This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json) Hash identifier: LO6k0ly9I/pZADr4EMR75+lWhf6xaXgXXw6rVDoROyI= Subject key identifier: 30:58:BD:3D:DD:7D:64:15:D6:B0:1B:14:C0:68:AF:72:F1:1F:DF:8D Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024 Certificate serial: 019AF57785A39D0617B3C0DEC9C2C00C2BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:00:41 +0000 Manifest this update: Sat 06 Dec 2025 21:00:41 +0000 Manifest next update: Sun 07 Dec 2025 21:00:41 +0000 Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=) 2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=) 3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: GHbkuWqncx+ocGTumJdeSfM6TNILJwq3iHdozaTQTD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:85:a3:9d:06:17:b3:c0:de:c9:c2:c0:0c:2b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024 Validity Not Before: Dec 6 21:00:41 2025 GMT Not After : Dec 7 21:00:41 2025 GMT Subject: CN=3058bd3ddd7d6415d6b01b14c068af72f11fdf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:2e:48:65:a8:b7:be:d8:24:9c:fe:08:0a: 20:1a:f7:43:23:d9:cf:90:c5:5c:6b:c6:fa:26:db: c1:78:be:a2:56:77:41:64:da:5b:3a:a5:8c:7a:e6: 98:ee:d9:1d:a3:24:a9:ba:86:6a:72:06:35:9c:b7: af:3a:1c:07:97:d3:42:e8:84:e1:6a:2d:c6:99:a4: 81:f9:e2:61:50:cc:f6:02:54:3b:21:f9:52:41:e2: 08:9b:a9:95:49:29:c4:bb:41:0b:b4:52:31:30:75: b5:80:d7:2c:79:8d:62:90:04:00:52:5b:61:52:d8: 88:93:5a:bb:a6:e8:95:df:00:10:bd:9f:ad:1b:f6: 98:6d:3d:85:af:d1:c0:3b:44:2e:0d:d6:f5:44:e1: 71:93:37:bf:51:25:63:1b:ce:ba:b4:dc:58:39:3d: 73:06:34:ad:fd:30:74:c1:cb:1f:6b:cb:e2:1f:8b: d8:51:45:43:97:c3:24:0e:e7:6d:21:a1:15:51:1a: f1:49:60:6f:e6:39:ed:88:ac:4c:8d:5b:bf:56:18: 31:26:08:49:80:56:bc:0f:d1:0c:03:a4:1d:79:ba: d8:54:65:f1:19:06:5d:83:d5:13:ae:e4:03:86:d7: 0a:36:c4:bd:2a:69:17:36:2a:f0:cb:3b:f5:b3:a5: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:BD:3D:DD:7D:64:15:D6:B0:1B:14:C0:68:AF:72:F1:1F:DF:8D X509v3 Authority Key Identifier: keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b7:ce:62:d2:c4:28:31:a8:1b:0e:46:ed:60:ca:b1:5e:d5: 1a:c7:3a:b1:07:ae:eb:82:f9:da:b5:88:83:bc:f8:c5:42:05: 12:e7:e1:dd:07:ec:8a:00:7d:36:f6:fc:c7:76:69:c9:86:f2: ca:01:b1:1b:54:79:e4:00:1a:e4:43:15:b3:ae:c0:9a:56:af: 90:5c:87:d9:97:80:ec:d4:7b:7f:37:18:c6:ae:6b:0e:55:fd: 0a:f1:20:7a:70:a0:93:b8:c9:63:b1:cd:57:a9:fa:50:c3:de: e9:d0:88:fe:ea:8a:f4:48:72:9d:8f:f3:75:e3:5d:4d:23:05: e8:2d:5f:bf:26:0f:95:47:45:cb:a4:e0:de:0d:58:a8:e3:f6: 01:7f:aa:4f:3c:d3:1d:82:6d:e0:38:87:a1:f6:57:69:96:9a: a8:e7:c6:97:41:99:b5:48:20:42:f7:a4:b9:e2:a9:2a:03:67: 1b:b3:e2:1b:74:de:ea:93:5f:c5:82:d8:14:16:2a:8b:52:09: 34:42:39:48:14:ea:88:62:4d:49:5d:1d:e7:da:6d:84:0d:bc: d9:91:d4:b5:46:31:83:e5:46:ee:56:db:7b:44:27:f2:5e:0e: 54:ec:b2:d3:13:e2:93:ed:10:85:eb:dd:b3:67:49:9a:ef:21: 11:92:a0:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4WjnQYXs8DeycLADCusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDM0MTVjMjJlMTQxOTcyYzBkN2U3NmMyNGU4OGIyMjQy N2IwMjQwHhcNMjUxMjA2MjEwMDQxWhcNMjUxMjA3MjEwMDQxWjAzMTEwLwYDVQQD EygzMDU4YmQzZGRkN2Q2NDE1ZDZiMDFiMTRjMDY4YWY3MmYxMWZkZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfUuSGWot77YJJz+CAogGvdDI9nP kMVca8b6JtvBeL6iVndBZNpbOqWMeuaY7tkdoySpuoZqcgY1nLevOhwHl9NC6ITh ai3GmaSB+eJhUMz2AlQ7IflSQeIIm6mVSSnEu0ELtFIxMHW1gNcseY1ikAQAUlth UtiIk1q7puiV3wAQvZ+tG/aYbT2Fr9HAO0QuDdb1ROFxkze/USVjG866tNxYOT1z BjSt/TB0wcsfa8viH4vYUUVDl8MkDudtIaEVURrxSWBv5jntiKxMjVu/VhgxJghJ gFa8D9EMA6QdebrYVGXxGQZdg9UTruQDhtcKNsS9KmkXNirwyzv1s6WsSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBYvT3dfWQV1rAbFMBor3LxH9+NMB8GA1UdIwQY MBaAFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2Mt Zjk5NjdjM2FkM2U0LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2MtZjk5NjdjM2FkM2U0 LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprfOYtLE KDGoGw5G7WDKsV7VGsc6sQeu64L52rWIg7z4xUIFEufh3QfsigB9Nvb8x3ZpyYby ygGxG1R55AAa5EMVs67AmlavkFyH2ZeA7NR7fzcYxq5rDlX9CvEgenCgk7jJY7HN V6n6UMPe6dCI/uqK9EhynY/zdeNdTSMF6C1fvyYPlUdFy6Tg3g1YqOP2AX+qTzzT HYJt4DiHofZXaZaaqOfGl0GZtUggQvekueKpKgNnG7PiG3Te6pNfxYLYFBYqi1IJ NEI5SBTqiGJNSV0d59pthA282ZHUtUYxg+VG7lbbe0Qn8l4OVOyy0xPik+0Qhevd s2dJmu8hEZKgQA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:29:47 2025 by rpki-client