This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json) Hash identifier: ts7PTALJH7uIEtQ+H47kBi2O8blTbkZwWW4jj0BxYfA= Subject key identifier: AD:45:92:7E:08:04:01:EE:D1:88:B8:2A:95:40:46:27:4B:4B:03:53 Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Certificate serial: 019AF20923B0021663EFCB2F52049DE49E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft Manifest number: 1014 Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=) 2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=) 3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: Cdq7qYw+4YDcWF2jT7md6LUQ2bPkrjLWKu7nrwFi0HM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:23:b0:02:16:63:ef:cb:2f:52:04:9d:e4:9e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=ad45927e080401eed188b82a954046274b4b0353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:6b:62:01:54:d7:ce:14:3c:5d:9a:b9:72: de:84:7d:65:9f:26:d5:91:10:83:af:1d:16:e3:68: f4:83:2e:32:74:a3:de:10:67:b0:d4:62:4c:fc:b2: 7d:42:7a:75:a6:d2:d6:3d:11:a4:12:06:c9:e9:2f: f5:45:b2:ee:62:a5:d0:73:b0:36:60:d8:1c:45:f6: c0:f3:0a:fa:c0:51:6e:f7:05:19:57:3f:c7:37:f7: b6:9f:87:fa:32:c8:e0:33:c5:ca:dc:29:78:b0:b3: 2c:7f:e2:2a:6a:77:65:e1:fa:58:2c:93:69:b9:75: 07:fb:dc:5e:68:ec:8e:fb:55:e1:92:27:34:1c:92: f6:cf:6e:70:b0:c0:ef:1c:89:fd:9d:bc:5b:80:2d: ac:07:49:bb:27:1b:a7:f0:e6:eb:f8:c5:49:61:fd: c3:99:85:51:8d:e3:40:9f:be:b7:12:a1:1f:09:16: 21:22:9f:bd:fb:27:7b:33:33:4a:b2:cd:2d:37:cf: 41:22:d4:66:7d:77:db:13:19:8e:d9:37:37:01:79: 1e:c4:aa:88:b6:6b:2c:c8:a3:c6:5a:da:38:18:20: 21:d5:62:19:9e:e3:8b:d4:04:2d:ab:a2:f1:a6:20: 9e:90:27:8d:4a:a3:1a:fd:cc:bc:2f:a8:e2:87:4f: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:92:7E:08:04:01:EE:D1:88:B8:2A:95:40:46:27:4B:4B:03:53 X509v3 Authority Key Identifier: keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ce:c5:2a:48:d3:0c:ea:e7:56:13:39:e8:c7:a9:bd:71:78: bf:6b:d6:dc:ea:8b:46:dc:38:4d:48:c0:9c:71:dd:e7:86:63: 07:3b:da:c4:9f:f4:bf:b0:df:03:8d:df:11:fc:64:4c:d9:e3: 6e:14:36:91:8e:92:66:2c:c3:6f:27:1d:87:0f:04:fa:67:d0: 98:40:97:67:06:11:6d:b8:7e:b3:93:74:c3:b0:ec:69:d1:d3: b0:dc:2d:d3:27:d6:30:df:3a:2a:dd:06:6c:4b:d2:ec:36:b8: 76:e5:a8:92:49:2f:bc:a6:c1:34:81:74:9f:4d:12:52:9f:cd: 22:b0:1a:36:29:c2:36:6d:f9:b5:40:4d:00:a4:e2:1f:84:78: 75:96:e5:7b:3e:5c:c4:94:ee:d5:1b:eb:9f:38:8a:0a:7f:e5: 0a:a6:75:6c:94:ee:30:f5:fd:bd:35:7a:cd:68:64:e1:83:24: 04:8a:5e:c7:99:ed:c3:32:a9:a1:7d:02:41:e2:42:67:9b:e0: 94:eb:f3:6d:5d:0c:10:2e:aa:30:6d:85:f2:9b:ca:71:38:77: 9a:e3:86:78:3f:d4:7d:d7:68:18:49:76:36:20:8a:42:82:56: 86:c6:85:3b:c4:44:2c:13:c2:b4:5f:e3:7a:5a:38:22:c1:a7: fa:ab:9b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSOwAhZj78svUgSd5J4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx OTlkNDkwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EyhhZDQ1OTI3ZTA4MDQwMWVlZDE4OGI4MmE5NTQwNDYyNzRiNGIwMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEFrYgFU184UPF2auXLehH1lnybV kRCDrx0W42j0gy4ydKPeEGew1GJM/LJ9Qnp1ptLWPRGkEgbJ6S/1RbLuYqXQc7A2 YNgcRfbA8wr6wFFu9wUZVz/HN/e2n4f6MsjgM8XK3Cl4sLMsf+Iqandl4fpYLJNp uXUH+9xeaOyO+1Xhkic0HJL2z25wsMDvHIn9nbxbgC2sB0m7Jxun8Obr+MVJYf3D mYVRjeNAn763EqEfCRYhIp+9+yd7MzNKss0tN89BItRmfXfbExmO2Tc3AXkexKqI tmssyKPGWto4GCAh1WIZnuOL1AQtq6LxpiCekCeNSqMa/cy8L6jih0/xhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1Fkn4IBAHu0Yi4KpVARidLSwNTMB8GA1UdIwQY MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAss7FKkjT DOrnVhM56MepvXF4v2vW3OqLRtw4TUjAnHHd54ZjBzvaxJ/0v7DfA43fEfxkTNnj bhQ2kY6SZizDbycdhw8E+mfQmECXZwYRbbh+s5N0w7DsadHTsNwt0yfWMN86Kt0G bEvS7Da4duWokkkvvKbBNIF0n00SUp/NIrAaNinCNm35tUBNAKTiH4R4dZblez5c xJTu1RvrnziKCn/lCqZ1bJTuMPX9vTV6zWhk4YMkBIpex5ntwzKpoX0CQeJCZ5vg lOvzbV0MEC6qMG2F8pvKcTh3muOGeD/UfddoGEl2NiCKQoJWhsaFO8RELBPCtF/j elo4IsGn+qubHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:32 2025 by rpki-client