This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json) Hash identifier: RMCDqd91/eUTQ8miyuZsxBTsnOSy7B30hokFLgOZbbY= Subject key identifier: 15:39:E8:18:49:DE:BC:77:EE:36:6F:06:60:CA:60:2E:2D:9B:C2:17 Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Certificate serial: 019B1D993D8FD70444B875AAD4693187B042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft Manifest number: 0355 Signing time: Sun 14 Dec 2025 16:02:20 +0000 Manifest this update: Sun 14 Dec 2025 16:02:20 +0000 Manifest next update: Mon 15 Dec 2025 16:02:20 +0000 Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=) 2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: 2Y01K4vupf3QgUXRedcGzXlTxRiktBW2pB/GPHK+vnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:3d:8f:d7:04:44:b8:75:aa:d4:69:31:87:b0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Validity Not Before: Dec 14 16:02:20 2025 GMT Not After : Dec 15 16:02:20 2025 GMT Subject: CN=1539e81849debc77ee366f0660ca602e2d9bc217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:ae:c8:55:89:7a:60:d3:a2:0e:2b:0f:fc: 32:1d:d6:82:c6:13:dc:94:1d:f0:77:5a:13:83:50: c6:1a:78:5a:7d:81:85:37:4a:90:09:82:37:a1:52: 34:70:38:4e:b8:a8:8f:47:96:a0:ed:48:cc:19:df: 6f:ea:fb:66:20:8e:1c:16:cb:e7:77:64:13:5c:b7: fc:d9:13:cd:b6:e6:bf:af:f6:dc:dd:f3:41:6c:99: 84:0e:bd:bd:a7:d5:10:f4:1a:68:9f:42:13:8a:11: c5:71:0e:37:98:0a:bb:24:c4:8f:de:ac:d5:dd:ac: b2:7c:5d:82:d7:57:e2:0c:84:3f:e7:2b:4b:df:f7: cf:ea:48:97:88:38:c7:c2:5b:80:7b:8b:54:cd:47: b3:58:27:66:92:c9:4d:5c:f4:d5:10:40:e3:87:9a: cf:d1:1b:20:a5:f0:34:b6:b9:07:26:94:d3:82:b6: ed:f5:47:42:ce:78:5a:b3:81:d9:3d:c8:0e:b8:15: 6b:65:05:b5:fb:47:42:43:4f:66:63:ba:88:28:56: aa:3b:81:ca:2a:4c:15:db:45:13:52:b9:b5:65:66: 07:a9:36:83:cf:2d:dc:72:af:61:04:b2:b4:a3:64: 68:46:71:4f:2a:f7:b9:9a:23:eb:9b:9f:d5:a0:e1: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:39:E8:18:49:DE:BC:77:EE:36:6F:06:60:CA:60:2E:2D:9B:C2:17 X509v3 Authority Key Identifier: keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1c:77:53:4f:d5:51:8e:25:c0:f9:91:c3:d7:b7:62:2c:05: 83:06:db:b0:2e:f1:73:be:2f:62:04:d9:b3:0e:4d:d4:7c:75: 3a:1f:bf:76:bf:2b:f5:08:e7:b4:dc:60:30:37:4b:7e:d5:c1: 57:a1:40:4d:d3:2b:f8:6f:8b:e4:0b:71:29:89:86:5f:42:ef: 3e:f5:cd:f2:5d:ef:e3:85:01:8d:c0:ca:32:98:a1:d1:c3:7b: 5d:e4:01:33:6c:89:65:4f:4f:a3:dc:c1:b2:20:75:a8:5a:f9: 1e:10:a3:8f:7a:d3:67:12:f7:bb:36:06:7e:cc:d8:b4:17:e6: b1:0c:32:52:65:40:bc:f6:6f:48:8c:6b:92:53:11:51:63:28: bc:cf:b3:39:07:bb:af:b3:29:bc:50:49:89:83:b4:5c:bd:1c: 8d:50:a8:07:b5:a7:e3:97:64:0a:be:b2:df:ee:24:c3:55:90: ab:86:f8:e8:3b:44:d1:5e:2c:c0:eb:5f:80:bf:ae:db:9d:ae: b2:9c:9f:33:71:18:ed:64:d1:4d:2a:5c:92:b8:c6:c7:e7:0b: ea:b6:af:5d:70:ba:1b:85:9b:c5:e0:d5:10:0d:84:57:36:55: 76:13:d8:f7:e5:62:96:22:ec:53:7a:a6:e6:2c:85:ee:65:9b: 3d:bd:94:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmT2P1wREuHWq1Gkxh7BCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy MWJmZWQwHhcNMjUxMjE0MTYwMjIwWhcNMjUxMjE1MTYwMjIwWjAzMTEwLwYDVQQD EygxNTM5ZTgxODQ5ZGViYzc3ZWUzNjZmMDY2MGNhNjAyZTJkOWJjMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxSuyFWJemDTog4rD/wyHdaCxhPc lB3wd1oTg1DGGnhafYGFN0qQCYI3oVI0cDhOuKiPR5ag7UjMGd9v6vtmII4cFsvn d2QTXLf82RPNtua/r/bc3fNBbJmEDr29p9UQ9Bpon0ITihHFcQ43mAq7JMSP3qzV 3ayyfF2C11fiDIQ/5ytL3/fP6kiXiDjHwluAe4tUzUezWCdmkslNXPTVEEDjh5rP 0RsgpfA0trkHJpTTgrbt9UdCznhas4HZPcgOuBVrZQW1+0dCQ09mY7qIKFaqO4HK KkwV20UTUrm1ZWYHqTaDzy3ccq9hBLK0o2RoRnFPKve5miPrm5/VoOFrXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU56BhJ3rx37jZvBmDKYC4tm8IXMB8GA1UdIwQY MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRx3U0/V UY4lwPmRw9e3YiwFgwbbsC7xc74vYgTZsw5N1Hx1Oh+/dr8r9QjntNxgMDdLftXB V6FATdMr+G+L5AtxKYmGX0LvPvXN8l3v44UBjcDKMpih0cN7XeQBM2yJZU9Po9zB siB1qFr5HhCjj3rTZxL3uzYGfszYtBfmsQwyUmVAvPZvSIxrklMRUWMovM+zOQe7 r7MpvFBJiYO0XL0cjVCoB7Wn45dkCr6y3+4kw1WQq4b46DtE0V4swOtfgL+u252u spyfM3EY7WTRTSpckrjGx+cL6ravXXC6G4WbxeDVEA2EVzZVdhPY9+ViliLsU3qm 5iyF7mWbPb2U8w== -----END CERTIFICATE-----Generated at Sun Dec 14 22:55:41 2025 by rpki-client