This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json) Hash identifier: JWHkSb6JFE4HJ9JGkMQ9uVkjREtw2Vwh9cJu36oJcxU= Subject key identifier: F9:06:2A:DB:80:25:3D:46:57:CF:85:27:13:C5:F4:A0:A0:13:CB:49 Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Certificate serial: 019B40C9466DC7660393B77750EDA638C302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft Manifest number: 0CD1 Signing time: Sun 21 Dec 2025 12:01:31 +0000 Manifest this update: Sun 21 Dec 2025 12:01:31 +0000 Manifest next update: Mon 22 Dec 2025 12:01:31 +0000 Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=) 2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: b4yskE+VspP6SEWOrQPIOkZzWX9bQorMzA0tef8D+yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:46:6d:c7:66:03:93:b7:77:50:ed:a6:38:c3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Validity Not Before: Dec 21 12:01:31 2025 GMT Not After : Dec 22 12:01:31 2025 GMT Subject: CN=f9062adb80253d4657cf852713c5f4a0a013cb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:7a:f9:9f:dd:9e:3e:aa:31:c9:f8:32:16: 07:52:86:6d:3d:a9:1e:5f:51:7a:1f:34:42:70:46: a2:60:1d:82:48:cb:6a:7b:8a:76:84:9c:d7:ff:cd: 0c:bb:8c:c6:a0:5f:e7:84:03:8f:d0:a1:0c:6b:4d: 68:cf:7b:e1:ab:d3:49:3c:d0:27:79:5d:17:42:d3: 98:d9:ba:d9:19:8f:06:d0:b0:61:6b:0b:be:58:0e: 7f:0d:43:d6:c7:e0:9e:c1:6c:cf:ba:8c:fa:f9:3e: 60:ce:af:84:bb:53:db:0c:e4:8b:54:20:61:e8:22: 10:18:31:3e:32:0d:68:8b:7c:b9:b0:2a:a3:db:6b: 16:21:b7:db:06:dc:13:22:dd:d6:e2:cd:75:d6:65: 04:af:ba:d2:eb:90:78:2e:6b:19:17:8c:81:84:2a: 41:24:7f:31:36:76:7f:bf:8c:93:f8:52:3c:ac:b4: 14:fa:c4:0a:83:18:07:64:8c:49:94:70:ca:35:91: c6:ca:b6:d4:bb:3b:2e:db:a5:d9:5c:c7:79:0a:eb: 4b:a2:d8:85:64:c6:d1:34:b7:4a:11:b8:b8:54:e5: 24:60:d9:94:a4:21:89:cf:af:83:0b:d5:3b:3d:04: f2:a0:85:29:36:2c:da:0d:4f:33:0a:8b:15:de:9c: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:2A:DB:80:25:3D:46:57:CF:85:27:13:C5:F4:A0:A0:13:CB:49 X509v3 Authority Key Identifier: keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c1:18:bd:5d:0a:8f:4c:e0:34:fa:13:d4:d5:cf:a8:14:94: a8:77:9e:d3:27:7b:4a:30:0e:3e:b9:0f:5a:fd:20:31:22:31: 22:23:72:d4:ca:6a:d1:73:67:3f:ed:60:cc:35:46:0c:bf:a7: 9d:e5:d4:f1:3c:21:e5:71:20:7a:bb:53:6e:52:8c:e2:17:c7: 49:c8:bc:73:ae:6c:bf:26:2e:65:5d:42:63:54:c2:2f:f0:28: e7:78:45:c7:0c:ea:bf:2f:ee:35:d9:15:0d:02:99:c0:f2:92: bd:1d:88:a6:58:a0:8f:f0:66:55:38:03:b6:f6:26:5b:c8:81: c3:7d:92:24:61:2e:6d:b3:a0:4f:7e:a8:cc:76:53:30:52:85: 78:51:0e:f8:91:ca:c8:8f:31:58:cd:0d:0c:38:a8:84:07:8b: 0e:cf:9e:3f:da:fb:53:83:84:fb:19:cc:c5:d5:6b:e8:4b:41: 74:68:31:f0:fc:09:99:0e:2d:8d:34:a7:85:6d:23:5c:35:92: 64:62:9c:8b:dd:cd:7f:e1:88:0d:f3:65:63:dd:34:91:6e:d7: f8:a1:33:2a:3c:b0:b9:2b:6e:ce:3b:81:25:eb:8c:a6:d3:18: 71:6b:7a:96:d1:48:b7:2e:99:67:ed:82:c2:bc:1b:ce:e5:ef: 30:95:7d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyUZtx2YDk7d3UO2mOMMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4 NDkxNDYwHhcNMjUxMjIxMTIwMTMxWhcNMjUxMjIyMTIwMTMxWjAzMTEwLwYDVQQD EyhmOTA2MmFkYjgwMjUzZDQ2NTdjZjg1MjcxM2M1ZjRhMGEwMTNjYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdV6+Z/dnj6qMcn4MhYHUoZtPake X1F6HzRCcEaiYB2CSMtqe4p2hJzX/80Mu4zGoF/nhAOP0KEMa01oz3vhq9NJPNAn eV0XQtOY2brZGY8G0LBhawu+WA5/DUPWx+CewWzPuoz6+T5gzq+Eu1PbDOSLVCBh 6CIQGDE+Mg1oi3y5sCqj22sWIbfbBtwTIt3W4s111mUEr7rS65B4LmsZF4yBhCpB JH8xNnZ/v4yT+FI8rLQU+sQKgxgHZIxJlHDKNZHGyrbUuzsu26XZXMd5CutLotiF ZMbRNLdKEbi4VOUkYNmUpCGJz6+DC9U7PQTyoIUpNizaDU8zCosV3pw/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkGKtuAJT1GV8+FJxPF9KCgE8tJMB8GA1UdIwQY MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt M2M3Mjk2N2ZmN2MxLzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMEYvV0K j0zgNPoT1NXPqBSUqHee0yd7SjAOPrkPWv0gMSIxIiNy1Mpq0XNnP+1gzDVGDL+n neXU8Twh5XEgertTblKM4hfHSci8c65svyYuZV1CY1TCL/Ao53hFxwzqvy/uNdkV DQKZwPKSvR2Ipligj/BmVTgDtvYmW8iBw32SJGEubbOgT36ozHZTMFKFeFEO+JHK yI8xWM0NDDiohAeLDs+eP9r7U4OE+xnMxdVr6EtBdGgx8PwJmQ4tjTSnhW0jXDWS ZGKci93Nf+GIDfNlY900kW7X+KEzKjywuStuzjuBJeuMptMYcWt6ltFIty6ZZ+2C wrwbzuXvMJV91w== -----END CERTIFICATE-----Generated at Sun Dec 21 21:34:11 2025 by rpki-client