This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json) Hash identifier: aKa47nQ2dBPQeMXGBM+YJs5FCs64zG7P+JuROxIomrY= Subject key identifier: 61:8D:5F:41:89:DD:1E:5F:87:ED:92:8F:F9:EB:CB:FD:0B:22:3F:D1 Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Certificate serial: 019B18DF304420DAD606FA96A112312EC4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft Manifest number: 1543 Signing time: Sat 13 Dec 2025 18:00:38 +0000 Manifest this update: Sat 13 Dec 2025 18:00:38 +0000 Manifest next update: Sun 14 Dec 2025 18:00:38 +0000 Files and hashes: 1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=) 2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=) 3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: FH8+q5lY/jpwyBXThOqaT6KxbiXsZaGq0PvS+QbUrT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:30:44:20:da:d6:06:fa:96:a1:12:31:2e:c4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Validity Not Before: Dec 13 18:00:38 2025 GMT Not After : Dec 14 18:00:38 2025 GMT Subject: CN=618d5f4189dd1e5f87ed928ff9ebcbfd0b223fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:65:cc:a8:09:8e:24:9c:28:16:15:f4:33: b0:ad:32:92:c2:17:a8:67:fe:3b:7c:e2:af:23:2a: 41:22:8d:0f:ef:d7:f4:e3:36:d3:ec:57:f5:e2:14: 19:86:14:45:8c:fc:3b:aa:50:35:ed:eb:f4:b1:90: 37:f8:4e:53:01:cb:04:b6:22:48:55:7f:f1:0e:e5: d8:f9:3c:20:10:a3:dc:59:69:e1:b1:e2:af:a1:50: b5:b1:be:bf:60:89:a3:48:28:64:aa:04:fc:e2:e8: 96:39:f9:ab:ac:8b:8f:38:ee:a1:73:b2:16:dc:dc: 57:c1:2b:65:72:81:2c:61:ff:46:7c:4a:18:89:a6: 6a:8b:02:13:44:79:dc:a3:d2:77:60:b9:d6:d5:6c: 50:5e:78:88:d3:13:43:5f:ed:32:a8:37:ce:c4:5f: 3d:1a:7e:57:8e:dc:a5:9c:da:4a:23:0d:74:a3:38: 81:e7:e9:10:15:a6:6e:4f:3f:3b:2f:ee:0a:b7:c5: d6:a9:79:09:60:8e:ff:c6:18:f4:2d:b2:37:94:8e: 2f:6a:53:ed:7a:bf:62:53:a3:29:14:fa:7b:ae:5b: dc:87:39:63:18:2d:d8:10:d1:08:0d:6c:54:5f:7a: 4f:14:c7:9c:ad:d7:90:84:e0:7b:45:1e:f7:27:8f: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8D:5F:41:89:DD:1E:5F:87:ED:92:8F:F9:EB:CB:FD:0B:22:3F:D1 X509v3 Authority Key Identifier: keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:bd:c2:5b:c2:d4:dd:3f:c7:f1:7e:4a:03:ba:f2:4f:69: bd:26:2d:92:ba:67:ed:80:cf:eb:08:d3:60:2b:0a:3a:d1:37: 96:bb:9c:de:f5:4b:15:09:3c:73:70:35:a3:61:27:8f:18:44: 20:0b:28:f7:f0:85:66:b7:18:39:dd:35:b2:d7:a8:55:14:ec: f7:db:aa:67:d8:a2:d7:c5:eb:89:67:92:d1:60:59:e4:6f:17: 5d:43:a0:68:79:79:9d:d6:fe:ad:f5:4e:b2:7c:1d:fb:5d:9e: 5d:92:cb:d3:b7:73:39:03:b7:95:11:11:50:a1:e5:46:46:64: 1c:97:a0:66:79:35:56:3e:69:5e:d9:cf:24:b8:3a:6a:fb:a4: 25:24:67:2b:92:84:b1:cb:ba:e5:a1:e6:ac:f7:25:c8:14:4c: 53:61:95:4b:44:d4:f5:a4:54:78:53:ed:92:3f:53:d5:37:75: ed:0a:1f:c1:5d:ea:e3:b9:a9:4b:3d:44:c5:0a:f7:16:bb:fe: f8:2c:89:bc:37:2e:a1:3b:39:fb:ca:61:cf:0a:52:ed:9c:55: 41:94:ae:d3:13:50:88:df:00:59:1d:43:33:55:e0:b2:de:3f: e8:5b:7c:34:2d:05:b8:99:fe:a4:62:eb:e7:db:de:87:50:80: 26:18:82:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3zBEINrWBvqWoRIxLsTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj YjQ0MzAwHhcNMjUxMjEzMTgwMDM4WhcNMjUxMjE0MTgwMDM4WjAzMTEwLwYDVQQD Eyg2MThkNWY0MTg5ZGQxZTVmODdlZDkyOGZmOWViY2JmZDBiMjIzZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR1lzKgJjiScKBYV9DOwrTKSwheo Z/47fOKvIypBIo0P79f04zbT7Ff14hQZhhRFjPw7qlA17ev0sZA3+E5TAcsEtiJI VX/xDuXY+TwgEKPcWWnhseKvoVC1sb6/YImjSChkqgT84uiWOfmrrIuPOO6hc7IW 3NxXwStlcoEsYf9GfEoYiaZqiwITRHnco9J3YLnW1WxQXniI0xNDX+0yqDfOxF89 Gn5XjtylnNpKIw10oziB5+kQFaZuTz87L+4Kt8XWqXkJYI7/xhj0LbI3lI4valPt er9iU6MpFPp7rlvchzljGC3YENEIDWxUX3pPFMecrdeQhOB7RR73J487xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGNX0GJ3R5fh+2Sj/nry/0LIj/RMB8GA1UdIwQY MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4 LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdy9wlvC 1N0/x/F+SgO68k9pvSYtkrpn7YDP6wjTYCsKOtE3lruc3vVLFQk8c3A1o2EnjxhE IAso9/CFZrcYOd01steoVRTs99uqZ9ii18XriWeS0WBZ5G8XXUOgaHl5ndb+rfVO snwd+12eXZLL07dzOQO3lRERUKHlRkZkHJegZnk1Vj5pXtnPJLg6avukJSRnK5KE scu65aHmrPclyBRMU2GVS0TU9aRUeFPtkj9T1Td17QofwV3q47mpSz1ExQr3Frv+ +CyJvDcuoTs5+8phzwpS7ZxVQZSu0xNQiN8AWR1DM1Xgst4/6Ft8NC0FuJn+pGLr 59veh1CAJhiC0g== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:26 2025 by rpki-client