This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json) Hash identifier: npua+8yfgEZuA7bO3J+ZN2X+Bwve4ABConkNNtd7mzU= Subject key identifier: E5:2C:DA:3D:AF:C8:1E:39:D9:C8:18:53:BE:E4:3A:0F:3A:1C:4B:81 Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019B3E6CF702440D985AE4DDE34B6B252E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:27 +0000 Manifest this update: Sun 21 Dec 2025 01:01:27 +0000 Manifest next update: Mon 22 Dec 2025 01:01:27 +0000 Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=) 2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=) 3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: W73JI7DxiUrck8rQ/GG5tNVVnzJu8Gdfo5PihoThUjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f7:02:44:0d:98:5a:e4:dd:e3:4b:6b:25:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Dec 21 01:01:27 2025 GMT Not After : Dec 22 01:01:27 2025 GMT Subject: CN=e52cda3dafc81e39d9c81853bee43a0f3a1c4b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:73:7f:8d:06:4f:11:05:50:f8:b1:5e:aa: ea:4a:11:1a:99:1e:ad:8f:45:a4:0d:b0:6b:1c:de: 2e:eb:a6:55:05:16:91:61:c7:6e:5a:6d:e1:87:57: 57:05:11:2b:43:6f:d5:43:fc:a1:c9:8a:59:7b:3a: 33:ec:eb:b6:c8:43:f7:5a:6f:29:2c:0c:cc:c0:7f: ed:6b:96:6e:51:5a:0e:08:43:36:8e:68:88:77:61: 04:14:3e:16:ac:8c:fd:e1:1b:3a:1c:c4:0f:e6:bc: 98:93:d4:92:12:96:cf:a8:19:3f:7e:1c:3c:9e:87: 22:a1:7d:0b:db:6f:f9:06:76:73:a6:04:d3:0b:c4: 11:7f:8e:ca:58:60:66:09:5e:62:00:40:39:8b:a9: 1c:3d:b5:4d:70:fa:3d:dc:06:3c:88:81:ba:1e:7f: 0c:6c:62:b5:c4:be:77:02:a6:51:6a:10:b5:5d:22: c4:74:7c:b5:bb:61:b4:86:12:02:6c:f6:46:8a:aa: 92:41:3e:6a:91:02:1c:06:7c:c4:a8:e3:ea:95:b6: 2b:0b:2f:10:28:aa:0e:28:df:d0:c0:b3:83:2f:7a: 65:15:3c:46:bf:e8:78:4e:79:cd:e8:06:16:cd:ed: 60:75:04:16:9b:cc:cf:7e:d3:24:da:19:61:95:79: 06:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:DA:3D:AF:C8:1E:39:D9:C8:18:53:BE:E4:3A:0F:3A:1C:4B:81 X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:b4:f6:c5:d1:53:7a:d6:10:41:80:cc:84:55:3a:d5:f3: 91:11:83:95:6c:f9:95:94:76:cf:d6:3f:e5:e6:b7:ce:ca:d2: f2:e8:d4:5f:4e:05:07:4d:27:1a:f8:aa:09:8c:62:c8:83:f4: d6:6a:56:2e:25:f2:88:91:f6:58:9c:a6:57:ef:a6:3d:11:21: 8e:ca:fb:fa:19:52:5b:29:f0:0e:e8:c4:04:b3:df:a5:75:8f: fa:00:fd:8f:61:b9:84:8f:cc:c1:42:0e:53:8a:cf:ba:0a:f6: 24:f3:61:44:ab:b9:c3:7e:ac:29:ef:f2:19:ed:9a:c0:e8:74: 1e:8f:d8:9d:b3:b1:34:f2:74:70:ce:c2:08:70:f0:a6:3b:63: a7:cd:b1:d7:78:7b:38:4b:58:80:a7:57:a1:60:41:f2:60:06: ed:a4:39:bb:32:bf:ff:3f:54:4d:7a:85:1b:58:aa:89:47:ac: 20:2a:f1:4e:dc:d7:a0:4b:f1:40:91:2e:b1:ea:f9:b2:65:f6: 0e:4e:ae:c2:e9:f1:11:37:2e:e6:3c:f1:2d:e4:f3:a8:4b:e0: cb:2b:98:07:2a:0c:39:08:4c:7f:5f:61:c7:7c:4f:1d:0d:69: ba:4b:fd:42:71:15:5e:9d:59:d4:a8:2d:13:f6:98:de:c9:d2: f3:37:15:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPcCRA2YWuTd40trJS4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjUxMjIxMDEwMTI3WhcNMjUxMjIyMDEwMTI3WjAzMTEwLwYDVQQD EyhlNTJjZGEzZGFmYzgxZTM5ZDljODE4NTNiZWU0M2EwZjNhMWM0YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Zzf40GTxEFUPixXqrqShEamR6t j0WkDbBrHN4u66ZVBRaRYcduWm3hh1dXBRErQ2/VQ/yhyYpZezoz7Ou2yEP3Wm8p LAzMwH/ta5ZuUVoOCEM2jmiId2EEFD4WrIz94Rs6HMQP5ryYk9SSEpbPqBk/fhw8 nocioX0L22/5BnZzpgTTC8QRf47KWGBmCV5iAEA5i6kcPbVNcPo93AY8iIG6Hn8M bGK1xL53AqZRahC1XSLEdHy1u2G0hhICbPZGiqqSQT5qkQIcBnzEqOPqlbYrCy8Q KKoOKN/QwLODL3plFTxGv+h4TnnN6AYWze1gdQQWm8zPftMk2hlhlXkGbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUs2j2vyB452cgYU77kOg86HEuBMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv209sXR U3rWEEGAzIRVOtXzkRGDlWz5lZR2z9Y/5ea3zsrS8ujUX04FB00nGviqCYxiyIP0 1mpWLiXyiJH2WJymV++mPREhjsr7+hlSWynwDujEBLPfpXWP+gD9j2G5hI/MwUIO U4rPugr2JPNhRKu5w36sKe/yGe2awOh0Ho/YnbOxNPJ0cM7CCHDwpjtjp82x13h7 OEtYgKdXoWBB8mAG7aQ5uzK//z9UTXqFG1iqiUesICrxTtzXoEvxQJEuser5smX2 Dk6uwunxETcu5jzxLeTzqEvgyyuYByoMOQhMf19hx3xPHQ1pukv9QnEVXp1Z1Kgt E/aY3snS8zcVPg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:34 2025 by rpki-client