This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json) Hash identifier: N8JkqxVHIhbRZxJ4+7roLwQax/gYOxsJ5J+bJEavds8= Subject key identifier: BE:94:37:4C:23:EB:2A:39:BF:92:FB:09:8E:7C:0B:9B:BC:8D:69:D1 Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 019B49CB8313F32E8F339A3F35875D59889D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft Manifest number: 1634 Signing time: Tue 23 Dec 2025 06:00:32 +0000 Manifest this update: Tue 23 Dec 2025 06:00:32 +0000 Manifest next update: Wed 24 Dec 2025 06:00:32 +0000 Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: Tef32mNUKPddYiBeWSLbW7pZ4XUlrAkjAxQ9VZK/Xms=) 2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=) 3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:cb:83:13:f3:2e:8f:33:9a:3f:35:87:5d:59:88:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Dec 23 06:00:32 2025 GMT Not After : Dec 24 06:00:32 2025 GMT Subject: CN=be94374c23eb2a39bf92fb098e7c0b9bbc8d69d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:d3:36:14:18:a3:c2:52:a2:95:44:8e:7c: a9:5c:37:f2:57:c1:a7:e7:f1:bd:7f:0a:aa:2f:30: 9c:9c:aa:ef:26:8f:ab:f5:03:f7:b4:48:90:89:a2: 4a:38:20:a0:c5:b8:ce:06:ee:80:d2:78:6d:0a:f9: 40:4a:1f:95:d3:bc:9b:e8:77:2d:58:26:60:ad:23: 3e:a0:49:fd:e3:7a:c6:a9:21:31:87:b6:c2:bd:07: 8d:4d:0e:d2:cf:30:cd:fc:9c:3d:f7:8a:8e:b8:2c: b5:b7:86:0a:8a:0b:e8:7d:28:47:79:2f:db:52:c9: 10:31:ec:6f:93:94:85:22:e4:ea:b4:1d:c5:12:32: 6a:89:bb:05:4f:67:9d:0f:ac:91:29:42:1c:16:f5: 93:20:5d:07:41:e3:83:0e:58:fd:06:57:e7:86:20: 7e:fa:86:98:6e:73:86:32:7e:ad:ee:e3:d0:c8:a2: cb:b7:8d:da:d1:68:93:55:15:ec:03:03:be:99:ed: 0a:38:98:1c:87:91:45:02:75:95:4f:4c:44:83:c8: 1d:4f:b6:ef:b4:c9:b0:3b:1f:dc:4a:ac:a2:5e:9c: 94:1e:6d:7b:2b:2a:84:b5:fa:a1:94:cc:22:11:e1: b3:2b:d4:22:20:10:f9:90:4e:4e:9f:62:da:1b:f2: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:94:37:4C:23:EB:2A:39:BF:92:FB:09:8E:7C:0B:9B:BC:8D:69:D1 X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1d:1e:be:74:1d:48:22:19:3c:f3:76:d0:68:a5:83:f1:4a: 65:c4:28:8f:a7:2a:9e:fe:7a:d5:58:ec:14:97:36:46:41:11: 76:60:43:a9:19:15:2b:6a:49:f6:a1:1e:ff:ac:c4:12:eb:6d: 2d:9d:5d:25:36:51:44:e0:1a:6f:da:1a:ee:68:04:ec:d9:53: fb:d2:d7:94:05:cc:19:0d:3d:88:7c:5e:89:ea:2a:56:6e:76: 69:bc:23:35:ee:97:27:06:45:e2:bc:9f:75:be:5e:f8:d7:9c: a0:e9:3a:02:77:28:ad:6f:92:c3:27:ac:f2:e4:67:56:2b:ab: af:6a:9e:fd:45:1c:28:12:86:bc:3c:1e:0d:7a:64:26:a8:9b: 7d:20:65:00:c9:57:b7:ef:a0:76:1c:0c:64:92:fd:b7:11:06: 85:3a:4f:df:1f:56:0e:db:c9:30:1d:e5:8b:90:5b:b4:30:a2: 5d:c7:c0:2a:dc:44:e0:12:d3:79:c9:65:bf:ef:9d:14:d8:a7: 74:91:f6:81:25:1b:f1:ff:eb:2b:ef:fb:f4:8b:d3:07:f2:1a: f5:cf:a6:49:7b:37:3d:0b:6b:99:61:be:1e:50:1f:89:66:84: 94:2d:be:77:d9:1d:c2:2f:25:02:a1:d0:26:a5:15:71:ce:06: 8c:7b:88:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJy4MT8y6PM5o/NYddWYidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjUxMjIzMDYwMDMyWhcNMjUxMjI0MDYwMDMyWjAzMTEwLwYDVQQD EyhiZTk0Mzc0YzIzZWIyYTM5YmY5MmZiMDk4ZTdjMGI5YmJjOGQ2OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXfTNhQYo8JSopVEjnypXDfyV8Gn 5/G9fwqqLzCcnKrvJo+r9QP3tEiQiaJKOCCgxbjOBu6A0nhtCvlASh+V07yb6Hct WCZgrSM+oEn943rGqSExh7bCvQeNTQ7SzzDN/Jw994qOuCy1t4YKigvofShHeS/b UskQMexvk5SFIuTqtB3FEjJqibsFT2edD6yRKUIcFvWTIF0HQeODDlj9BlfnhiB+ +oaYbnOGMn6t7uPQyKLLt43a0WiTVRXsAwO+me0KOJgch5FFAnWVT0xEg8gdT7bv tMmwOx/cSqyiXpyUHm17KyqEtfqhlMwiEeGzK9QiIBD5kE5On2LaG/IxCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6UN0wj6yo5v5L7CY58C5u8jWnRMB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPh0evnQd SCIZPPN20Gilg/FKZcQoj6cqnv561VjsFJc2RkERdmBDqRkVK2pJ9qEe/6zEEutt LZ1dJTZRROAab9oa7mgE7NlT+9LXlAXMGQ09iHxeieoqVm52abwjNe6XJwZF4ryf db5e+NecoOk6AncorW+Swyes8uRnViurr2qe/UUcKBKGvDweDXpkJqibfSBlAMlX t++gdhwMZJL9txEGhTpP3x9WDtvJMB3li5BbtDCiXcfAKtxE4BLTecllv++dFNin dJH2gSUb8f/rK+/79IvTB/Ia9c+mSXs3PQtrmWG+HlAfiWaElC2+d9kdwi8lAqHQ JqUVcc4GjHuIjA== -----END CERTIFICATE-----Generated at Tue Dec 23 14:53:43 2025 by rpki-client