This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json) Hash identifier: d1fXIXmBfybOkaG3IKjc4QkJIdhcuXS9h5rsSaJLwJY= Subject key identifier: AF:B6:8F:77:91:7D:E1:67:5E:BE:C4:4A:F9:00:59:DB:FD:1B:EE:1E Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Certificate serial: 019B3C7E67EE12C430AF7ADE1FE0C805D3EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft Manifest number: 0365 Signing time: Sat 20 Dec 2025 16:01:15 +0000 Manifest this update: Sat 20 Dec 2025 16:01:15 +0000 Manifest next update: Sun 21 Dec 2025 16:01:15 +0000 Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=) 2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: w/AOeDc81K73sbl+F3/FshF5ZWKzdpIS6Zr6Y2fIEbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:67:ee:12:c4:30:af:7a:de:1f:e0:c8:05:d3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Validity Not Before: Dec 20 16:01:15 2025 GMT Not After : Dec 21 16:01:15 2025 GMT Subject: CN=afb68f77917de1675ebec44af90059dbfd1bee1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:46:e9:e8:c0:0b:e0:30:97:77:30:ed:26: 61:7d:62:39:c9:5f:4d:8e:df:9f:a3:88:73:61:66: ad:3f:57:d9:7b:8e:05:32:0d:04:04:43:d7:97:f1: b9:ac:2e:7d:ca:46:6b:b3:79:0a:85:e0:0a:78:49: 3c:05:54:dd:11:06:8f:13:a3:8b:7b:42:0f:b8:5e: df:0f:4d:2c:7d:b5:1b:17:73:27:a2:8f:ca:34:82: 33:6b:b4:bb:68:68:7f:1e:2c:d9:5b:8f:14:c5:8a: 5c:b3:c1:68:c5:dc:d6:a3:79:f6:cc:2e:10:95:85: 95:05:27:b1:6d:5b:1c:8d:c1:75:b7:26:58:27:47: e7:58:8f:04:e5:7a:5d:fd:9a:63:82:56:64:78:ec: 47:6f:cc:21:81:a4:66:f9:26:7e:71:ad:8f:04:64: 04:0b:d4:88:50:59:ae:a9:1b:9a:44:b5:eb:8f:bf: ca:9b:ac:75:f4:9d:c4:9d:09:be:fe:a5:b9:09:0a: e8:dd:60:f2:bf:83:bf:f1:a2:84:98:7a:91:94:0c: 9f:52:a3:ca:3c:f3:40:4a:34:24:e5:3b:16:af:88: c8:6c:8a:f5:30:ad:f9:7a:86:39:4e:6f:49:da:ea: 69:95:b2:6c:f2:21:dc:04:16:97:d8:f9:3b:95:ac: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:8F:77:91:7D:E1:67:5E:BE:C4:4A:F9:00:59:DB:FD:1B:EE:1E X509v3 Authority Key Identifier: keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:49:44:4c:06:b3:75:f7:b5:ca:76:e2:dd:9a:5d:fb:a4:d2: 08:7a:1d:7a:8e:c3:d4:a5:5c:5f:24:1a:be:2b:ef:d8:af:c9: 72:e6:40:ff:c3:ec:25:44:77:24:16:ed:c0:76:22:1c:a0:de: 81:77:ca:bb:65:5e:b7:61:a6:4d:56:68:cf:3c:55:f4:ce:b4: d5:5c:39:8a:b1:a5:cd:49:e2:61:e4:f0:f9:4f:cd:2a:4f:74: 90:fd:33:de:ba:7e:8d:d0:23:84:0e:dc:b2:66:78:a8:36:d8: b7:27:86:d1:f3:48:fe:a7:b6:39:e0:0e:ec:11:b8:84:9b:82: 13:a7:c0:ac:65:c9:8f:60:b6:63:9e:83:1d:cf:e7:9d:bb:d8: c0:69:20:75:f6:83:df:8a:a4:05:ed:71:21:14:da:e8:97:0d: 50:d9:ee:3b:e2:19:ea:73:0e:60:41:49:4f:65:e0:36:a7:bb: 9f:55:95:bd:d8:38:db:70:08:89:33:88:62:ff:e5:d1:94:34: de:3f:67:ef:1f:43:30:da:75:5f:50:e4:73:93:72:b5:85:c4: dc:0b:fd:fb:af:af:50:e1:90:83:fc:c9:a2:48:01:76:cc:2a: 73:ff:c9:c1:66:67:5b:ce:0b:00:b7:5b:c7:02:71:70:ed:18: 42:f4:14:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmfuEsQwr3reH+DIBdPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy MWJmZWQwHhcNMjUxMjIwMTYwMTE1WhcNMjUxMjIxMTYwMTE1WjAzMTEwLwYDVQQD EyhhZmI2OGY3NzkxN2RlMTY3NWViZWM0NGFmOTAwNTlkYmZkMWJlZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7atG6ejAC+Awl3cw7SZhfWI5yV9N jt+fo4hzYWatP1fZe44FMg0EBEPXl/G5rC59ykZrs3kKheAKeEk8BVTdEQaPE6OL e0IPuF7fD00sfbUbF3Mnoo/KNIIza7S7aGh/HizZW48UxYpcs8FoxdzWo3n2zC4Q lYWVBSexbVscjcF1tyZYJ0fnWI8E5Xpd/ZpjglZkeOxHb8whgaRm+SZ+ca2PBGQE C9SIUFmuqRuaRLXrj7/Km6x19J3EnQm+/qW5CQro3WDyv4O/8aKEmHqRlAyfUqPK PPNASjQk5TsWr4jIbIr1MK35eoY5Tm9J2upplbJs8iHcBBaX2Pk7layY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+2j3eRfeFnXr7ESvkAWdv9G+4eMB8GA1UdIwQY MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxElETAaz dfe1ynbi3Zpd+6TSCHodeo7D1KVcXyQavivv2K/JcuZA/8PsJUR3JBbtwHYiHKDe gXfKu2Vet2GmTVZozzxV9M601Vw5irGlzUniYeTw+U/NKk90kP0z3rp+jdAjhA7c smZ4qDbYtyeG0fNI/qe2OeAO7BG4hJuCE6fArGXJj2C2Y56DHc/nnbvYwGkgdfaD 34qkBe1xIRTa6JcNUNnuO+IZ6nMOYEFJT2XgNqe7n1WVvdg423AIiTOIYv/l0ZQ0 3j9n7x9DMNp1X1Dkc5NytYXE3Av9+6+vUOGQg/zJokgBdswqc//JwWZnW84LALdb xwJxcO0YQvQUQA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:08 2025 by rpki-client