This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json) Hash identifier: e9DUPaNnzrwVFGWIg5eWRbstCFC5mGl8PsMcR2b17Mw= Subject key identifier: 39:37:86:04:45:16:57:20:93:CE:38:66:45:88:9D:7F:04:F2:6C:B7 Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019B3AC67973449668BA04D64D22C8B44E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft Manifest number: 13E3 Signing time: Sat 20 Dec 2025 08:00:44 +0000 Manifest this update: Sat 20 Dec 2025 08:00:44 +0000 Manifest next update: Sun 21 Dec 2025 08:00:44 +0000 Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=) 2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: XjqqgpptEFKX1XUX3gxbaL5v7dk5R0qsUGyyvsy4w5A=) 3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:79:73:44:96:68:ba:04:d6:4d:22:c8:b4:4e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Dec 20 08:00:44 2025 GMT Not After : Dec 21 08:00:44 2025 GMT Subject: CN=393786044516572093ce386645889d7f04f26cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:1f:50:ac:6f:a6:05:50:2d:51:ce:2b:a4: 06:3f:99:50:fe:04:14:ab:54:7a:ec:37:f4:d9:d1: 95:f9:db:66:16:c8:d2:79:e5:f2:87:bf:0b:53:e3: 37:8d:d2:4e:ed:65:56:98:87:1b:bb:29:cc:bb:be: 6b:9a:b2:67:57:ee:5a:23:d4:eb:46:ae:b7:99:9f: a0:d7:62:4a:8e:e3:1f:e5:6a:d8:31:ca:55:91:97: 21:46:d9:c0:98:8f:25:f2:cb:ca:fd:b0:60:3a:60: 97:01:4d:7d:92:52:a5:d4:58:07:33:e1:2a:29:b3: 9c:00:a4:77:74:02:a6:9a:ad:22:91:09:51:b7:ae: ed:df:aa:65:6b:47:be:1f:ee:03:53:86:c4:28:f1: e3:2d:65:8c:28:58:55:ab:c6:dd:d9:1c:10:bd:14: c9:88:e9:be:6b:3e:32:c9:5a:4c:96:26:0b:13:bd: fa:19:f1:ce:08:09:23:d1:25:cf:04:50:f3:f3:30: c1:00:cb:0d:57:77:f0:7d:2b:b5:7b:65:6f:b0:32: 43:ea:b8:ad:57:24:79:8f:c7:33:10:05:f4:98:f1: b4:5f:de:23:af:e0:68:a9:13:e2:24:92:ff:be:7e: 1b:13:58:c7:fd:a1:c5:4e:00:b1:40:ce:24:e7:d4: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:37:86:04:45:16:57:20:93:CE:38:66:45:88:9D:7F:04:F2:6C:B7 X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:c1:ff:14:a2:16:46:f4:42:6c:02:e1:cb:b1:0e:db:04: 3a:47:58:0e:a4:a2:6f:9a:66:c9:f4:f7:70:3d:1e:93:e7:f7: d4:21:d1:f1:db:ce:69:45:fd:0b:52:61:a2:59:fc:05:9b:83: a5:12:8c:dc:52:c0:1d:09:2c:a2:d9:88:ec:b7:e5:aa:40:3d: 10:6f:f6:4e:fb:3a:4e:bd:7d:83:10:53:5a:6d:ba:a3:f1:7a: 2d:80:ce:1a:18:72:fe:d6:84:3f:d5:30:e7:b8:ba:93:57:e8: fa:66:f7:71:72:eb:df:c4:33:68:25:01:c1:c8:3c:0f:81:5b: 5a:b0:b8:5c:ed:90:5a:96:09:61:e4:4b:93:8c:30:a9:48:03: 4b:3a:14:7e:a2:82:16:9a:c2:0f:d6:d6:f1:32:e8:98:d9:e2: 4c:43:1a:91:93:fc:0e:36:89:0b:ed:fd:4c:c5:54:55:78:83: 11:d1:17:a0:4c:53:93:d0:ca:53:0d:1f:f8:b4:67:5c:e2:33: 6e:06:d1:41:7e:c8:d3:d7:4b:4d:71:2d:9c:01:3a:3a:b5:c9: 97:18:70:b2:58:1b:9b:70:e9:38:70:27:9a:31:3b:75:f4:e8: 0b:aa:81:e7:c0:e9:fa:91:47:23:dd:b8:d8:ae:e6:fd:13:56: b7:bb:54:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnlzRJZougTWTSLItE6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjUxMjIwMDgwMDQ0WhcNMjUxMjIxMDgwMDQ0WjAzMTEwLwYDVQQD EygzOTM3ODYwNDQ1MTY1NzIwOTNjZTM4NjY0NTg4OWQ3ZjA0ZjI2Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3MfUKxvpgVQLVHOK6QGP5lQ/gQU q1R67Df02dGV+dtmFsjSeeXyh78LU+M3jdJO7WVWmIcbuynMu75rmrJnV+5aI9Tr Rq63mZ+g12JKjuMf5WrYMcpVkZchRtnAmI8l8svK/bBgOmCXAU19klKl1FgHM+Eq KbOcAKR3dAKmmq0ikQlRt67t36pla0e+H+4DU4bEKPHjLWWMKFhVq8bd2RwQvRTJ iOm+az4yyVpMliYLE736GfHOCAkj0SXPBFDz8zDBAMsNV3fwfSu1e2VvsDJD6rit VyR5j8czEAX0mPG0X94jr+BoqRPiJJL/vn4bE1jH/aHFTgCxQM4k59QMIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk3hgRFFlcgk844ZkWInX8E8my3MB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde/B/xSi Fkb0QmwC4cuxDtsEOkdYDqSib5pmyfT3cD0ek+f31CHR8dvOaUX9C1Jholn8BZuD pRKM3FLAHQksotmI7LflqkA9EG/2Tvs6Tr19gxBTWm26o/F6LYDOGhhy/taEP9Uw 57i6k1fo+mb3cXLr38QzaCUBwcg8D4FbWrC4XO2QWpYJYeRLk4wwqUgDSzoUfqKC FprCD9bW8TLomNniTEMakZP8DjaJC+39TMVUVXiDEdEXoExTk9DKUw0f+LRnXOIz bgbRQX7I09dLTXEtnAE6OrXJlxhwslgbm3DpOHAnmjE7dfToC6qB58Dp+pFHI924 2K7m/RNWt7tUXg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:45 2025 by rpki-client