This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json) Hash identifier: neNrVtcoVuattc6DU+URk/9192377T6gWsNDC3XlaOk= Subject key identifier: 37:1F:A1:F8:A5:85:37:D7:60:AF:98:62:AF:E8:3F:A6:1C:DF:BC:01 Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019B38D83056A625F935645A9179C07CE985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft Manifest number: 13E2 Signing time: Fri 19 Dec 2025 23:00:50 +0000 Manifest this update: Fri 19 Dec 2025 23:00:50 +0000 Manifest next update: Sat 20 Dec 2025 23:00:50 +0000 Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=) 2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: GYsjz82vhAaXlYSgbX4aaRdHTBQI50n1nkLTvp7wG30=) 3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:30:56:a6:25:f9:35:64:5a:91:79:c0:7c:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Dec 19 23:00:50 2025 GMT Not After : Dec 20 23:00:50 2025 GMT Subject: CN=371fa1f8a58537d760af9862afe83fa61cdfbc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:6c:4e:a8:ba:f7:f4:a6:99:64:81:09:16: 11:53:99:81:2b:27:1a:86:84:da:cf:4e:9d:73:b0: fd:20:13:0b:ba:7a:b9:5a:61:6e:c0:0d:1c:85:63: b2:b8:8f:35:c4:14:5b:75:28:2f:40:8f:3f:b7:eb: bf:a0:34:c3:5d:0b:0b:23:93:f4:70:3e:58:1c:80: a7:93:51:d2:24:db:67:e3:ca:27:0d:3b:ac:aa:85: 8e:5d:a5:0b:a2:ed:d3:20:1b:5f:a8:d2:6b:40:22: d8:6b:bb:ae:f2:a1:94:1e:88:f8:0f:51:ce:eb:7b: c6:a9:fb:81:51:92:2a:b3:03:e9:0c:27:c7:d7:70: e8:49:ea:e0:92:6c:7b:e6:c7:c2:d3:79:d6:03:10: 52:6e:af:fa:b7:a2:33:d5:66:40:f3:e2:f3:61:ad: 24:d7:55:c2:89:8b:f6:1a:68:6c:83:b0:94:cd:dd: a8:0b:5b:b8:f9:b0:cd:c7:a8:a7:d1:10:8f:cb:fd: 27:91:f1:de:a5:12:29:5e:81:45:86:4c:f9:50:1e: 56:1f:b1:e7:fa:a2:60:cd:1b:d8:93:53:56:64:cf: e7:2f:bf:ab:bb:c8:6b:ee:07:46:eb:50:fd:3c:97: 20:4f:8c:57:ab:05:ce:05:a6:a9:bb:2a:dd:c4:25: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:A1:F8:A5:85:37:D7:60:AF:98:62:AF:E8:3F:A6:1C:DF:BC:01 X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:0d:e0:7c:28:ab:76:e3:f4:7b:df:2c:c1:66:df:ce:e8: ff:38:2b:80:b9:67:da:7d:cd:64:7e:e0:b3:11:e8:3b:12:5b: 88:3e:1e:5e:90:0e:c1:0c:34:3b:cb:a9:4f:0b:fa:36:57:a5: 58:5b:72:21:cf:b6:23:28:9f:a7:3c:85:69:1c:fb:86:11:7b: cf:cb:37:16:b3:56:83:08:4d:33:75:c5:2b:d0:33:a7:c2:ba: 68:c2:53:2c:3d:47:1a:2a:d9:84:f6:51:f2:2a:5d:0a:91:a3: 64:a5:93:9e:b7:85:2d:33:6c:c5:e2:12:bf:8b:a0:ef:7b:9f: 27:d6:19:fa:9d:a6:01:92:b8:d4:6d:25:1b:5b:ad:89:7b:62: 5d:59:11:db:9c:b5:e1:dc:fb:f7:9e:63:9f:ca:40:a6:a8:8f: 93:0e:c4:d6:a9:5e:32:60:d9:02:be:12:86:02:f3:cb:a7:b9: af:f4:bf:69:13:de:8d:09:ec:2c:4c:e9:b5:ff:ce:eb:c2:3e: d5:ef:62:42:6d:31:85:9e:8d:e5:28:47:a2:08:63:bb:61:bf: 8e:b8:92:a1:9f:df:ed:32:75:72:25:54:e7:0c:39:9c:cf:23: 47:58:30:f3:86:50:e2:82:57:c0:0c:b1:27:7a:a6:5f:57:a1: 69:52:95:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DBWpiX5NWRakXnAfOmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjUxMjE5MjMwMDUwWhcNMjUxMjIwMjMwMDUwWjAzMTEwLwYDVQQD EygzNzFmYTFmOGE1ODUzN2Q3NjBhZjk4NjJhZmU4M2ZhNjFjZGZiYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtThsTqi69/SmmWSBCRYRU5mBKyca hoTaz06dc7D9IBMLunq5WmFuwA0chWOyuI81xBRbdSgvQI8/t+u/oDTDXQsLI5P0 cD5YHICnk1HSJNtn48onDTusqoWOXaULou3TIBtfqNJrQCLYa7uu8qGUHoj4D1HO 63vGqfuBUZIqswPpDCfH13DoSergkmx75sfC03nWAxBSbq/6t6Iz1WZA8+LzYa0k 11XCiYv2Gmhsg7CUzd2oC1u4+bDNx6in0RCPy/0nkfHepRIpXoFFhkz5UB5WH7Hn +qJgzRvYk1NWZM/nL7+ru8hr7gdG61D9PJcgT4xXqwXOBaapuyrdxCVa1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcfofilhTfXYK+YYq/oP6Yc37wBMB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2kN4Hwo q3bj9HvfLMFm387o/zgrgLln2n3NZH7gsxHoOxJbiD4eXpAOwQw0O8upTwv6Nlel WFtyIc+2IyifpzyFaRz7hhF7z8s3FrNWgwhNM3XFK9Azp8K6aMJTLD1HGirZhPZR 8ipdCpGjZKWTnreFLTNsxeISv4ug73ufJ9YZ+p2mAZK41G0lG1utiXtiXVkR25y1 4dz7955jn8pApqiPkw7E1qleMmDZAr4ShgLzy6e5r/S/aRPejQnsLEzptf/O68I+ 1e9iQm0xhZ6N5ShHoghju2G/jriSoZ/f7TJ1ciVU5ww5nM8jR1gw84ZQ4oJXwAyx J3qmX1ehaVKVnw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:56:27 2025 by rpki-client