This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft File: VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json) Hash identifier: W4bIKWXA7GtwoR8RfByYlKFs+NEWq4QqrgHBDkiaZjQ= Subject key identifier: 9D:3D:DC:E9:7D:91:3E:92:84:93:3E:05:13:06:F4:39:98:88:76:04 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019B3BA28709B69525CC5C1DEF8F5D878595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft Manifest number: 3D Signing time: Sat 20 Dec 2025 12:01:05 +0000 Manifest this update: Sat 20 Dec 2025 12:01:05 +0000 Manifest next update: Sun 21 Dec 2025 12:01:05 +0000 Files and hashes: 1: Cp4gcvamYBfnZC5YYMArdCgHAWc.roa (hash: HDmnQw9rzA9hJV9zOcmuzMYOeMFvqznOPkwQbUVIAdc=) 2: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: y8zf3hfLvGruj2wyz9XoXyTqpUJCvWS8SGskMmQIvqY=) 3: jNIMpqVVBBvGe1wWZEcd_3aMqTE.roa (hash: DwN6wlinhuNYDL2QSAaQScCbNulY1NZQGBUVI9igI2E=) 4: uwev7I_QSnb8uPd2lQmP_EPvQyk.roa (hash: pPQnoLSpGD9bPFvss8vOJAXXOfihWCOJuYjZwGXWddQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:87:09:b6:95:25:cc:5c:1d:ef:8f:5d:87:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Dec 20 12:01:05 2025 GMT Not After : Dec 21 12:01:05 2025 GMT Subject: CN=9d3ddce97d913e9284933e051306f43998887604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:44:8d:ee:b8:db:e5:bf:9d:98:33:ca:2a: e8:16:e5:93:87:8b:0d:c5:e3:71:d1:c2:6c:d4:c6: b0:57:44:85:e5:77:d9:66:ff:af:8e:11:7c:96:76: 99:19:5b:76:64:53:c2:2c:e3:46:63:dd:50:60:92: fb:80:4a:0f:62:d7:ea:1d:1b:4d:9c:b5:05:10:8c: 0a:11:76:65:8e:72:26:96:e0:ca:d0:e7:70:cb:7f: 14:ad:84:86:49:2f:f0:2e:c7:05:03:ce:36:7b:f1: 8b:48:a8:e8:4a:03:c5:ce:23:68:92:73:f0:5a:9f: da:a5:b1:92:df:68:d6:70:fb:99:92:91:bc:f9:7e: 98:44:dd:3a:41:45:04:c9:15:03:94:de:4f:e7:8a: 9c:df:8c:61:c6:f1:0d:c8:72:e4:89:06:ed:30:f9: fc:55:af:4d:a1:bf:8a:1e:2d:11:05:0d:23:d0:08: 1f:5f:b8:0a:98:81:86:5f:51:6f:b1:b9:96:a5:d3: 10:2e:a6:e7:42:b6:32:42:c2:cb:13:bd:2b:a9:9d: 73:e0:e6:6c:6f:8e:ff:4c:db:2f:b0:76:73:a1:d7: 37:69:f3:1a:07:88:6d:1a:74:15:1b:ee:79:90:6e: 88:dc:1f:de:99:84:b2:a7:78:8e:75:83:69:4b:57: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:DC:E9:7D:91:3E:92:84:93:3E:05:13:06:F4:39:98:88:76:04 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:cf:26:71:3f:53:da:ac:c8:64:b2:f1:b9:35:01:59:1f: b6:05:84:d4:e1:bf:56:ff:f4:03:fb:93:82:ef:ad:6a:6c:35: 2c:ef:68:4c:bb:a0:88:10:ce:a5:4a:9e:1c:40:6d:8b:3a:8d: 8d:6e:cf:a6:75:8a:c5:c1:d8:8f:d5:d5:36:19:af:a4:cd:f4: 0e:d3:97:db:cd:37:bd:09:29:8f:7d:66:0f:8d:d6:fe:c6:de: 82:6d:2e:d2:61:10:d7:3e:bd:52:82:50:e4:92:e3:0b:55:df: 4f:d8:95:aa:b9:f5:f2:22:41:6d:fb:5d:1d:07:f3:67:fb:62: c5:dc:7a:de:4b:0a:2e:73:2c:94:6a:71:d8:33:ee:72:a2:bf: b0:4b:3b:21:45:44:f9:a5:70:64:2a:da:9c:b5:53:02:3b:b4: 0c:6e:4a:13:f8:6d:80:9b:46:5c:e7:b0:ff:01:e5:11:b9:61: 4d:55:6c:10:09:2b:d0:31:58:1c:57:2b:6e:54:a0:25:64:c7: 05:e9:49:40:fd:fd:73:c6:d7:ee:2f:5a:3e:24:37:d3:87:dd: 44:a1:c5:24:4e:7b:fe:b8:d8:00:77:54:9d:48:cd:a0:44:58: 50:f1:b1:53:2f:dd:85:29:66:6a:3e:97:3d:b1:86:0f:30:fb: 6b:f3:71:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oocJtpUlzFwd749dh4WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjUxMjIwMTIwMTA1WhcNMjUxMjIxMTIwMTA1WjAzMTEwLwYDVQQD Eyg5ZDNkZGNlOTdkOTEzZTkyODQ5MzNlMDUxMzA2ZjQzOTk4ODg3NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr09Eje642+W/nZgzyiroFuWTh4sN xeNx0cJs1MawV0SF5XfZZv+vjhF8lnaZGVt2ZFPCLONGY91QYJL7gEoPYtfqHRtN nLUFEIwKEXZljnImluDK0Odwy38UrYSGSS/wLscFA842e/GLSKjoSgPFziNoknPw Wp/apbGS32jWcPuZkpG8+X6YRN06QUUEyRUDlN5P54qc34xhxvENyHLkiQbtMPn8 Va9Nob+KHi0RBQ0j0AgfX7gKmIGGX1FvsbmWpdMQLqbnQrYyQsLLE70rqZ1z4OZs b47/TNsvsHZzodc3afMaB4htGnQVG+55kG6I3B/emYSyp3iOdYNpS1e6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ093Ol9kT6ShJM+BRMG9DmYiHYEMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxjPJnE/ U9qsyGSy8bk1AVkftgWE1OG/Vv/0A/uTgu+tamw1LO9oTLugiBDOpUqeHEBtizqN jW7PpnWKxcHYj9XVNhmvpM30DtOX2803vQkpj31mD43W/sbegm0u0mEQ1z69UoJQ 5JLjC1XfT9iVqrn18iJBbftdHQfzZ/tixdx63ksKLnMslGpx2DPucqK/sEs7IUVE +aVwZCranLVTAju0DG5KE/htgJtGXOew/wHlEblhTVVsEAkr0DFYHFcrblSgJWTH BelJQP39c8bX7i9aPiQ304fdRKHFJE57/rjYAHdUnUjNoERYUPGxUy/dhSlmaj6X PbGGDzD7a/NxBA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:55:17 2025 by rpki-client