This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json) Hash identifier: Lk6dgi9/9desVfUt1kIQdc5th6HEWMAxZkPR+C1Ym2s= Subject key identifier: FE:1C:92:AD:E1:FC:14:CE:CF:AD:60:F1:ED:7F:27:8B:6B:BD:51:0A Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019B255175CC7B0701891A57162E1FB040F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 04:00:53 +0000 Manifest this update: Tue 16 Dec 2025 04:00:53 +0000 Manifest next update: Wed 17 Dec 2025 04:00:53 +0000 Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=) 2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=) 3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: T+8HNjXPrXrG1QHmsLgfsvGPiQakDRF4AK2XEk0Ssys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:75:cc:7b:07:01:89:1a:57:16:2e:1f:b0:40:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Dec 16 04:00:53 2025 GMT Not After : Dec 17 04:00:53 2025 GMT Subject: CN=fe1c92ade1fc14cecfad60f1ed7f278b6bbd510a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:34:06:10:af:57:05:d1:e8:62:40:cd:f8: 62:e2:52:cc:f0:84:3e:4c:92:1b:e7:22:11:f0:46: 3b:76:d1:32:33:f7:23:d1:0f:d1:ab:96:74:cf:a6: c7:83:da:c3:70:2d:5e:b9:98:a3:d4:11:01:73:87: e4:15:b9:f7:e7:e3:ed:0e:87:92:17:f2:58:5b:6e: 90:b5:8c:cc:e4:2a:2b:0a:a3:d7:4d:69:a8:62:41: 32:c2:7c:14:35:e4:a3:0a:af:8a:23:b8:37:90:a4: 51:4c:c1:f0:c0:a8:12:bf:d4:6d:a3:f2:8d:19:06: 70:7a:e7:ec:e0:37:1b:0b:2e:e2:ec:79:d8:61:c4: 2f:fe:b5:2a:4c:f1:ea:4b:98:c8:75:74:5e:3e:21: 40:07:8e:16:5c:7d:ec:7b:fc:a7:85:81:e9:29:31: b9:be:09:7d:6b:ff:a3:3c:13:67:5c:15:e0:02:79: 77:0a:24:be:90:8c:68:93:f3:ae:78:6f:9f:a2:0a: 17:0c:51:a7:c0:49:76:8e:97:57:45:2f:6e:a6:1d: 19:d0:36:7b:96:96:4d:e2:b5:ba:bd:76:07:2c:3b: 22:3b:01:15:1e:3f:6e:f2:bb:88:c0:39:75:87:23: 40:1c:e5:cc:62:13:08:c0:33:b4:c8:62:61:17:98: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1C:92:AD:E1:FC:14:CE:CF:AD:60:F1:ED:7F:27:8B:6B:BD:51:0A X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:66:aa:c3:b6:a9:89:70:1a:39:db:da:23:04:ff:20:32: 3e:b6:e7:07:12:9b:4d:b3:36:f7:be:43:e6:a3:b2:e9:5b:85: 28:ab:2c:43:5f:2b:ee:71:1b:2d:97:bb:34:2f:a2:94:cc:6f: 47:ed:93:1b:71:d1:a6:6e:38:69:1d:90:09:cf:3d:3f:a3:22: 97:06:4a:78:07:53:20:e7:19:90:75:14:6a:93:72:3c:e5:75: b7:77:f8:8c:59:7f:1f:30:15:27:fc:aa:0f:18:40:9f:87:5d: 66:19:22:79:b7:ab:a9:79:1c:fc:2b:bb:2f:30:5a:e1:9f:42: 73:8f:1b:83:bc:2b:07:b2:a0:de:57:14:be:4d:11:2d:61:cb: 0a:17:48:08:a9:9b:40:2f:ee:c6:91:df:e2:f5:1c:2a:11:6d: 5a:01:70:7f:df:2c:07:95:4e:ab:05:bf:18:27:0a:4f:84:a2: 93:89:cd:0b:14:5a:07:fe:1a:d0:88:a0:7c:05:1b:c6:3c:2f: c1:80:ec:3d:75:c7:94:b7:9c:32:ca:e9:b6:6b:e3:bc:09:b2: fd:e1:6a:22:2b:6e:70:39:1e:2e:23:74:f4:b8:ec:42:cf:11: 86:36:c4:05:2b:e0:e5:d2:67:5d:90:ff:36:1d:63:e5:9c:6a: 33:c8:25:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUXXMewcBiRpXFi4fsEDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjUxMjE2MDQwMDUzWhcNMjUxMjE3MDQwMDUzWjAzMTEwLwYDVQQD EyhmZTFjOTJhZGUxZmMxNGNlY2ZhZDYwZjFlZDdmMjc4YjZiYmQ1MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuU0BhCvVwXR6GJAzfhi4lLM8IQ+ TJIb5yIR8EY7dtEyM/cj0Q/Rq5Z0z6bHg9rDcC1euZij1BEBc4fkFbn35+PtDoeS F/JYW26QtYzM5CorCqPXTWmoYkEywnwUNeSjCq+KI7g3kKRRTMHwwKgSv9Rto/KN GQZweufs4DcbCy7i7HnYYcQv/rUqTPHqS5jIdXRePiFAB44WXH3se/ynhYHpKTG5 vgl9a/+jPBNnXBXgAnl3CiS+kIxok/OueG+fogoXDFGnwEl2jpdXRS9uph0Z0DZ7 lpZN4rW6vXYHLDsiOwEVHj9u8ruIwDl1hyNAHOXMYhMIwDO0yGJhF5hzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4ckq3h/BTOz61g8e1/J4trvVEKMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5NmqsO2 qYlwGjnb2iME/yAyPrbnBxKbTbM2975D5qOy6VuFKKssQ18r7nEbLZe7NC+ilMxv R+2TG3HRpm44aR2QCc89P6MilwZKeAdTIOcZkHUUapNyPOV1t3f4jFl/HzAVJ/yq DxhAn4ddZhkieberqXkc/Cu7LzBa4Z9Cc48bg7wrB7Kg3lcUvk0RLWHLChdICKmb QC/uxpHf4vUcKhFtWgFwf98sB5VOqwW/GCcKT4Sik4nNCxRaB/4a0IigfAUbxjwv wYDsPXXHlLecMsrptmvjvAmy/eFqIitucDkeLiN09LjsQs8RhjbEBSvg5dJnXZD/ Nh1j5ZxqM8gljA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:12:46 2025 by rpki-client