This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json) Hash identifier: EonkENU0syq7C4JuoGbeBUtN8VKqn10LsDv+WI58p0w= Subject key identifier: D8:62:E4:41:1F:DF:4E:87:12:CF:66:FF:47:19:9F:5F:7B:CB:CC:D6 Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96 Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496 Certificate serial: 019AF1646B5DCA33158DA8D581B15B35122D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft Manifest number: 0E5A Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: K/OvRvUnKMwyQXwjagcfhbCPYx2l+AgILTsIn7kNico=) 2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6b:5d:ca:33:15:8d:a8:d5:81:b1:5b:35:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=d862e4411fdf4e8712cf66ff47199f5f7bcbccd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:e1:f7:09:f9:02:ce:94:90:a8:94:30:d1: 97:64:5c:7e:b8:3d:a2:8a:55:84:ac:87:33:bd:70: a2:3f:25:05:d7:52:26:8d:20:1a:f1:50:16:39:b3: 2c:f3:84:8c:de:cd:6b:b2:52:0c:58:ee:6c:5d:eb: a0:5a:ce:a7:c1:63:8f:08:2b:98:bd:30:01:9b:b6: dc:f3:3d:65:ae:0f:2a:1d:40:dc:f9:45:99:ab:c1: 89:46:17:d5:bf:8b:24:eb:0f:47:04:eb:f4:ed:d1: 13:67:25:a7:15:7f:11:88:8c:d4:ab:2d:61:2d:2a: 09:e3:c0:53:7c:63:d1:d2:2e:ac:e6:85:cc:80:ab: 94:ba:f8:0e:a5:5c:93:02:df:a9:a8:47:d2:2c:a4: 14:c3:46:d2:fe:43:da:b6:bb:f1:a8:84:5f:bb:d7: 91:8e:dc:b8:5a:b7:ae:8d:29:a6:d4:ce:6b:67:a9: b8:f5:82:b7:d9:a5:5a:67:ce:3a:66:9c:5d:51:e9: 55:0c:ff:83:d3:bb:71:6a:b7:c1:0d:e8:3e:a0:95: 2c:b6:44:41:93:99:30:e1:91:f7:73:27:22:fc:18: 78:2c:de:00:bd:89:8e:76:b9:16:db:c4:c6:20:23: 0f:7e:cb:51:2d:34:2c:5c:7b:ef:46:75:38:5e:e8: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:62:E4:41:1F:DF:4E:87:12:CF:66:FF:47:19:9F:5F:7B:CB:CC:D6 X509v3 Authority Key Identifier: keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:5c:84:8a:d5:30:3f:39:a3:77:67:ff:25:57:16:21:7b:54: d7:38:3d:78:7a:7b:3b:88:c0:d4:73:36:b5:83:3b:55:52:6e: b2:fc:d1:b1:58:4f:37:f0:6c:32:1b:d5:52:b6:12:d9:d7:65: 81:29:96:2d:fb:d1:4d:fd:5d:61:ec:ba:47:ff:ea:38:0f:d1: 71:e3:79:d3:25:d7:56:a8:5e:82:8b:10:52:4d:71:62:e3:c0: c9:44:9d:ff:0e:15:c2:3c:20:d6:75:19:39:f1:d7:a7:6b:02: b8:41:bc:92:ba:7e:ac:7e:8e:75:7b:c5:64:a5:d2:4b:04:7d: 86:a0:c6:60:39:38:b4:13:90:5c:d2:de:f7:8e:a3:80:f6:57: 32:3b:4a:f0:b4:d2:c7:ee:74:f6:55:fc:2c:f9:87:c7:57:b0: da:02:5d:c7:7f:47:f9:8d:2a:1c:fa:26:69:9f:c5:5a:8b:a7: ea:0a:82:cf:53:71:44:85:58:d1:01:e8:65:f7:a8:74:e7:22: 26:35:a2:f5:18:f9:4c:c8:4f:e1:5c:ef:f4:d5:a6:df:a7:f0: 50:a3:c3:02:4e:3a:6e:39:f2:43:dd:f7:de:a7:fc:57:f0:e2: b4:22:2a:8a:e4:b2:5d:aa:82:64:e6:1d:04:f0:ed:55:3e:3b: 49:2c:aa:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGtdyjMVjajVgbFbNRItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTE0YmU2MTk3NTVlZWVlYjkxZmUyZjYyYTFkNGVlMDc4 NjE0OTYwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhkODYyZTQ0MTFmZGY0ZTg3MTJjZjY2ZmY0NzE5OWY1ZjdiY2JjY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Hh9wn5As6UkKiUMNGXZFx+uD2i ilWErIczvXCiPyUF11ImjSAa8VAWObMs84SM3s1rslIMWO5sXeugWs6nwWOPCCuY vTABm7bc8z1lrg8qHUDc+UWZq8GJRhfVv4sk6w9HBOv07dETZyWnFX8RiIzUqy1h LSoJ48BTfGPR0i6s5oXMgKuUuvgOpVyTAt+pqEfSLKQUw0bS/kPatrvxqIRfu9eR jty4WreujSmm1M5rZ6m49YK32aVaZ846ZpxdUelVDP+D07txarfBDeg+oJUstkRB k5kw4ZH3cyci/Bh4LN4AvYmOdrkW28TGICMPfstRLTQsXHvvRnU4XuhffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhi5EEf306HEs9m/0cZn197y8zWMB8GA1UdIwQY MBaAFFShS+YZdV7u65H+L2Kh1O4HhhSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAt OGU5MDQ2NmJhZDM4LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAtOGU5MDQ2NmJhZDM4 LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVyEitUw Pzmjd2f/JVcWIXtU1zg9eHp7O4jA1HM2tYM7VVJusvzRsVhPN/BsMhvVUrYS2ddl gSmWLfvRTf1dYey6R//qOA/RceN50yXXVqhegosQUk1xYuPAyUSd/w4Vwjwg1nUZ OfHXp2sCuEG8krp+rH6OdXvFZKXSSwR9hqDGYDk4tBOQXNLe946jgPZXMjtK8LTS x+509lX8LPmHx1ew2gJdx39H+Y0qHPomaZ/FWoun6gqCz1NxRIVY0QHoZfeodOci JjWi9Rj5TMhP4Vzv9NWm36fwUKPDAk46bjnyQ9333qf8V/DitCIqiuSyXaqCZOYd BPDtVT47SSyqLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:52 2025 by rpki-client