This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json) Hash identifier: R8LvnvFMUPS3GxiB7Ux/DH2Y8HxhQO3I/YR2x2KN11w= Subject key identifier: 1E:66:D6:10:A9:02:F9:AF:ED:51:D5:13:90:34:D6:33:C6:F6:D6:7D Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Certificate serial: 019AF05121FE012FD53A2F1F5B14B0586735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft Manifest number: 152E Signing time: Fri 05 Dec 2025 21:00:40 +0000 Manifest this update: Fri 05 Dec 2025 21:00:40 +0000 Manifest next update: Sat 06 Dec 2025 21:00:40 +0000 Files and hashes: 1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=) 2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=) 3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 6uLlGnZEepRfP5r8xO/RX9ZLktkbxIerZ1DDRqIH5I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:21:fe:01:2f:d5:3a:2f:1f:5b:14:b0:58:67:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Validity Not Before: Dec 5 21:00:40 2025 GMT Not After : Dec 6 21:00:40 2025 GMT Subject: CN=1e66d610a902f9afed51d5139034d633c6f6d67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:25:98:f0:b1:26:d2:3b:8b:79:56:d7:7d: 2c:23:48:d4:25:c5:48:e7:fa:bc:77:ed:34:24:fe: 93:75:b6:b6:80:91:8f:e4:16:40:67:98:72:14:f6: 0a:7e:ad:19:04:10:e2:88:73:f3:1a:5e:43:bf:ff: 8c:5e:1f:03:06:0b:05:dc:f7:0f:06:f7:cb:33:5f: 97:05:e0:24:ab:d8:38:51:5b:9d:20:c4:f1:11:93: 25:98:9f:a2:bd:6a:30:f9:c3:5b:72:05:5e:27:59: 3d:09:ac:a9:6b:03:aa:ec:4b:d4:62:50:f4:01:ec: 15:d8:0e:f3:e5:21:e0:36:f5:72:55:a3:22:85:68: 6b:50:81:f4:a3:78:8e:0c:0b:9a:2c:21:3a:75:18: 70:19:97:d6:7c:3b:4e:f3:e6:e0:e1:ef:fe:82:38: 94:56:4a:9a:7a:a9:fa:eb:f0:3a:ba:7a:01:03:77: 81:ae:4a:da:11:d0:5c:24:4f:73:50:90:74:58:1b: 4d:24:be:98:29:a8:5e:cf:21:58:c6:75:ae:9f:ec: ce:1c:3b:e8:1a:22:6f:20:2b:0a:d6:08:30:26:de: 4c:e4:6c:09:b5:e6:53:9d:35:3c:58:c3:e3:40:c7: d9:11:98:1d:fa:00:17:1f:c0:3b:50:26:2b:16:08: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:66:D6:10:A9:02:F9:AF:ED:51:D5:13:90:34:D6:33:C6:F6:D6:7D X509v3 Authority Key Identifier: keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9c:c8:bd:7c:4a:2b:e5:71:a9:a4:4b:53:fa:17:62:f2:90: d5:37:3a:ba:f1:11:a0:39:a7:0d:2d:21:32:5d:c5:57:f0:03: b2:6f:74:21:46:8f:ab:f7:77:4e:1e:3d:1a:24:ff:19:e4:2c: 28:35:f4:ce:1d:89:b2:ed:e1:a4:0e:6a:59:97:c4:4d:76:08: 4e:30:91:2e:8f:5f:af:3a:0d:e6:8b:79:7c:5a:4c:51:13:0e: e5:a7:7c:e9:28:06:e8:11:e1:d7:7a:78:2f:f4:30:54:99:82: 06:20:f2:d9:88:99:9f:83:20:8e:bb:13:30:b4:c4:94:df:b6: ec:da:77:1c:7d:71:51:43:8c:8e:a3:35:e4:22:e0:9d:75:68: 4f:f7:c8:38:a3:89:d1:6b:d7:d9:24:33:05:78:d9:ae:16:66: af:be:01:63:67:62:74:2c:2d:de:a5:a7:a5:ea:10:80:b2:ab: 3d:c4:20:fd:29:ad:82:e1:ad:a7:98:d7:ec:ca:4a:5a:82:26: 36:7d:b1:48:c3:41:24:2a:37:78:1a:4d:f9:69:b4:96:9c:a3: 5c:a0:b1:5f:5c:89:37:b9:a8:26:29:1f:2c:0e:a6:09:3a:07: 21:ce:e5:52:46:2c:1e:09:c7:6b:ab:d4:c3:b1:5a:6c:66:e7: a8:92:ab:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSH+AS/VOi8fWxSwWGc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj YjQ0MzAwHhcNMjUxMjA1MjEwMDQwWhcNMjUxMjA2MjEwMDQwWjAzMTEwLwYDVQQD EygxZTY2ZDYxMGE5MDJmOWFmZWQ1MWQ1MTM5MDM0ZDYzM2M2ZjZkNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8klmPCxJtI7i3lW130sI0jUJcVI 5/q8d+00JP6Tdba2gJGP5BZAZ5hyFPYKfq0ZBBDiiHPzGl5Dv/+MXh8DBgsF3PcP BvfLM1+XBeAkq9g4UVudIMTxEZMlmJ+ivWow+cNbcgVeJ1k9CaypawOq7EvUYlD0 AewV2A7z5SHgNvVyVaMihWhrUIH0o3iODAuaLCE6dRhwGZfWfDtO8+bg4e/+gjiU Vkqaeqn66/A6unoBA3eBrkraEdBcJE9zUJB0WBtNJL6YKahezyFYxnWun+zOHDvo GiJvICsK1ggwJt5M5GwJteZTnTU8WMPjQMfZEZgd+gAXH8A7UCYrFgjjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5m1hCpAvmv7VHVE5A01jPG9tZ9MB8GA1UdIwQY MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4 LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZzIvXxK K+VxqaRLU/oXYvKQ1Tc6uvERoDmnDS0hMl3FV/ADsm90IUaPq/d3Th49GiT/GeQs KDX0zh2Jsu3hpA5qWZfETXYITjCRLo9frzoN5ot5fFpMURMO5ad86SgG6BHh13p4 L/QwVJmCBiDy2YiZn4MgjrsTMLTElN+27Np3HH1xUUOMjqM15CLgnXVoT/fIOKOJ 0WvX2SQzBXjZrhZmr74BY2didCwt3qWnpeoQgLKrPcQg/SmtguGtp5jX7MpKWoIm Nn2xSMNBJCo3eBpN+Wm0lpyjXKCxX1yJN7moJikfLA6mCToHIc7lUkYsHgnHa6vU w7FabGbnqJKrrg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:24 2025 by rpki-client