This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json) Hash identifier: HAth/2geZrlL8mLhXtzbBuPNW+E1MSoLoZYADjGy8Ek= Subject key identifier: 7A:05:02:90:18:A1:9B:51:15:FE:49:62:91:08:32:35:D7:F2:87:FF Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96 Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496 Certificate serial: 019B465D2DB1580768E5B5CC7F0AB4617D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft Manifest number: 0E86 Signing time: Mon 22 Dec 2025 14:01:10 +0000 Manifest this update: Mon 22 Dec 2025 14:01:10 +0000 Manifest next update: Tue 23 Dec 2025 14:01:10 +0000 Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: 4Z9ABZTz43gzYTzjaYIExzBBaax3C7TMkAgyQA5OU/M=) 2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:2d:b1:58:07:68:e5:b5:cc:7f:0a:b4:61:7d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496 Validity Not Before: Dec 22 14:01:10 2025 GMT Not After : Dec 23 14:01:10 2025 GMT Subject: CN=7a05029018a19b5115fe496291083235d7f287ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:c0:a4:c8:8b:33:1e:40:8e:82:dc:4f:5b: c7:c9:be:70:18:a7:a5:e0:22:6b:be:5d:24:d1:30: b9:e7:65:da:f6:1e:7e:35:80:92:a3:af:e3:0a:38: 48:63:81:da:3a:a4:f9:a6:12:a2:69:40:bf:f8:36: 32:72:1c:5a:31:fb:c4:a0:a8:e0:95:79:9f:fa:0c: d7:1e:cf:07:5c:d0:66:62:e7:4d:12:19:9a:3d:c2: d9:f5:10:c2:92:1a:ad:96:f9:de:d6:b4:ca:6a:fd: 71:7b:d5:0d:98:9c:a3:ac:30:ab:a8:a2:c3:f4:7f: 92:bf:83:d5:1a:b7:be:d8:23:cf:6c:2f:90:a3:dd: 5a:c7:dc:07:00:0b:fe:63:7a:20:2c:5a:40:b6:e1: 40:df:75:26:56:8e:3c:d2:fb:2f:11:29:9b:70:d1: a7:14:ca:9d:85:dc:5b:78:49:1e:ab:bf:8b:b9:58: b8:33:5a:cd:7f:fa:77:dd:9e:0f:8b:75:99:cb:27: 70:35:02:85:d6:9c:84:09:57:68:14:c6:10:d0:05: 3f:5e:47:45:d8:4f:60:78:0f:8a:ac:ea:62:8c:2d: eb:e4:e0:32:6f:be:b6:c7:bf:44:f7:b0:fd:58:6f: 8e:5b:68:7e:30:84:c9:0c:86:42:ff:5d:67:7d:79: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:05:02:90:18:A1:9B:51:15:FE:49:62:91:08:32:35:D7:F2:87:FF X509v3 Authority Key Identifier: keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:79:f1:ce:ef:03:58:ef:66:d5:cd:56:83:f7:16:95:f7:88: 64:77:78:e4:97:6d:86:7e:c8:44:f8:ae:ad:16:eb:e5:3f:ac: 3f:89:02:72:3a:c6:7a:21:4e:a2:6e:e2:c8:5b:93:5b:5e:8e: 0c:5e:d6:a7:09:38:74:b6:8c:5f:f2:34:7a:53:c5:cb:0c:f9: ad:e9:e0:9a:d1:bf:05:39:93:c5:fd:6c:b2:83:02:c7:7e:bc: d8:b6:f0:3a:5d:3e:5b:7d:0f:6f:49:94:a7:72:9c:81:4f:a1: ed:01:31:ad:e1:61:96:dc:0d:87:25:4f:18:e5:c9:63:68:3b: da:64:09:76:55:3f:6a:32:94:d1:c8:22:88:42:30:51:9f:71: 8a:ab:fe:51:63:8d:f2:9d:67:28:cb:68:6d:d5:1b:d2:eb:c6: d6:65:f6:d6:b1:6a:12:9a:22:18:95:e0:45:56:50:57:af:52: 59:71:57:05:ff:de:46:da:78:b6:4d:7d:e8:6a:39:70:27:a5: 16:26:7e:d7:ea:99:24:1e:fd:2c:b4:68:40:46:41:41:de:b4: f8:b5:d7:35:5e:5d:b2:c1:1a:3d:14:ea:f0:b7:f6:5e:f8:b1: 35:08:77:da:11:69:8e:3b:f5:0e:05:9d:c6:f4:36:74:ed:fe: 73:f7:14:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXS2xWAdo5bXMfwq0YX1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTE0YmU2MTk3NTVlZWVlYjkxZmUyZjYyYTFkNGVlMDc4 NjE0OTYwHhcNMjUxMjIyMTQwMTEwWhcNMjUxMjIzMTQwMTEwWjAzMTEwLwYDVQQD Eyg3YTA1MDI5MDE4YTE5YjUxMTVmZTQ5NjI5MTA4MzIzNWQ3ZjI4N2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZfApMiLMx5AjoLcT1vHyb5wGKel 4CJrvl0k0TC552Xa9h5+NYCSo6/jCjhIY4HaOqT5phKiaUC/+DYychxaMfvEoKjg lXmf+gzXHs8HXNBmYudNEhmaPcLZ9RDCkhqtlvne1rTKav1xe9UNmJyjrDCrqKLD 9H+Sv4PVGre+2CPPbC+Qo91ax9wHAAv+Y3ogLFpAtuFA33UmVo480vsvESmbcNGn FMqdhdxbeEkeq7+LuVi4M1rNf/p33Z4Pi3WZyydwNQKF1pyECVdoFMYQ0AU/XkdF 2E9geA+KrOpijC3r5OAyb762x79E97D9WG+OW2h+MITJDIZC/11nfXlqXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoFApAYoZtRFf5JYpEIMjXX8of/MB8GA1UdIwQY MBaAFFShS+YZdV7u65H+L2Kh1O4HhhSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAt OGU5MDQ2NmJhZDM4LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAtOGU5MDQ2NmJhZDM4 LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nnxzu8D WO9m1c1Wg/cWlfeIZHd45Jdthn7IRPiurRbr5T+sP4kCcjrGeiFOom7iyFuTW16O DF7Wpwk4dLaMX/I0elPFywz5rengmtG/BTmTxf1ssoMCx3682LbwOl0+W30Pb0mU p3KcgU+h7QExreFhltwNhyVPGOXJY2g72mQJdlU/ajKU0cgiiEIwUZ9xiqv+UWON 8p1nKMtobdUb0uvG1mX21rFqEpoiGJXgRVZQV69SWXFXBf/eRtp4tk196Go5cCel FiZ+1+qZJB79LLRoQEZBQd60+LXXNV5dssEaPRTq8Lf2XvixNQh32hFpjjv1DgWd xvQ2dO3+c/cUUA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:37:22 2025 by rpki-client