This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft File: kfikmw1lM9BnmVaH-u49tzqqCLE.mft (raw, json) Hash identifier: jXBBxDW9fMqo7eKR0Y7ydzs+2hQVLA+Sb4IWRRShfe4= Subject key identifier: 75:BB:67:9F:1A:39:24:59:87:0D:3C:20:76:CD:2D:80:58:F8:CA:3B Authority key identifier: 91:F8:A4:9B:0D:65:33:D0:67:99:56:87:FA:EE:3D:B7:3A:AA:08:B1 Certificate issuer: /CN=91f8a49b0d6533d067995687faee3db73aaa08b1 Certificate serial: 019AF50A726A8E07501BB7489487726524C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft Manifest number: 0675 Signing time: Sat 06 Dec 2025 19:01:33 +0000 Manifest this update: Sat 06 Dec 2025 19:01:33 +0000 Manifest next update: Sun 07 Dec 2025 19:01:33 +0000 Files and hashes: 1: kfikmw1lM9BnmVaH-u49tzqqCLE.crl (hash: 2otmFr8A7WHhi8vzG9t9IogsYH3vjLx3E6UKpP8QUVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:72:6a:8e:07:50:1b:b7:48:94:87:72:65:24:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f8a49b0d6533d067995687faee3db73aaa08b1 Validity Not Before: Dec 6 19:01:33 2025 GMT Not After : Dec 7 19:01:33 2025 GMT Subject: CN=75bb679f1a392459870d3c2076cd2d8058f8ca3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:39:8c:0a:bd:e4:0e:21:e1:b8:ad:4c:0e: ae:62:1d:1b:5f:28:ad:47:18:3c:36:2f:e0:8e:7b: b0:0e:f8:44:84:3a:74:cf:ee:68:ca:8f:d6:2e:66: ef:b8:c5:a8:66:e8:7d:22:50:a8:83:14:b3:0f:c9: 79:05:1e:75:70:cb:f3:2b:19:5e:bc:40:a7:a4:56: d8:df:d1:2d:ab:e3:7a:1d:d9:6b:52:9e:92:33:29: 57:f6:8f:b0:30:7f:be:36:ad:9b:b4:59:62:81:65: 2f:da:ff:14:f7:fc:2a:c9:dc:0c:b7:58:09:d0:52: b5:52:3b:a0:df:18:a8:bb:f4:ce:89:13:04:bd:d6: 88:24:b1:61:ea:a2:19:e9:77:34:49:d8:14:8e:3b: 84:58:69:d1:3a:53:9e:dd:19:d8:f1:ff:10:45:ae: 00:d0:34:6a:b3:3c:e9:4d:89:4b:4a:11:17:3a:5d: e6:20:ae:04:bd:34:82:ae:15:5c:8c:64:fe:2d:3f: ec:e7:69:24:30:63:96:8c:83:aa:bc:94:2e:ef:db: 56:14:b9:02:85:cf:15:2c:13:76:b9:94:51:91:98: 05:3b:c5:62:47:ee:8a:41:fb:ed:8e:05:a2:35:2c: b0:12:16:d6:7e:0c:08:15:36:24:f8:cc:cf:63:64: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:67:9F:1A:39:24:59:87:0D:3C:20:76:CD:2D:80:58:F8:CA:3B X509v3 Authority Key Identifier: keyid:91:F8:A4:9B:0D:65:33:D0:67:99:56:87:FA:EE:3D:B7:3A:AA:08:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:70:88:34:1e:ab:5d:76:39:5e:af:a5:a9:b0:3f:4c:92: e3:fd:25:65:e7:ea:8c:ca:cc:4d:5c:91:f9:90:d4:a3:93:48: 1c:74:89:32:4d:e3:a6:e4:52:73:59:a0:19:73:ac:e8:fc:b6: 55:00:07:5d:ca:7e:85:da:e8:8b:ab:22:ef:b6:07:dc:6d:9c: b4:af:a5:0e:ab:e7:22:4d:7d:93:e6:49:0f:41:6f:86:ab:ff: 34:6a:31:21:da:f8:09:65:05:d4:14:31:95:40:3e:79:7e:b3: 3a:2c:61:4b:dd:04:00:fc:47:ff:72:e4:a3:b4:5f:97:20:1d: 4f:70:9e:6a:a3:26:55:a3:0c:6f:dc:38:90:fd:fa:1a:b2:a8: 37:e1:ae:0c:47:64:95:f8:8a:f9:1e:39:1e:55:41:3d:bd:70: 67:bb:a5:80:ce:53:17:ae:4c:db:91:e0:7f:58:84:22:c8:ce: 05:66:16:6b:1d:49:c3:65:b6:39:be:c7:d7:f6:fe:2c:b3:03: ad:4f:cf:6d:3d:0d:57:62:bd:95:9e:3e:db:c4:32:be:88:48: 9c:e5:86:75:ae:fa:32:bc:ae:51:76:63:a6:d2:0f:d6:8f:f3: b1:86:e3:bb:ec:b6:9d:aa:a2:68:b5:e8:0a:ad:8d:8b:b5:a6: 66:84:be:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnJqjgdQG7dIlIdyZSTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjhhNDliMGQ2NTMzZDA2Nzk5NTY4N2ZhZWUzZGI3M2Fh YTA4YjEwHhcNMjUxMjA2MTkwMTMzWhcNMjUxMjA3MTkwMTMzWjAzMTEwLwYDVQQD Eyg3NWJiNjc5ZjFhMzkyNDU5ODcwZDNjMjA3NmNkMmQ4MDU4ZjhjYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1c5jAq95A4h4bitTA6uYh0bXyit Rxg8Ni/gjnuwDvhEhDp0z+5oyo/WLmbvuMWoZuh9IlCogxSzD8l5BR51cMvzKxle vECnpFbY39Etq+N6HdlrUp6SMylX9o+wMH++Nq2btFligWUv2v8U9/wqydwMt1gJ 0FK1Ujug3xiou/TOiRMEvdaIJLFh6qIZ6Xc0SdgUjjuEWGnROlOe3RnY8f8QRa4A 0DRqszzpTYlLShEXOl3mIK4EvTSCrhVcjGT+LT/s52kkMGOWjIOqvJQu79tWFLkC hc8VLBN2uZRRkZgFO8ViR+6KQfvtjgWiNSywEhbWfgwIFTYk+MzPY2RGdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW7Z58aOSRZhw08IHbNLYBY+Mo7MB8GA1UdIwQY MBaAFJH4pJsNZTPQZ5lWh/ruPbc6qgixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2Zpa213MWxNOUJubVZhSC11NDl0enFxQ0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zODlmYmYtZGZiNS00YTBiLWI4NDYt NDMyODQyOWJkMzc0LzEva2Zpa213MWxNOUJubVZhSC11NDl0enFxQ0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zODlmYmYtZGZiNS00YTBiLWI4NDYtNDMyODQyOWJkMzc0 LzEva2Zpa213MWxNOUJubVZhSC11NDl0enFxQ0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2VwiDQe q112OV6vpamwP0yS4/0lZefqjMrMTVyR+ZDUo5NIHHSJMk3jpuRSc1mgGXOs6Py2 VQAHXcp+hdroi6si77YH3G2ctK+lDqvnIk19k+ZJD0Fvhqv/NGoxIdr4CWUF1BQx lUA+eX6zOixhS90EAPxH/3Lko7RflyAdT3CeaqMmVaMMb9w4kP36GrKoN+GuDEdk lfiK+R45HlVBPb1wZ7ulgM5TF65M25Hgf1iEIsjOBWYWax1Jw2W2Ob7H1/b+LLMD rU/PbT0NV2K9lZ4+28QyvohInOWGda76MryuUXZjptIP1o/zsYbju+y2naqiaLXo Cq2Ni7WmZoS+Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:36 2025 by rpki-client