This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json) Hash identifier: 7TJLI3Dh39ANbkbgpNjBmF4XNs4tkbda4S0H0yXLY2g= Subject key identifier: 99:8A:D0:00:F7:60:CB:39:B5:7E:A4:A7:75:73:A4:C6:98:B8:9B:D3 Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff Certificate serial: 019B53AB984D249D1E9ACC848DA00809FD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft Manifest number: 02C9 Signing time: Thu 25 Dec 2025 04:01:53 +0000 Manifest this update: Thu 25 Dec 2025 04:01:53 +0000 Manifest next update: Fri 26 Dec 2025 04:01:53 +0000 Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: myIdR6HuRW1sQhettU4NealFjqRKVfN0pY/P0T2uXu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:98:4d:24:9d:1e:9a:cc:84:8d:a0:08:09:fd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff Validity Not Before: Dec 25 04:01:53 2025 GMT Not After : Dec 26 04:01:53 2025 GMT Subject: CN=998ad000f760cb39b57ea4a77573a4c698b89bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:09:44:7c:35:8e:a6:24:d1:41:24:5e:14: 30:c5:28:bc:63:25:d2:9e:80:5b:37:e3:8f:22:46: 63:7c:08:a2:c1:e8:05:32:5f:bd:c3:4f:71:94:08: 3d:46:86:b5:73:59:a4:2b:00:a5:19:3d:e2:d2:f7: 04:02:58:ce:06:0c:df:ca:81:f9:f7:8b:57:08:1b: 72:d9:0b:4f:33:a1:00:69:e3:d8:ca:d9:77:0e:fe: f7:88:87:3e:a0:83:0c:bb:2d:d9:fe:3b:8a:8e:09: 38:0a:97:6e:02:b2:54:18:fa:6d:ec:6f:cb:e4:b4: bf:54:cd:6c:60:76:7b:9c:95:ba:db:fc:6f:20:86: 62:26:51:0f:f2:0b:5a:01:4d:0c:22:af:1a:c8:0b: c6:d0:91:2f:d2:05:5e:4e:23:77:3b:44:6d:9e:75: 13:56:9f:91:ef:74:f0:d4:68:d7:fa:50:53:ff:6c: 22:6a:43:2b:3e:53:0a:a6:a7:d1:69:88:d9:48:5d: ec:39:bf:51:f1:90:eb:1e:9f:90:9b:e6:9f:5b:03: d4:65:98:e8:39:ca:cd:c4:31:48:99:a8:f1:1e:5e: cc:46:2f:e5:6e:e9:22:2e:b3:5a:2d:2f:21:e2:3b: c2:2f:68:8f:b1:87:56:ae:1a:17:c2:5d:4c:29:01: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8A:D0:00:F7:60:CB:39:B5:7E:A4:A7:75:73:A4:C6:98:B8:9B:D3 X509v3 Authority Key Identifier: keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:15:e6:bc:d3:c1:1a:e6:f7:02:a7:2d:d7:43:08:ad:5f:c6: e3:4d:e0:7e:87:61:a5:2f:5e:3f:57:88:67:f2:0e:a4:98:ce: d8:0b:67:e8:d8:a5:c0:dc:b6:e9:9f:ba:63:0b:6e:96:64:4d: 28:f2:94:8c:6d:54:de:63:97:2a:8a:f0:35:53:14:27:52:06: 6f:7e:f8:1e:0c:09:06:3c:23:df:e8:d9:af:23:7d:a1:69:a3: 8e:cf:98:f5:0d:aa:0e:37:59:72:21:fb:e0:b5:d3:37:2a:77: 29:2a:6a:cb:0c:20:2a:ab:87:60:eb:60:37:94:87:8f:a5:8d: dd:74:c1:db:2a:26:8a:74:89:f9:cc:25:33:00:0a:41:d3:1b: f2:27:b8:d7:12:49:8c:5a:5e:0d:a3:81:be:6c:30:1d:29:fb: 7e:ae:31:1f:f7:e8:86:b1:36:52:dd:17:4b:4e:d0:ed:56:af: cc:99:87:ff:b4:1d:6d:47:cc:03:b5:56:4a:11:12:7f:3c:16: 79:63:0b:d5:0a:5c:4b:6a:58:6e:bc:9f:7a:ef:b2:9c:b7:a0: 2d:12:4b:3e:b7:63:9e:75:9f:d4:6a:7e:76:8f:b2:28:e2:e8: ad:82:00:f0:e3:69:8d:aa:ba:87:a4:68:a5:55:ee:37:16:22: cd:59:6c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq5hNJJ0emsyEjaAICf0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjI4NTk4ZWJlNWY3NjBlYjYzZTA1MWE1NTAwMTE3NWQ5 YzYzZmYwHhcNMjUxMjI1MDQwMTUzWhcNMjUxMjI2MDQwMTUzWjAzMTEwLwYDVQQD Eyg5OThhZDAwMGY3NjBjYjM5YjU3ZWE0YTc3NTczYTRjNjk4Yjg5YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIwJRHw1jqYk0UEkXhQwxSi8YyXS noBbN+OPIkZjfAiiwegFMl+9w09xlAg9Roa1c1mkKwClGT3i0vcEAljOBgzfyoH5 94tXCBty2QtPM6EAaePYytl3Dv73iIc+oIMMuy3Z/juKjgk4CpduArJUGPpt7G/L 5LS/VM1sYHZ7nJW62/xvIIZiJlEP8gtaAU0MIq8ayAvG0JEv0gVeTiN3O0RtnnUT Vp+R73Tw1GjX+lBT/2wiakMrPlMKpqfRaYjZSF3sOb9R8ZDrHp+Qm+afWwPUZZjo OcrNxDFImajxHl7MRi/lbukiLrNaLS8h4jvCL2iPsYdWrhoXwl1MKQEvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmK0AD3YMs5tX6kp3VzpMaYuJvTMB8GA1UdIwQY MBaAFLyyhZjr5fdg62PgUaVQARddnGP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTct N2M3NzA2ODk4YWQ4LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTctN2M3NzA2ODk4YWQ4 LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBXmvNPB Gub3Aqct10MIrV/G403gfodhpS9eP1eIZ/IOpJjO2Atn6NilwNy26Z+6YwtulmRN KPKUjG1U3mOXKorwNVMUJ1IGb374HgwJBjwj3+jZryN9oWmjjs+Y9Q2qDjdZciH7 4LXTNyp3KSpqywwgKquHYOtgN5SHj6WN3XTB2yominSJ+cwlMwAKQdMb8ie41xJJ jFpeDaOBvmwwHSn7fq4xH/fohrE2Ut0XS07Q7VavzJmH/7QdbUfMA7VWShESfzwW eWML1QpcS2pYbryfeu+ynLegLRJLPrdjnnWf1Gp+do+yKOLorYIA8ONpjaq6h6Ro pVXuNxYizVlsMA== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:44 2025 by rpki-client