This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json) Hash identifier: iIr6rs/IUUMFB8vp+hpoSFdg5wTzjPBjs1w1iVPcbvI= Subject key identifier: 11:6B:DC:24:D6:08:8E:2B:50:75:85:C1:39:07:39:AE:86:B6:FB:09 Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019B2EF92311B4805454D937EE501EACDB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:00:37 +0000 Manifest this update: Thu 18 Dec 2025 01:00:37 +0000 Manifest next update: Fri 19 Dec 2025 01:00:37 +0000 Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=) 2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=) 3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: 9ae1DI9UK078tMTMw9AZXUy09/IBQYsRlVERFlr/84E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:23:11:b4:80:54:54:d9:37:ee:50:1e:ac:db:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Dec 18 01:00:37 2025 GMT Not After : Dec 19 01:00:37 2025 GMT Subject: CN=116bdc24d6088e2b507585c1390739ae86b6fb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:0b:3b:87:09:bf:21:3f:9a:f5:38:16:16: 92:ed:06:02:8f:c6:a2:62:93:2c:ad:36:75:78:3e: ec:59:9d:27:f4:17:63:31:7d:87:84:1b:67:5c:40: a8:95:b6:d5:83:eb:50:71:b4:5e:f0:54:c7:ef:68: 80:19:4e:b9:21:ba:fd:30:a1:c1:be:a8:75:db:bb: 8a:fe:0d:96:ee:ae:40:af:48:5e:50:d0:7a:90:e8: a3:34:24:06:f7:3b:a5:af:e6:6c:85:85:50:13:23: 1b:f8:87:5f:5d:4f:41:e1:de:ee:16:f2:9d:f7:c2: ef:91:e1:4c:af:6b:b7:1c:9c:dc:20:f2:b5:52:55: 54:90:97:82:db:23:d8:b0:92:c7:12:e8:b6:71:3b: 92:53:50:a5:ae:1d:62:1c:ba:b9:74:14:98:f3:3a: 7b:b6:fd:42:44:0c:5c:4c:d1:67:32:2a:b6:09:11: 93:41:35:bf:1c:48:66:3f:d6:95:ee:e4:72:c1:64: f7:0a:6d:6d:79:3c:5b:ea:6c:62:e9:a4:20:e8:50: 06:45:0d:02:9d:00:40:c8:6b:4f:8f:1a:84:c5:db: 37:b8:71:b4:1c:26:02:bb:b5:90:f6:d8:77:2a:40: 0c:c8:df:a7:38:67:8b:1c:49:00:6d:ff:9f:d3:c6: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:DC:24:D6:08:8E:2B:50:75:85:C1:39:07:39:AE:86:B6:FB:09 X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d5:b9:6c:22:70:df:43:70:c0:96:91:e7:b1:43:8f:e0:9a: c3:96:85:48:fd:fe:50:81:0a:30:70:49:05:a9:42:b2:03:35: db:cc:04:3f:f0:3a:c1:04:81:9f:7b:4a:41:10:ce:92:a8:56: 93:1b:77:f4:3f:8c:03:85:60:4b:64:51:76:ba:ca:72:6c:80: f7:d7:5f:35:25:f2:e5:e8:94:a3:f5:29:7d:e9:9b:95:59:64: 8a:0d:92:96:d3:80:da:0c:ba:9f:d6:cf:2c:71:ba:9a:1b:d9: 4c:8c:a2:e2:fa:f0:38:21:6c:55:0d:e4:bc:34:37:cc:7b:5f: 31:d4:e7:5c:89:fc:e7:38:6a:bb:6b:0c:73:cd:11:ae:1a:87: ec:80:58:fc:8e:25:35:16:ed:2f:dc:28:46:8e:77:95:3c:b7: 6f:e2:83:95:0f:6c:64:55:9c:b1:67:5a:41:fe:f7:f2:18:bd: 3e:a4:ce:8f:3c:d9:ec:1c:8e:6f:09:6b:b7:df:1e:41:c4:59: 05:ec:d0:01:59:54:8e:7c:2f:34:1c:6f:eb:99:73:d1:d9:ce: b3:ec:ed:d6:09:eb:4e:42:38:ac:bb:7b:fb:f4:e0:83:e0:26: 98:34:18:6c:21:49:9d:8e:ac:81:42:e8:89:63:d1:7a:0b:24: 3a:3f:64:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+SMRtIBUVNk37lAerNt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjUxMjE4MDEwMDM3WhcNMjUxMjE5MDEwMDM3WjAzMTEwLwYDVQQD EygxMTZiZGMyNGQ2MDg4ZTJiNTA3NTg1YzEzOTA3MzlhZTg2YjZmYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmELO4cJvyE/mvU4FhaS7QYCj8ai YpMsrTZ1eD7sWZ0n9BdjMX2HhBtnXEColbbVg+tQcbRe8FTH72iAGU65Ibr9MKHB vqh127uK/g2W7q5Ar0heUNB6kOijNCQG9zulr+ZshYVQEyMb+IdfXU9B4d7uFvKd 98LvkeFMr2u3HJzcIPK1UlVUkJeC2yPYsJLHEui2cTuSU1Clrh1iHLq5dBSY8zp7 tv1CRAxcTNFnMiq2CRGTQTW/HEhmP9aV7uRywWT3Cm1teTxb6mxi6aQg6FAGRQ0C nQBAyGtPjxqExds3uHG0HCYCu7WQ9th3KkAMyN+nOGeLHEkAbf+f08aaXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFr3CTWCI4rUHWFwTkHOa6GtvsJMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdW5bCJw 30NwwJaR57FDj+Caw5aFSP3+UIEKMHBJBalCsgM128wEP/A6wQSBn3tKQRDOkqhW kxt39D+MA4VgS2RRdrrKcmyA99dfNSXy5eiUo/UpfemblVlkig2SltOA2gy6n9bP LHG6mhvZTIyi4vrwOCFsVQ3kvDQ3zHtfMdTnXIn85zhqu2sMc80RrhqH7IBY/I4l NRbtL9woRo53lTy3b+KDlQ9sZFWcsWdaQf738hi9PqTOjzzZ7ByObwlrt98eQcRZ BezQAVlUjnwvNBxv65lz0dnOs+zt1gnrTkI4rLt7+/Tgg+AmmDQYbCFJnY6sgULo iWPRegskOj9kYw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:52 2025 by rpki-client