This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json) Hash identifier: Jd70DBPrK2vQGEwkdtxctGpsuddoZgkokSSA30uoD9k= Subject key identifier: 7E:D8:D6:97:61:16:A4:AC:75:F4:AB:29:AE:98:93:EB:31:87:ED:65 Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Certificate serial: 019AAC82A12FB317E6D916F02315F76A110C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft Manifest number: 0FF0 Signing time: Sat 22 Nov 2025 17:00:33 +0000 Manifest this update: Sat 22 Nov 2025 17:00:33 +0000 Manifest next update: Sun 23 Nov 2025 17:00:33 +0000 Files and hashes: 1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=) 2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=) 3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: hYMC/nQWFH6ikyBldtaoUf1BK+0C4UBK9SvGWuZX7+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:a1:2f:b3:17:e6:d9:16:f0:23:15:f7:6a:11:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Validity Not Before: Nov 22 17:00:33 2025 GMT Not After : Nov 23 17:00:33 2025 GMT Subject: CN=7ed8d6976116a4ac75f4ab29ae9893eb3187ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:f3:8f:9d:a8:9b:1c:17:86:b0:c3:4e:61: df:80:8e:17:77:94:78:0b:bf:b9:0b:1c:69:c1:65: 9c:0a:74:0b:6d:d5:9e:22:0c:11:64:0d:77:43:38: 4d:15:ba:39:aa:ac:77:c4:00:09:97:c4:c1:15:35: 22:b7:6b:d5:3d:42:fe:88:9d:df:23:3e:46:ff:6e: eb:f0:f4:d4:8d:26:ac:d8:67:92:20:25:e5:eb:9d: a9:b7:cc:33:cd:59:41:ef:56:57:1a:82:4b:ac:33: f9:5c:58:67:5d:72:b8:72:bf:75:33:61:3d:03:72: 50:ee:3e:46:ed:8f:68:c4:c7:ae:a8:dc:b6:ed:f7: ae:df:31:6f:bf:84:0b:0a:2c:a9:bb:98:f4:f6:8a: 97:1f:74:35:6e:96:cb:66:bc:bb:cc:bd:5c:e6:a1: 95:db:fe:ac:8b:94:9f:ba:aa:2a:5d:35:8e:b6:0c: 17:39:d0:bd:01:43:23:ac:b0:94:df:1a:ab:0b:72: d0:7f:4d:5a:5b:d1:f6:18:95:10:ef:8e:5b:fe:61: c4:a0:a7:5f:ec:ed:75:51:8f:d4:5d:75:07:0c:f8: 55:64:a4:14:3a:b4:ee:0c:cd:0b:5b:0a:b0:0c:00: 6f:c6:59:9a:ce:fe:ad:26:29:f0:84:0a:1c:e6:a4: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:D6:97:61:16:A4:AC:75:F4:AB:29:AE:98:93:EB:31:87:ED:65 X509v3 Authority Key Identifier: keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4e:77:5b:0b:86:7e:51:b7:19:dd:d3:a0:b3:b0:47:bc:56: ae:fd:17:7a:87:96:e4:28:9c:83:6a:71:ef:8e:86:ba:8d:9c: 6d:02:99:4d:49:2b:eb:66:51:3b:01:7a:d8:fd:36:bb:d7:42: 00:3f:f3:db:a4:af:be:b7:89:07:a0:ad:df:d3:47:37:7d:3e: 70:0d:91:fa:ae:4c:53:30:de:4d:74:96:4d:8b:1f:fa:85:16: e8:3f:c6:17:c3:63:a2:e2:ec:49:05:50:d5:f1:5c:0b:f7:08: bc:b4:e0:00:22:bf:1f:a4:46:42:7a:8b:bc:e4:f7:3b:c6:87: d2:76:e1:7b:51:df:5b:51:37:88:e9:78:12:69:a5:8d:d0:72: 10:87:df:8b:7b:0a:66:55:a7:10:cc:93:74:be:2c:6c:df:08: d9:05:84:22:15:48:2e:07:1a:eb:1f:42:0e:87:ad:da:a1:36: d7:00:77:70:55:c7:ab:34:15:e6:4b:83:b5:84:88:b6:35:59: 4a:68:3d:a0:0b:a2:3d:ae:d5:ba:3e:6f:88:94:80:b6:2d:39: 68:72:79:eb:1e:a1:a3:2f:10:79:cc:17:e4:df:0c:f9:fe:21: 1b:7b:bc:b6:5a:bb:10:18:e7:d9:b7:42:61:7b:28:14:34:d2: d5:3a:18:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgqEvsxfm2RbwIxX3ahEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx OTlkNDkwHhcNMjUxMTIyMTcwMDMzWhcNMjUxMTIzMTcwMDMzWjAzMTEwLwYDVQQD Eyg3ZWQ4ZDY5NzYxMTZhNGFjNzVmNGFiMjlhZTk4OTNlYjMxODdlZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Tzj52omxwXhrDDTmHfgI4Xd5R4 C7+5CxxpwWWcCnQLbdWeIgwRZA13QzhNFbo5qqx3xAAJl8TBFTUit2vVPUL+iJ3f Iz5G/27r8PTUjSas2GeSICXl652pt8wzzVlB71ZXGoJLrDP5XFhnXXK4cr91M2E9 A3JQ7j5G7Y9oxMeuqNy27feu3zFvv4QLCiypu5j09oqXH3Q1bpbLZry7zL1c5qGV 2/6si5SfuqoqXTWOtgwXOdC9AUMjrLCU3xqrC3LQf01aW9H2GJUQ745b/mHEoKdf 7O11UY/UXXUHDPhVZKQUOrTuDM0LWwqwDABvxlmazv6tJinwhAoc5qRxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7Y1pdhFqSsdfSrKa6Yk+sxh+1lMB8GA1UdIwQY MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb053WwuG flG3Gd3ToLOwR7xWrv0XeoeW5Cicg2px746Guo2cbQKZTUkr62ZROwF62P02u9dC AD/z26SvvreJB6Ct39NHN30+cA2R+q5MUzDeTXSWTYsf+oUW6D/GF8NjouLsSQVQ 1fFcC/cIvLTgACK/H6RGQnqLvOT3O8aH0nbhe1HfW1E3iOl4EmmljdByEIffi3sK ZlWnEMyTdL4sbN8I2QWEIhVILgca6x9CDoet2qE21wB3cFXHqzQV5kuDtYSItjVZ Smg9oAuiPa7Vuj5viJSAti05aHJ56x6hoy8QecwX5N8M+f4hG3u8tlq7EBjn2bdC YXsoFDTS1ToYQA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:00:51 2025 by rpki-client