This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json) Hash identifier: l4g2kn3DzHfwexqva+4NyJqjWKd3z5OhCnOLZHOBKsI= Subject key identifier: 16:DC:82:40:0F:1D:86:94:84:3E:AB:27:EB:50:2A:5D:79:3F:B9:82 Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1 Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1 Certificate serial: 019B4249D7619B249B8F4F29ED77C0B45E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft Manifest number: 1138 Signing time: Sun 21 Dec 2025 19:01:33 +0000 Manifest this update: Sun 21 Dec 2025 19:01:33 +0000 Manifest next update: Mon 22 Dec 2025 19:01:33 +0000 Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: KqvWbRzKITbu+1vr7pOL4T6ONvZwGoInZfV1RdPl7oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:d7:61:9b:24:9b:8f:4f:29:ed:77:c0:b4:5e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1 Validity Not Before: Dec 21 19:01:33 2025 GMT Not After : Dec 22 19:01:33 2025 GMT Subject: CN=16dc82400f1d8694843eab27eb502a5d793fb982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:97:c2:bb:6e:11:b9:0f:34:d0:e3:80:1b: e2:33:05:cc:13:0a:48:3f:2f:a6:1d:f0:af:14:3a: 34:09:8f:75:6f:2b:c0:3a:d3:72:7b:5d:aa:47:f1: db:1f:1a:79:e9:46:9f:33:4e:13:00:e2:d4:9e:8a: 4f:22:c9:8f:cc:ed:74:d2:ca:f8:23:53:08:c1:f0: 3e:15:8c:39:72:74:7a:46:75:37:3b:50:4a:8e:18: 96:05:84:d9:5c:10:75:ad:40:8c:3a:1b:3c:0c:11: 5a:65:10:f0:13:7d:b4:cd:0f:6d:c6:0c:15:22:e5: 30:96:5d:2f:f8:34:73:bb:a2:f1:49:98:3c:47:ea: 05:c6:a9:0a:f8:7b:51:9f:48:ff:ba:7c:2b:68:0f: 35:cd:ef:cc:9c:c5:9b:0e:a7:ff:70:d1:5e:70:3d: ac:d4:63:07:d2:fa:99:52:71:ac:4a:6f:a2:9f:13: 5d:bd:1f:b5:12:dd:89:a0:19:a2:d9:bf:62:2b:05: f9:27:20:14:7f:6c:db:55:1e:41:81:3a:41:15:fd: 45:cd:43:20:e0:89:18:45:9d:99:16:69:a3:b3:4c: a8:e7:88:2e:46:db:f1:84:7a:2e:af:e1:e1:77:4e: 15:c7:d1:bd:53:e8:36:59:8d:23:26:fe:d0:64:e9: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:82:40:0F:1D:86:94:84:3E:AB:27:EB:50:2A:5D:79:3F:B9:82 X509v3 Authority Key Identifier: keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:24:f1:28:50:be:df:c1:67:79:fb:34:52:4c:8b:34:3e: 4d:70:66:9e:0f:56:c8:ed:fd:6c:27:64:9e:66:7d:6d:6c:d7: 6b:d7:67:0e:3a:1d:a6:35:f0:6a:64:36:79:c3:7e:b6:22:54: 18:19:3a:30:d6:71:17:8e:6c:b0:e9:2f:43:21:b1:a4:10:35: 19:17:c0:ff:c6:69:da:92:04:00:d8:3c:7d:8f:ba:27:b1:2d: 45:42:98:41:1f:86:69:21:f3:84:68:12:0d:2b:32:99:2e:6e: f7:a0:c2:15:3b:67:bd:9f:6a:b7:ea:f0:19:63:89:bd:78:95: c4:26:57:8f:d4:48:4d:5e:35:c6:cc:e8:b2:d6:b3:b0:07:03: 48:88:b1:fa:a1:25:e4:1c:2d:53:ae:27:cc:ca:03:dc:20:d7: 61:1c:b0:56:39:1c:a8:62:24:85:fd:3d:68:84:f1:35:b6:61: 86:28:30:8e:9f:a4:0f:d4:0e:36:a4:1b:65:61:b1:b8:75:a8: b6:b0:f2:ba:a6:09:cc:b3:a0:fc:49:97:89:7d:8f:c7:21:c0: bc:70:20:59:2b:f3:d4:2a:8b:95:18:2f:ff:f2:5e:79:ae:60: ee:72:75:50:88:37:41:e8:bb:c4:38:9d:21:65:5c:08:d5:83: e2:b3:3c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSddhmySbj08p7XfAtF4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWM1ZTQ0ZDQ2YWNiOTU1MzQ1ZWJhNmUzNmU5MDYxZjhm MTZkZTEwHhcNMjUxMjIxMTkwMTMzWhcNMjUxMjIyMTkwMTMzWjAzMTEwLwYDVQQD EygxNmRjODI0MDBmMWQ4Njk0ODQzZWFiMjdlYjUwMmE1ZDc5M2ZiOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J+XwrtuEbkPNNDjgBviMwXMEwpI Py+mHfCvFDo0CY91byvAOtNye12qR/HbHxp56UafM04TAOLUnopPIsmPzO100sr4 I1MIwfA+FYw5cnR6RnU3O1BKjhiWBYTZXBB1rUCMOhs8DBFaZRDwE320zQ9txgwV IuUwll0v+DRzu6LxSZg8R+oFxqkK+HtRn0j/unwraA81ze/MnMWbDqf/cNFecD2s 1GMH0vqZUnGsSm+inxNdvR+1Et2JoBmi2b9iKwX5JyAUf2zbVR5BgTpBFf1FzUMg 4IkYRZ2ZFmmjs0yo54guRtvxhHour+Hhd04Vx9G9U+g2WY0jJv7QZOk5KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbcgkAPHYaUhD6rJ+tQKl15P7mCMB8GA1UdIwQY MBaAFFSsXkTUasuVU0XrpuNukGH48W3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEt YzM0NDE1YmZjZGExLzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEtYzM0NDE1YmZjZGEx LzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa4k8ShQ vt/BZ3n7NFJMizQ+TXBmng9WyO39bCdknmZ9bWzXa9dnDjodpjXwamQ2ecN+tiJU GBk6MNZxF45ssOkvQyGxpBA1GRfA/8Zp2pIEANg8fY+6J7EtRUKYQR+GaSHzhGgS DSsymS5u96DCFTtnvZ9qt+rwGWOJvXiVxCZXj9RITV41xszostazsAcDSIix+qEl 5BwtU64nzMoD3CDXYRywVjkcqGIkhf09aITxNbZhhigwjp+kD9QONqQbZWGxuHWo trDyuqYJzLOg/EmXiX2PxyHAvHAgWSvz1CqLlRgv//Jeea5g7nJ1UIg3Qei7xDid IWVcCNWD4rM8Wg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:47 2025 by rpki-client