This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json) Hash identifier: Teq2xEMWfIsayQBL5Vk4N4jh0thMiTSVeMU+g+8J+Aw= Subject key identifier: 02:79:96:F2:B7:96:C1:D2:F9:87:85:7A:5F:F2:4D:25:FD:5A:37:C3 Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 019B386A0E62C1598DF3B9F81DA19C02DA4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft Manifest number: 162B Signing time: Fri 19 Dec 2025 21:00:33 +0000 Manifest this update: Fri 19 Dec 2025 21:00:33 +0000 Manifest next update: Sat 20 Dec 2025 21:00:33 +0000 Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: fTHmIbG3H4sC+5JO6JeZ1HrbHzmpacCjBX/WhQ9a23I=) 2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=) 3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:0e:62:c1:59:8d:f3:b9:f8:1d:a1:9c:02:da:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Dec 19 21:00:33 2025 GMT Not After : Dec 20 21:00:33 2025 GMT Subject: CN=027996f2b796c1d2f987857a5ff24d25fd5a37c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:f7:f1:8c:4a:48:62:59:99:c6:fe:f3:ba: eb:93:14:89:16:9b:ee:54:01:aa:97:4e:a8:51:55: 7b:99:9e:be:af:40:2d:d8:cd:ef:ed:ed:54:ba:63: cd:9f:a5:59:85:3b:e5:4b:d7:a7:c6:bf:de:0e:67: 39:bd:ec:6a:71:9c:78:17:86:6e:04:17:20:e9:1f: 61:d7:07:63:b6:6e:af:b5:15:41:88:2e:32:00:20: 4a:31:e5:83:2d:c3:91:57:52:9d:c9:4b:5a:b8:5f: 6e:4e:8e:6a:29:4f:3b:c9:a6:da:17:87:f7:98:8a: 17:14:88:1e:d6:87:2a:7b:f6:e3:66:72:e7:20:1b: 18:2d:85:aa:c5:78:17:9f:18:83:c4:5e:f8:1e:50: 51:57:72:3d:66:e4:4b:3a:30:1d:d6:d2:7e:b5:d7: 70:8c:8e:ae:4d:48:26:f5:7a:9c:34:94:55:53:d7: 8b:c2:f8:c9:03:15:90:b6:93:13:fc:bd:af:fb:10: b3:ec:a8:64:0f:70:48:f6:e2:05:f0:13:59:4f:3e: 89:0e:df:60:17:af:f1:aa:17:57:29:5f:1c:78:60: 8e:cd:f9:2c:ca:30:d3:2c:34:07:5e:6f:97:95:18: 4f:64:a0:13:d6:31:b7:8d:21:aa:3e:9d:b4:3c:02: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:96:F2:B7:96:C1:D2:F9:87:85:7A:5F:F2:4D:25:FD:5A:37:C3 X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:dd:04:32:56:d7:f1:06:2e:ff:6f:cf:c9:50:18:aa:25: da:46:ff:44:05:56:5d:19:45:94:a6:54:31:6b:a7:85:b7:bf: 3a:78:55:df:ac:c8:fc:80:2e:a7:2f:32:d9:c7:b6:e0:18:1e: b4:4a:55:2b:50:e1:f3:ef:6c:c2:6c:8f:0c:e4:cc:3c:2f:ec: 7a:5b:56:4b:62:d7:48:b6:dc:fc:5a:76:88:a3:87:7b:07:9a: 59:69:66:f2:43:ec:70:b1:73:a3:38:b9:45:bc:87:9c:9c:50: 37:18:32:88:68:6a:ce:18:08:ce:93:03:6b:3d:f3:a8:ae:05: b6:98:96:07:7a:0a:cc:d8:d6:f8:2c:b2:62:b0:a0:e8:28:5a: 27:bc:b4:3e:75:83:af:de:65:c8:da:dd:40:5e:9b:dc:20:5f: 91:81:de:47:f9:ba:ea:a7:57:7a:9b:95:b1:91:e4:b1:ed:07: fd:19:30:cc:fa:85:82:2e:e1:30:93:f0:24:43:f9:58:83:30: 0b:6d:26:9a:10:16:33:82:74:00:8d:15:fc:1e:a5:0e:e2:09: 3f:31:39:d1:8c:ed:59:09:1a:06:ff:28:99:ac:64:c3:77:46: 2f:42:b7:b1:2d:df:5a:06:fb:9c:91:89:7f:21:24:32:3c:a8: 51:aa:6c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ag5iwVmN87n4HaGcAtpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjUxMjE5MjEwMDMzWhcNMjUxMjIwMjEwMDMzWjAzMTEwLwYDVQQD EygwMjc5OTZmMmI3OTZjMWQyZjk4Nzg1N2E1ZmYyNGQyNWZkNWEzN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3L38YxKSGJZmcb+87rrkxSJFpvu VAGql06oUVV7mZ6+r0At2M3v7e1UumPNn6VZhTvlS9enxr/eDmc5vexqcZx4F4Zu BBcg6R9h1wdjtm6vtRVBiC4yACBKMeWDLcORV1KdyUtauF9uTo5qKU87yabaF4f3 mIoXFIge1ocqe/bjZnLnIBsYLYWqxXgXnxiDxF74HlBRV3I9ZuRLOjAd1tJ+tddw jI6uTUgm9XqcNJRVU9eLwvjJAxWQtpMT/L2v+xCz7KhkD3BI9uIF8BNZTz6JDt9g F6/xqhdXKV8ceGCOzfksyjDTLDQHXm+XlRhPZKAT1jG3jSGqPp20PAKG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ5lvK3lsHS+YeFel/yTSX9WjfDMB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPLdBDJW 1/EGLv9vz8lQGKol2kb/RAVWXRlFlKZUMWunhbe/OnhV36zI/IAupy8y2ce24Bge tEpVK1Dh8+9swmyPDOTMPC/seltWS2LXSLbc/Fp2iKOHeweaWWlm8kPscLFzozi5 RbyHnJxQNxgyiGhqzhgIzpMDaz3zqK4FtpiWB3oKzNjW+CyyYrCg6ChaJ7y0PnWD r95lyNrdQF6b3CBfkYHeR/m66qdXepuVsZHkse0H/RkwzPqFgi7hMJPwJEP5WIMw C20mmhAWM4J0AI0V/B6lDuIJPzE50YztWQkaBv8omaxkw3dGL0K3sS3fWgb7nJGJ fyEkMjyoUapsNg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:27:38 2025 by rpki-client