This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json) Hash identifier: 8AxnTIzx4b2Srxu/A8gBH7RJyDocd6xBtwqIvVhtfoY= Subject key identifier: 70:D3:CA:0A:94:F7:8B:9C:63:A1:C9:EE:9D:8C:53:29:E1:31:5B:9F Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Certificate serial: 019AF12CD294C91DE386570BFAF468820FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft Manifest number: 033E Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=) 2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: 3W4yozy3/BSF1WxTpkVJHCQSvuLOLHzeK/NivwZCK5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d2:94:c9:1d:e3:86:57:0b:fa:f4:68:82:0f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=70d3ca0a94f78b9c63a1c9ee9d8c5329e1315b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:8c:88:eb:29:f9:46:e0:df:6a:4d:8a:d4: 6d:9c:3e:3a:06:78:19:7f:10:38:05:83:8b:12:2a: 55:51:e3:a0:4d:89:37:74:91:1a:4f:be:73:88:52: fa:3d:28:e3:54:07:be:e8:ab:32:8c:79:02:2b:31: 47:42:ad:98:29:07:e2:14:d6:55:de:f8:c6:9e:e8: 10:4f:c7:86:49:27:ae:7c:f9:63:91:23:ae:20:75: da:48:d7:2b:9d:e2:ce:08:c1:54:34:62:23:b1:02: 05:c8:de:f5:7e:99:ee:67:c4:6a:b3:7b:48:71:ff: 1b:54:9a:c9:68:d5:96:70:7c:20:91:7a:c3:c8:30: 4c:f5:b4:a6:77:df:f8:29:a2:04:15:7c:ef:03:cd: bb:f7:97:c6:1b:0a:4e:99:38:9a:bd:b2:3a:78:6d: 0f:dd:10:c9:cc:9f:52:07:c1:12:64:79:4d:69:d4: c2:38:13:ab:0b:d5:b3:8a:34:fe:b1:c8:69:3a:28: 21:df:60:82:74:c4:7b:86:54:9e:84:5e:c3:82:7b: 7b:e4:ca:87:aa:5a:7f:b2:17:bd:78:6f:f9:02:b9: a7:10:4a:00:0b:96:10:fa:68:80:01:64:06:3e:69: 79:73:82:25:d1:e7:df:37:6a:0b:1f:43:18:6e:d0: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D3:CA:0A:94:F7:8B:9C:63:A1:C9:EE:9D:8C:53:29:E1:31:5B:9F X509v3 Authority Key Identifier: keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e6:78:4f:78:14:b2:75:74:9d:b9:f1:ac:a7:39:74:e6:de: 06:41:e4:4f:6c:67:1c:03:08:19:ca:6f:83:db:ce:71:fb:0e: 50:ca:4b:6d:83:57:f3:34:3a:c7:9f:26:32:7f:5c:b2:94:f9: 18:78:c9:2b:be:78:7a:d6:67:2b:01:ff:ed:71:5f:c3:e8:2c: 4e:39:33:9a:17:9d:b6:c8:92:f2:9e:b6:4f:b5:3b:c0:c9:61: 00:29:dc:1a:9a:cd:0b:70:cc:5e:a1:23:1e:36:3b:64:8f:85: 1f:e2:98:41:a9:1c:d0:a6:1f:ab:19:94:20:3b:da:ff:42:b5: 3e:39:eb:ff:19:3c:7c:54:e0:41:eb:06:66:fe:82:9c:fe:67: 92:69:1b:9a:c9:c9:d5:ef:07:02:f8:5d:22:22:2c:42:84:61: e7:47:a3:eb:9f:1f:ef:8c:b2:3c:f7:04:26:6c:ac:2f:b4:15: 5b:34:bf:d2:75:e4:fd:af:d4:07:f9:46:7c:7d:79:38:09:1c: 67:66:28:a0:13:7e:b6:3b:0e:b0:d5:5a:a6:98:e5:4c:94:b8: 95:d9:01:da:8b:b6:c6:fd:8d:c0:25:10:4c:86:48:50:31:69: 4f:07:e5:2e:b0:35:0f:74:b3:96:f5:b3:25:54:f1:20:be:3e: 93:46:2b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNKUyR3jhlcL+vRogg/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy MWJmZWQwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD Eyg3MGQzY2EwYTk0Zjc4YjljNjNhMWM5ZWU5ZDhjNTMyOWUxMzE1YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHqMiOsp+Ubg32pNitRtnD46BngZ fxA4BYOLEipVUeOgTYk3dJEaT75ziFL6PSjjVAe+6KsyjHkCKzFHQq2YKQfiFNZV 3vjGnugQT8eGSSeufPljkSOuIHXaSNcrneLOCMFUNGIjsQIFyN71fpnuZ8Rqs3tI cf8bVJrJaNWWcHwgkXrDyDBM9bSmd9/4KaIEFXzvA82795fGGwpOmTiavbI6eG0P 3RDJzJ9SB8ESZHlNadTCOBOrC9WzijT+schpOigh32CCdMR7hlSehF7Dgnt75MqH qlp/she9eG/5ArmnEEoAC5YQ+miAAWQGPml5c4Il0effN2oLH0MYbtDCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDTygqU94ucY6HJ7p2MUynhMVufMB8GA1UdIwQY MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuZ4T3gU snV0nbnxrKc5dObeBkHkT2xnHAMIGcpvg9vOcfsOUMpLbYNX8zQ6x58mMn9cspT5 GHjJK754etZnKwH/7XFfw+gsTjkzmhedtsiS8p62T7U7wMlhACncGprNC3DMXqEj HjY7ZI+FH+KYQakc0KYfqxmUIDva/0K1Pjnr/xk8fFTgQesGZv6CnP5nkmkbmsnJ 1e8HAvhdIiIsQoRh50ej658f74yyPPcEJmysL7QVWzS/0nXk/a/UB/lGfH15OAkc Z2YooBN+tjsOsNVappjlTJS4ldkB2ou2xv2NwCUQTIZIUDFpTwflLrA1D3SzlvWz JVTxIL4+k0Yrxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:37 2025 by rpki-client