This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft File: vkFhezq6Mltoxn6z0ghK3RnmTt8.mft (raw, json) Hash identifier: 3vBh0UWq+Gd2rppq03y77wXB7/j8KvzOgZJfE7qtJkE= Subject key identifier: 6C:5E:5B:7B:D3:36:5B:AF:F9:DB:7B:98:3B:AC:39:BF:2C:9E:A2:E3 Authority key identifier: BE:41:61:7B:3A:BA:32:5B:68:C6:7E:B3:D2:08:4A:DD:19:E6:4E:DF Certificate issuer: /CN=be41617b3aba325b68c67eb3d2084add19e64edf Certificate serial: 019AF1D1FEC153346BA6417A5FE0C9165A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft Manifest number: 48 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: vkFhezq6Mltoxn6z0ghK3RnmTt8.crl (hash: DXkOhk1Gbxfj1T/CEi94c9YCPDPIB+KAfml4flZohag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fe:c1:53:34:6b:a6:41:7a:5f:e0:c9:16:5a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be41617b3aba325b68c67eb3d2084add19e64edf Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=6c5e5b7bd3365baff9db7b983bac39bf2c9ea2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:48:7c:84:a1:06:f8:fb:fa:d5:96:c2:5e: 59:b8:0e:56:0c:e0:0d:64:88:50:c6:03:14:bc:aa: 90:25:20:4e:5c:3c:23:ae:43:9d:4a:16:52:ad:fc: 59:10:44:8b:04:d6:4e:af:6b:9a:84:25:da:f7:24: fb:e2:4f:b7:f6:1a:6d:40:44:9b:fa:db:92:94:eb: a1:9e:55:68:2f:63:0f:6c:19:94:34:d9:ee:1b:e3: 7c:26:e2:0b:17:41:fb:0b:bb:bb:a7:e3:c5:fa:bf: ea:c3:a8:93:85:3e:e6:ab:cb:9d:01:b2:08:0d:b1: 93:fb:e2:25:1d:fd:95:0a:9d:a8:45:c7:d9:0c:0b: 5f:a3:c4:23:c9:79:08:e0:2b:22:c7:69:79:31:ff: dc:b5:5b:58:b9:9c:6a:21:00:59:5f:72:27:b3:4f: e9:b0:4c:41:c5:60:36:6f:fe:44:d7:0d:1c:c7:69: 09:f9:80:ce:3c:da:66:18:83:e5:a1:72:e6:7d:d6: 8f:e6:fa:46:33:bf:5a:8c:1c:ba:29:65:e5:67:a3: 62:60:f0:f8:e0:8d:f3:f9:0c:40:32:ea:cc:a7:38: 42:c0:a2:43:f5:a5:0c:a0:eb:e3:c7:ff:a7:9d:d8: d3:68:a1:9f:32:c6:be:1a:30:c6:15:e6:d7:df:05: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:5B:7B:D3:36:5B:AF:F9:DB:7B:98:3B:AC:39:BF:2C:9E:A2:E3 X509v3 Authority Key Identifier: keyid:BE:41:61:7B:3A:BA:32:5B:68:C6:7E:B3:D2:08:4A:DD:19:E6:4E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkFhezq6Mltoxn6z0ghK3RnmTt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69f1e5-28a3-4008-9dcd-5c47ca28112b/1/vkFhezq6Mltoxn6z0ghK3RnmTt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:61:81:11:6e:c9:e8:16:84:97:20:a4:0b:96:84:34:47:27: e1:77:f8:3b:84:99:50:f0:64:60:11:e9:42:ce:ef:33:dd:85: 33:80:9c:4c:38:42:80:22:ad:50:cc:af:f3:04:d3:13:3a:46: f7:bf:8b:c1:5e:8e:52:57:4c:84:e2:ea:60:0e:ab:f5:b2:08: bf:44:b6:11:e1:d5:a9:16:b6:f1:3e:06:2a:eb:dc:55:4b:4c: d8:c7:bc:f8:21:37:28:9c:bd:f7:8e:dc:4d:a3:ca:03:47:11: c5:fa:20:64:b0:ad:69:f1:bf:c4:c8:c7:31:63:11:54:ee:92: a4:50:4d:b6:6e:93:7e:20:80:89:5e:71:a6:4a:9a:26:e7:21: 47:26:e2:7f:65:12:0b:cc:6b:8c:aa:a3:28:c0:c1:52:05:41: 94:41:4a:10:cd:ba:a9:b7:8e:65:6d:d2:fd:79:cf:a9:2a:5b: 99:b9:83:d4:ab:8a:46:0b:7b:14:1d:9e:90:0b:55:b3:78:f0: 6d:44:f9:b0:f2:72:6a:ca:9f:58:39:81:12:42:86:07:3d:eb: f1:b1:af:8c:df:17:22:ab:fe:4d:25:f2:5a:c1:35:9b:24:f8: 79:d9:18:c9:e2:ac:6d:3a:9b:d4:fc:ac:ab:a0:78:f2:89:e6: 6d:1e:03:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f7BUzRrpkF6X+DJFlobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDE2MTdiM2FiYTMyNWI2OGM2N2ViM2QyMDg0YWRkMTll NjRlZGYwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg2YzVlNWI3YmQzMzY1YmFmZjlkYjdiOTgzYmFjMzliZjJjOWVhMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlBIfIShBvj7+tWWwl5ZuA5WDOAN ZIhQxgMUvKqQJSBOXDwjrkOdShZSrfxZEESLBNZOr2uahCXa9yT74k+39hptQESb +tuSlOuhnlVoL2MPbBmUNNnuG+N8JuILF0H7C7u7p+PF+r/qw6iThT7mq8udAbII DbGT++IlHf2VCp2oRcfZDAtfo8QjyXkI4Csix2l5Mf/ctVtYuZxqIQBZX3Ins0/p sExBxWA2b/5E1w0cx2kJ+YDOPNpmGIPloXLmfdaP5vpGM79ajBy6KWXlZ6NiYPD4 4I3z+QxAMurMpzhCwKJD9aUMoOvjx/+nndjTaKGfMsa+GjDGFebX3wU6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxeW3vTNluv+dt7mDusOb8snqLjMB8GA1UdIwQY MBaAFL5BYXs6ujJbaMZ+s9IISt0Z5k7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtGaGV6cTZNbHRveG42ejBnaEszUm5tVHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82OWYxZTUtMjhhMy00MDA4LTlkY2Qt NWM0N2NhMjgxMTJiLzEvdmtGaGV6cTZNbHRveG42ejBnaEszUm5tVHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82OWYxZTUtMjhhMy00MDA4LTlkY2QtNWM0N2NhMjgxMTJi LzEvdmtGaGV6cTZNbHRveG42ejBnaEszUm5tVHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmGBEW7J 6BaElyCkC5aENEcn4Xf4O4SZUPBkYBHpQs7vM92FM4CcTDhCgCKtUMyv8wTTEzpG 97+LwV6OUldMhOLqYA6r9bIIv0S2EeHVqRa28T4GKuvcVUtM2Me8+CE3KJy9947c TaPKA0cRxfogZLCtafG/xMjHMWMRVO6SpFBNtm6TfiCAiV5xpkqaJuchRybif2US C8xrjKqjKMDBUgVBlEFKEM26qbeOZW3S/XnPqSpbmbmD1KuKRgt7FB2ekAtVs3jw bUT5sPJyasqfWDmBEkKGBz3r8bGvjN8XIqv+TSXyWsE1myT4edkYyeKsbTqb1Pys q6B48onmbR4Dtg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:17 2025 by rpki-client