This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft File: VkQtN4qHkyt22vks6Pye80Hrx1k.mft (raw, json) Hash identifier: cKqpcdNSn5srU4x0gHQcnk1pkmlvySc50nOu9T2TQeM= Subject key identifier: 4A:F1:92:24:16:CF:70:E1:F7:ED:25:0B:54:1D:09:85:DF:5A:1E:6F Authority key identifier: 56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59 Certificate issuer: /CN=56442d378a87932b76daf92ce8fc9ef341ebc759 Certificate serial: 019AF1D249C7128BE738204D8EA870667376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft Manifest number: 0D23 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: VkQtN4qHkyt22vks6Pye80Hrx1k.crl (hash: N/0rEwoleCd92ZM1/jB2naAKHOGB9flit//X+l1m8d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:49:c7:12:8b:e7:38:20:4d:8e:a8:70:66:73:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56442d378a87932b76daf92ce8fc9ef341ebc759 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=4af1922416cf70e1f7ed250b541d0985df5a1e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:08:4d:0b:0a:31:ee:2e:97:81:32:b4:bb: 30:aa:cb:21:9c:90:2f:0b:76:b0:5c:be:b9:77:c5: 30:09:d6:dd:b6:de:e4:66:06:d2:5e:fe:72:8a:e9: db:5e:63:0f:86:21:03:98:dd:83:bd:ee:90:5d:7a: 1d:03:ed:47:7c:cd:a2:ab:63:ce:ca:cc:31:4a:6a: 29:61:4a:30:94:bb:b3:20:e3:64:65:05:11:72:1c: 38:f6:8e:aa:09:a9:ac:cb:a5:33:80:c6:5e:27:d9: 90:62:28:d7:44:34:81:dd:f0:91:73:cf:7d:aa:6b: 76:9b:0d:33:c3:c7:1d:a2:97:49:dd:de:8c:46:05: ca:05:41:76:9c:f9:c1:56:42:fb:23:89:fa:a1:ea: 88:a7:42:ba:ee:70:11:57:43:40:a3:a4:33:4f:0d: 64:ca:70:b0:9e:5e:5f:9a:73:a9:fc:c5:6b:0d:3d: b5:c3:ec:06:49:71:96:08:34:39:06:e1:49:28:e0: 3c:5f:a5:39:32:f2:e4:67:2e:b3:8f:d1:22:8d:6d: 79:7e:ab:8a:fd:bf:2f:43:68:22:f8:e9:f8:ac:7e: ea:c9:43:34:24:bf:52:09:4a:55:2e:f1:a7:60:ab: 95:78:61:f1:f0:10:b1:39:b2:0d:69:cc:1d:5c:a7: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F1:92:24:16:CF:70:E1:F7:ED:25:0B:54:1D:09:85:DF:5A:1E:6F X509v3 Authority Key Identifier: keyid:56:44:2D:37:8A:87:93:2B:76:DA:F9:2C:E8:FC:9E:F3:41:EB:C7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkQtN4qHkyt22vks6Pye80Hrx1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4f3254-5442-4c87-8b14-9813f0906c4b/1/VkQtN4qHkyt22vks6Pye80Hrx1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:27:7a:2c:08:af:4e:cd:ed:85:fb:7a:a5:a0:82:a2:8d:c3: 3b:5b:b5:3f:ad:08:a1:25:bb:14:3f:71:da:cc:3c:36:8c:0c: f9:71:67:b4:e1:d8:73:d1:cf:47:fe:5e:0b:77:67:12:56:cb: 70:43:1b:82:1d:1b:d4:69:4b:c9:af:b0:1f:80:f6:d4:cd:d8: 15:92:33:6a:de:a0:25:ac:a3:c4:e1:44:b7:df:ef:23:62:1d: 3c:1d:29:14:c1:3d:1b:00:b2:6e:87:0a:3b:3e:82:8e:b2:18: 48:fb:ac:03:ec:5b:f9:93:64:4d:55:54:da:50:88:81:bf:22: e4:47:e6:2e:25:06:f4:91:2c:4b:da:e2:00:d3:cf:3a:03:db: 61:21:6b:35:4e:c1:29:ea:b3:2a:71:57:22:b0:7e:ab:fb:60: 84:85:14:f7:f0:0f:df:fe:ff:2b:ec:d0:73:bb:f2:46:b9:a8: a2:f0:f3:9a:17:b6:3e:60:57:1e:7d:df:6d:6c:cb:1d:08:90: 1c:b1:83:54:cd:f8:f0:af:c7:2a:fb:aa:67:d8:6f:f0:94:81: ab:f1:b1:17:df:65:f1:15:bb:5c:aa:03:3c:0a:f4:94:4a:59: e8:ec:57:03:e2:1f:1d:06:dc:9d:08:80:9d:08:f6:4f:bb:eb: 93:d6:0c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0knHEovnOCBNjqhwZnN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDQyZDM3OGE4NzkzMmI3NmRhZjkyY2U4ZmM5ZWYzNDFl YmM3NTkwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg0YWYxOTIyNDE2Y2Y3MGUxZjdlZDI1MGI1NDFkMDk4NWRmNWExZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X4ITQsKMe4ul4EytLswqsshnJAv C3awXL65d8UwCdbdtt7kZgbSXv5yiunbXmMPhiEDmN2Dve6QXXodA+1HfM2iq2PO yswxSmopYUowlLuzIONkZQURchw49o6qCamsy6UzgMZeJ9mQYijXRDSB3fCRc899 qmt2mw0zw8cdopdJ3d6MRgXKBUF2nPnBVkL7I4n6oeqIp0K67nARV0NAo6QzTw1k ynCwnl5fmnOp/MVrDT21w+wGSXGWCDQ5BuFJKOA8X6U5MvLkZy6zj9EijW15fquK /b8vQ2gi+On4rH7qyUM0JL9SCUpVLvGnYKuVeGHx8BCxObINacwdXKccmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErxkiQWz3Dh9+0lC1QdCYXfWh5vMB8GA1UdIwQY MBaAFFZELTeKh5Mrdtr5LOj8nvNB68dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtRdE40cUhreXQyMnZrczZQeWU4MEhyeDFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80ZjMyNTQtNTQ0Mi00Yzg3LThiMTQt OTgxM2YwOTA2YzRiLzEvVmtRdE40cUhreXQyMnZrczZQeWU4MEhyeDFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy80ZjMyNTQtNTQ0Mi00Yzg3LThiMTQtOTgxM2YwOTA2YzRi LzEvVmtRdE40cUhreXQyMnZrczZQeWU4MEhyeDFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtid6LAiv Ts3thft6paCCoo3DO1u1P60IoSW7FD9x2sw8NowM+XFntOHYc9HPR/5eC3dnElbL cEMbgh0b1GlLya+wH4D21M3YFZIzat6gJayjxOFEt9/vI2IdPB0pFME9GwCybocK Oz6CjrIYSPusA+xb+ZNkTVVU2lCIgb8i5EfmLiUG9JEsS9riANPPOgPbYSFrNU7B KeqzKnFXIrB+q/tghIUU9/AP3/7/K+zQc7vyRrmoovDzmhe2PmBXHn3fbWzLHQiQ HLGDVM348K/HKvuqZ9hv8JSBq/GxF99l8RW7XKoDPAr0lEpZ6OxXA+IfHQbcnQiA nQj2T7vrk9YM8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:17 2025 by rpki-client