This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json) Hash identifier: fRCVBxlfpbWkr+Waz9eug4P0A0AEPxpaEHxCR22r5ZY= Subject key identifier: 40:D0:49:20:6C:2F:91:1A:F8:3D:F6:F5:FB:4A:FF:C6:C5:78:E5:1E Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Certificate serial: 019AF19AA73E91397F94FDD4210085B03AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft Manifest number: 0CA8 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=) 2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: uPlAO0VgMDo+NIf9GLv4Cs5sMy0scUOch28OvpWw12E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a7:3e:91:39:7f:94:fd:d4:21:00:85:b0:3a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=40d049206c2f911af83df6f5fb4affc6c578e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:ea:f4:20:ea:77:47:ae:d6:77:b4:f0:49: 43:58:ed:f1:e8:fc:66:b8:98:26:2c:69:60:f5:d7: b5:4d:91:84:58:d6:94:2c:85:ae:09:d0:39:81:4e: fc:7a:5a:ce:a0:e0:12:63:5c:75:55:c8:a1:ed:d5: 71:08:b2:87:e4:c0:10:5d:38:1b:1b:16:27:0c:0c: da:d7:8e:1b:28:2d:0d:05:1c:e4:84:00:9e:16:ba: b4:f0:ce:1b:b2:1f:b3:26:26:cf:06:f9:88:b8:46: d1:e5:df:8a:ae:0e:f8:1e:af:ac:97:6f:e5:d1:40: 3d:53:67:40:b3:f7:23:a9:70:8b:87:db:53:b4:da: af:e8:ee:1b:47:c8:b9:40:e7:e8:6f:c5:cc:46:21: 36:e8:ab:d6:b8:95:63:4b:95:ff:8a:49:11:78:b4: 77:67:6b:e4:40:77:fa:45:e3:e4:39:c5:96:d7:2b: 2a:46:77:90:b3:8b:d1:f2:8a:63:fe:2c:b3:07:43: 5c:7c:f9:9a:d6:5c:b9:1a:85:39:c5:e5:cc:70:77: cd:31:62:66:6c:6f:2f:90:eb:e1:ba:92:69:3e:6b: ee:0d:2e:d5:b7:36:3a:c2:e2:72:7e:24:ca:68:7c: 1f:c0:8e:98:cc:3f:b9:71:d4:41:c9:44:df:28:9b: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:49:20:6C:2F:91:1A:F8:3D:F6:F5:FB:4A:FF:C6:C5:78:E5:1E X509v3 Authority Key Identifier: keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c4:02:50:60:75:28:15:23:46:ff:3c:81:20:b0:64:f8:fe: bc:e6:b0:42:36:a3:aa:33:c6:5f:50:cb:5a:d0:38:3b:2e:39: 52:05:f3:e3:3d:54:44:34:e6:b0:11:6f:b7:88:37:79:4c:1b: 26:26:88:a3:a1:fe:32:a3:5b:f6:b1:89:15:16:86:56:72:94: 7c:27:17:25:56:8e:58:62:7b:f3:f9:64:bf:5c:4e:c5:b2:8b: 0c:2d:cb:fd:96:ba:fd:ea:7f:c2:dd:3c:d7:62:8c:c8:c2:6b: 0d:f2:b9:22:91:40:91:95:8b:0f:a9:81:37:d8:5a:7f:58:cc: 60:3f:46:0f:7a:96:05:cc:d1:e5:ac:d0:49:7c:00:1d:a4:08: f2:c1:00:07:fb:d9:dc:d1:38:6c:3a:64:74:fa:f5:2b:68:d6: eb:ed:19:e1:5b:0a:99:45:b5:9e:af:57:2a:21:4d:d0:37:dd: 68:ba:0b:94:dd:a8:96:99:fa:70:2a:82:64:cb:cf:84:da:a2: 2a:ce:db:2e:89:a3:fa:08:2b:51:53:ef:6e:07:6d:fd:41:7d: 07:af:6d:45:33:e9:d0:9b:49:1f:4a:bb:23:d9:b4:7c:55:2e: ec:ce:47:15:af:5d:f1:f0:b6:46:ed:c6:ef:32:97:f5:c9:02: 80:f8:9b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqc+kTl/lP3UIQCFsDqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4 NDkxNDYwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD Eyg0MGQwNDkyMDZjMmY5MTFhZjgzZGY2ZjVmYjRhZmZjNmM1NzhlNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEDq9CDqd0eu1ne08ElDWO3x6Pxm uJgmLGlg9de1TZGEWNaULIWuCdA5gU78elrOoOASY1x1Vcih7dVxCLKH5MAQXTgb GxYnDAza144bKC0NBRzkhACeFrq08M4bsh+zJibPBvmIuEbR5d+Krg74Hq+sl2/l 0UA9U2dAs/cjqXCLh9tTtNqv6O4bR8i5QOfob8XMRiE26KvWuJVjS5X/ikkReLR3 Z2vkQHf6RePkOcWW1ysqRneQs4vR8opj/iyzB0NcfPma1ly5GoU5xeXMcHfNMWJm bG8vkOvhupJpPmvuDS7VtzY6wuJyfiTKaHwfwI6YzD+5cdRByUTfKJsoRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDQSSBsL5Ea+D329ftK/8bFeOUeMB8GA1UdIwQY MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt M2M3Mjk2N2ZmN2MxLzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMQCUGB1 KBUjRv88gSCwZPj+vOawQjajqjPGX1DLWtA4Oy45UgXz4z1URDTmsBFvt4g3eUwb JiaIo6H+MqNb9rGJFRaGVnKUfCcXJVaOWGJ78/lkv1xOxbKLDC3L/Za6/ep/wt08 12KMyMJrDfK5IpFAkZWLD6mBN9haf1jMYD9GD3qWBczR5azQSXwAHaQI8sEAB/vZ 3NE4bDpkdPr1K2jW6+0Z4VsKmUW1nq9XKiFN0DfdaLoLlN2olpn6cCqCZMvPhNqi Ks7bLomj+ggrUVPvbgdt/UF9B69tRTPp0JtJH0q7I9m0fFUu7M5HFa9d8fC2Ru3G 7zKX9ckCgPibjw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:12 2025 by rpki-client