This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft File: VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json) Hash identifier: whqXgzMeOhO+geQwowNwn0Am+stS249ZRxjVoCU+A1s= Subject key identifier: D8:E4:36:A4:A7:58:10:6A:53:88:62:55:58:CA:FE:AC:DE:0E:AF:C8 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019AE8980095C03B65FD2510799137763328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft Manifest number: 12 Signing time: Thu 04 Dec 2025 09:01:06 +0000 Manifest this update: Thu 04 Dec 2025 09:01:06 +0000 Manifest next update: Fri 05 Dec 2025 09:01:06 +0000 Files and hashes: 1: Cp4gcvamYBfnZC5YYMArdCgHAWc.roa (hash: HDmnQw9rzA9hJV9zOcmuzMYOeMFvqznOPkwQbUVIAdc=) 2: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: 3FeMN20bJnBK3dFQgvuJU9HkIh4cdegWLX4t5xP+TZI=) 3: jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa (hash: DwN6wlinhuNYDL2QSAaQScCbNulY1NZQGBUVI9igI2E=) 4: uwev7I_QSnb8uPd2lQmP_EPvQyk.roa (hash: pPQnoLSpGD9bPFvss8vOJAXXOfihWCOJuYjZwGXWddQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:98:00:95:c0:3b:65:fd:25:10:79:91:37:76:33:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Dec 4 09:01:06 2025 GMT Not After : Dec 5 09:01:06 2025 GMT Subject: CN=d8e436a4a758106a5388625558cafeacde0eafc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:4b:4d:56:c9:63:4d:29:3a:3a:d3:6e:2a: cd:f3:5a:a2:3c:d8:d6:e1:9a:b5:a4:b7:db:7b:13: e4:b3:c7:b3:a4:5b:90:47:51:29:79:4f:f8:bb:17: 6e:40:c4:ff:2f:e6:bf:fb:b7:a5:0a:c6:44:09:c9: 0d:e8:c1:2c:cc:9b:01:a4:7a:da:48:0b:8a:82:32: b5:d2:a9:f2:c5:26:45:d3:c6:b4:29:84:54:9b:e3: 3b:38:0b:43:cc:d5:0e:54:a6:d0:aa:62:fe:d9:b5: 42:49:09:fd:bc:bf:ca:31:45:bc:2c:2b:6e:09:1b: f3:1e:5c:28:4f:ed:0c:7c:70:25:b6:15:bb:b0:e0: ca:aa:ea:e7:59:8e:ae:d3:a3:a6:fb:55:66:71:38: 28:48:db:19:e5:58:36:2c:a2:33:80:ba:28:18:cd: eb:b7:35:d4:50:4b:36:86:af:96:4e:ee:e5:2d:d9: ec:06:09:8c:62:99:5f:20:62:80:d9:52:47:ee:4a: 14:d2:38:1b:74:aa:f4:cf:77:4b:33:67:f5:18:54: 00:38:f4:ba:28:42:c8:8d:8a:9f:18:53:5a:3b:15: 14:d6:04:d7:be:66:93:71:23:91:bb:52:97:65:54: 23:ec:db:84:46:51:e3:45:5c:64:ed:7b:47:5c:44: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:36:A4:A7:58:10:6A:53:88:62:55:58:CA:FE:AC:DE:0E:AF:C8 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9c:ee:08:6d:4b:3a:51:04:2c:7a:44:d7:70:7a:d3:59:bd: 46:ae:10:be:13:4f:cc:9c:87:b8:e6:a9:56:c1:fe:d1:a3:ea: e3:33:39:79:be:49:e6:1d:0c:24:aa:a7:49:b4:b7:12:00:c8: 13:83:fa:f5:b3:21:2c:9c:22:f4:e1:43:e7:6e:48:57:7a:62: d1:a1:36:e0:54:73:4d:81:f1:f7:62:92:b3:c8:21:6c:01:3a: a6:93:85:13:d5:e6:dc:d4:dd:78:20:23:81:73:f6:54:d5:0d: 62:d9:89:3c:93:59:57:84:90:df:95:7f:b7:4e:e6:d8:2b:c0: 30:ab:4a:b5:48:38:15:c0:c4:73:68:b8:89:81:26:e7:4f:b3: 0e:4c:f7:52:2c:19:70:ec:29:08:a5:22:6b:e8:0b:17:05:ce: 1c:a2:d3:0e:94:f0:6a:f7:c0:cd:22:a1:fe:72:8e:f1:67:1d: c5:4d:80:97:99:22:67:40:cc:d4:4f:1f:34:07:b2:22:8a:89: 4b:80:28:c1:ec:34:7d:04:49:6e:1e:4c:e7:dc:fa:23:02:b4: f1:e5:c2:e0:40:cb:a1:20:17:52:f8:62:b6:dd:1b:2f:28:31: 52:ee:ee:75:f1:bd:53:2b:f0:1d:14:48:ce:eb:0d:b9:88:03: ef:71:c1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZromACVwDtl/SUQeZE3djMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjUxMjA0MDkwMTA2WhcNMjUxMjA1MDkwMTA2WjAzMTEwLwYDVQQD EyhkOGU0MzZhNGE3NTgxMDZhNTM4ODYyNTU1OGNhZmVhY2RlMGVhZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOBLTVbJY00pOjrTbirN81qiPNjW 4Zq1pLfbexPks8ezpFuQR1EpeU/4uxduQMT/L+a/+7elCsZECckN6MEszJsBpHra SAuKgjK10qnyxSZF08a0KYRUm+M7OAtDzNUOVKbQqmL+2bVCSQn9vL/KMUW8LCtu CRvzHlwoT+0MfHAlthW7sODKqurnWY6u06Om+1VmcTgoSNsZ5Vg2LKIzgLooGM3r tzXUUEs2hq+WTu7lLdnsBgmMYplfIGKA2VJH7koU0jgbdKr0z3dLM2f1GFQAOPS6 KELIjYqfGFNaOxUU1gTXvmaTcSORu1KXZVQj7NuERlHjRVxk7XtHXERa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjkNqSnWBBqU4hiVVjK/qzeDq/IMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5zuCG1L OlEELHpE13B601m9Rq4QvhNPzJyHuOapVsH+0aPq4zM5eb5J5h0MJKqnSbS3EgDI E4P69bMhLJwi9OFD525IV3pi0aE24FRzTYHx92KSs8ghbAE6ppOFE9Xm3NTdeCAj gXP2VNUNYtmJPJNZV4SQ35V/t07m2CvAMKtKtUg4FcDEc2i4iYEm50+zDkz3UiwZ cOwpCKUia+gLFwXOHKLTDpTwavfAzSKh/nKO8WcdxU2Al5kiZ0DM1E8fNAeyIoqJ S4Aowew0fQRJbh5M59z6IwK08eXC4EDLoSAXUvhitt0bLygxUu7udfG9UyvwHRRI zusNuYgD73HBpg== -----END CERTIFICATE-----Generated at Thu Dec 4 11:18:01 2025 by rpki-client