This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json) Hash identifier: uYChbiHAaTEbHLnX/I387eKnfBA/xv5rlJuXW2frS/w= Subject key identifier: 74:DB:DB:33:91:20:9B:25:2A:2A:6D:CA:98:A1:92:5D:A2:3C:3A:19 Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Certificate serial: 019B101446F4DA33557339FA573DAB6BC3E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 01:02:02 +0000 Manifest this update: Fri 12 Dec 2025 01:02:02 +0000 Manifest next update: Sat 13 Dec 2025 01:02:02 +0000 Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=) 2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 7REYLkytO8GCAlwNtfWO2/Ax7gerpi14NwDW4VrOHL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:46:f4:da:33:55:73:39:fa:57:3d:ab:6b:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366 Validity Not Before: Dec 12 01:02:02 2025 GMT Not After : Dec 13 01:02:02 2025 GMT Subject: CN=74dbdb3391209b252a2a6dca98a1925da23c3a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:d0:1d:99:a0:1a:58:32:3a:87:e1:b8:97: de:56:b6:46:1b:31:80:49:76:51:ff:16:25:38:88: 27:bd:c7:13:7e:d6:ee:83:e2:ac:0d:c7:36:f3:8c: bf:07:33:5b:b6:bf:99:95:d9:80:23:08:5d:51:25: 04:de:fb:f3:69:65:44:93:be:ff:2b:7d:72:a6:b7: 3f:89:58:9b:b1:e8:fb:4c:ca:02:b3:0b:c1:fd:6e: 5a:65:7e:fd:68:ae:04:8f:cd:bb:67:a8:5d:44:7c: 59:d4:c3:a0:8e:07:3a:94:6a:73:7f:3a:42:0e:0d: b2:0c:72:ef:31:3e:74:12:59:d4:55:b3:5c:64:7e: 77:7b:b4:c3:9a:fb:83:2f:cc:06:78:45:e8:d6:09: 65:22:f3:7d:13:a3:d1:cf:01:d6:c7:1d:ae:43:99: cf:d6:3c:ca:e0:df:3f:08:b1:db:d2:16:59:4d:5b: bd:1c:8d:66:0d:51:56:ea:5d:52:50:84:30:dc:bf: 4e:f2:5e:37:6e:94:2a:27:18:39:01:3f:ea:a7:40: fc:28:8a:7b:72:b0:62:18:b9:45:e7:1b:6b:61:07: 4b:29:96:59:20:19:77:b6:fc:e6:81:52:56:50:65: 6d:ac:96:17:51:b5:c8:39:ef:39:0f:bd:ea:64:5f: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DB:DB:33:91:20:9B:25:2A:2A:6D:CA:98:A1:92:5D:A2:3C:3A:19 X509v3 Authority Key Identifier: keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:9c:15:cc:af:1d:a5:f7:da:fc:52:bc:16:68:92:a4:5b: 75:aa:86:80:e3:f5:f1:77:32:75:b7:22:54:8c:b4:54:c1:08: cb:cb:ca:ca:ce:33:28:91:5c:af:6e:44:d2:40:8d:f9:13:7e: 91:eb:d8:3d:b1:a3:3d:bb:06:ad:44:04:70:cf:2d:32:cf:d6: 8b:8f:55:d0:18:a5:40:53:09:07:91:c5:f5:8f:14:14:6b:fd: 52:c5:ba:64:a8:d2:d8:c6:70:cd:69:60:ac:f7:20:1a:f9:bd: b5:c9:39:3e:7f:95:b7:19:13:26:2f:80:b8:19:69:b6:44:58: 97:ef:80:4a:6b:c0:90:9d:ce:b9:2f:df:98:2a:d6:06:ab:54: c2:59:da:26:48:50:04:3a:fc:53:30:b6:4a:ee:c3:ca:21:ec: 0a:70:c2:53:21:57:a9:31:30:ee:ab:c5:b1:87:05:92:34:65: 76:9b:71:2b:28:21:fc:a0:33:03:24:f4:44:3b:f4:89:b0:54: e1:88:57:0b:3a:7a:1d:36:72:44:fc:bf:b0:6c:19:de:d4:d7: 17:e1:10:34:b7:44:cf:c0:b4:7e:95:e1:14:0a:2c:dd:ea:64: 8f:07:a7:d5:64:a7:86:be:92:d9:e5:a9:f8:25:3e:fe:e1:0d: 8b:0f:32:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFEb02jNVczn6Vz2ra8PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk N2YzNjYwHhcNMjUxMjEyMDEwMjAyWhcNMjUxMjEzMDEwMjAyWjAzMTEwLwYDVQQD Eyg3NGRiZGIzMzkxMjA5YjI1MmEyYTZkY2E5OGExOTI1ZGEyM2MzYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7QHZmgGlgyOofhuJfeVrZGGzGA SXZR/xYlOIgnvccTftbug+KsDcc284y/BzNbtr+ZldmAIwhdUSUE3vvzaWVEk77/ K31yprc/iVibsej7TMoCswvB/W5aZX79aK4Ej827Z6hdRHxZ1MOgjgc6lGpzfzpC Dg2yDHLvMT50ElnUVbNcZH53e7TDmvuDL8wGeEXo1gllIvN9E6PRzwHWxx2uQ5nP 1jzK4N8/CLHb0hZZTVu9HI1mDVFW6l1SUIQw3L9O8l43bpQqJxg5AT/qp0D8KIp7 crBiGLlF5xtrYQdLKZZZIBl3tvzmgVJWUGVtrJYXUbXIOe85D73qZF+BIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTb2zORIJslKiptypihkl2iPDoZMB8GA1UdIwQY MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVacFcyv HaX32vxSvBZokqRbdaqGgOP18XcydbciVIy0VMEIy8vKys4zKJFcr25E0kCN+RN+ kevYPbGjPbsGrUQEcM8tMs/Wi49V0BilQFMJB5HF9Y8UFGv9UsW6ZKjS2MZwzWlg rPcgGvm9tck5Pn+VtxkTJi+AuBlptkRYl++ASmvAkJ3OuS/fmCrWBqtUwlnaJkhQ BDr8UzC2Su7DyiHsCnDCUyFXqTEw7qvFsYcFkjRldptxKygh/KAzAyT0RDv0ibBU 4YhXCzp6HTZyRPy/sGwZ3tTXF+EQNLdEz8C0fpXhFAos3epkjwen1WSnhr6S2eWp +CU+/uENiw8yig== -----END CERTIFICATE-----Generated at Fri Dec 12 06:38:14 2025 by rpki-client