This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json) Hash identifier: Y4NZ0Z+wWfIuPDMiiEoDUCcyVSY3eUN3JzdtmxCbmj8= Subject key identifier: 49:6F:57:37:F9:B4:0C:04:AE:E3:81:8D:B5:26:1C:25:8C:CB:2B:74 Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019AF3524DFFBC113E095AE7A67F7019C65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft Manifest number: 13BE Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=) 2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: OsafrYheuzHbiMe3UoCdJa5ptipUZZoJ5kH60cUr7bQ=) 3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4d:ff:bc:11:3e:09:5a:e7:a6:7f:70:19:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=496f5737f9b40c04aee3818db5261c258ccb2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:30:42:24:5d:17:a1:4d:2a:ab:98:f3:00: 9b:fa:84:4a:dd:26:4e:5b:f7:e4:43:ea:07:f7:f9: 10:45:92:58:fd:50:ee:fc:28:ad:14:d0:52:b6:b6: 25:b3:be:0d:a3:c4:42:28:be:4e:a9:44:92:0b:65: ca:9a:21:39:8c:66:d6:53:ad:e1:e3:51:c1:23:97: dc:af:34:83:58:b5:e2:ea:99:d5:c3:18:b5:61:97: 10:13:dd:18:1b:74:d6:f3:88:10:9b:0f:eb:ba:83: e0:2f:f6:7e:10:7b:32:22:84:52:5b:f4:98:f1:a6: cd:29:af:26:88:cc:e9:41:43:54:ad:4d:56:8e:90: c6:8b:68:c2:d0:e7:91:6e:cb:04:9a:cd:35:19:87: 27:90:2f:f9:42:8b:ef:4e:04:02:a2:98:eb:9d:1d: e0:3b:f5:8c:ec:7d:16:ff:2c:6f:47:2a:4e:a2:20: b6:d4:a4:d1:23:cf:53:62:34:c5:1d:72:0a:8c:df: 40:2f:dd:05:3e:1f:5e:5c:fe:0c:34:91:05:bd:81: 2b:c2:4a:74:7c:b3:c6:2d:7e:69:c2:35:e6:57:dc: 44:8f:e4:1f:01:95:9e:4f:12:9d:df:fd:8f:f2:8c: c4:46:9a:fe:8f:ec:cc:fc:8e:bf:15:1c:30:44:70: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6F:57:37:F9:B4:0C:04:AE:E3:81:8D:B5:26:1C:25:8C:CB:2B:74 X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:29:34:7b:e2:70:72:0a:42:08:aa:a1:c7:36:3b:4a:c8:d0: fd:1b:a2:48:97:d7:00:df:1f:fa:c4:b3:4d:2a:f1:d3:ef:9b: f5:7a:48:d9:f0:66:24:ba:4a:e7:1e:26:31:30:e8:5d:48:78: a9:a1:c2:77:c4:ab:ca:32:15:28:44:e0:19:5c:cb:64:97:7c: 8f:aa:90:d2:31:3a:01:b4:99:7d:21:e9:a6:63:76:5d:0e:c2: 04:fd:89:01:bd:9d:ae:08:9f:e6:6f:1f:7c:4b:ed:9b:be:fd: ca:0b:2b:2d:da:95:83:44:52:f8:99:1d:90:ad:52:b4:52:b3: 41:37:07:47:e1:d7:79:14:4d:97:81:49:78:44:81:4c:26:2d: a7:4f:fe:cb:fa:87:13:c0:51:c6:86:f6:e1:25:b7:d8:af:73: e0:1d:4e:53:0a:d8:41:fa:d8:92:64:89:f9:cd:15:b4:7e:bf: a2:57:5e:f3:7b:df:0b:09:e2:0f:e8:c5:50:8a:3d:62:ea:60: b7:92:1b:70:f3:06:98:48:3c:cd:40:6e:0a:ed:7d:56:0a:27: 45:bc:b1:89:50:da:40:2a:6b:87:74:9b:58:ad:68:25:8e:0f: 5f:99:2f:bf:5b:19:dc:7f:71:1d:0c:f3:14:f6:98:3d:ab:78: 89:7d:1f:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk3/vBE+CVrnpn9wGcZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg0OTZmNTczN2Y5YjQwYzA0YWVlMzgxOGRiNTI2MWMyNThjY2IyYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OkwQiRdF6FNKquY8wCb+oRK3SZO W/fkQ+oH9/kQRZJY/VDu/CitFNBStrYls74No8RCKL5OqUSSC2XKmiE5jGbWU63h 41HBI5fcrzSDWLXi6pnVwxi1YZcQE90YG3TW84gQmw/ruoPgL/Z+EHsyIoRSW/SY 8abNKa8miMzpQUNUrU1WjpDGi2jC0OeRbssEms01GYcnkC/5QovvTgQCopjrnR3g O/WM7H0W/yxvRypOoiC21KTRI89TYjTFHXIKjN9AL90FPh9eXP4MNJEFvYErwkp0 fLPGLX5pwjXmV9xEj+QfAZWeTxKd3/2P8ozERpr+j+zM/I6/FRwwRHBPLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElvVzf5tAwEruOBjbUmHCWMyyt0MB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCk0e+Jw cgpCCKqhxzY7SsjQ/RuiSJfXAN8f+sSzTSrx0++b9XpI2fBmJLpK5x4mMTDoXUh4 qaHCd8SryjIVKETgGVzLZJd8j6qQ0jE6AbSZfSHppmN2XQ7CBP2JAb2drgif5m8f fEvtm779ygsrLdqVg0RS+JkdkK1StFKzQTcHR+HXeRRNl4FJeESBTCYtp0/+y/qH E8BRxob24SW32K9z4B1OUwrYQfrYkmSJ+c0VtH6/olde83vfCwniD+jFUIo9Yupg t5IbcPMGmEg8zUBuCu19VgonRbyxiVDaQCprh3SbWK1oJY4PX5kvv1sZ3H9xHQzz FPaYPat4iX0f1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:36 2025 by rpki-client