This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json) Hash identifier: uWal5VAYUgUz4jxTpcdqLMiI66CM+KeAw+6J9jC8C+Y= Subject key identifier: B9:36:53:66:42:4B:37:2B:87:5A:CD:D6:7F:57:E3:A8:16:BB:7B:82 Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Certificate serial: 019AF3C027D82BA10045724669146E9431BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft Manifest number: 1136 Signing time: Sat 06 Dec 2025 13:00:47 +0000 Manifest this update: Sat 06 Dec 2025 13:00:47 +0000 Manifest next update: Sun 07 Dec 2025 13:00:47 +0000 Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=) 2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: w8Cbr2Gxvrb87ZjSQKxI1y69nlSBwJcYpi3r7w7B53E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:27:d8:2b:a1:00:45:72:46:69:14:6e:94:31:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Validity Not Before: Dec 6 13:00:47 2025 GMT Not After : Dec 7 13:00:47 2025 GMT Subject: CN=b9365366424b372b875acdd67f57e3a816bb7b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:41:dc:ad:24:a3:d6:64:80:87:e8:ae:f7: 83:a5:57:f9:e1:9b:f0:93:2e:44:10:93:9b:ed:ab: 5b:e5:c6:e6:10:50:2b:74:93:fd:a2:da:69:9c:31: 2f:6d:22:e7:9c:1e:48:3d:a1:cf:9c:04:47:9e:b1: ee:40:f8:a4:17:9e:f1:7e:4e:c5:a0:f2:80:56:aa: f9:08:cf:05:41:d9:2e:e9:9f:47:fb:dd:1d:b0:e0: 1d:3c:e9:c0:0b:50:3f:1c:db:13:47:b6:2e:90:5c: 77:0d:ec:e3:78:47:96:5a:48:dc:bf:43:b6:54:13: 65:98:a3:79:17:5d:4d:24:02:f1:59:01:1f:f9:2b: 4a:fd:26:0e:4c:94:3c:95:81:31:24:f0:65:85:09: 82:cc:c1:17:34:97:60:cd:5b:b0:dc:4f:0d:3c:85: 2b:9f:70:5d:06:51:9a:91:8d:b4:bb:50:92:d2:42: 2a:58:59:db:e6:f9:69:46:3e:15:ac:ce:56:94:f6: 09:b8:a4:87:5b:5a:67:5a:51:c1:70:9c:69:e8:a6: 20:83:23:33:bb:3d:16:eb:ae:bd:98:54:97:00:64: bd:61:d8:67:9d:03:bd:48:1c:86:a9:94:f3:8c:59: 2a:43:ac:95:6c:ef:5b:15:7a:b3:86:43:16:61:25: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:36:53:66:42:4B:37:2B:87:5A:CD:D6:7F:57:E3:A8:16:BB:7B:82 X509v3 Authority Key Identifier: keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:54:4e:08:b7:02:46:6c:55:03:2d:3d:57:10:59:82:c3:f3: 6d:9d:dd:49:ea:ac:81:f4:11:db:af:1c:ed:22:60:b1:6a:9f: f4:eb:45:69:61:df:00:89:c1:02:7d:97:6b:b9:d4:28:32:4a: 22:74:aa:fd:f7:8b:55:46:df:93:27:9a:1f:4c:f1:da:bf:15: 42:37:13:72:c3:8b:48:e8:75:4c:10:f7:4c:2a:6a:9a:45:50: 64:8f:ff:fd:f1:52:7c:f6:a7:4b:5a:b7:d1:96:4a:78:a7:94: b9:bb:34:71:44:a5:90:2e:f5:9c:0c:ac:03:72:05:70:d4:54: a0:ca:4a:08:5c:13:92:87:8c:92:e9:23:27:06:ed:de:e7:b9: 8a:67:ea:9b:f7:1a:6c:36:df:2e:88:93:f0:80:30:cf:af:86: 5e:e0:15:0e:d3:55:9d:29:81:e9:e2:e4:21:ac:a4:eb:e2:98: 25:40:3e:82:fb:f6:fd:31:ae:13:41:85:05:e9:9b:18:34:e9: 91:46:42:2d:ae:32:a3:7e:46:a9:0b:28:72:c3:76:6b:d6:1d: a7:f8:bc:94:50:58:55:02:0a:ac:85:7a:8a:79:1b:0b:d4:11: 8b:a3:12:bf:f7:50:67:24:c2:03:78:e2:70:81:c9:37:96:7a: b3:8d:5b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCfYK6EARXJGaRRulDG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj NDlkMzEwHhcNMjUxMjA2MTMwMDQ3WhcNMjUxMjA3MTMwMDQ3WjAzMTEwLwYDVQQD EyhiOTM2NTM2NjQyNGIzNzJiODc1YWNkZDY3ZjU3ZTNhODE2YmI3YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkVB3K0ko9ZkgIforveDpVf54Zvw ky5EEJOb7atb5cbmEFArdJP9otppnDEvbSLnnB5IPaHPnARHnrHuQPikF57xfk7F oPKAVqr5CM8FQdku6Z9H+90dsOAdPOnAC1A/HNsTR7YukFx3DezjeEeWWkjcv0O2 VBNlmKN5F11NJALxWQEf+StK/SYOTJQ8lYExJPBlhQmCzMEXNJdgzVuw3E8NPIUr n3BdBlGakY20u1CS0kIqWFnb5vlpRj4VrM5WlPYJuKSHW1pnWlHBcJxp6KYggyMz uz0W6669mFSXAGS9YdhnnQO9SByGqZTzjFkqQ6yVbO9bFXqzhkMWYSUHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk2U2ZCSzcrh1rN1n9X46gWu3uCMB8GA1UdIwQY MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3 LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1ROCLcC RmxVAy09VxBZgsPzbZ3dSeqsgfQR268c7SJgsWqf9OtFaWHfAInBAn2Xa7nUKDJK InSq/feLVUbfkyeaH0zx2r8VQjcTcsOLSOh1TBD3TCpqmkVQZI///fFSfPanS1q3 0ZZKeKeUubs0cUSlkC71nAysA3IFcNRUoMpKCFwTkoeMkukjJwbt3ue5imfqm/ca bDbfLoiT8IAwz6+GXuAVDtNVnSmB6eLkIayk6+KYJUA+gvv2/TGuE0GFBembGDTp kUZCLa4yo35GqQsocsN2a9Ydp/i8lFBYVQIKrIV6inkbC9QRi6MSv/dQZyTCA3ji cIHJN5Z6s41bBg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:26 2025 by rpki-client