This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json) Hash identifier: rB49rocCZct2X6JNsyKZTJMzsl+NNYnHk7Qe/HUy0k0= Subject key identifier: 52:93:4C:10:81:E2:3C:B8:82:A2:21:16:0E:4B:D8:58:69:87:9B:8F Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff Certificate serial: 019AF12D2B004F0346FF61FC3DC321320AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft Manifest number: 0296 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: lNUb3eRo9LP4gm+aqHpzA9IjToUkD7uvJ58fUandCgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:00:4f:03:46:ff:61:fc:3d:c3:21:32:0a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=52934c1081e23cb882a221160e4bd85869879b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:6f:17:04:a6:9c:b4:b8:16:15:8e:d9:73: 36:27:98:24:e2:5b:e4:83:53:64:01:f6:c1:a1:a7: 49:a1:77:ec:dd:be:60:cd:4c:b4:79:0f:9e:0a:9d: 2a:4b:12:be:74:0f:97:b1:b8:34:be:b9:2f:cd:6c: f4:28:87:87:67:da:d5:bc:19:ae:92:e7:0c:9c:59: 66:a4:c8:97:d8:3a:63:8b:0d:92:a5:79:64:23:8b: 26:ac:ec:4c:ca:0b:65:5e:d2:b3:67:14:14:82:aa: 6e:85:12:cb:a0:cf:46:14:d0:e7:be:d1:a5:51:36: d3:25:c9:3c:c7:97:41:50:65:8f:54:75:3e:d7:69: 5f:77:f9:ef:50:b5:dd:b9:2b:37:2b:82:1c:6b:f5: 10:be:16:d1:c3:40:5a:2e:eb:9d:14:6c:97:78:74: f6:ef:ca:86:c0:6c:ae:04:cd:ab:bd:20:c7:d7:86: 86:64:d8:9d:d5:ca:84:58:16:1f:c5:db:88:e4:f9: 1e:a6:c2:59:1d:59:6e:a8:84:94:33:85:fe:4b:cd: 03:16:8b:ce:77:c0:ca:8b:95:01:70:20:9a:59:c7: f6:6a:0d:53:9f:d0:0a:66:3a:8e:e6:fc:4d:2c:a8: 2b:15:32:d7:fb:57:00:28:bf:38:05:81:67:aa:0d: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:4C:10:81:E2:3C:B8:82:A2:21:16:0E:4B:D8:58:69:87:9B:8F X509v3 Authority Key Identifier: keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:03:37:1f:e3:fa:9b:b6:b6:9f:4e:02:87:d1:f7:3a:8e:43: 21:93:0c:d1:6c:f3:83:04:ea:d0:ca:ca:e2:b5:35:78:73:8e: cd:1e:b3:21:fb:0c:76:bf:46:ee:35:78:db:53:63:dd:19:f7: d9:1b:2a:dc:69:bb:e2:74:bf:70:ec:cf:54:ec:31:fb:05:f5: 0d:04:5e:c8:0a:71:b2:46:0f:28:0e:58:b0:8c:bd:92:20:25: f0:d2:f2:9c:a5:70:e0:ed:40:35:43:2b:56:e3:62:1d:27:60: 71:11:55:6c:e4:ee:b3:94:b7:08:5e:00:4f:35:25:a5:81:e3: 07:70:f3:0d:e3:00:e4:98:50:5a:16:d9:34:61:05:fc:2c:73: 77:de:b7:2e:b8:51:37:dd:3f:69:29:6e:bd:ce:6c:75:d5:70: de:d8:56:50:6e:8b:b0:50:08:c0:8b:ef:3f:5e:9e:d3:aa:bd: 6b:d7:1d:29:d9:78:46:26:30:13:75:f7:21:d6:f8:19:e2:d9: 2d:62:98:2b:92:ae:c5:37:41:89:a4:f2:aa:31:d1:26:10:ac: 90:d4:18:c8:27:5d:6b:ac:4a:22:6e:70:ce:6e:35:40:c9:c9: 40:8d:39:02:c1:bd:15:3b:1b:94:98:23:bb:95:6d:1a:94:2b: 42:0e:6e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSsATwNG/2H8PcMhMgrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjI4NTk4ZWJlNWY3NjBlYjYzZTA1MWE1NTAwMTE3NWQ5 YzYzZmYwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg1MjkzNGMxMDgxZTIzY2I4ODJhMjIxMTYwZTRiZDg1ODY5ODc5YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc1vFwSmnLS4FhWO2XM2J5gk4lvk g1NkAfbBoadJoXfs3b5gzUy0eQ+eCp0qSxK+dA+Xsbg0vrkvzWz0KIeHZ9rVvBmu kucMnFlmpMiX2Dpjiw2SpXlkI4smrOxMygtlXtKzZxQUgqpuhRLLoM9GFNDnvtGl UTbTJck8x5dBUGWPVHU+12lfd/nvULXduSs3K4Ica/UQvhbRw0BaLuudFGyXeHT2 78qGwGyuBM2rvSDH14aGZNid1cqEWBYfxduI5PkepsJZHVluqISUM4X+S80DFovO d8DKi5UBcCCaWcf2ag1Tn9AKZjqO5vxNLKgrFTLX+1cAKL84BYFnqg0IawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKTTBCB4jy4gqIhFg5L2Fhph5uPMB8GA1UdIwQY MBaAFLyyhZjr5fdg62PgUaVQARddnGP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTct N2M3NzA2ODk4YWQ4LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTctN2M3NzA2ODk4YWQ4 LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwM3H+P6 m7a2n04Ch9H3Oo5DIZMM0WzzgwTq0MrK4rU1eHOOzR6zIfsMdr9G7jV421Nj3Rn3 2Rsq3Gm74nS/cOzPVOwx+wX1DQReyApxskYPKA5YsIy9kiAl8NLynKVw4O1ANUMr VuNiHSdgcRFVbOTus5S3CF4ATzUlpYHjB3DzDeMA5JhQWhbZNGEF/Cxzd963LrhR N90/aSluvc5sddVw3thWUG6LsFAIwIvvP16e06q9a9cdKdl4RiYwE3X3Idb4GeLZ LWKYK5KuxTdBiaTyqjHRJhCskNQYyCdda6xKIm5wzm41QMnJQI05AsG9FTsblJgj u5VtGpQrQg5ung== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:50 2025 by rpki-client