This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json) Hash identifier: zNqL/4QHIAeaBfZEO1+0a7h/1piMVhVOEbB40naDqEA= Subject key identifier: A3:E9:D7:47:E5:84:2F:47:D4:9A:1E:E8:C5:BD:FB:35:A0:88:14:2C Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Certificate serial: 019B3A8FFB2BE90F0618C29AA93FCF263ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft Manifest number: 0364 Signing time: Sat 20 Dec 2025 07:01:13 +0000 Manifest this update: Sat 20 Dec 2025 07:01:13 +0000 Manifest next update: Sun 21 Dec 2025 07:01:13 +0000 Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=) 2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: K7FNPkBPpmo0Wva/0OnsXKI/WMcm3YE042kIcQsuboQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fb:2b:e9:0f:06:18:c2:9a:a9:3f:cf:26:3a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Validity Not Before: Dec 20 07:01:13 2025 GMT Not After : Dec 21 07:01:13 2025 GMT Subject: CN=a3e9d747e5842f47d49a1ee8c5bdfb35a088142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:0d:47:9d:06:bc:03:fc:37:c3:18:d7:b6: 99:7b:8e:40:45:4c:8f:ac:f7:74:3f:ef:35:be:30: ed:54:3a:2a:b1:e1:1b:0a:96:aa:9b:03:62:bd:f5: f1:37:af:a3:a4:ae:28:52:72:cb:15:ee:76:3b:69: d8:21:23:93:51:b7:ec:1e:5b:52:60:3f:02:78:bb: 64:dd:17:42:c9:7c:30:93:e8:82:dd:ad:b0:44:d2: a7:aa:9e:fa:32:ee:3f:2f:c8:2e:a5:5a:b2:75:00: 0e:a9:25:9f:d7:f0:53:e6:a7:78:84:34:bc:cc:1f: d5:30:16:85:22:5c:8a:d4:cb:4b:f5:43:1c:cc:f1: 60:9b:35:ff:f7:62:38:83:53:7e:7f:0a:54:77:f4: 56:2f:da:50:bd:70:13:92:0a:61:71:25:39:71:48: 2b:c7:b6:f0:70:9a:22:a7:4a:63:3e:b5:f5:59:fa: 72:af:01:3d:86:53:22:fb:4e:bd:a7:3b:c5:46:ec: 42:f6:fe:d4:1b:22:40:c2:d4:60:34:ce:0f:68:a4: 5b:e3:65:ed:f5:8b:a7:bd:98:6c:d5:e4:0e:82:1d: a0:4b:7d:b5:a7:c6:e9:33:68:69:03:11:03:68:88: 77:d5:3c:6a:88:08:52:55:b9:28:87:67:23:0f:89: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:D7:47:E5:84:2F:47:D4:9A:1E:E8:C5:BD:FB:35:A0:88:14:2C X509v3 Authority Key Identifier: keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:bb:20:47:f4:da:88:b7:e2:2e:d3:65:2e:1e:5d:63:2e: 99:df:fe:33:54:09:fe:22:a3:cf:25:2f:70:78:11:fb:7a:9d: d0:3f:fc:f8:b2:8d:f2:a2:bd:f3:02:63:31:62:ef:31:e0:f9: df:8f:3f:e9:21:d4:eb:6a:35:de:0e:ea:32:50:15:86:b7:4b: d1:63:b5:fc:9b:49:80:28:bb:da:84:67:51:ce:3d:e4:4d:ba: 94:18:3d:c7:f7:39:32:ed:35:8b:b7:6b:e8:10:50:05:01:76: fb:c4:d5:ee:4b:17:95:75:44:da:39:8e:09:b0:aa:93:d2:e0: 37:b7:ba:49:22:00:d5:b4:0e:6b:fa:ae:83:d1:7a:34:37:d8: c5:47:78:14:70:da:f1:1a:ae:cf:ea:b9:a3:8a:9f:31:71:b5: f7:0a:ed:a7:ed:b1:83:f2:22:b3:da:f9:77:3e:48:f3:5a:b4: db:44:24:1d:49:77:b1:63:bc:2e:70:68:90:14:dd:84:55:5a: eb:df:30:58:8b:fa:03:96:16:f1:a8:a2:92:47:74:20:b6:84: 89:1b:50:f4:9f:69:25:41:aa:ed:f1:4f:a4:56:1b:5c:45:14: 73:df:ec:78:d5:c9:3a:e1:45:d0:f7:c4:c5:ee:42:20:46:78: 7c:52:69:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/sr6Q8GGMKaqT/PJjq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy MWJmZWQwHhcNMjUxMjIwMDcwMTEzWhcNMjUxMjIxMDcwMTEzWjAzMTEwLwYDVQQD EyhhM2U5ZDc0N2U1ODQyZjQ3ZDQ5YTFlZThjNWJkZmIzNWEwODgxNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOMNR50GvAP8N8MY17aZe45ARUyP rPd0P+81vjDtVDoqseEbCpaqmwNivfXxN6+jpK4oUnLLFe52O2nYISOTUbfsHltS YD8CeLtk3RdCyXwwk+iC3a2wRNKnqp76Mu4/L8gupVqydQAOqSWf1/BT5qd4hDS8 zB/VMBaFIlyK1MtL9UMczPFgmzX/92I4g1N+fwpUd/RWL9pQvXATkgphcSU5cUgr x7bwcJoip0pjPrX1WfpyrwE9hlMi+069pzvFRuxC9v7UGyJAwtRgNM4PaKRb42Xt 9YunvZhs1eQOgh2gS321p8bpM2hpAxEDaIh31TxqiAhSVbkoh2cjD4kIkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPp10flhC9H1Joe6MW9+zWgiBQsMB8GA1UdIwQY MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH+7IEf0 2oi34i7TZS4eXWMumd/+M1QJ/iKjzyUvcHgR+3qd0D/8+LKN8qK98wJjMWLvMeD5 348/6SHU62o13g7qMlAVhrdL0WO1/JtJgCi72oRnUc495E26lBg9x/c5Mu01i7dr 6BBQBQF2+8TV7ksXlXVE2jmOCbCqk9LgN7e6SSIA1bQOa/qug9F6NDfYxUd4FHDa 8Rquz+q5o4qfMXG19wrtp+2xg/Iis9r5dz5I81q020QkHUl3sWO8LnBokBTdhFVa 698wWIv6A5YW8aiikkd0ILaEiRtQ9J9pJUGq7fFPpFYbXEUUc9/seNXJOuFF0PfE xe5CIEZ4fFJpLw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:21 2025 by rpki-client