4:ed:43:d7:5c: 62:0d:38:17:2e:da:4e:f2:ba:cf:dd:38:a9:20:d3:65:5f:12: 21:f2:04:50:bb:a2:70:8b:f9:3f:94:2c:bb:27:75:7f:23:0d: 28:d6:64:1c:39:df:63:a0:ae:af:65:f8:59:11:13:73:fd:60: 5f:5c:80:4d:f0:c4:d0:94:ff:f7:63:90:e5:6d:c5:51:a3:22: 2d:be:72:58:93:cc:ca:20:2b:c3:45:42:5f:21:5a:23:19:6a: df:44:7d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C24PrIrvIXH4ctwcClqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk N2YzNjYwHhcNMjUxMjA2MTkwMjM4WhcNMjUxMjA3MTkwMjM4WjAzMTEwLwYDVQQD EyhhMGNmMzAwNjlmOTMxODVlOTEwZDZjNDY0NzY3ZTY5MzM4YzNiMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aJM4d23duUKjrysCi7fDiXc3PPq FRbME8dyo+priMxohLkVq+ZPa2IdeVf+aONs3wjsv/b5jFDRwkeMD8TQzVV3NCcw eo7vd/3aotMRiMkLJFTdIcXs+JGrI22A4LvXsEeWHXa/qXwQof0wefuvcsRbsldY gjYnRpWr+aeOAYuv0KJzHoOb+ATLXj4vaNh5NODipJhlX+s46XzBaLLUdQ4EF9jT Bbv0kI2P+9w31o19ke9XPDp/LQ464iGS+TNlplJZQAL6ydgxjif/DoxouxMSnM1N j1Na0UMcc8HTgbCh2NDGotQiEpncpyh8Y+wKEuJUyx0nArPt2bmB7tD89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDPMAafkxhekQ1sRkdn5pM4w7FPMB8GA1UdIwQY MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk6x5gPL EiE9zyJWXlUbgwGbudb5+X4XULt/YggOneuVroqD0mNqZZ8hAN0lxV2Kliq0Mxno f1lywOs1YuvnoRUnFbPiROFffEumNhmFKQf8+isAKukIGb+2HXfdE7LUyJmUzwDW BGqkqbB4YyX9GwUTuBDAMvCT3hN0/VU0ihHodtfrrcoyfiF9zJ0RXwvU1mQdYXIs irAdVHoOq/TtQ9dcYg04Fy7aTvK6z904qSDTZV8SIfIEULuicIv5P5Qsuyd1fyMN KNZkHDnfY6Cur2X4WRETc/1gX1yATfDE0JT/92OQ5W3FUaMiLb5yWJPMyiArw0VC XyFaIxlq30R9hQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:01 2025 by rpki-client