This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json) Hash identifier: njKZ0vo4mwGZtvdozVfu6fIX8e+YB3PcgQgPo1S2A5c= Subject key identifier: 68:FF:AF:CA:E0:23:D1:8B:7A:A5:1F:86:1E:D6:36:78:94:6A:B7:A2 Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda Certificate serial: 019AF1644D16B0F57B3C41C955E8CB5FFED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=) 2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: sHHcQg8P77uZfB4nIcX9x771jeZGW7TSv6Hpl2J568M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4d:16:b0:f5:7b:3c:41:c9:55:e8:cb:5f:fe:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=68ffafcae023d18b7aa51f861ed63678946ab7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:99:0d:15:6e:cd:e1:86:58:8f:b5:0b:f6: 71:16:78:bd:e0:95:0b:fb:a6:d9:3e:50:7b:19:7a: 93:59:a0:25:04:3a:b1:4b:ed:3c:f2:cd:a4:b4:77: 58:d7:6f:7d:e7:39:13:57:68:41:f1:87:27:1e:6d: a9:35:cf:40:3d:b2:00:96:5c:3e:dd:87:69:a8:eb: fd:46:45:aa:89:02:17:3e:ec:a8:cb:5f:a8:d2:b3: 80:ac:b0:d7:6d:eb:80:98:f9:c8:ce:00:a8:5b:b6: f1:79:03:82:f7:c3:4c:c1:b7:95:e3:b2:b1:5d:2f: fa:26:38:23:b1:31:94:02:ea:e6:65:ea:c0:18:72: 9a:b2:1d:79:90:59:4b:e9:fe:d6:68:6a:f0:6e:a4: e5:67:81:98:69:22:c1:8a:4d:b9:60:98:2d:e9:43: a0:c7:22:31:69:c6:45:15:15:4f:03:88:86:5d:30: ac:55:e5:b9:08:b7:56:ec:0c:47:8d:cd:87:8d:fd: 7e:68:97:2e:ff:0b:c4:81:a7:29:61:e3:99:8f:d7: ca:c8:cb:54:1a:c6:3d:10:f1:b6:8d:09:9e:1e:c5: 6c:17:12:ce:34:2b:21:83:34:e9:3a:33:00:a3:f1: 26:a9:eb:6e:40:9d:fc:db:57:a9:b1:de:3a:87:58: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:AF:CA:E0:23:D1:8B:7A:A5:1F:86:1E:D6:36:78:94:6A:B7:A2 X509v3 Authority Key Identifier: keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:75:65:fe:ae:42:d3:4f:f8:db:ec:2a:fd:86:d6:ce:73:00: 55:4d:6a:32:43:cb:b6:90:3a:37:33:cc:f8:a6:a2:6d:8f:56: 63:a5:22:a4:85:d9:32:1b:e8:1a:69:6e:c2:5e:04:d0:3a:ce: dc:84:5e:a5:e3:cb:53:28:84:32:6c:fb:f9:de:8c:e1:fe:88: 18:70:4c:82:34:82:cc:9c:8b:d7:4d:dd:ab:32:dd:ad:21:66: ec:07:38:fe:03:e4:c3:e1:fd:84:7d:55:95:22:9f:03:f1:e8: 16:c9:a0:f5:89:37:28:dd:37:ae:9d:0e:a8:18:58:a7:83:16: e0:46:d8:71:77:39:72:a8:05:b1:a9:17:80:9d:4c:84:f0:69: d1:c8:93:0f:d6:cd:20:ec:79:17:f0:41:0e:14:d1:60:c4:1d: 16:5a:97:6c:9e:02:c0:7c:0e:08:76:4e:07:86:cc:b1:58:10: 10:9e:d3:0e:cb:d6:3b:2a:87:8b:dd:11:06:c5:a4:4f:1f:a8: 63:eb:51:5a:ee:05:f3:5e:f9:0d:52:47:6a:7a:20:21:ee:65: 01:1f:f0:b9:a5:5d:a5:b9:fa:da:ce:73:fb:a0:32:9a:8c:68: 9e:b5:6c:7c:7d:9b:de:24:cf:c8:95:e5:0f:d1:2f:99:f1:1a: 21:0f:b1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE0WsPV7PEHJVejLX/7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDhjYzM1NDg4YmQ5ZTZmMzEyYjIwZmM3NmExMDI3MmYw Y2RlZGEwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg2OGZmYWZjYWUwMjNkMThiN2FhNTFmODYxZWQ2MzY3ODk0NmFiN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLyZDRVuzeGGWI+1C/ZxFni94JUL +6bZPlB7GXqTWaAlBDqxS+088s2ktHdY12995zkTV2hB8YcnHm2pNc9APbIAllw+ 3YdpqOv9RkWqiQIXPuyoy1+o0rOArLDXbeuAmPnIzgCoW7bxeQOC98NMwbeV47Kx XS/6JjgjsTGUAurmZerAGHKash15kFlL6f7WaGrwbqTlZ4GYaSLBik25YJgt6UOg xyIxacZFFRVPA4iGXTCsVeW5CLdW7AxHjc2Hjf1+aJcu/wvEgacpYeOZj9fKyMtU GsY9EPG2jQmeHsVsFxLONCshgzTpOjMAo/EmqetuQJ3821epsd46h1ghkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj/r8rgI9GLeqUfhh7WNniUareiMB8GA1UdIwQY MBaAFL5IzDVIi9nm8xKyD8dqECcvDN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQt NDliYzQzNjYwYzk3LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQtNDliYzQzNjYwYzk3 LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHVl/q5C 00/42+wq/YbWznMAVU1qMkPLtpA6NzPM+KaibY9WY6UipIXZMhvoGmluwl4E0DrO 3IRepePLUyiEMmz7+d6M4f6IGHBMgjSCzJyL103dqzLdrSFm7Ac4/gPkw+H9hH1V lSKfA/HoFsmg9Yk3KN03rp0OqBhYp4MW4EbYcXc5cqgFsakXgJ1MhPBp0ciTD9bN IOx5F/BBDhTRYMQdFlqXbJ4CwHwOCHZOB4bMsVgQEJ7TDsvWOyqHi90RBsWkTx+o Y+tRWu4F8175DVJHanogIe5lAR/wuaVdpbn62s5z+6AymoxonrVsfH2b3iTPyJXl D9EvmfEaIQ+x1A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:10 2025 by rpki-client