This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json) Hash identifier: I3FInbz9L47wRRfOC9JVjadJt1epjVsXS4FsEZIF3/c= Subject key identifier: 49:7E:E2:9E:B1:1B:ED:19:1B:6D:BE:7A:73:6D:E9:15:42:CD:CD:B9 Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b Certificate serial: 019AF42E82E2724E11E16980295CA906618C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft Manifest number: 071E Signing time: Sat 06 Dec 2025 15:01:20 +0000 Manifest this update: Sat 06 Dec 2025 15:01:20 +0000 Manifest next update: Sun 07 Dec 2025 15:01:20 +0000 Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=) 2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: k+34vREy9SNM0WQHNH6cXAQOgtQGnvwMR/rpw82xNBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:82:e2:72:4e:11:e1:69:80:29:5c:a9:06:61:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b Validity Not Before: Dec 6 15:01:20 2025 GMT Not After : Dec 7 15:01:20 2025 GMT Subject: CN=497ee29eb11bed191b6dbe7a736de91542cdcdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:8c:58:dc:04:89:4b:e3:e7:6d:89:25:b6: 09:d1:89:f5:ba:67:8b:4e:f7:9c:48:37:9b:35:61: cf:e1:46:e6:b7:69:83:05:be:d4:12:c1:a3:ea:08: c8:ef:38:84:d7:dd:a2:8b:40:bd:33:6b:4e:f6:2c: c3:e6:e1:93:17:f8:ee:b3:ba:b9:4b:85:50:43:55: b4:29:40:c6:fa:de:83:7d:74:09:69:42:33:44:e5: 2a:b6:62:fc:5c:4b:44:15:c0:d8:bd:2d:88:b8:09: 50:95:71:44:76:16:41:5b:f5:b4:26:b9:dc:ba:04: 20:be:b9:b1:c8:51:67:99:9b:9f:29:52:5d:b5:d5: cd:97:72:65:0e:74:51:ad:11:eb:a1:e8:0c:db:d5: a1:c6:ac:d6:6f:34:5a:af:2b:09:fb:81:90:38:f8: 75:eb:29:8c:06:58:da:e7:7f:26:ec:9d:de:d2:6a: 9e:81:48:0e:3a:cc:72:ce:53:35:c6:98:e8:df:6d: 4f:e6:97:40:05:b0:6a:f9:06:70:3a:13:f0:c5:68: 24:43:bc:1a:46:8a:58:2a:1a:90:cb:2b:90:b8:79: 89:35:5e:19:5a:ec:71:24:b9:56:12:7e:f9:3f:c6: 28:62:31:17:d0:5f:c1:da:cb:43:a8:3f:ef:0f:ef: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7E:E2:9E:B1:1B:ED:19:1B:6D:BE:7A:73:6D:E9:15:42:CD:CD:B9 X509v3 Authority Key Identifier: keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:af:d7:de:9c:1e:88:0a:92:87:90:8b:26:fa:a2:32:e6: f0:32:e6:5f:38:41:c9:ea:c1:25:33:c7:ff:20:5c:6f:83:eb: 10:81:d1:63:f3:25:c5:05:0e:a8:a4:ac:30:b9:a3:01:d1:60: c6:f8:35:fc:8b:62:1a:5c:14:68:ea:2c:1a:1b:45:6f:0d:1f: 2f:2a:d7:dc:5d:40:c7:b0:3a:fe:4a:17:8e:02:d0:c6:b5:f7: 8a:ad:0e:fc:1e:fd:d0:44:36:00:c9:7f:59:b2:2e:00:f7:56: c4:aa:19:d6:8c:1d:d2:bd:eb:cb:6b:62:06:f7:d5:b8:f3:a5: e1:cd:8b:db:4b:96:b7:ad:6f:57:fb:6f:fb:fd:38:3c:33:a9: 97:ca:a3:11:25:d9:4a:f7:73:50:b0:1f:97:c1:3a:05:3d:da: c3:56:06:63:b6:e3:fe:56:f0:3b:aa:1b:5a:79:fd:86:39:a6: 8a:86:fd:af:5b:75:77:d1:ac:cc:09:4c:52:44:97:4d:d4:89: 14:c5:6f:5c:08:a0:2b:07:e8:4c:02:7b:84:16:38:af:76:d8: be:cd:19:f4:25:47:a3:c0:8b:6c:3b:da:2e:9b:b1:66:36:aa: 9d:1e:bb:72:71:7d:f7:88:85:77:34:f6:45:b1:6e:59:29:72: ab:d5:a5:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoLick4R4WmAKVypBmGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh YmVhNWIwHhcNMjUxMjA2MTUwMTIwWhcNMjUxMjA3MTUwMTIwWjAzMTEwLwYDVQQD Eyg0OTdlZTI5ZWIxMWJlZDE5MWI2ZGJlN2E3MzZkZTkxNTQyY2RjZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvWMWNwEiUvj522JJbYJ0Yn1umeL TvecSDebNWHP4Ubmt2mDBb7UEsGj6gjI7ziE192ii0C9M2tO9izD5uGTF/jus7q5 S4VQQ1W0KUDG+t6DfXQJaUIzROUqtmL8XEtEFcDYvS2IuAlQlXFEdhZBW/W0Jrnc ugQgvrmxyFFnmZufKVJdtdXNl3JlDnRRrRHroegM29WhxqzWbzRarysJ+4GQOPh1 6ymMBlja538m7J3e0mqegUgOOsxyzlM1xpjo321P5pdABbBq+QZwOhPwxWgkQ7wa RopYKhqQyyuQuHmJNV4ZWuxxJLlWEn75P8YoYjEX0F/B2stDqD/vD+8e6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl+4p6xG+0ZG22+enNt6RVCzc25MB8GA1UdIwQY MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt Y2EzYjFjYWM2OWM3LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3 LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHyv196c HogKkoeQiyb6ojLm8DLmXzhByerBJTPH/yBcb4PrEIHRY/MlxQUOqKSsMLmjAdFg xvg1/ItiGlwUaOosGhtFbw0fLyrX3F1Ax7A6/koXjgLQxrX3iq0O/B790EQ2AMl/ WbIuAPdWxKoZ1owd0r3ry2tiBvfVuPOl4c2L20uWt61vV/tv+/04PDOpl8qjESXZ SvdzULAfl8E6BT3aw1YGY7bj/lbwO6obWnn9hjmmiob9r1t1d9GszAlMUkSXTdSJ FMVvXAigKwfoTAJ7hBY4r3bYvs0Z9CVHo8CLbDvaLpuxZjaqnR67cnF994iFdzT2 RbFuWSlyq9WlAA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:28 2025 by rpki-client