This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json) Hash identifier: +2gjg6isqEnDHgjYha5tE1ZrnWYqYY+eRBlKXWU69oA= Subject key identifier: 22:D8:2A:22:2E:23:FE:7F:01:3A:E2:4E:C5:6A:73:7D:A5:8B:BE:BB Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 019AF2E42793B0C9174B712CD60ADDDB9250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft Manifest number: 1607 Signing time: Sat 06 Dec 2025 09:00:29 +0000 Manifest this update: Sat 06 Dec 2025 09:00:29 +0000 Manifest next update: Sun 07 Dec 2025 09:00:29 +0000 Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: 85yIAOBF51E/SuEBzuDIr5zyJs2U6xgnaL8MCXZauu4=) 2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=) 3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:27:93:b0:c9:17:4b:71:2c:d6:0a:dd:db:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Dec 6 09:00:29 2025 GMT Not After : Dec 7 09:00:29 2025 GMT Subject: CN=22d82a222e23fe7f013ae24ec56a737da58bbebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:69:08:cf:45:e8:39:0c:e0:f3:54:f6:eb: 5d:ba:2b:11:be:9a:b3:53:09:0c:ad:f5:66:41:e2: 14:75:36:dd:a9:01:84:83:dd:13:77:0a:75:79:b1: ff:a6:68:a3:f4:4a:5c:64:38:63:40:4b:2c:f0:4d: 9c:19:38:74:bb:51:0a:ed:4c:29:5a:c3:f5:d4:b9: 72:b0:31:31:8b:14:b8:9a:d8:52:98:a3:9d:d1:06: 06:58:ac:d0:7b:e6:dc:da:3f:19:fd:e0:f3:44:f6: 9a:e8:e9:fc:e0:54:bf:dd:f0:7d:21:99:bf:9f:50: af:31:5a:53:c5:9b:f2:35:6d:f5:b5:33:d8:04:88: 5e:56:66:fc:c6:ee:65:d0:00:44:99:06:6c:f6:0b: e3:71:00:55:cf:f1:82:6d:a2:9a:92:73:6e:08:0c: f4:b7:a0:a4:f5:82:ba:63:23:8a:58:44:4c:13:7c: f8:69:77:6f:34:fd:ad:54:c0:d0:c3:87:f6:75:8b: 68:66:59:a6:42:3a:06:d4:49:25:d5:35:5c:b0:32: f5:03:3b:3d:82:9e:ad:48:fa:56:5c:15:1f:e0:b4: 3e:d1:20:33:96:7f:a4:56:55:3f:d1:15:21:5b:7e: fa:18:1f:50:4e:ef:2d:1e:db:bd:3b:a6:95:26:ca: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:2A:22:2E:23:FE:7F:01:3A:E2:4E:C5:6A:73:7D:A5:8B:BE:BB X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3d:96:1e:bf:c2:12:b5:f2:1c:db:06:cf:dc:32:96:68:92: b5:9b:68:35:e2:f4:6f:b6:cd:41:d8:e0:e6:a0:07:33:18:6f: 0f:b6:d6:82:81:de:f8:40:16:14:82:72:e2:44:7b:40:d4:c0: 2e:42:84:c2:e6:ea:d2:00:44:ef:ce:22:49:41:d5:71:31:a4: fb:23:0e:57:8f:e8:1d:c1:55:68:b8:0f:be:96:1f:de:2b:d0: 47:9c:f1:a5:02:0c:67:9f:47:2f:30:46:fc:af:94:e0:e3:57: 39:9c:cb:78:37:06:fe:be:d5:4e:9b:dc:73:75:01:bf:53:5e: 71:4a:d3:76:1e:91:2f:fe:68:78:a4:de:c0:7d:2a:df:20:fc: b3:2e:14:d6:c3:69:bf:be:6a:e7:8a:78:55:31:8c:1d:fc:19: 98:f9:9c:5c:62:52:d3:40:6b:2b:a2:20:d9:2c:f0:b8:d2:fb: 05:a7:fd:94:e2:53:c6:4b:05:cd:26:c0:87:57:4f:40:f9:dc: f2:0e:11:22:f6:80:2d:56:34:2d:32:cb:ad:db:92:b8:94:53: d3:21:cb:9d:27:e7:22:bd:a7:e4:a7:3e:58:16:da:2b:cf:51: 1a:8d:e7:e3:3c:ae:96:2e:ee:c2:4a:58:a1:cd:ae:cb:c9:2b: 9c:96:87:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CeTsMkXS3Es1grd25JQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjUxMjA2MDkwMDI5WhcNMjUxMjA3MDkwMDI5WjAzMTEwLwYDVQQD EygyMmQ4MmEyMjJlMjNmZTdmMDEzYWUyNGVjNTZhNzM3ZGE1OGJiZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMdpCM9F6DkM4PNU9utduisRvpqz UwkMrfVmQeIUdTbdqQGEg90Tdwp1ebH/pmij9EpcZDhjQEss8E2cGTh0u1EK7Uwp WsP11LlysDExixS4mthSmKOd0QYGWKzQe+bc2j8Z/eDzRPaa6On84FS/3fB9IZm/ n1CvMVpTxZvyNW31tTPYBIheVmb8xu5l0ABEmQZs9gvjcQBVz/GCbaKaknNuCAz0 t6Ck9YK6YyOKWERME3z4aXdvNP2tVMDQw4f2dYtoZlmmQjoG1Ekl1TVcsDL1Azs9 gp6tSPpWXBUf4LQ+0SAzln+kVlU/0RUhW376GB9QTu8tHtu9O6aVJsr85QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLYKiIuI/5/ATriTsVqc32li767MB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgD2WHr/C ErXyHNsGz9wylmiStZtoNeL0b7bNQdjg5qAHMxhvD7bWgoHe+EAWFIJy4kR7QNTA LkKEwubq0gBE784iSUHVcTGk+yMOV4/oHcFVaLgPvpYf3ivQR5zxpQIMZ59HLzBG /K+U4ONXOZzLeDcG/r7VTpvcc3UBv1NecUrTdh6RL/5oeKTewH0q3yD8sy4U1sNp v75q54p4VTGMHfwZmPmcXGJS00BrK6Ig2SzwuNL7Baf9lOJTxksFzSbAh1dPQPnc 8g4RIvaALVY0LTLLrduSuJRT0yHLnSfnIr2n5Kc+WBbaK89RGo3n4zyuli7uwkpY oc2uy8krnJaHbA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:03 2025 by rpki-client