This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json) Hash identifier: S5maB6ljCt7zXUy3bRQDTbW0y0urCFp26DYFNv37p7g= Subject key identifier: A0:B8:89:6A:35:83:50:CE:13:E0:C8:66:8C:3C:33:D8:2A:F5:A9:C7 Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c Certificate serial: 019AF1641130A6D28CF8BE1E7D00F23A29C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft Manifest number: 024E Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=) 2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: i56p1MQBNkzPyCPTRAmr7ETc4XPrkOgF2tVXj8SdTHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:11:30:a6:d2:8c:f8:be:1e:7d:00:f2:3a:29:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=a0b8896a358350ce13e0c8668c3c33d82af5a9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:64:98:c8:4e:12:44:e6:e2:4f:49:f8:ab: c2:90:f7:96:36:9d:9e:40:98:d2:43:36:2b:4e:8b: 40:66:0e:fa:c9:3d:fa:61:ab:2e:46:7e:74:24:58: 63:cf:7d:41:25:25:32:03:88:a0:f2:5f:26:91:01: 61:90:60:30:76:19:3c:02:ee:43:35:c2:b4:d5:8a: c3:f7:71:8a:13:c5:8a:06:39:f3:6c:9e:b9:e4:23: 70:79:d8:6f:bc:07:87:d0:f3:2f:6b:a3:f7:5e:35: 5a:ed:43:18:ce:a1:7f:b6:e0:37:9a:58:02:f7:e3: 6b:35:64:48:85:d4:5e:32:e1:88:a9:ea:e7:a4:2e: 6e:51:aa:f3:58:76:b8:04:66:65:21:d3:08:f7:c4: e0:ed:09:e2:40:88:71:8e:a3:61:99:ac:4d:3a:35: 7c:21:da:37:d9:a5:a0:f8:b8:51:65:d4:c9:d6:ab: 77:11:9b:87:3d:f8:93:4d:99:f3:b0:5e:8d:d2:9d: 3c:ef:17:83:e3:b8:c0:db:37:c4:8d:18:6a:ad:9b: 3e:0d:ea:b8:b2:6d:fa:67:37:41:61:db:75:db:4c: 62:b5:70:04:c1:33:8f:49:90:18:2d:cb:61:69:75: fc:be:a0:79:e6:74:a4:46:de:62:a8:55:d3:6c:ab: 96:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:89:6A:35:83:50:CE:13:E0:C8:66:8C:3C:33:D8:2A:F5:A9:C7 X509v3 Authority Key Identifier: keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:cc:bd:e0:34:7a:f5:0c:97:74:17:76:02:b8:1f:f0:4f:4a: a4:c8:1d:18:c7:dd:6f:c3:76:11:18:b1:61:d2:c3:19:c4:f2: c5:66:f0:5b:01:30:67:5a:5c:0b:7e:d8:dc:a2:1b:99:89:c5: 6e:b8:ba:af:bf:c0:83:cf:8e:c8:68:8b:73:7a:62:01:b1:eb: 73:d3:f7:99:96:15:9a:07:65:5e:94:0b:28:f4:4b:b0:b0:06: a3:37:92:e6:64:5f:ea:a4:a4:38:50:3b:b0:29:f5:e8:64:73: ce:1e:0b:a1:1f:2e:d8:09:f9:9f:0c:c1:23:fd:cc:56:9e:d7: 98:04:39:ec:3b:0d:da:ad:69:cd:61:8f:fe:d0:91:58:81:73: c6:41:05:54:a1:38:8c:fa:5d:92:3e:6a:b2:37:8c:93:0d:3c: 93:1d:6f:a1:45:28:b6:63:06:16:d4:3b:d6:b9:ee:1e:27:87: b3:08:c4:34:52:bc:0e:33:2e:21:a4:cb:ce:12:7f:02:2f:cc: 93:ec:10:72:21:df:58:92:f2:24:46:68:22:33:c9:53:81:5e: bd:b0:f3:73:dd:19:b4:da:32:a5:d3:f2:3e:ea:ef:f6:23:d7: aa:4f:6b:fc:f1:85:6e:4b:82:f1:c4:d4:c5:87:98:f0:d6:1a: f0:cc:95:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBEwptKM+L4efQDyOinDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz NjQ5OWMwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EyhhMGI4ODk2YTM1ODM1MGNlMTNlMGM4NjY4YzNjMzNkODJhZjVhOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRRkmMhOEkTm4k9J+KvCkPeWNp2e QJjSQzYrTotAZg76yT36YasuRn50JFhjz31BJSUyA4ig8l8mkQFhkGAwdhk8Au5D NcK01YrD93GKE8WKBjnzbJ655CNwedhvvAeH0PMva6P3XjVa7UMYzqF/tuA3mlgC 9+NrNWRIhdReMuGIqernpC5uUarzWHa4BGZlIdMI98Tg7QniQIhxjqNhmaxNOjV8 Ido32aWg+LhRZdTJ1qt3EZuHPfiTTZnzsF6N0p087xeD47jA2zfEjRhqrZs+Deq4 sm36ZzdBYdt120xitXAEwTOPSZAYLcthaXX8vqB55nSkRt5iqFXTbKuW9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC4iWo1g1DOE+DIZow8M9gq9anHMB8GA1UdIwQY MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3 LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsy94DR6 9QyXdBd2Argf8E9KpMgdGMfdb8N2ERixYdLDGcTyxWbwWwEwZ1pcC37Y3KIbmYnF bri6r7/Ag8+OyGiLc3piAbHrc9P3mZYVmgdlXpQLKPRLsLAGozeS5mRf6qSkOFA7 sCn16GRzzh4LoR8u2An5nwzBI/3MVp7XmAQ57DsN2q1pzWGP/tCRWIFzxkEFVKE4 jPpdkj5qsjeMkw08kx1voUUotmMGFtQ71rnuHieHswjENFK8DjMuIaTLzhJ/Ai/M k+wQciHfWJLyJEZoIjPJU4FevbDzc90ZtNoypdPyPurv9iPXqk9r/PGFbkuC8cTU xYeY8NYa8MyVQw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:14 2025 by rpki-client