This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json) Hash identifier: 3OaSDR0cEtOYdC0U2AbBu48TdlUb/qrHICaigzMB5KQ= Subject key identifier: 9B:44:28:C4:EC:33:89:A9:30:A3:25:14:F7:24:40:0F:C0:77:2D:2E Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1 Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1 Certificate serial: 019AF509FC3EAD14B41158CF384DDC2FD36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft Manifest number: 1110 Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 19:01:03 +0000 Manifest next update: Sun 07 Dec 2025 19:01:03 +0000 Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: mPqh9uqpsG3qNjV1cUpQ5JEC6Wa43kRvt3WRhQjlB7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fc:3e:ad:14:b4:11:58:cf:38:4d:dc:2f:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1 Validity Not Before: Dec 6 19:01:03 2025 GMT Not After : Dec 7 19:01:03 2025 GMT Subject: CN=9b4428c4ec3389a930a32514f724400fc0772d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:24:af:eb:d7:86:cb:34:2c:37:a9:94:41: 5d:c4:98:4a:30:b1:c9:d8:b1:d1:ab:7d:0f:b0:35: 95:ef:1b:bc:de:1b:b3:93:82:9f:64:e2:12:f9:d7: 0a:10:80:a2:dc:23:9f:58:bd:a0:0d:eb:48:da:3a: 59:2b:f7:b2:0e:3e:04:7c:fa:42:ff:c1:6e:ed:ce: c5:2c:d8:12:9c:ff:cc:d3:c8:01:1a:31:fd:f5:5d: 08:4c:76:42:ba:c8:d8:f9:ae:94:d6:fd:d5:be:43: 5f:36:ad:0d:c8:aa:3f:e8:7d:bf:14:70:0b:25:61: 38:7a:c2:85:5e:6b:86:0b:56:3c:c3:af:71:69:8f: b5:7d:fd:ac:6f:38:15:20:22:64:f2:c1:62:fb:5b: 4c:ee:1d:65:12:2d:e2:2e:58:ec:e7:8c:16:26:ca: 82:75:fa:13:02:1c:ca:f2:ef:f8:39:90:0a:e5:bd: 05:d1:eb:b4:be:50:e0:01:f5:34:fa:9d:40:51:08: ca:58:b3:8d:17:92:22:7f:3a:01:11:cd:89:35:6e: c7:75:b1:c1:08:cc:4c:8e:80:cf:e8:79:05:46:3f: 92:95:5d:48:dd:87:b0:ea:86:06:a1:3d:f6:53:69: 70:f5:d1:c0:d7:8f:7e:ea:ec:a7:6d:fb:71:8c:e5: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:44:28:C4:EC:33:89:A9:30:A3:25:14:F7:24:40:0F:C0:77:2D:2E X509v3 Authority Key Identifier: keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:76:cd:0c:69:69:f9:e0:a4:2a:57:83:4f:09:f2:20:0c:68: 63:0e:23:57:20:ab:da:72:7d:50:ac:13:02:01:37:c8:48:e8: cf:b4:90:01:89:92:f7:63:76:43:da:92:f6:af:be:65:51:b9: d2:0c:df:66:d2:ec:e2:05:06:b7:fb:e9:88:66:03:25:8e:6b: b8:e5:e3:b7:f1:3a:34:f0:62:85:10:37:09:23:79:ae:4c:79: 8d:43:e0:af:91:09:af:88:02:2f:ac:8c:a5:a2:8f:c0:24:45: f0:8e:3f:8e:d7:b6:a6:a2:ca:fb:95:82:1e:7f:34:a0:34:f5: 32:4c:8e:51:67:ab:5a:96:e1:ad:ec:b5:10:76:16:7c:27:cb: 61:79:2a:39:68:85:95:59:4e:33:b4:67:1d:8f:6f:3d:3d:4e: 5f:b7:46:41:06:d9:4d:22:6a:76:a9:34:9c:c0:dc:6a:cb:8a: c0:35:2d:00:d5:b9:48:67:58:bf:b0:92:6d:56:73:cf:4d:32: 78:35:62:05:1c:0d:86:6a:d8:5d:4b:2d:60:a1:66:d6:27:12: a9:e1:88:70:8c:8e:c1:8a:bd:e6:8f:a2:fe:bf:a7:a9:5d:6c: b5:18:0c:b8:1f:c2:f6:5e:7d:c6:43:fe:c1:d4:c4:08:f3:dc: e9:6b:c8:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cfw+rRS0EVjPOE3cL9NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWM1ZTQ0ZDQ2YWNiOTU1MzQ1ZWJhNmUzNmU5MDYxZjhm MTZkZTEwHhcNMjUxMjA2MTkwMTAzWhcNMjUxMjA3MTkwMTAzWjAzMTEwLwYDVQQD Eyg5YjQ0MjhjNGVjMzM4OWE5MzBhMzI1MTRmNzI0NDAwZmMwNzcyZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vQkr+vXhss0LDeplEFdxJhKMLHJ 2LHRq30PsDWV7xu83huzk4KfZOIS+dcKEICi3COfWL2gDetI2jpZK/eyDj4EfPpC /8Fu7c7FLNgSnP/M08gBGjH99V0ITHZCusjY+a6U1v3VvkNfNq0NyKo/6H2/FHAL JWE4esKFXmuGC1Y8w69xaY+1ff2sbzgVICJk8sFi+1tM7h1lEi3iLljs54wWJsqC dfoTAhzK8u/4OZAK5b0F0eu0vlDgAfU0+p1AUQjKWLONF5IifzoBEc2JNW7HdbHB CMxMjoDP6HkFRj+SlV1I3Yew6oYGoT32U2lw9dHA149+6uynbftxjOXg6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtEKMTsM4mpMKMlFPckQA/Ady0uMB8GA1UdIwQY MBaAFFSsXkTUasuVU0XrpuNukGH48W3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEt YzM0NDE1YmZjZGExLzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81ZmVjOWUtN2FiYS00YmE2LWFiNjEtYzM0NDE1YmZjZGEx LzEvVkt4ZVJOUnF5NVZUUmV1bTQyNlFZZmp4YmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnbNDGlp +eCkKleDTwnyIAxoYw4jVyCr2nJ9UKwTAgE3yEjoz7SQAYmS92N2Q9qS9q++ZVG5 0gzfZtLs4gUGt/vpiGYDJY5ruOXjt/E6NPBihRA3CSN5rkx5jUPgr5EJr4gCL6yM paKPwCRF8I4/jte2pqLK+5WCHn80oDT1MkyOUWerWpbhrey1EHYWfCfLYXkqOWiF lVlOM7RnHY9vPT1OX7dGQQbZTSJqdqk0nMDcasuKwDUtANW5SGdYv7CSbVZzz00y eDViBRwNhmrYXUstYKFm1icSqeGIcIyOwYq95o+i/r+nqV1stRgMuB/C9l59xkP+ wdTECPPc6WvIGA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:22 2025 by rpki-client