This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json) Hash identifier: WQvaCvxK8lax6Gy3tDdvsaW4sDnZzPIe1O75OCwwxgc= Subject key identifier: 1F:E0:E1:06:D4:42:D9:98:BE:06:D7:F6:C3:46:7D:F4:53:2E:52:46 Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Certificate serial: 019AF0BF056BFC1BEBC2676B299C48B83CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft Manifest number: 0BF5 Signing time: Fri 05 Dec 2025 23:00:41 +0000 Manifest this update: Fri 05 Dec 2025 23:00:41 +0000 Manifest next update: Sat 06 Dec 2025 23:00:41 +0000 Files and hashes: 1: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: vwNMMUwdg7Je0Xq6RoyMcaRBZsbSSzuQJOt15K3dwhM=) 2: ujshoVbtlbnSXRjfddrO_lj_i6Y.roa (hash: TIADVGye8UfQII8nMINRYu1sRAiyXpRTwVUYNwZle+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:05:6b:fc:1b:eb:c2:67:6b:29:9c:48:b8:3c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Validity Not Before: Dec 5 23:00:41 2025 GMT Not After : Dec 6 23:00:41 2025 GMT Subject: CN=1fe0e106d442d998be06d7f6c3467df4532e5246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2b:03:3b:62:2c:2e:ae:fd:1d:39:01:15:43: 9a:40:0e:96:92:93:44:68:5c:84:f8:d3:7a:3a:3a: 8d:a6:32:6e:fa:06:d3:f0:4f:16:a1:03:48:61:0a: f9:15:34:83:f4:7d:a3:39:8b:a5:81:61:d4:5b:a0: 2d:6d:c4:d1:23:cb:5e:bf:e6:d6:e4:94:b6:1f:dd: 5a:67:52:bd:f5:97:9c:53:8b:18:9d:5d:d8:3d:76: ef:2c:a8:07:ff:a6:aa:fa:59:42:00:f1:51:91:81: 18:ea:1a:69:aa:cc:bf:ce:60:a6:04:de:52:88:92: 58:98:d3:8f:ea:c9:d2:73:f0:9d:0d:b9:ae:90:0a: f4:e5:a4:46:e8:cd:7e:46:ea:ac:f3:d0:ba:89:65: af:66:4e:24:27:6f:79:18:ff:0b:c2:d6:58:77:8e: eb:2d:3d:6d:3f:84:67:c9:4f:68:ac:0a:4f:50:58: dc:54:ca:49:a9:f3:a1:c4:bb:e4:3e:f3:1d:de:26: 8b:72:85:40:dd:e2:d7:be:6f:e6:74:1f:f4:32:6b: ec:dc:04:ab:e4:fd:b1:b4:dc:3e:49:3a:61:c9:df: be:30:35:fb:43:a3:dd:81:1d:66:38:c0:79:d0:a8: e5:5a:99:7c:d6:27:b4:c3:16:37:0e:4a:51:c4:e5: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E0:E1:06:D4:42:D9:98:BE:06:D7:F6:C3:46:7D:F4:53:2E:52:46 X509v3 Authority Key Identifier: keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f7:c6:c8:61:d4:c2:28:91:94:b5:c0:96:8f:32:84:61:72: 41:9e:55:0b:ae:0c:87:37:6f:12:e4:cc:d9:5a:a3:86:90:f7: 9c:b1:62:47:c8:65:67:05:f0:ac:25:1a:61:6b:e9:ed:fb:6b: d0:05:ab:66:ed:e7:6b:84:a3:e4:8a:ff:dc:2e:e1:a4:52:d7: ec:dd:d9:97:cb:73:19:c4:f9:46:69:d7:88:49:f3:ea:24:77: 07:cc:f1:14:04:97:82:ef:38:8c:c7:15:8c:94:b0:d4:3a:14: 19:9f:b7:03:93:66:a0:9b:aa:66:53:56:51:9c:31:4f:a9:72: d5:b9:2f:82:64:5e:4a:97:48:f5:31:c3:00:b9:be:af:ea:9f: 6b:d1:ff:5a:9c:79:29:e4:5e:7c:97:f2:19:9d:e3:82:78:a7: d5:07:b1:b8:49:42:85:bb:61:07:3e:b9:06:b1:64:83:5e:bc: c4:73:67:8b:77:bd:7a:b7:49:c5:d4:a0:54:a5:b1:57:b4:cc: df:8a:77:44:23:88:56:e4:ea:c6:b8:db:10:34:4b:8a:c0:c6: bb:d2:25:c0:23:9c:24:11:62:f9:bf:04:8e:4d:49:6d:fe:23: fe:6e:3e:77:55:73:bc:61:5e:b3:39:99:66:a7:d1:87:ea:cc: cc:14:fd:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwVr/BvrwmdrKZxIuDyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTg4Y2E2NGM0NjcwYTZlYjU2YjQyYTUwYTEwNTg4YWQ5 NjQ3ZWUwHhcNMjUxMjA1MjMwMDQxWhcNMjUxMjA2MjMwMDQxWjAzMTEwLwYDVQQD EygxZmUwZTEwNmQ0NDJkOTk4YmUwNmQ3ZjZjMzQ2N2RmNDUzMmU1MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+isDO2IsLq79HTkBFUOaQA6WkpNE aFyE+NN6OjqNpjJu+gbT8E8WoQNIYQr5FTSD9H2jOYulgWHUW6AtbcTRI8tev+bW 5JS2H91aZ1K99ZecU4sYnV3YPXbvLKgH/6aq+llCAPFRkYEY6hppqsy/zmCmBN5S iJJYmNOP6snSc/CdDbmukAr05aRG6M1+Ruqs89C6iWWvZk4kJ295GP8LwtZYd47r LT1tP4RnyU9orApPUFjcVMpJqfOhxLvkPvMd3iaLcoVA3eLXvm/mdB/0Mmvs3ASr 5P2xtNw+STphyd++MDX7Q6PdgR1mOMB50KjlWpl81ie0wxY3DkpRxOUzvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/g4QbUQtmYvgbX9sNGffRTLlJGMB8GA1UdIwQY MBaAFJEYjKZMRnCm61a0KlChBYitlkfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt MTQ3MTc3YjgzN2RlLzEva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl LzEva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPfGyGHU wiiRlLXAlo8yhGFyQZ5VC64MhzdvEuTM2VqjhpD3nLFiR8hlZwXwrCUaYWvp7ftr 0AWrZu3na4Sj5Ir/3C7hpFLX7N3Zl8tzGcT5RmnXiEnz6iR3B8zxFASXgu84jMcV jJSw1DoUGZ+3A5NmoJuqZlNWUZwxT6ly1bkvgmReSpdI9THDALm+r+qfa9H/Wpx5 KeRefJfyGZ3jgnin1QexuElChbthBz65BrFkg168xHNni3e9erdJxdSgVKWxV7TM 34p3RCOIVuTqxrjbEDRLisDGu9IlwCOcJBFi+b8Ejk1Jbf4j/m4+d1VzvGFeszmZ ZqfRh+rMzBT9fg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:51 2025 by rpki-client