This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json) Hash identifier: 1Q6MWfsqla1TOsk6uMsWNnDMtn2X4UrBctnfBxf/i2I= Subject key identifier: 8D:AE:E2:26:09:85:52:89:99:63:05:EB:A8:A0:0A:0E:A3:AC:33:8C Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019AF12E39749CB19C748298AD319EE1D41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=) 2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=) 3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: e6FCITCVl2fxCtO/kdw51otahva8Ay55DdmirzrMMm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:39:74:9c:b1:9c:74:82:98:ad:31:9e:e1:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=8daee22609855289996305eba8a00a0ea3ac338c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:d2:1c:c8:d1:9f:3c:da:8c:d7:94:37:03: c7:26:43:6e:69:96:32:28:bf:0f:a2:a7:6c:46:45: b0:4f:a4:bf:d8:20:e6:d1:28:e9:b0:46:c0:32:ae: dd:95:54:a4:4c:4f:ec:93:21:68:ce:4d:21:38:6c: 82:b6:59:dd:51:1c:90:d7:20:75:11:f9:ac:04:ca: 6a:bc:52:c4:65:f3:02:03:fb:a3:c2:25:4e:62:38: 43:54:30:95:d1:16:67:87:4d:64:c6:70:8e:72:20: 06:fd:8c:36:d2:00:ba:68:9d:ab:4a:4e:31:bc:23: c6:be:fe:7b:2d:b7:8a:c3:35:ea:77:24:79:49:1b: bc:20:94:40:9a:cd:c8:d7:70:cc:cd:e3:c7:9f:05: cd:77:a6:07:4a:f1:c4:2a:55:1c:72:ff:b5:9d:ee: 74:18:7f:6e:59:6d:64:38:3d:36:58:36:4c:41:ed: ee:9d:b3:f2:05:33:6f:16:88:1b:eb:b6:f8:d6:50: 10:d9:fc:c7:06:90:bf:2b:a6:08:68:ed:9d:6a:fb: da:1b:e6:5e:93:53:fb:df:85:ae:ae:27:a4:6e:fe: 9a:ce:de:8f:89:4e:5f:66:ae:30:5f:ae:3c:52:d1: 3c:cd:14:82:b9:67:61:fa:37:74:ef:ed:23:d6:b4: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:E2:26:09:85:52:89:99:63:05:EB:A8:A0:0A:0E:A3:AC:33:8C X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7b:fc:37:29:19:af:97:8c:2c:0d:6e:36:78:0b:bf:0e:c8: 9a:95:2e:42:ed:8b:8c:85:02:e1:10:1b:4e:62:0a:8e:02:7e: 1e:a1:6a:17:cc:9b:e2:2c:29:15:15:22:04:a8:7b:25:ba:24: f4:1c:f8:e9:a0:cc:95:ff:c3:af:fa:81:bb:4e:b1:16:66:0d: 1c:30:e3:0e:8e:22:7e:ee:5e:91:e8:b0:e4:70:52:ab:c5:c8: 4e:47:7b:9e:5a:6d:11:fb:a6:a8:4b:98:6e:5b:c3:fa:80:1a: c2:99:d7:92:78:18:28:c4:fa:2a:de:08:ac:87:7c:a0:4c:d7: 88:88:e7:cb:12:11:6f:e4:c4:a4:9a:25:03:e2:b9:4c:da:83: 68:a3:50:06:40:d6:98:30:99:e2:cb:c3:41:e9:44:d5:5e:82: 91:e1:a3:92:d0:a5:8b:4a:96:d6:17:89:e7:23:54:7e:f5:01: 32:20:a0:40:8f:49:76:88:62:03:9b:b0:fb:07:63:32:cc:2d: dc:f6:48:8b:98:43:55:03:f6:8d:06:4b:d4:3f:b8:03:e4:20: 48:68:1f:3e:e1:68:1a:a9:69:ba:42:cb:f2:09:e8:8a:2e:56: fa:b6:61:6c:ea:c4:b1:f2:d6:d9:06:d3:31:b2:a0:22:60:29: e4:75:29:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjl0nLGcdIKYrTGe4dQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD Eyg4ZGFlZTIyNjA5ODU1Mjg5OTk2MzA1ZWJhOGEwMGEwZWEzYWMzMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRDSHMjRnzzajNeUNwPHJkNuaZYy KL8PoqdsRkWwT6S/2CDm0SjpsEbAMq7dlVSkTE/skyFozk0hOGyCtlndURyQ1yB1 EfmsBMpqvFLEZfMCA/ujwiVOYjhDVDCV0RZnh01kxnCOciAG/Yw20gC6aJ2rSk4x vCPGvv57LbeKwzXqdyR5SRu8IJRAms3I13DMzePHnwXNd6YHSvHEKlUccv+1ne50 GH9uWW1kOD02WDZMQe3unbPyBTNvFogb67b41lAQ2fzHBpC/K6YIaO2davvaG+Ze k1P734Wuriekbv6azt6PiU5fZq4wX648UtE8zRSCuWdh+jd07+0j1rS3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2u4iYJhVKJmWMF66igCg6jrDOMMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnv8NykZ r5eMLA1uNngLvw7ImpUuQu2LjIUC4RAbTmIKjgJ+HqFqF8yb4iwpFRUiBKh7Jbok 9Bz46aDMlf/Dr/qBu06xFmYNHDDjDo4ifu5ekeiw5HBSq8XITkd7nlptEfumqEuY blvD+oAawpnXkngYKMT6Kt4IrId8oEzXiIjnyxIRb+TEpJolA+K5TNqDaKNQBkDW mDCZ4svDQelE1V6CkeGjktCli0qW1heJ5yNUfvUBMiCgQI9JdohiA5uw+wdjMswt 3PZIi5hDVQP2jQZL1D+4A+QgSGgfPuFoGqlpukLL8gnoii5W+rZhbOrEsfLW2QbT MbKgImAp5HUpow== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:35 2025 by rpki-client