This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json) Hash identifier: yL6xcgbemIqp2fka55EQAuYC3qIoma6gJ1CmQuIVSCw= Subject key identifier: DC:4F:62:A3:BC:2E:AC:A4:70:A0:E1:45:C4:1B:CD:EE:F9:A1:6B:20 Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Certificate serial: 019B3C7F185D3DC5CB8F6A4453BE79DE0A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:02:00 +0000 Manifest this update: Sat 20 Dec 2025 16:02:00 +0000 Manifest next update: Sun 21 Dec 2025 16:02:00 +0000 Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=) 2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: mN2oyt9bDl2f6c0Y4/oaT3m/ls9/uXWg9MmSkDZ2EQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:18:5d:3d:c5:cb:8f:6a:44:53:be:79:de:0a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Validity Not Before: Dec 20 16:02:00 2025 GMT Not After : Dec 21 16:02:00 2025 GMT Subject: CN=dc4f62a3bc2eaca470a0e145c41bcdeef9a16b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:97:52:31:9e:36:86:10:e3:dc:13:5c:03: b2:34:69:3d:5e:c0:b4:49:47:c0:c5:f0:e4:33:a9: 1f:56:7b:4a:d5:d6:73:3c:9a:9d:a2:f3:6e:77:5a: 43:cf:5d:ed:24:96:c0:05:b5:f0:e6:b9:f9:9f:57: c5:7f:47:8e:15:7a:53:17:78:8b:56:d6:80:8e:ad: 6d:99:01:4b:a5:9b:ea:3a:0b:17:0b:71:c9:fe:5f: cb:12:34:20:7e:11:e1:10:e7:dc:48:21:a9:e8:cd: f2:dc:30:df:40:48:86:77:fd:fe:cb:09:ed:86:c9: 37:65:1a:7e:1d:0c:64:e4:1c:b4:6f:5d:15:9f:be: 52:2a:c0:40:80:c8:09:b2:e4:11:af:d1:b3:8e:29: e2:d5:7e:d7:d3:35:c2:cc:8d:0c:7d:c4:7d:4b:29: e4:44:78:b2:e3:d4:29:ff:8e:19:fc:3f:55:cf:e9: 25:d9:28:9b:3b:49:a1:56:ed:a0:74:37:4b:1a:5b: f7:42:e1:04:cc:95:58:21:f6:7b:43:e6:52:6f:f0: 6b:c3:91:ee:24:c4:28:55:f1:83:0d:42:c7:b9:56: 7f:0b:81:0b:75:40:68:14:29:19:2c:6b:e8:c5:bb: 1d:a2:af:14:32:2b:47:af:9b:57:04:04:ed:c3:ec: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:62:A3:BC:2E:AC:A4:70:A0:E1:45:C4:1B:CD:EE:F9:A1:6B:20 X509v3 Authority Key Identifier: keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:86:26:e2:2b:d1:b4:39:3c:65:0c:76:bb:7b:32:ed:3d:50: b0:bb:67:3f:69:2c:ae:dd:e7:71:25:03:63:83:43:9e:8e:3a: da:e0:b2:af:64:33:9c:74:ab:e5:1c:c1:5d:ae:1c:9a:72:d2: 64:21:b2:cd:bb:45:60:3b:80:c9:d1:08:2c:7c:c4:f1:76:99: 50:4d:18:25:24:a2:13:96:77:75:1c:24:1a:0f:7d:ea:e6:a7: 3c:05:68:fc:93:fb:5d:fd:8f:40:0f:6d:d5:86:3b:4f:9e:22: 0f:ea:45:52:4d:40:06:2b:c3:b9:1f:3e:37:91:63:87:70:13: a3:4d:a4:2c:b8:10:be:e8:50:0c:de:9a:1a:65:c7:81:be:6e: be:d0:37:1f:d7:ef:e8:73:19:87:2c:f0:b5:b4:2d:04:55:da: 8c:f7:7b:9c:51:3e:6d:c3:b5:77:5c:0d:a6:c9:ca:be:86:c0: 43:84:70:c2:90:37:33:2b:e3:a1:b9:d6:fc:b1:09:64:7a:37: f0:66:76:ee:80:f4:7d:d6:05:de:d5:5b:06:12:84:9f:e9:07: ea:bb:96:9d:14:4c:62:5e:77:10:14:2b:b1:c5:ad:7d:9c:61: 4d:7e:5e:b2:bc:d3:91:78:da:b0:7d:f4:6b:28:0d:71:63:19: e0:d1:43:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxhdPcXLj2pEU7553gplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk N2YzNjYwHhcNMjUxMjIwMTYwMjAwWhcNMjUxMjIxMTYwMjAwWjAzMTEwLwYDVQQD EyhkYzRmNjJhM2JjMmVhY2E0NzBhMGUxNDVjNDFiY2RlZWY5YTE2YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNGXUjGeNoYQ49wTXAOyNGk9XsC0 SUfAxfDkM6kfVntK1dZzPJqdovNud1pDz13tJJbABbXw5rn5n1fFf0eOFXpTF3iL VtaAjq1tmQFLpZvqOgsXC3HJ/l/LEjQgfhHhEOfcSCGp6M3y3DDfQEiGd/3+ywnt hsk3ZRp+HQxk5By0b10Vn75SKsBAgMgJsuQRr9Gzjini1X7X0zXCzI0MfcR9Synk RHiy49Qp/44Z/D9Vz+kl2SibO0mhVu2gdDdLGlv3QuEEzJVYIfZ7Q+ZSb/Brw5Hu JMQoVfGDDULHuVZ/C4ELdUBoFCkZLGvoxbsdoq8UMitHr5tXBATtw+xSjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxPYqO8LqykcKDhRcQbze75oWsgMB8GA1UdIwQY MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoYm4ivR tDk8ZQx2u3sy7T1QsLtnP2ksrt3ncSUDY4NDno462uCyr2QznHSr5RzBXa4cmnLS ZCGyzbtFYDuAydEILHzE8XaZUE0YJSSiE5Z3dRwkGg996uanPAVo/JP7Xf2PQA9t 1YY7T54iD+pFUk1ABivDuR8+N5Fjh3ATo02kLLgQvuhQDN6aGmXHgb5uvtA3H9fv 6HMZhyzwtbQtBFXajPd7nFE+bcO1d1wNpsnKvobAQ4RwwpA3MyvjobnW/LEJZHo3 8GZ27oD0fdYF3tVbBhKEn+kH6ruWnRRMYl53EBQrscWtfZxhTX5esrzTkXjasH30 aygNcWMZ4NFDpg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:26 2025 by rpki-client