This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json) Hash identifier: uBFvHVfh7hF/8Edhtg1JpHgpn0dj8r1HWbbiJVA+5Xk= Subject key identifier: 11:33:14:72:8A:3F:3E:A9:F4:5E:92:08:21:48:D5:B3:0D:7A:2C:D3 Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68 Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168 Certificate serial: 019AF1D23893F26AF918A603B600943C32E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=) 2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=) 3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=) 4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: JJwpMIZzHt9fgJKsqLqxMymyhlezp9V3/fXGgfjKRuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:38:93:f2:6a:f9:18:a6:03:b6:00:94:3c:32:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=113314728a3f3ea9f45e92082148d5b30d7a2cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:fb:18:52:45:48:8b:d3:13:e2:a2:1e:c5: 39:a8:e2:a5:53:89:90:19:11:08:bb:9b:bb:ef:6f: 41:5d:30:5f:46:7d:f0:12:e0:36:8f:99:7b:10:8b: 3e:59:fa:3c:cd:23:f5:39:e2:9f:fe:57:83:43:5a: 4b:8b:5b:84:82:5c:c8:0a:4d:61:f3:14:b2:68:5d: 32:d7:3f:eb:b7:de:47:7b:bb:b2:cc:9a:1c:17:98: 9f:e9:62:f6:4f:af:91:c6:69:59:0e:cd:05:2c:06: 7d:89:dc:fa:7a:35:1d:1c:e1:2f:64:f2:19:dd:5b: 65:0e:2c:d5:dd:dd:42:f4:5a:09:29:41:6d:7c:57: fe:55:d8:19:b8:05:0a:f0:4c:5e:72:bd:29:fc:7e: b4:76:7c:89:55:29:e1:25:db:d1:1e:65:a2:21:b8: 0b:95:00:6d:df:f8:82:62:19:01:80:09:9f:2e:df: de:98:5e:fb:09:4f:02:50:80:7d:57:ce:8a:7b:c1: ef:59:87:ce:fe:48:82:90:29:b9:2a:14:c3:0a:37: 43:7f:d9:0b:93:16:78:77:c7:81:6e:11:c7:c8:6c: d3:12:4e:67:c8:4c:d3:ea:f3:8a:15:16:61:b0:9d: 71:03:31:ea:8d:18:ca:72:c6:ac:a2:05:8c:0a:13: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:14:72:8A:3F:3E:A9:F4:5E:92:08:21:48:D5:B3:0D:7A:2C:D3 X509v3 Authority Key Identifier: keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e1:00:24:cc:4c:46:7c:43:6f:af:0d:e7:d6:57:ab:5d:25: 1d:24:d5:79:b5:e7:be:92:3a:0b:0c:37:df:0e:61:4a:81:3b: e1:37:1a:68:46:b6:98:66:91:56:0b:0e:b9:7f:b7:75:ca:d1: 36:ff:ef:20:2d:58:4d:65:d7:3f:2c:fd:ad:6a:79:ce:ae:ba: 3f:ff:d2:f2:a4:7b:09:f7:4f:b7:4f:16:96:5a:89:7f:26:5d: ec:c1:ce:11:3c:e1:61:57:88:ee:47:9a:4f:0e:a4:83:e2:6a: e8:be:30:b9:a1:95:f5:67:20:14:51:ac:5a:0f:de:54:73:98: 48:13:8d:8e:4f:c9:e5:27:1a:55:b5:9e:39:cf:8a:bc:08:bd: 2b:0f:1a:42:cf:69:58:30:ac:08:94:e9:94:ac:b8:85:d0:f4: b4:e2:6f:fa:d6:9a:09:94:b0:b4:e9:51:a9:92:72:85:b0:e4: 7e:f8:e9:1c:cd:0e:82:47:8d:c3:4a:fd:0e:21:0a:b3:a5:d9: 6f:a4:19:3c:e0:f5:a4:cf:ca:9f:72:a6:a1:86:60:a1:b1:92: 58:67:4c:af:7d:0f:d0:91:6a:e6:02:fd:d9:b0:67:d7:26:28: a2:88:30:9a:9a:52:9b:b4:97:d1:5f:d3:25:28:66:53:b6:dd: 5c:25:b3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jiT8mr5GKYDtgCUPDLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl ZTIxNjgwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EygxMTMzMTQ3MjhhM2YzZWE5ZjQ1ZTkyMDgyMTQ4ZDViMzBkN2EyY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp577GFJFSIvTE+KiHsU5qOKlU4mQ GREIu5u7729BXTBfRn3wEuA2j5l7EIs+Wfo8zSP1OeKf/leDQ1pLi1uEglzICk1h 8xSyaF0y1z/rt95He7uyzJocF5if6WL2T6+RxmlZDs0FLAZ9idz6ejUdHOEvZPIZ 3VtlDizV3d1C9FoJKUFtfFf+VdgZuAUK8Execr0p/H60dnyJVSnhJdvRHmWiIbgL lQBt3/iCYhkBgAmfLt/emF77CU8CUIB9V86Ke8HvWYfO/kiCkCm5KhTDCjdDf9kL kxZ4d8eBbhHHyGzTEk5nyEzT6vOKFRZhsJ1xAzHqjRjKcsasogWMChMmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEzFHKKPz6p9F6SCCFI1bMNeizTMB8GA1UdIwQY MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt N2M1NDlmMWVkMTZjLzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuEAJMxM RnxDb68N59ZXq10lHSTVebXnvpI6Cww33w5hSoE74TcaaEa2mGaRVgsOuX+3dcrR Nv/vIC1YTWXXPyz9rWp5zq66P//S8qR7CfdPt08WllqJfyZd7MHOETzhYVeI7kea Tw6kg+Jq6L4wuaGV9WcgFFGsWg/eVHOYSBONjk/J5ScaVbWeOc+KvAi9Kw8aQs9p WDCsCJTplKy4hdD0tOJv+taaCZSwtOlRqZJyhbDkfvjpHM0OgkeNw0r9DiEKs6XZ b6QZPOD1pM/Kn3KmoYZgobGSWGdMr30P0JFq5gL92bBn1yYooogwmppSm7SX0V/T JShmU7bdXCWzbg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:32 2025 by rpki-client