$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft File: KsPaobFIUPLmHFkrIZGRWl5lpHg.mft (raw, json) Hash identifier: Z1Rzm13LaYogVV+Gtjc1M6X0xIrI9AzbYjWBXFhuXKg= Subject key identifier: FB:63:CE:B9:1D:2C:D9:3A:66:34:33:81:32:FA:05:06:CC:51:9A:44 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 0199518A6E91A617CF7A183B97BA22D591C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft Manifest number: 1899 Signing time: Tue 16 Sep 2025 08:00:50 +0000 Manifest this update: Tue 16 Sep 2025 08:00:50 +0000 Manifest next update: Wed 17 Sep 2025 08:00:50 +0000 Files and hashes: 1: 1-7kbwsm5LdtmQsHD68f_9QyqgzQ.roa (hash: IllrMNiEzlQM6gHCcDU8IAFJHdoiItoRJX3fCjTBsao=) 2: 1IhfcMc6vdLalAssbxGvWJUN-I8.roa (hash: UFPUuXseMe5mmCfOL5TtRt0nyrvSJU49C2dua22bxsA=) 3: 1hgso2lccKM-lJMA4gcdw60wIFU.roa (hash: yyXPpz+zE0xj6JsKCT2l725THoS1U4R0ARhX06QaZVw=) 4: 2ITJmEtwojQ3DH4pL8HTXjdLM_w.roa (hash: LgkVTJwNyUbm76D9pkR0ApuYZjOHFOALEG2alzj2A78=) 5: 3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa (hash: J9IelrU9P/CVtrQKRZv32f/Tvcpv1WvkNpEzVPYZJ9U=) 6: 67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa (hash: yzJDWryjSvtx+7x08ZuzwC8yKQ7xrpLS6pCbYy/XJm4=) 7: 6BWOCT_HYW77Nmoi-XBFrRHUPdc.roa (hash: Ve+peZSoyfXpU2PwAnfaFv71IpkMGtnzXSslo22mzCM=) 8: 6H3IB_HstDS6LI6-SIwQfdZH8NI.roa (hash: do/PM+RkzzcQvPULycLcJGGjK4c/59gjd13ifwPlFP4=) 9: 744sD4Jl3i1w7jbI0pdZB5cbKXU.roa (hash: zre4BVjhFHohj+9Mxiluw9C+kHKcMYzIk5bkS8NnqLs=) 10: 86Yxs1ZizrJJJxd_CgUU7rNHToY.roa (hash: +dc5Fhp2yn9rk5tqzBkSqU4zWkVrDQypGxi0GonySoY=) 11: 9kKe8tdbtZcAIm0ePTelfe-DlhU.roa (hash: xqxAX6AEe9CGHYfjvMTqrfvPebN8AWJosVcmJ4Y4fWk=) 12: BiG3Lboa-yi8-3cO8dbg_kY8s0s.roa (hash: PUhj3yqAe/tyjqOgmwwn8VbtMRCG2TFNmQSth1ouqx8=) 13: CHGjaRdSCAe-TRzACdbdK_EFiM8.roa (hash: 0yS55qnpzYJpJk0kNI9SiX7t6cWmSlNBnNEn0xBSxMc=) 14: CL21bkaZtCWNnhL-ix59CR8UBfY.roa (hash: LRqooD6N4j3ZqGRaQ2aAxylB6oUUHvUm4mU4vxvb7sI=) 15: D5zkCGvDInlDpbccE6maEHTXDH4.roa (hash: cfIAsehmYCFnIdtwpUGrcGfMvy34nAmCT1DreezcKgY=) 16: Dx0CXD5oSw61AQOrm06NcSnSSdo.roa (hash: 3760lBflYJm04ZGh+to9gl21uNqtogCeiwzVbcpH1jQ=) 17: ESViLtCBKlteUOPU13HjALhivAQ.roa (hash: 7BetrCS9Fr0PSlTviNcH7L1shFXlyrWzO+ltAG4Tq0k=) 18: EjcVchWFrXpzeS6M09zhZFTdkVM.roa (hash: JeJ0yyTvKPBJOVgndcc7CIZ3u5MSYBd0tv+TA1Wyjdc=) 19: EqaISQIUHHoTZcarSoXaLlnO0LM.roa (hash: USJm/vhGTWlgHw2udyKE27tLrmsdveXCYt9mLeOcil4=) 20: GOe6-ZtfECOJMEwmWNnobkEeCQY.roa (hash: mnrlqrFqqVx6wy1iDVAz0+YpU1K1nnep5PyNHcJjt1U=) 21: GcaaSEbhJHFVhQJbphKB2PN0_0o.roa (hash: vuHzhXN+wyIqOVO4wT35DeqmxstLh4v95AsrV+kQcMg=) 22: GfsR7fzmFN-ZSY4pxA5voaxpXMs.roa (hash: ypX4I4bHhsk4HMDZt9hz9zcpF1Mi0jIgioHY8whf0qU=) 23: H6tuFi9Z9kSQq0AcDKvLAwTMNdU.roa (hash: /kG2Fx6v1vsEAcU1p5ojBIJNuUbGuznqVEsdiZLWRp0=) 24: HIumX43oGnzkGuWt4G_NLwulwg0.roa (hash: 8gh4iUsZLyO8zHF+TsBNknxsLW0v498tkaP0csONxSo=) 25: HYm3JS5hkKtt1MJOVZVxLEKy-Nw.roa (hash: EDXt7qv7G6UL7E3Cb9MkJRzLST8ItMWjBgR9ms+9P4g=) 26: J1xSz32FDKWq1ap77B5YLtRQK3E.roa (hash: jjbIEcByrjMeEwsXvOx3DnJWxTU6kXWXOIeF+13UbBA=) 27: Ki2AqHAiVlZde-OgqwQq6oVrzXg.roa (hash: ebF9ElvbE0fA6gfcdhS+7ToE+6rhBq1lX1SpUHxMBFs=) 28: KpUFjIPvU7sDAK19HLij4SJLniQ.roa (hash: EtNFJK9SeBdK3y4Fk/w7539yydiBnRYqxjujGc4Nb1s=) 29: KsPaobFIUPLmHFkrIZGRWl5lpHg.crl (hash: 5fDzklIg6SFyzs7cvgg+YPUtxEiyx/afOZ2p+BnVojg=) 30: LeJQNR3tVaZz-2eOZy-Yne6BPWY.roa (hash: Gz0CrG5sVqbCflyItJgPeuOAwruafU6EJL8ZQwhBdY0=) 31: Lk7RjXVLqulmYcgel2X77E-Vc4A.roa (hash: dLEpgBCcz63UcRaZ03igJrw7j48rDIBC57wiiU3eH6M=) 32: Oz3HsNbB7oKzUdq8JIrSV26X4kc.roa (hash: 0ebpmFJ3WNSrxh1xBKmknuB8WyQ6cVG8amjKotUdrfk=) 33: RX9rUID4G6ewyKF20iJaSn4FrL0.roa (hash: D8yD5OPlbFtwjyFVxmqm6eRVeodaarSnFohlFWCDDoQ=) 34: Rt9dbSnWulN5nYcwrmi431noNJg.roa (hash: HPbs2ciscOLJwFIJiGRF4vSxk6jtao78si/yEguezqw=) 35: Ry2u2EGGr1l7CqwoKIeNpDD83DU.roa (hash: c4rx9h+TC6WPwioWtQ1MElrQmQRi/SLkpEGxuWX+qS4=) 36: T7CYYFVfIcXfDZJG7fjiwMp_ObI.roa (hash: gI0qEQWQ1EuxD4GDmoojm9BYYnFXN5QK+ePpWr33msg=) 37: W4XH1igpyllhe-Wuhr5RQ0aotGY.roa (hash: Et9BjRBWW/jaWGIcSjk5lRAVUP5Y5kioBLyD5AdfsZc=) 38: XF_A1OqLQOFxzFrlgxq2nFpjuLg.roa (hash: p4fh9UqOmCpLLYivaRckgPPXZZFgQdPt41RX5/KwuqY=) 39: XUhmF7NC59VfS-_RgMhnFzCm21k.roa (hash: 5XacoIFqiK03Bo2lBnJs8PXslWsRrAkg6i5gyULqj1M=) 40: YdbL26SrWDrDgemmE2H-mQF-A9E.roa (hash: 0HPOI6j4D99rPE+s4QbSlEWSASe0lQdsAhvE+yVUqiA=) 41: _CmBe41AMweE_lzyL4NbSpxXcLQ.roa (hash: O6zOtN0rivp7BtQj0Yo5dZPAUFp2+XgpwtntntQgeIA=) 42: _MIxuIS-LegaBL97znvg1WzabyU.roa (hash: 5RtCBYPc+OYibomGBA55iEQFagUqeM3We+U1ld2I49M=) 43: eHTVEocrFL3NQ0zGND4cVs9oUWY.roa (hash: 0gZO9sEZuFV7HbS/lBtHNURKPRkvRlnWLOuu5Ms3Jn4=) 44: ew4w5tVKIjMqx19f45S8RsRYbkU.roa (hash: bUEheHG9U/ifUhOxkexA8RmHXXPv6oQ0yoQSZI9DdQI=) 45: f82dH9Kef_yM_0mhvpdo79LuFPM.roa (hash: +W/2nGkWoU7YuVbPeC0tSGAk4v4cWDOxdCNdfqSglWs=) 46: fr7chU3mkddQrTjKAwYpozaaYtg.roa (hash: q6i6PQCN0vEKixyeExkR/W/PK+pwZYjYv+Mvybu4cTQ=) 47: fxJiH6eIDyvLzyEvl0wGoIdLa14.roa (hash: kKoVyH0Lzfe6UOzToW/73K9Otv/57/8q0T5ca/jlhPY=) 48: hy_ucIJUi3CJ6kVxcgXVxieywhM.roa (hash: Y7r8fZDcKnprbX5sry93KuVWc9Ktb8EvMmXkL4jAn9c=) 49: i8zpMrOMz8snLQN9FKEhSLa6Dek.roa (hash: hP+7I/F057LbBFihJtlbBp/U7yMfUrH2YAnq4y792cs=) 50: jvrFj6uplGyn_4RH_gnZ3WttdUg.roa (hash: 7f2WNciCzUNIEz9ZUeD4xu3Pq6FX/hCCRVQiUxjl1Gk=) 51: mFWcHlcWBe9wYTg69c6ouVugpNw.roa (hash: q2ErNp39epQbnTMcpPCyqsqatEdKpJetzV/+N0laYuY=) 52: mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa (hash: /naJn6ud8gAhuc5cIlXNZBtLpGR9W8Bq0PuFFxhBhLs=) 53: mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa (hash: B6vOVo9IyXYT98tKHGpAx3UyuI7wHnb7KDHG33mnMsA=) 54: mldrwLJpesjnj5aKwUEtNxwcIt0.roa (hash: Yqfn3aE8gft9fmdAE2YrPGmZXgurBxQuiLes9eTp6vY=) 55: oQaywy3q8vmyPxGr_AmiNoNzTBA.roa (hash: 4Yn0dAJN/4cvXNvMf4Lu9rEegHknGAt0w5s9nflB7/U=) 56: oZLJxPNEFauwno6vaDy4hei9FoA.roa (hash: jE6uNod7deWtk1VOAkf6V1XZjTLm/drnBzVBArp2ZpM=) 57: q7CGM855b9BpTviCFpJu1k0kGBY.roa (hash: zsDCTBxeHYVbQ0HBef/V/il/aqUA+TWIpeSc2KFTqAI=) 58: sSyk2Go9b-ZSIbDEjA887FJtAqs.roa (hash: Hr4YLXHzWyVzk5Ncm83D3GjPMZlGrcn/XOlOLPRssPY=) 59: u19W84miic1ThTG4VeFlXZAFFas.roa (hash: 27jIZre/g2omnr1SJbYdxwNUgj689gf7Zet3AGuNc3Q=) 60: ulWrN8B49xiwZPwEKCaOI8HCxCc.roa (hash: os2jAnx+ef3NMgf5O54Z/rj72e/tyiY1EIFsRZNeLxY=) 61: vKIZs30r1pj9Wpo9vLTZuPScm8k.roa (hash: zkaNSKrQk9qvyhrM7kQr3nomNA3UzXxzvPMgeEH2u6c=) 62: wWk3mlFiAPLhaQzlKZq5GVQR5Gc.roa (hash: r319ctU1yv3dDnOENgvrUEIzMg0eVIaEbvkXgewl/AY=) 63: xwYYbuqdxLeABQhAcQgMb-yi8ko.roa (hash: Ek4fQYWGgmja5Zt7o8QUgay6Ii2VYVTROI6hxJtYtMk=) 64: zeFyMrrZ4gqCb9SaAAfHXUYB4cw.roa (hash: uLFEA9d2fIoP4zFZoYD8wr2D+YAwHiqtYct+37pmpAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:51:8a:6e:91:a6:17:cf:7a:18:3b:97:ba:22:d5:91:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Sep 16 08:00:50 2025 GMT Not After : Sep 17 08:00:50 2025 GMT Subject: CN=fb63ceb91d2cd93a6634338132fa0506cc519a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:67:52:6e:d3:5a:72:0c:f1:96:f9:0c:c7: 11:e5:20:79:92:27:51:7d:4c:e9:a9:5a:4b:a3:73: 83:3e:6a:32:96:f5:02:2e:ef:5c:96:fe:f0:6e:c7: dc:35:f1:3a:61:f2:3a:ea:87:fd:96:6c:e8:ac:e9: 7e:5a:69:0a:df:44:3b:d3:8a:e3:4c:58:95:1d:af: 7e:04:9b:65:ac:25:d2:35:b1:a6:de:ee:d4:fc:c0: ef:a2:3d:c2:1a:24:41:68:c3:c5:0b:91:ed:09:d7: f5:e6:19:64:7a:4d:1f:05:3e:9c:f9:38:d2:0f:58: ac:81:a9:59:f3:58:34:ea:6b:f8:9b:fb:ba:00:88: b2:ab:fd:97:9a:b5:de:d2:c1:23:e9:f9:d2:52:d0: 67:91:d9:96:17:48:6f:2d:13:98:8f:e6:30:05:06: 1e:9f:c8:b9:31:15:84:60:3c:5a:4c:11:28:99:01: 81:5c:c7:16:23:1c:4f:4e:ef:7d:dd:f8:23:ff:00: 8b:43:36:37:1f:38:65:c6:38:7a:3e:f4:de:27:14: 41:99:28:33:1e:a4:01:d0:27:7a:0a:1e:5d:b3:44: c4:47:55:49:d4:e0:4a:40:a3:30:f9:0c:76:dc:f7: f9:02:0c:37:b9:df:7b:92:8a:a4:8f:e6:67:75:b9: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:CE:B9:1D:2C:D9:3A:66:34:33:81:32:FA:05:06:CC:51:9A:44 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:46:bc:42:3f:1f:f0:dd:f0:39:1e:da:5c:ee:3e:7d:5d:16: 74:2e:bd:9c:0a:ed:f8:8c:ed:33:0b:30:30:7d:7c:3a:fa:00: 67:2b:14:04:64:07:d5:68:79:e5:84:10:22:32:63:87:93:55: a9:c3:5f:50:1f:22:29:c5:0d:cb:d4:25:71:67:da:6d:65:bd: ed:59:4e:49:4f:96:a1:be:f1:84:02:cb:85:49:7d:f8:48:c1: 41:f3:a1:9d:86:22:59:ef:4b:74:cc:6e:e0:ec:f7:99:77:84: 2e:16:8d:e6:e5:3d:09:36:40:e7:d7:61:16:d3:cb:f0:27:64: d3:73:c6:db:e7:fa:a4:4f:e4:0b:d0:fd:45:20:9c:79:da:5e: 8a:cb:c6:90:79:22:09:b1:49:ab:ae:93:d1:16:6b:3e:f4:31: 8a:17:6b:1d:8c:f7:99:f1:c2:63:8c:33:d9:7d:60:ae:95:56: 10:dc:ca:0a:b3:7e:37:f9:c5:95:1f:5e:16:bb:1e:bd:33:7e: e1:84:3e:0e:8b:3c:01:0e:6f:2e:3c:97:b9:8e:d5:af:35:9e: 37:34:68:b8:6b:6d:1f:ce:2b:37:c6:74:48:e9:c4:f3:e8:63: c6:c5:1e:8f:ba:c5:1e:bb:38:90:62:b7:e6:62:98:e5:44:8d: 37:0c:35:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlRim6RphfPehg7l7oi1ZHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUwOTE2MDgwMDUwWhcNMjUwOTE3MDgwMDUwWjAzMTEwLwYDVQQD EyhmYjYzY2ViOTFkMmNkOTNhNjYzNDMzODEzMmZhMDUwNmNjNTE5YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLtnUm7TWnIM8Zb5DMcR5SB5kidR fUzpqVpLo3ODPmoylvUCLu9clv7wbsfcNfE6YfI66of9lmzorOl+WmkK30Q704rj TFiVHa9+BJtlrCXSNbGm3u7U/MDvoj3CGiRBaMPFC5HtCdf15hlkek0fBT6c+TjS D1isgalZ81g06mv4m/u6AIiyq/2XmrXe0sEj6fnSUtBnkdmWF0hvLROYj+YwBQYe n8i5MRWEYDxaTBEomQGBXMcWIxxPTu993fgj/wCLQzY3Hzhlxjh6PvTeJxRBmSgz HqQB0Cd6Ch5ds0TER1VJ1OBKQKMw+Qx23Pf5Agw3ud97koqkj+ZndbnPbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtjzrkdLNk6ZjQzgTL6BQbMUZpEMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWka8Qj8f 8N3wOR7aXO4+fV0WdC69nArt+IztMwswMH18OvoAZysUBGQH1Wh55YQQIjJjh5NV qcNfUB8iKcUNy9QlcWfabWW97VlOSU+Wob7xhALLhUl9+EjBQfOhnYYiWe9LdMxu 4Oz3mXeELhaN5uU9CTZA59dhFtPL8Cdk03PG2+f6pE/kC9D9RSCcedpeisvGkHki CbFJq66T0RZrPvQxihdrHYz3mfHCY4wz2X1grpVWENzKCrN+N/nFlR9eFrsevTN+ 4YQ+Dos8AQ5vLjyXuY7VrzWeNzRouGttH84rN8Z0SOnE8+hjxsUej7rFHrs4kGK3 5mKY5USNNww1KQ== -----END CERTIFICATE-----Generated at Tue Sep 16 10:25:54 2025 by rpki-client