This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json) Hash identifier: nVMZE2fEfn6cgB7APeeflbRgu18pCkZewY4o7knkiso= Subject key identifier: C2:4C:F2:D5:3B:D4:62:30:B1:C8:8C:98:DD:49:54:3C:08:CA:93:A6 Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Certificate serial: 019B397DB330AB78601D16AD240F3172E3C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft Manifest number: 1039 Signing time: Sat 20 Dec 2025 02:01:37 +0000 Manifest this update: Sat 20 Dec 2025 02:01:37 +0000 Manifest next update: Sun 21 Dec 2025 02:01:37 +0000 Files and hashes: 1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=) 2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=) 3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 3BNsgVfO+PK/AoQDFHwbaDQTXfOgVhvD7HtDCg5of5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b3:30:ab:78:60:1d:16:ad:24:0f:31:72:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49 Validity Not Before: Dec 20 02:01:37 2025 GMT Not After : Dec 21 02:01:37 2025 GMT Subject: CN=c24cf2d53bd46230b1c88c98dd49543c08ca93a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:da:12:37:c2:7c:51:f1:ae:cd:98:8a:9a: 0c:99:b1:67:a7:83:29:91:8e:37:9e:2f:63:68:57: 21:69:ae:3f:95:26:17:a1:f4:6c:dc:dc:23:58:97: fe:da:69:15:a5:29:94:f1:b0:89:d7:f9:91:ef:65: 1a:c5:2d:bb:56:53:67:b9:a9:65:27:e3:f2:dc:8d: a1:4c:14:52:a5:13:50:71:2a:f2:da:3a:c4:aa:4f: e2:1a:f3:2d:e8:03:dc:ea:bd:41:9e:49:27:0f:49: a7:0e:aa:dd:35:ec:38:b5:1e:fb:25:5d:e4:08:a1: 41:54:0d:f5:a1:49:01:6e:72:7d:10:c4:4a:09:2c: 9e:2f:1e:0a:ca:ca:3b:80:6e:eb:c8:b0:5d:ff:58: 73:ed:06:9c:8e:4b:e9:4d:87:56:01:27:a1:81:0d: ae:30:0a:96:f4:84:e5:5a:29:91:e3:b0:bb:25:38: cb:0e:b9:cf:0c:5a:db:68:cd:5b:66:89:93:7c:22: 32:f5:f9:06:3a:0a:bc:b4:55:19:ec:78:95:03:7b: 07:69:61:1a:d1:d6:aa:63:5f:7a:65:f5:47:79:a9: bc:92:9c:a2:8a:69:e6:4c:75:58:21:68:1f:d5:76: d2:84:0a:ac:20:dc:77:b1:31:29:4c:0f:c4:7e:26: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4C:F2:D5:3B:D4:62:30:B1:C8:8C:98:DD:49:54:3C:08:CA:93:A6 X509v3 Authority Key Identifier: keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3e:8e:fc:6f:37:39:a7:45:38:ca:54:52:7e:22:02:49:f1: 55:a2:9d:68:c1:20:30:bb:7a:03:73:9b:a5:84:81:4c:48:bb: 6b:0d:7e:59:cc:39:df:99:31:2f:97:71:50:b2:d9:4e:51:06: 5d:3b:b8:fb:2a:cd:5d:b6:c3:f4:84:eb:e7:2d:73:0e:aa:9c: 98:de:ba:02:4e:64:2e:67:ce:ad:d4:01:b2:1f:9b:de:2f:47: fe:39:ce:c2:52:78:bf:55:73:9e:51:82:a9:32:15:87:e1:07: a1:5d:98:45:88:fc:87:d2:a2:5a:32:e3:15:1f:ef:36:19:73: 88:94:76:5f:b8:d8:ad:17:17:af:de:87:14:7e:df:aa:f2:0b: 68:c0:c6:26:4b:15:9f:07:20:3e:28:be:e2:44:fb:4d:3c:01: 5c:98:22:66:47:ad:60:82:e7:b5:31:82:5c:3a:29:4f:34:ac: ed:0e:e9:9c:c8:64:3b:da:20:5e:00:4b:4a:bd:f1:14:24:30: 6e:04:a3:8f:f8:28:bf:a8:0e:a4:70:a4:2f:bc:0b:0b:20:8d: c8:98:d8:38:f9:93:2c:fc:31:ba:e9:81:69:68:f0:b5:54:ce: 79:fc:9a:29:25:f4:d1:02:f4:09:df:b9:25:77:9b:4b:df:7f: a6:aa:f3:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbMwq3hgHRatJA8xcuPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx OTlkNDkwHhcNMjUxMjIwMDIwMTM3WhcNMjUxMjIxMDIwMTM3WjAzMTEwLwYDVQQD EyhjMjRjZjJkNTNiZDQ2MjMwYjFjODhjOThkZDQ5NTQzYzA4Y2E5M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutzaEjfCfFHxrs2YipoMmbFnp4Mp kY43ni9jaFchaa4/lSYXofRs3NwjWJf+2mkVpSmU8bCJ1/mR72UaxS27VlNnuall J+Py3I2hTBRSpRNQcSry2jrEqk/iGvMt6APc6r1BnkknD0mnDqrdNew4tR77JV3k CKFBVA31oUkBbnJ9EMRKCSyeLx4Kyso7gG7ryLBd/1hz7QacjkvpTYdWASehgQ2u MAqW9ITlWimR47C7JTjLDrnPDFrbaM1bZomTfCIy9fkGOgq8tFUZ7HiVA3sHaWEa 0daqY196ZfVHeam8kpyiimnmTHVYIWgf1XbShAqsINx3sTEpTA/EfiZ+LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJM8tU71GIwsciMmN1JVDwIypOmMB8GA1UdIwQY MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz6O/G83 OadFOMpUUn4iAknxVaKdaMEgMLt6A3ObpYSBTEi7aw1+Wcw535kxL5dxULLZTlEG XTu4+yrNXbbD9ITr5y1zDqqcmN66Ak5kLmfOrdQBsh+b3i9H/jnOwlJ4v1VznlGC qTIVh+EHoV2YRYj8h9KiWjLjFR/vNhlziJR2X7jYrRcXr96HFH7fqvILaMDGJksV nwcgPii+4kT7TTwBXJgiZketYILntTGCXDopTzSs7Q7pnMhkO9ogXgBLSr3xFCQw bgSjj/gov6gOpHCkL7wLCyCNyJjYOPmTLPwxuumBaWjwtVTOefyaKSX00QL0Cd+5 JXebS99/pqrz4w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:47:51 2025 by rpki-client