This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json) Hash identifier: 88COz+WdKGRyjuozr5i9v3XlGQYcWNnRc2Tb/Ne0pgw= Subject key identifier: 01:37:A1:8E:43:20:42:24:56:51:A0:13:33:C0:88:69:55:84:39:A5 Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Certificate serial: 019B3D23918E6057BD93268C5F474CE714B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft Manifest number: 115C Signing time: Sat 20 Dec 2025 19:01:39 +0000 Manifest this update: Sat 20 Dec 2025 19:01:39 +0000 Manifest next update: Sun 21 Dec 2025 19:01:39 +0000 Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=) 2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: PPYzis9Pp70W1ZEeVqeKrmMEl2atyR/e4O6gtVvSP8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:91:8e:60:57:bd:93:26:8c:5f:47:4c:e7:14:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Validity Not Before: Dec 20 19:01:39 2025 GMT Not After : Dec 21 19:01:39 2025 GMT Subject: CN=0137a18e432042245651a01333c08869558439a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:f8:00:30:a7:b9:fc:f3:5e:71:a6:85:45: 2a:ba:75:a7:f8:10:48:d0:b4:57:13:50:10:0d:6b: 1f:79:1d:b4:f5:4f:92:41:99:24:f6:99:26:ed:6f: 24:f4:f9:39:8c:f2:8e:09:fb:ea:19:93:05:56:00: d5:fe:a3:be:3c:8f:a6:81:b0:b8:fb:7a:61:62:20: 9c:85:d9:f1:3c:48:e8:97:3b:8a:b1:c4:34:bf:3c: 50:4a:83:eb:c1:12:e2:4e:31:8a:f0:22:56:c4:7c: 19:15:36:6d:cf:f7:3b:fb:6b:64:91:f9:ab:9a:43: 19:ef:99:45:f1:d0:50:6d:b7:03:90:a7:bd:c2:b1: ee:03:e9:d0:a6:9a:40:c5:18:e4:49:02:5a:ad:0f: fe:e9:52:ad:42:bf:02:35:4f:00:d2:dc:08:04:72: 9b:d7:1e:71:b6:d9:81:8f:90:26:2e:82:71:fb:2f: 02:5d:5c:1b:aa:d0:25:08:5f:a3:03:92:bf:8b:72: 39:ac:72:fd:72:62:5d:c1:b6:bc:e5:d6:23:26:55: 01:94:f8:a5:cf:63:e0:2f:3b:26:32:9a:39:ff:4c: 35:e2:9b:e3:59:b5:18:46:12:09:b5:dd:a9:2c:ec: 3d:f2:52:20:f1:8e:fd:b0:a6:89:33:69:04:1f:cb: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:A1:8E:43:20:42:24:56:51:A0:13:33:C0:88:69:55:84:39:A5 X509v3 Authority Key Identifier: keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:65:01:68:e6:72:a1:ff:76:50:f1:59:c4:42:a1:50:6e:10: 3e:41:39:02:f4:f4:28:1b:cd:d1:ca:88:d3:f5:5c:33:a2:19: ea:a0:98:93:cf:4f:24:a5:21:db:39:07:5f:0a:47:1e:88:52: 56:cc:2c:bd:c6:8c:70:32:55:cf:b2:7c:61:bd:56:04:ff:0c: ee:9c:8f:95:a8:e2:ed:20:2a:f3:9b:9e:1f:0c:3d:55:a2:8d: 20:44:d5:99:f4:9f:2a:2a:31:67:2f:2c:dd:5e:14:9c:38:cd: cc:9c:11:d1:b6:04:85:03:7b:d9:c9:03:86:7b:78:a5:a8:99: 5d:96:55:f9:f1:73:d3:b8:e5:04:6c:81:35:f4:d9:8e:23:04: 57:ad:f5:80:6b:c1:17:3e:ae:fc:0d:aa:32:20:e1:dc:b5:f1: bc:09:9a:bf:73:e8:73:83:7c:9c:1c:83:b6:de:4b:06:f7:04: 58:80:93:a1:29:c8:a4:5a:6f:34:04:65:ad:b2:65:bf:fe:9d: 8f:fd:3e:0d:df:25:ef:14:ea:18:b4:20:5c:08:85:5a:57:ad: e6:04:10:06:ca:72:8d:fb:67:41:26:66:13:66:8a:2f:97:90: 82:b7:e7:32:a7:d0:00:f9:84:8c:c2:fc:ee:52:56:00:00:7c: fe:7c:97:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5GOYFe9kyaMX0dM5xS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj NDlkMzEwHhcNMjUxMjIwMTkwMTM5WhcNMjUxMjIxMTkwMTM5WjAzMTEwLwYDVQQD EygwMTM3YTE4ZTQzMjA0MjI0NTY1MWEwMTMzM2MwODg2OTU1ODQzOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/L4ADCnufzzXnGmhUUqunWn+BBI 0LRXE1AQDWsfeR209U+SQZkk9pkm7W8k9Pk5jPKOCfvqGZMFVgDV/qO+PI+mgbC4 +3phYiCchdnxPEjolzuKscQ0vzxQSoPrwRLiTjGK8CJWxHwZFTZtz/c7+2tkkfmr mkMZ75lF8dBQbbcDkKe9wrHuA+nQpppAxRjkSQJarQ/+6VKtQr8CNU8A0twIBHKb 1x5xttmBj5AmLoJx+y8CXVwbqtAlCF+jA5K/i3I5rHL9cmJdwba85dYjJlUBlPil z2PgLzsmMpo5/0w14pvjWbUYRhIJtd2pLOw98lIg8Y79sKaJM2kEH8tC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE3oY5DIEIkVlGgEzPAiGlVhDmlMB8GA1UdIwQY MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3 LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2UBaOZy of92UPFZxEKhUG4QPkE5AvT0KBvN0cqI0/VcM6IZ6qCYk89PJKUh2zkHXwpHHohS VswsvcaMcDJVz7J8Yb1WBP8M7pyPlaji7SAq85ueHww9VaKNIETVmfSfKioxZy8s 3V4UnDjNzJwR0bYEhQN72ckDhnt4paiZXZZV+fFz07jlBGyBNfTZjiMEV631gGvB Fz6u/A2qMiDh3LXxvAmav3Poc4N8nByDtt5LBvcEWICToSnIpFpvNARlrbJlv/6d j/0+Dd8l7xTqGLQgXAiFWlet5gQQBspyjftnQSZmE2aKL5eQgrfnMqfQAPmEjML8 7lJWAAB8/nyXZA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:57:37 2025 by rpki-client