This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json) Hash identifier: MHnYMITOsdkyPp2pF8E6DcdJBnYZHanCQlAvpeNTc+s= Subject key identifier: D9:8E:85:89:D3:74:EC:EC:D3:E3:FF:1C:76:F3:59:DA:9B:86:29:8B Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c Certificate serial: 019B65437EDBBC853D087DFE734C6DB27750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft Manifest number: 028A Signing time: Sun 28 Dec 2025 14:01:20 +0000 Manifest this update: Sun 28 Dec 2025 14:01:20 +0000 Manifest next update: Mon 29 Dec 2025 14:01:20 +0000 Files and hashes: 1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=) 2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: ek8soHc87kp6+F9Y9RkHnvbARqVSPpGjFmw5Kkr1VBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:7e:db:bc:85:3d:08:7d:fe:73:4c:6d:b2:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c Validity Not Before: Dec 28 14:01:20 2025 GMT Not After : Dec 29 14:01:20 2025 GMT Subject: CN=d98e8589d374ececd3e3ff1c76f359da9b86298b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:75:be:1f:f3:c9:e8:81:e5:4c:1e:f5:d4:35: 73:b5:aa:cf:db:a3:02:0d:18:ad:f9:49:89:35:38: 8d:5f:9e:6e:ec:d9:a0:7d:da:cb:d4:e1:d8:85:bd: 34:26:b0:55:1a:35:96:75:dc:f9:c5:1b:a0:17:2c: c4:be:46:e9:bc:ce:b9:78:e0:11:7f:a7:a4:8d:b6: 02:c8:16:68:6b:65:42:93:d3:41:58:af:6a:6b:73: ec:ba:85:74:f0:b1:70:c4:23:a5:46:e9:9d:d6:91: b6:2a:c6:ca:a1:7e:3f:1e:30:f5:31:ae:a2:b2:96: fb:95:32:c6:9b:e5:e7:21:5f:6d:8d:2e:67:15:03: 0d:9a:15:84:e9:22:c8:6c:da:ec:de:f4:0a:e5:8e: 05:33:90:bd:32:1d:45:ee:d6:96:eb:99:ca:7c:61: 85:7b:4e:77:d5:93:b3:f9:81:1e:9f:75:4f:ba:2f: 81:80:5e:94:d6:45:bf:80:49:ad:76:d6:e0:84:8b: 9d:76:c1:b2:34:33:3b:70:6d:a0:da:b7:57:96:23: 8f:85:08:01:32:c1:ad:36:fd:52:7c:66:9a:fa:4f: 08:dc:5a:e5:be:10:41:53:fe:b4:a9:c1:1d:57:5a: 66:2b:d3:c9:ad:76:58:85:59:88:37:5e:a3:5d:60: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:85:89:D3:74:EC:EC:D3:E3:FF:1C:76:F3:59:DA:9B:86:29:8B X509v3 Authority Key Identifier: keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:4f:89:d4:24:e1:6e:fa:a5:4f:5a:e3:97:74:ef:51:be: c3:cf:2b:db:1a:eb:71:25:20:12:94:97:3d:a3:cd:10:08:86: e5:ce:8f:1b:7e:92:30:79:7d:59:32:21:00:cb:22:67:fb:d7: 86:35:99:35:b6:a7:2f:89:84:c3:f6:46:bb:1d:0c:27:c7:18: cd:c3:40:e0:90:42:03:df:09:08:b4:7a:5b:8a:46:fa:eb:d8: 93:91:26:4c:9f:10:b2:3f:dd:b2:bc:dc:9f:a1:5a:67:18:b3: db:50:a1:34:ff:57:5a:91:db:8b:a3:67:8f:74:ef:fb:2b:2c: d7:4e:d0:dd:b7:d4:6f:c1:47:fb:f1:5f:20:74:b1:f9:e1:0a: 3e:1b:8a:fb:e9:24:0d:2e:b6:5a:51:d6:9a:63:7e:79:a0:69: aa:52:52:c8:ec:a5:7a:4b:fd:45:08:e5:a3:96:b0:14:42:cf: 8f:99:66:b5:bb:82:4b:49:60:59:8b:87:ce:77:5a:1b:43:c5: d1:30:2e:a7:e1:20:40:e9:ee:c0:d2:4f:e2:2f:37:34:c6:4d: 20:b1:12:9e:17:60:3e:da:bb:23:52:04:9b:06:ce:81:a1:da: 69:b8:cf:79:cf:82:0a:e3:29:a3:fd:4f:4f:0b:ff:3d:ce:53: 77:76:94:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQ37bvIU9CH3+c0xtsndQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz NjQ5OWMwHhcNMjUxMjI4MTQwMTIwWhcNMjUxMjI5MTQwMTIwWjAzMTEwLwYDVQQD EyhkOThlODU4OWQzNzRlY2VjZDNlM2ZmMWM3NmYzNTlkYTliODYyOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nW+H/PJ6IHlTB711DVztarP26MC DRit+UmJNTiNX55u7NmgfdrL1OHYhb00JrBVGjWWddz5xRugFyzEvkbpvM65eOAR f6ekjbYCyBZoa2VCk9NBWK9qa3PsuoV08LFwxCOlRumd1pG2KsbKoX4/HjD1Ma6i spb7lTLGm+XnIV9tjS5nFQMNmhWE6SLIbNrs3vQK5Y4FM5C9Mh1F7taW65nKfGGF e0531ZOz+YEen3VPui+BgF6U1kW/gEmtdtbghIuddsGyNDM7cG2g2rdXliOPhQgB MsGtNv1SfGaa+k8I3FrlvhBBU/60qcEdV1pmK9PJrXZYhVmIN16jXWB8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmOhYnTdOzs0+P/HHbzWdqbhimLMB8GA1UdIwQY MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3 LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm1PidQk 4W76pU9a45d071G+w88r2xrrcSUgEpSXPaPNEAiG5c6PG36SMHl9WTIhAMsiZ/vX hjWZNbanL4mEw/ZGux0MJ8cYzcNA4JBCA98JCLR6W4pG+uvYk5EmTJ8Qsj/dsrzc n6FaZxiz21ChNP9XWpHbi6Nnj3Tv+yss107Q3bfUb8FH+/FfIHSx+eEKPhuK++kk DS62WlHWmmN+eaBpqlJSyOylekv9RQjlo5awFELPj5lmtbuCS0lgWYuHzndaG0PF 0TAup+EgQOnuwNJP4i83NMZNILESnhdgPtq7I1IEmwbOgaHaabjPec+CCuMpo/1P Twv/Pc5Td3aUTg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:51 2025 by rpki-client