This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json) Hash identifier: br/lPun8XzE3YQox5BmOqZVEcJ3Qi20zxH0dgKJOS7Y= Subject key identifier: 9B:E1:BF:AA:78:BD:0B:8A:D7:C7:67:48:CA:87:24:C2:97:E9:DC:1B Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c Certificate serial: 019B59AC96B14B722D83220B9DC87A28B7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft Manifest number: 0284 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=) 2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: 7pys0kR1e1Nu23DPGTNSohFg7jB1AJ+AJU1+KXvv5oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:96:b1:4b:72:2d:83:22:0b:9d:c8:7a:28:b7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=9be1bfaa78bd0b8ad7c76748ca8724c297e9dc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:0a:b5:65:3a:bb:67:b4:9c:68:50:74:09: eb:2a:89:fe:a8:2d:64:2f:db:d1:01:8a:33:e7:c2: f7:ce:52:c4:09:23:3f:12:a9:b7:b8:fe:79:e0:92: 6c:d8:92:89:f9:37:54:d8:9a:38:52:b0:be:23:a5: f5:62:1c:f9:60:50:e3:87:84:f1:ce:36:ad:4e:56: a6:a8:7d:c6:62:22:be:2a:c8:2f:bc:b4:98:92:b3: b8:d2:ed:7f:41:38:4e:f4:60:3a:ba:8a:c3:d5:f6: f1:f7:71:36:5a:02:6e:f5:a8:9d:c8:a6:e6:ec:be: 90:f3:68:28:2d:54:55:ba:62:23:5f:06:75:3f:65: 2c:aa:0a:69:4e:53:92:bc:7d:55:1d:e2:56:69:f0: 90:f3:92:bb:5f:75:1e:3a:9e:bf:36:63:67:6f:6d: b1:ad:c1:57:37:42:42:36:54:f3:dd:e8:6a:bd:41: 4d:5c:5b:66:cb:d5:9b:15:5a:f0:7a:ea:ab:75:9f: ba:06:60:38:31:28:5f:fa:ed:c8:94:d0:0a:11:b2: 3c:75:d2:61:ee:9f:8d:81:3c:ef:b8:cf:44:9a:6f: 7b:e6:38:0d:7e:7d:4b:57:b8:a2:ae:52:b9:74:a3: 18:d7:37:91:b9:24:96:ae:1d:9e:83:7f:43:9b:28: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E1:BF:AA:78:BD:0B:8A:D7:C7:67:48:CA:87:24:C2:97:E9:DC:1B X509v3 Authority Key Identifier: keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e9:c1:b4:95:3b:7f:d6:59:d8:99:3b:d1:0e:8d:76:ad:f6: d0:b0:c1:85:59:40:d9:84:ea:1f:60:e0:9f:5d:c9:3f:07:9f: 6b:bd:76:61:d0:91:97:50:08:f5:c0:ef:4e:a5:9f:df:cd:ce: 33:5c:a4:68:64:09:20:23:a6:a4:fc:79:56:66:d2:e2:64:3a: 5a:d8:38:87:e9:df:a3:67:76:88:9b:ac:03:7f:26:32:d0:6d: ad:0c:23:0e:fd:ec:fe:42:19:00:76:06:3d:7d:eb:36:4c:dd: 0a:de:b0:25:05:33:fe:90:2c:32:c5:ae:ac:2e:7d:75:66:96: b5:8d:20:16:d1:09:be:36:7d:b6:bf:e1:43:3d:ec:7e:26:aa: 79:9c:86:96:86:83:a7:3c:af:33:19:9e:03:86:4f:cb:a6:ab: c2:0a:7e:1c:c1:6d:6f:9c:e3:d3:00:64:65:f3:95:53:ed:59: 1a:7d:09:46:a3:1e:6e:a2:78:74:d7:1d:e1:a0:8c:c9:ef:bc: 60:4d:eb:4b:5a:4b:1f:16:4f:7f:7f:60:da:2a:76:f1:94:57: f3:ae:67:9d:b1:4a:c7:bd:0a:65:10:c3:7a:de:14:aa:de:ea: 16:de:76:0f:52:d9:1d:3c:14:ff:e7:52:aa:d0:4e:9f:b5:27: 9d:0c:84:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJaxS3ItgyILnch6KLflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz NjQ5OWMwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD Eyg5YmUxYmZhYTc4YmQwYjhhZDdjNzY3NDhjYTg3MjRjMjk3ZTlkYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6UKtWU6u2e0nGhQdAnrKon+qC1k L9vRAYoz58L3zlLECSM/Eqm3uP554JJs2JKJ+TdU2Jo4UrC+I6X1Yhz5YFDjh4Tx zjatTlamqH3GYiK+KsgvvLSYkrO40u1/QThO9GA6uorD1fbx93E2WgJu9aidyKbm 7L6Q82goLVRVumIjXwZ1P2UsqgppTlOSvH1VHeJWafCQ85K7X3UeOp6/NmNnb22x rcFXN0JCNlTz3ehqvUFNXFtmy9WbFVrweuqrdZ+6BmA4MShf+u3IlNAKEbI8ddJh 7p+NgTzvuM9Emm975jgNfn1LV7iirlK5dKMY1zeRuSSWrh2eg39DmyjhXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvhv6p4vQuK18dnSMqHJMKX6dwbMB8GA1UdIwQY MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3 LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmenBtJU7 f9ZZ2Jk70Q6Ndq320LDBhVlA2YTqH2Dgn13JPwefa712YdCRl1AI9cDvTqWf383O M1ykaGQJICOmpPx5VmbS4mQ6Wtg4h+nfo2d2iJusA38mMtBtrQwjDv3s/kIZAHYG PX3rNkzdCt6wJQUz/pAsMsWurC59dWaWtY0gFtEJvjZ9tr/hQz3sfiaqeZyGloaD pzyvMxmeA4ZPy6arwgp+HMFtb5zj0wBkZfOVU+1ZGn0JRqMebqJ4dNcd4aCMye+8 YE3rS1pLHxZPf39g2ip28ZRX865nnbFKx70KZRDDet4Uqt7qFt52D1LZHTwU/+dS qtBOn7UnnQyEsg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:32 2025 by rpki-client