This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json) Hash identifier: 3No8lr7EoEg7tasaiq63eRxBvvc7LHVnPyvzq8HIfh0= Subject key identifier: 25:AF:8F:40:E8:62:42:5F:ED:35:02:A7:5D:2B:F7:2B:24:3B:F9:EF Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019B446E63FAC13F7A9F0CEC93EA3BEDBDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft Manifest number: 13E8 Signing time: Mon 22 Dec 2025 05:00:43 +0000 Manifest this update: Mon 22 Dec 2025 05:00:43 +0000 Manifest next update: Tue 23 Dec 2025 05:00:43 +0000 Files and hashes: 1: A4Hv6ilbj-Hq-sEQxHCFjnJGPcg.roa (hash: vN/GanH0kropaMl+FMWa5RxvA+BoMIEwdjLhlP/xzOQ=) 2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: x/TRSJ26wijGuM3dTRo7rcTRc65EjqXcP+c75MaUC5M=) 3: WgPDUokIULDOoR23_fynyfvKx_M.roa (hash: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:63:fa:c1:3f:7a:9f:0c:ec:93:ea:3b:ed:bd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Dec 22 05:00:43 2025 GMT Not After : Dec 23 05:00:43 2025 GMT Subject: CN=25af8f40e862425fed3502a75d2bf72b243bf9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:fe:59:53:d4:45:65:39:26:79:d2:44:91: c6:1e:bb:ff:fc:ca:e0:a0:b3:a5:bc:04:a8:29:7b: 82:e4:06:a0:e9:23:22:63:c0:50:d3:49:07:45:15: 11:bf:80:c0:b9:a4:cf:8c:cc:50:d1:fe:2e:b8:4b: 86:54:cc:4a:aa:36:c0:3a:1c:bc:80:c4:fa:ff:cc: 2c:27:e7:ba:f3:90:b1:ed:e7:b0:37:a2:61:84:ff: 7d:19:da:8e:fb:8e:25:b5:db:fd:5a:90:2c:1d:e4: d8:ae:46:2b:f1:38:43:0b:93:2b:91:c3:8c:59:0e: 8f:9c:5e:e0:f1:9e:f4:2c:94:77:59:83:9d:b9:9c: 20:4f:43:c5:d8:3e:fd:84:fa:35:af:89:c4:e6:1e: 1e:84:27:5b:f6:a3:44:4e:46:a2:4f:e8:6d:a7:70: 03:01:26:93:d9:6a:32:98:79:3e:30:b0:35:45:86: d7:8e:aa:68:9b:83:6f:5f:5f:38:20:16:bb:e0:64: 26:c4:9b:82:52:3f:c0:41:36:c0:33:cd:83:73:65: 09:98:52:42:c9:3f:a4:7f:e5:7d:72:8c:75:9d:96: a9:01:b2:80:a7:a8:30:b9:71:5b:a2:aa:91:41:10: 28:db:ac:8a:83:8b:2c:d0:c7:90:fa:35:be:0d:9a: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AF:8F:40:E8:62:42:5F:ED:35:02:A7:5D:2B:F7:2B:24:3B:F9:EF X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:3a:5b:24:07:58:50:62:ab:06:9d:8d:92:3a:e5:e9:7e:d4: e8:75:3a:1b:7c:87:46:1e:cb:3a:c7:05:35:85:e2:69:98:3a: d5:37:5e:64:a3:7e:9f:2d:03:d6:b5:08:0f:e1:f0:89:2b:c6: 60:b8:3b:15:a4:e5:68:17:b4:1b:93:71:a1:e1:ee:74:41:97: 45:92:81:a9:10:81:6d:19:46:43:a4:d0:60:a7:6f:e8:eb:f2: a5:6e:94:cc:f4:45:af:aa:42:67:5c:08:3c:f0:db:7d:82:c1: 60:2a:51:4e:0a:4f:45:e3:8c:25:12:6a:7d:fa:cb:53:ad:1c: cb:c7:9c:f4:23:32:d5:93:5d:c9:64:52:b7:5c:75:7c:b2:be: fd:c4:52:91:b9:31:83:37:4a:45:57:c9:a8:bc:04:17:33:08: 6a:1d:ec:d2:74:2a:63:c0:8f:81:99:ce:62:d1:35:aa:6f:82: 9b:9c:ae:32:d0:5a:5e:4b:4e:a4:d8:b1:40:16:5e:1b:1f:9d: c2:a2:e5:5d:06:7b:09:f6:a6:cf:83:84:5d:e4:ae:ce:b7:ae: 7f:2c:0a:94:12:c9:46:9d:8d:63:ad:54:e6:68:32:b3:04:d2: 33:17:2e:83:fb:70:1f:cb:d0:51:c1:de:a1:74:88:45:7d:fd: 4c:60:22:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmP6wT96nwzsk+o77b3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjUxMjIyMDUwMDQzWhcNMjUxMjIzMDUwMDQzWjAzMTEwLwYDVQQD EygyNWFmOGY0MGU4NjI0MjVmZWQzNTAyYTc1ZDJiZjcyYjI0M2JmOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iL+WVPURWU5JnnSRJHGHrv//Mrg oLOlvASoKXuC5Aag6SMiY8BQ00kHRRURv4DAuaTPjMxQ0f4uuEuGVMxKqjbAOhy8 gMT6/8wsJ+e685Cx7eewN6JhhP99GdqO+44ltdv9WpAsHeTYrkYr8ThDC5MrkcOM WQ6PnF7g8Z70LJR3WYOduZwgT0PF2D79hPo1r4nE5h4ehCdb9qNETkaiT+htp3AD ASaT2WoymHk+MLA1RYbXjqpom4NvX184IBa74GQmxJuCUj/AQTbAM82Dc2UJmFJC yT+kf+V9cox1nZapAbKAp6gwuXFboqqRQRAo26yKg4ss0MeQ+jW+DZr2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWvj0DoYkJf7TUCp10r9yskO/nvMB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDpbJAdY UGKrBp2Nkjrl6X7U6HU6G3yHRh7LOscFNYXiaZg61TdeZKN+ny0D1rUID+HwiSvG YLg7FaTlaBe0G5NxoeHudEGXRZKBqRCBbRlGQ6TQYKdv6OvypW6UzPRFr6pCZ1wI PPDbfYLBYCpRTgpPReOMJRJqffrLU60cy8ec9CMy1ZNdyWRSt1x1fLK+/cRSkbkx gzdKRVfJqLwEFzMIah3s0nQqY8CPgZnOYtE1qm+Cm5yuMtBaXktOpNixQBZeGx+d wqLlXQZ7Cfamz4OEXeSuzreufywKlBLJRp2NY61U5mgyswTSMxcug/twH8vQUcHe oXSIRX39TGAiTg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:56 2025 by rpki-client