This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json) Hash identifier: 2OIuEyairn261mEmLH79TjDrrVIeIPgE9P9ya0i6eJg= Subject key identifier: 50:73:46:6E:4C:33:D3:03:45:2D:28:C3:D1:95:95:AB:FB:6B:92:9A Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Certificate serial: 019B4C96713729311C4DE424AB2D890E1685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft Manifest number: 1164 Signing time: Tue 23 Dec 2025 19:01:26 +0000 Manifest this update: Tue 23 Dec 2025 19:01:26 +0000 Manifest next update: Wed 24 Dec 2025 19:01:26 +0000 Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=) 2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: r0XKGa9/69RR4H9kaoTL5HwU/S8Cs3SMCLpqK+jcvOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:71:37:29:31:1c:4d:e4:24:ab:2d:89:0e:16:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31 Validity Not Before: Dec 23 19:01:26 2025 GMT Not After : Dec 24 19:01:26 2025 GMT Subject: CN=5073466e4c33d303452d28c3d19595abfb6b929a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:50:48:d7:e6:bd:44:4f:db:fa:d9:75:8e: 6d:34:2a:da:63:de:2b:fd:db:1a:a1:40:37:7d:74: b9:20:1c:fe:aa:2d:14:d5:b7:2c:1b:a2:9d:14:2e: ad:e8:77:72:76:ae:9c:0f:29:e2:2f:a3:a5:49:ec: 47:6b:a2:39:5d:fd:f7:5c:72:af:84:a0:47:ee:f0: b7:25:1a:16:c9:df:dc:af:4a:5e:3a:9b:62:bf:df: ad:55:19:84:55:c4:d4:0e:db:64:19:8e:3d:62:ea: 84:49:a3:65:2c:d5:71:c2:f5:ff:1f:60:e0:c9:01: a9:df:2f:c4:8a:a2:17:21:0c:d8:c9:ca:af:7e:6f: 39:54:98:13:20:22:aa:f1:16:a7:36:b0:d1:84:27: e3:30:da:83:36:a3:27:e0:8b:66:82:2d:82:e8:25: 13:b0:25:e3:83:4a:1b:71:aa:c7:07:f8:36:c2:18: fc:2d:a1:07:4a:b4:29:1d:0c:3e:d6:4d:b4:bd:9b: c3:d4:8c:20:e7:36:71:05:a4:66:3c:42:3a:9e:16: 4f:62:98:14:98:0f:a8:1d:7f:46:6c:c2:16:43:63: d6:2d:11:48:f9:7e:e5:50:e3:85:3d:8e:56:c1:d2: 44:eb:a9:63:d7:a5:1e:5a:c7:94:7a:27:42:75:d8: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:46:6E:4C:33:D3:03:45:2D:28:C3:D1:95:95:AB:FB:6B:92:9A X509v3 Authority Key Identifier: keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0b:a8:ab:a4:36:72:eb:82:ae:a0:d3:b7:a7:4c:e7:5f:86: 04:a0:0b:a6:71:ce:85:60:97:23:58:99:c4:2b:3b:b7:85:fc: ab:05:01:67:5f:81:de:81:52:63:c7:32:d6:49:d8:80:eb:ea: 6c:1f:8a:17:42:f5:6e:9b:dc:9e:86:e4:25:39:00:10:29:6d: 69:b9:af:dc:d8:45:4e:0e:66:69:56:c9:8c:78:97:8c:7c:e1: 3c:47:4f:37:e0:7f:0c:b7:60:46:4b:0e:d5:6c:c3:76:34:a6: 73:89:e6:55:61:31:77:37:c2:72:ea:f2:b2:be:64:65:3e:65: df:de:ed:38:b3:bf:a7:0c:5a:53:e9:68:f3:e9:24:b8:90:25: 10:cb:fe:67:0c:e0:f8:96:70:03:b0:57:05:d9:f1:5a:1e:4c: f3:42:70:ab:19:d7:44:cc:65:a0:c0:ca:f3:80:8b:d3:71:bd: 62:f2:fb:1b:3c:4e:96:8b:51:f2:ac:7d:93:06:f6:98:6b:f3: 24:19:c5:7d:20:d0:e0:a0:01:95:a5:88:01:e8:98:b7:46:8b: 65:26:7c:d0:42:d3:86:dc:30:12:a4:a3:54:ff:2a:c3:81:49: 2c:c1:d7:4a:49:9c:45:77:b2:55:25:22:22:30:56:ae:7b:be: b1:e0:b5:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlnE3KTEcTeQkqy2JDhaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj NDlkMzEwHhcNMjUxMjIzMTkwMTI2WhcNMjUxMjI0MTkwMTI2WjAzMTEwLwYDVQQD Eyg1MDczNDY2ZTRjMzNkMzAzNDUyZDI4YzNkMTk1OTVhYmZiNmI5MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ZQSNfmvURP2/rZdY5tNCraY94r /dsaoUA3fXS5IBz+qi0U1bcsG6KdFC6t6Hdydq6cDyniL6OlSexHa6I5Xf33XHKv hKBH7vC3JRoWyd/cr0peOptiv9+tVRmEVcTUDttkGY49YuqESaNlLNVxwvX/H2Dg yQGp3y/EiqIXIQzYycqvfm85VJgTICKq8RanNrDRhCfjMNqDNqMn4Itmgi2C6CUT sCXjg0obcarHB/g2whj8LaEHSrQpHQw+1k20vZvD1Iwg5zZxBaRmPEI6nhZPYpgU mA+oHX9GbMIWQ2PWLRFI+X7lUOOFPY5WwdJE66lj16UeWseUeidCddjvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBzRm5MM9MDRS0ow9GVlav7a5KaMB8GA1UdIwQY MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3 LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQuoq6Q2 cuuCrqDTt6dM51+GBKALpnHOhWCXI1iZxCs7t4X8qwUBZ1+B3oFSY8cy1knYgOvq bB+KF0L1bpvcnobkJTkAECltabmv3NhFTg5maVbJjHiXjHzhPEdPN+B/DLdgRksO 1WzDdjSmc4nmVWExdzfCcurysr5kZT5l397tOLO/pwxaU+lo8+kkuJAlEMv+Zwzg +JZwA7BXBdnxWh5M80JwqxnXRMxloMDK84CL03G9YvL7GzxOlotR8qx9kwb2mGvz JBnFfSDQ4KABlaWIAeiYt0aLZSZ80ELThtwwEqSjVP8qw4FJLMHXSkmcRXeyVSUi IjBWrnu+seC11Q== -----END CERTIFICATE-----Generated at Tue Dec 23 20:52:06 2025 by rpki-client