This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json) Hash identifier: t94Rhl+sQNyOWU+WhdeyIIG+GBAN4MoQoUUaWOl/fuM= Subject key identifier: 85:8F:DE:FC:16:97:AF:9C:A8:8D:05:BE:83:DA:C9:C7:45:C5:A2:91 Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Certificate serial: 019B4A71A9A3A846A7A78BB75BA5819ABDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft Manifest number: 0CD6 Signing time: Tue 23 Dec 2025 09:02:01 +0000 Manifest this update: Tue 23 Dec 2025 09:02:01 +0000 Manifest next update: Wed 24 Dec 2025 09:02:01 +0000 Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=) 2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: s93ka6dKG0jMHBE3sic+BtHb7yic33PWRaA44rjD9+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:a9:a3:a8:46:a7:a7:8b:b7:5b:a5:81:9a:bd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Validity Not Before: Dec 23 09:02:01 2025 GMT Not After : Dec 24 09:02:01 2025 GMT Subject: CN=858fdefc1697af9ca88d05be83dac9c745c5a291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:8b:8a:b2:ff:7a:cb:55:9b:6b:ce:03:5a: 85:0f:c0:44:f8:4e:f6:6a:e4:51:c9:20:65:2c:ba: fb:c7:db:c2:dd:1b:1c:ef:0b:05:fb:72:2a:42:6d: 59:be:c6:c2:11:51:53:01:f3:f7:41:93:57:79:79: a5:3a:a4:4b:3f:92:26:d3:81:11:8e:d9:27:05:07: 98:2c:63:6b:00:98:19:33:d9:bd:9e:20:47:30:73: 0d:a6:0f:bb:93:6e:cd:34:ce:8a:d7:ee:35:80:02: 5c:84:0d:7f:0a:5b:ef:cf:e5:4d:f4:dd:00:f5:52: e9:9e:3c:f0:8e:d3:a7:9c:42:fb:cd:23:62:fa:ca: 9b:e7:b7:2b:37:41:5a:ce:d4:74:45:b8:e3:26:1e: 50:54:8c:de:ab:37:6b:29:bd:72:46:2d:37:c0:bd: d5:b9:4e:05:b5:cc:2e:ab:22:0d:c3:1a:56:d8:02: 14:43:80:77:64:90:6e:d1:6f:66:f5:bd:2d:3c:f6: 7a:9b:b8:0a:53:fe:2e:a4:55:aa:f3:06:10:47:17: 2d:f6:ff:85:8d:46:95:65:35:20:ce:fd:d6:24:f4: 95:5a:47:20:77:1a:51:97:4f:db:ac:8f:c1:cd:0c: f6:45:83:2f:73:be:e0:63:85:30:05:67:a2:4d:f7: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8F:DE:FC:16:97:AF:9C:A8:8D:05:BE:83:DA:C9:C7:45:C5:A2:91 X509v3 Authority Key Identifier: keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:06:1b:d2:f0:67:72:40:db:69:bb:ad:e9:43:5d:86:1e: 53:ad:c7:c0:a2:10:64:66:ac:33:a3:d1:f2:88:19:75:8a:b8: ca:22:50:67:a3:be:31:91:ed:f6:08:a7:ea:c3:79:ab:79:3d: 3a:14:56:82:0e:c7:5d:37:83:a7:a5:cb:2d:40:c8:c9:5d:90: 1f:ef:bd:10:bb:80:47:dd:84:ad:81:16:49:83:7d:f4:4f:ed: 5a:de:53:84:1a:e5:7f:86:3e:53:aa:bf:d1:98:c2:6a:72:0c: 0a:03:f0:a9:e2:7e:a5:f9:e6:3e:f5:21:78:a7:ca:75:7a:a2: 4d:56:f9:53:d8:8b:cd:12:29:41:b7:d3:eb:5c:ed:bc:bb:dd: 7a:a7:6b:97:02:5d:f2:a9:d5:1e:93:02:30:0a:c1:d1:69:3a: dc:3a:ba:46:3c:ec:cd:c7:d9:89:07:61:ae:b9:3b:92:fc:cc: b0:8c:9f:b7:39:99:ab:10:49:fb:bc:63:f5:9a:a7:5f:c2:ed: dc:6b:d5:a5:cb:18:57:3a:48:30:66:1d:9f:39:5d:bb:7f:d0: 86:25:a7:87:e0:05:68:0b:a1:e7:d2:90:3d:3c:8d:13:dd:c0: 8f:1a:ad:26:d9:6e:be:64:4e:d0:34:ac:52:39:52:c9:e6:f7: b1:76:54:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcamjqEanp4u3W6WBmr2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4 NDkxNDYwHhcNMjUxMjIzMDkwMjAxWhcNMjUxMjI0MDkwMjAxWjAzMTEwLwYDVQQD Eyg4NThmZGVmYzE2OTdhZjljYTg4ZDA1YmU4M2RhYzljNzQ1YzVhMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqyLirL/estVm2vOA1qFD8BE+E72 auRRySBlLLr7x9vC3Rsc7wsF+3IqQm1ZvsbCEVFTAfP3QZNXeXmlOqRLP5Im04ER jtknBQeYLGNrAJgZM9m9niBHMHMNpg+7k27NNM6K1+41gAJchA1/Clvvz+VN9N0A 9VLpnjzwjtOnnEL7zSNi+sqb57crN0FaztR0RbjjJh5QVIzeqzdrKb1yRi03wL3V uU4FtcwuqyINwxpW2AIUQ4B3ZJBu0W9m9b0tPPZ6m7gKU/4upFWq8wYQRxct9v+F jUaVZTUgzv3WJPSVWkcgdxpRl0/brI/BzQz2RYMvc77gY4UwBWeiTfe7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWP3vwWl6+cqI0FvoPaycdFxaKRMB8GA1UdIwQY MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt M2M3Mjk2N2ZmN2MxLzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5UGG9Lw Z3JA22m7relDXYYeU63HwKIQZGasM6PR8ogZdYq4yiJQZ6O+MZHt9gin6sN5q3k9 OhRWgg7HXTeDp6XLLUDIyV2QH++9ELuAR92ErYEWSYN99E/tWt5ThBrlf4Y+U6q/ 0ZjCanIMCgPwqeJ+pfnmPvUheKfKdXqiTVb5U9iLzRIpQbfT61ztvLvdeqdrlwJd 8qnVHpMCMArB0Wk63Dq6RjzszcfZiQdhrrk7kvzMsIyftzmZqxBJ+7xj9ZqnX8Lt 3GvVpcsYVzpIMGYdnzldu3/QhiWnh+AFaAuh59KQPTyNE93AjxqtJtluvmRO0DSs UjlSyeb3sXZUSA== -----END CERTIFICATE-----Generated at Tue Dec 23 13:03:39 2025 by rpki-client