This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json) Hash identifier: 5FLOSvPDbSKVY94bKOfZ3NfVNKpI/91OPUEjp0pQk4Y= Subject key identifier: 79:EF:0C:7E:DB:B6:CA:1D:39:80:6B:0E:1C:98:40:F8:83:EF:77:FC Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd Certificate serial: 019B2E549EF8F40C240834FCAB8A4B7F48A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft Manifest number: 1669 Signing time: Wed 17 Dec 2025 22:00:56 +0000 Manifest this update: Wed 17 Dec 2025 22:00:56 +0000 Manifest next update: Thu 18 Dec 2025 22:00:56 +0000 Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=) 2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=) 3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=) 4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: emLbpmU5SqiLr9zO1M+1O08OHONKzhkOt1FWsBCPhWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:9e:f8:f4:0c:24:08:34:fc:ab:8a:4b:7f:48:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd Validity Not Before: Dec 17 22:00:56 2025 GMT Not After : Dec 18 22:00:56 2025 GMT Subject: CN=79ef0c7edbb6ca1d39806b0e1c9840f883ef77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:f6:18:6b:a7:9d:bb:c0:d3:11:8a:3f:5b: fa:04:21:a0:38:7b:0c:b4:65:93:61:b1:5f:e2:4f: da:83:3e:da:f7:aa:7c:02:3e:0c:01:a8:27:c4:29: 16:6b:c9:97:1e:1d:3a:08:fc:8b:db:5a:00:6e:31: de:5f:37:aa:7f:4c:90:d3:90:13:36:a9:54:3d:81: e4:38:b1:d5:91:b4:e5:45:ed:cf:8b:49:b7:16:25: ca:02:63:18:6c:18:af:a0:28:2b:ea:fb:f2:f1:5b: da:9a:47:56:2c:b2:ec:c9:42:58:39:b3:5b:db:1f: 77:f3:a6:44:27:0c:bb:7b:0b:b2:e5:61:e8:73:dd: 2c:d2:e4:ee:1d:b6:2b:83:0b:28:49:39:5e:5e:9c: da:2b:ce:e9:75:bd:0c:78:98:b6:ee:70:29:66:10: 11:1c:90:15:1a:66:03:08:6e:2f:52:51:87:00:53: 08:ed:cf:b3:4e:f0:4a:dd:f3:90:5f:8d:a6:5b:4d: 31:ea:9d:6e:0a:87:6d:18:3f:8f:05:03:1b:4b:fb: 4f:ac:d4:31:a7:28:8b:15:ae:b6:77:d6:1f:02:13: 7f:f3:4a:89:dd:65:61:5c:73:52:0f:50:76:5a:47: 50:17:b6:5c:4d:60:14:1b:68:ad:7c:6b:9d:b6:3b: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:0C:7E:DB:B6:CA:1D:39:80:6B:0E:1C:98:40:F8:83:EF:77:FC X509v3 Authority Key Identifier: keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:57:fa:0a:b4:ec:b0:53:09:fb:e3:52:d4:1c:54:66:52:b7: e9:6b:60:39:1b:89:e4:b9:3f:70:da:18:06:10:ad:c2:42:a6: dd:96:c7:36:dc:71:ad:ce:a7:12:9f:c2:1c:2a:d1:a1:0e:8f: 5f:ad:a9:b6:08:d6:48:e7:6e:7b:a2:8e:a3:c5:76:31:7c:5b: 61:88:91:3a:b3:5d:ac:df:0b:2a:54:94:f0:73:4a:4d:b8:cd: 57:43:3d:ea:ce:89:b6:10:a7:91:60:9d:9e:63:c4:34:d0:1e: d9:55:bf:4d:e2:86:a6:59:00:e9:d1:fa:d6:57:70:b9:80:87: e6:c1:c9:35:20:0c:11:4d:ec:5e:ae:de:17:2f:6d:60:72:2d: 47:04:24:b2:d2:7f:8e:bc:e5:ac:74:5b:96:ae:5e:f7:d5:c7: 80:1f:ba:58:50:0b:7e:13:34:f2:f9:95:9e:38:47:3a:2c:cb: 46:f5:22:63:6b:9d:9c:49:0a:97:3b:da:39:ff:f8:0e:ce:5c: fe:84:ea:6b:ef:ac:f1:9e:27:61:ee:b0:84:13:ae:34:a4:c5: c2:5d:71:33:6f:90:09:c9:50:2a:6d:8a:80:96:bc:29:54:5b: cd:73:5a:3f:a5:13:5e:8c:63:16:ab:7e:15:24:f7:87:4b:43: 75:0a:d3:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVJ749AwkCDT8q4pLf0ilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDk0M2Y1MjAzZDQzNDYwYTEzYWQ0ZWE5ZDdkNWI5NTBj NjEzY2QwHhcNMjUxMjE3MjIwMDU2WhcNMjUxMjE4MjIwMDU2WjAzMTEwLwYDVQQD Eyg3OWVmMGM3ZWRiYjZjYTFkMzk4MDZiMGUxYzk4NDBmODgzZWY3N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YD2GGunnbvA0xGKP1v6BCGgOHsM tGWTYbFf4k/agz7a96p8Aj4MAagnxCkWa8mXHh06CPyL21oAbjHeXzeqf0yQ05AT NqlUPYHkOLHVkbTlRe3Pi0m3FiXKAmMYbBivoCgr6vvy8VvamkdWLLLsyUJYObNb 2x9386ZEJwy7ewuy5WHoc90s0uTuHbYrgwsoSTleXpzaK87pdb0MeJi27nApZhAR HJAVGmYDCG4vUlGHAFMI7c+zTvBK3fOQX42mW00x6p1uCodtGD+PBQMbS/tPrNQx pyiLFa62d9YfAhN/80qJ3WVhXHNSD1B2WkdQF7ZcTWAUG2itfGudtjuMFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnvDH7btsodOYBrDhyYQPiD73f8MB8GA1UdIwQY MBaAFL5JQ/UgPUNGChOtTqnX1blQxhPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtsRDlTQTlRMFlLRTYxT3FkZlZ1VkRHRTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMzE0ZWMtOGZmMC00OTUwLTg1OGYt YTA1MWFlNjNkYmExLzEvdmtsRDlTQTlRMFlLRTYxT3FkZlZ1VkRHRTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zMzE0ZWMtOGZmMC00OTUwLTg1OGYtYTA1MWFlNjNkYmEx LzEvdmtsRDlTQTlRMFlLRTYxT3FkZlZ1VkRHRTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVf6CrTs sFMJ++NS1BxUZlK36WtgORuJ5Lk/cNoYBhCtwkKm3ZbHNtxxrc6nEp/CHCrRoQ6P X62ptgjWSOdue6KOo8V2MXxbYYiROrNdrN8LKlSU8HNKTbjNV0M96s6JthCnkWCd nmPENNAe2VW/TeKGplkA6dH61ldwuYCH5sHJNSAMEU3sXq7eFy9tYHItRwQkstJ/ jrzlrHRblq5e99XHgB+6WFALfhM08vmVnjhHOizLRvUiY2udnEkKlzvaOf/4Ds5c /oTqa++s8Z4nYe6whBOuNKTFwl1xM2+QCclQKm2KgJa8KVRbzXNaP6UTXoxjFqt+ FST3h0tDdQrTqQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:35 2025 by rpki-client