This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json) Hash identifier: xDMK+6S5dcW72zigtPprluQtqqhpcTQ2alNeKYrvW0U= Subject key identifier: 43:26:09:0A:13:05:20:C7:5D:27:4A:9F:A4:3E:F2:A9:E1:CB:B8:7B Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb Certificate serial: 019AF38A1BB6B5EA73F94B4DA7872DB989FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:45 +0000 Manifest this update: Sat 06 Dec 2025 12:01:45 +0000 Manifest next update: Sun 07 Dec 2025 12:01:45 +0000 Files and hashes: 1: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: 74KsNuRx7qbCjv4P8LpSUkXg7LGrt2Am+9MAAU6BUI8=) 2: agadNAkdL8gZSJjhebbq78b-GQQ.roa (hash: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:1b:b6:b5:ea:73:f9:4b:4d:a7:87:2d:b9:89:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb Validity Not Before: Dec 6 12:01:45 2025 GMT Not After : Dec 7 12:01:45 2025 GMT Subject: CN=4326090a130520c75d274a9fa43ef2a9e1cbb87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:eb:4c:b9:25:20:33:7b:57:e6:ad:a8:9e: cb:18:6e:54:e7:06:41:39:bc:1c:63:e2:eb:79:a2: 5f:ff:4b:53:7e:9f:5c:3c:c2:be:79:1a:99:b9:fc: 55:87:7e:de:fd:1a:ae:fd:9a:96:19:d9:b1:cc:52: fa:99:bf:d8:ff:4e:e5:32:bf:87:87:04:cb:a2:18: f0:ba:90:70:df:50:56:ab:0d:e8:d7:8c:c6:a7:3d: 4b:56:b0:25:19:0f:cc:bf:ca:89:76:5d:14:2d:fe: d6:72:5b:a1:eb:8d:4d:59:df:39:53:af:a7:fe:ab: 10:90:54:f7:45:83:6b:52:2f:9d:c2:72:d1:78:ff: 81:b8:9e:b1:cd:da:aa:4b:5d:bb:f7:4a:31:c5:3f: b3:7e:de:a6:35:2a:4f:8f:70:a4:e7:bc:82:82:88: 5d:3f:a5:81:99:5a:90:f9:39:92:35:de:5a:4c:1a: 50:cd:b7:90:a0:07:ad:8c:b2:2c:c5:38:cb:bd:44: 30:da:10:ab:16:d2:a4:eb:13:6a:ec:09:07:86:6d: 75:57:d1:01:cb:06:78:af:0f:c8:c6:a7:10:bc:ac: 75:a8:3f:8c:15:bf:60:c0:97:39:ad:b6:3a:0c:e2: ee:3b:03:35:8e:de:06:b6:9a:38:5f:b0:c7:9f:a6: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:26:09:0A:13:05:20:C7:5D:27:4A:9F:A4:3E:F2:A9:E1:CB:B8:7B X509v3 Authority Key Identifier: keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cf:cc:76:98:c0:8a:55:68:ac:e0:bc:00:55:3e:9e:47:77: 20:cb:fb:79:31:3d:55:27:f5:05:04:6b:ca:31:38:95:0e:94: 2e:82:8e:ba:00:b2:64:94:d0:63:c3:90:1c:21:16:8f:f5:01: 52:98:01:e6:eb:59:4c:18:82:2f:18:89:dd:38:a1:2d:87:89: 6c:16:f8:64:be:1b:ff:fa:0e:fd:5a:70:96:f3:8d:10:d2:64: 1c:8e:de:63:cd:f6:b1:c9:5c:4c:8c:05:3b:55:e4:48:f9:b2: ba:17:09:93:1c:18:2e:a2:14:cd:46:be:68:0f:61:26:77:f7: a2:1e:99:26:ec:59:b2:46:08:0e:3f:4d:10:51:2b:5d:90:5a: 94:b9:d4:92:c2:7c:3d:a5:1a:77:40:7f:0c:aa:f1:2f:a5:c7: 44:ae:00:f6:dc:df:0d:00:bd:ce:fa:07:bf:72:de:82:32:85: 5f:e4:ec:73:d3:bc:77:63:d8:a6:fb:f8:98:6c:92:25:fa:9f: 4b:50:28:b5:e5:83:92:1b:23:51:35:27:ba:ad:37:cc:68:da: 65:8b:e9:56:dc:a5:be:ab:5f:8f:62:86:62:85:ee:ab:ae:67: 61:21:0a:af:54:d0:b9:b6:95:7a:39:0a:9a:f4:21:59:ba:8d: c8:8d:39:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihu2tepz+UtNp4ctuYn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi MDI1ZWIwHhcNMjUxMjA2MTIwMTQ1WhcNMjUxMjA3MTIwMTQ1WjAzMTEwLwYDVQQD Eyg0MzI2MDkwYTEzMDUyMGM3NWQyNzRhOWZhNDNlZjJhOWUxY2JiODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuovrTLklIDN7V+atqJ7LGG5U5wZB ObwcY+LreaJf/0tTfp9cPMK+eRqZufxVh37e/Rqu/ZqWGdmxzFL6mb/Y/07lMr+H hwTLohjwupBw31BWqw3o14zGpz1LVrAlGQ/Mv8qJdl0ULf7Wcluh641NWd85U6+n /qsQkFT3RYNrUi+dwnLReP+BuJ6xzdqqS12790oxxT+zft6mNSpPj3Ck57yCgohd P6WBmVqQ+TmSNd5aTBpQzbeQoAetjLIsxTjLvUQw2hCrFtKk6xNq7AkHhm11V9EB ywZ4rw/IxqcQvKx1qD+MFb9gwJc5rbY6DOLuOwM1jt4Gtpo4X7DHn6YT0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMmCQoTBSDHXSdKn6Q+8qnhy7h7MB8GA1UdIwQY MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt YWQyYjYxMzgwYmUxLzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc/MdpjA ilVorOC8AFU+nkd3IMv7eTE9VSf1BQRryjE4lQ6ULoKOugCyZJTQY8OQHCEWj/UB UpgB5utZTBiCLxiJ3TihLYeJbBb4ZL4b//oO/VpwlvONENJkHI7eY832sclcTIwF O1XkSPmyuhcJkxwYLqIUzUa+aA9hJnf3oh6ZJuxZskYIDj9NEFErXZBalLnUksJ8 PaUad0B/DKrxL6XHRK4A9tzfDQC9zvoHv3LegjKFX+Tsc9O8d2PYpvv4mGySJfqf S1AoteWDkhsjUTUnuq03zGjaZYvpVtylvqtfj2KGYoXuq65nYSEKr1TQubaVejkK mvQhWbqNyI05DA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:58 2025 by rpki-client