This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json) Hash identifier: Ay2pEsu4CC4UMCg63RM11OyVWhVHxf7Um2QUHVI1854= Subject key identifier: E5:97:D8:FB:47:CE:0E:E6:C0:6D:19:19:25:E8:71:F9:11:F9:3E:6A Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda Certificate serial: 019B4091C50CDEA85B7D0F2BD8C11620F0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 11:00:53 +0000 Manifest this update: Sun 21 Dec 2025 11:00:53 +0000 Manifest next update: Mon 22 Dec 2025 11:00:53 +0000 Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=) 2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: +GxDHrFWxehxxvZJ3iA5nu7awVlZuBaOU3fIORQ1NVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:c5:0c:de:a8:5b:7d:0f:2b:d8:c1:16:20:f0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda Validity Not Before: Dec 21 11:00:53 2025 GMT Not After : Dec 22 11:00:53 2025 GMT Subject: CN=e597d8fb47ce0ee6c06d191925e871f911f93e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:77:c2:06:42:ea:48:1e:67:97:21:af:ee: 21:0e:d0:16:29:0c:ff:27:39:82:1e:5c:32:fc:d6: 28:56:6d:e4:70:fd:3f:71:7e:a4:1b:e5:54:2b:d1: f7:2b:61:d8:24:2a:94:76:ca:aa:07:c0:be:54:82: 28:bf:67:dc:03:7a:e0:c7:ec:25:6f:a2:1f:17:51: cd:ec:3d:f3:16:a0:b2:70:0a:40:9e:a6:00:dc:a6: e6:63:72:79:bf:e0:27:dd:89:86:80:e2:0d:7d:c9: 1c:05:1d:6c:90:0f:61:f6:53:ec:ae:ae:2f:9d:66: 9d:11:71:49:bb:83:39:c0:a9:01:9a:a7:52:6b:d1: 5c:36:aa:80:06:aa:01:a2:2f:0c:99:08:ce:7c:79: 34:31:db:32:d8:76:96:a1:5b:72:e4:83:1d:1a:0d: 92:6a:69:6b:c7:0b:e4:02:1e:af:ee:21:76:2f:77: d1:10:ff:1d:96:e0:a6:be:5c:08:39:ff:95:08:4b: c1:3b:e5:d8:b0:03:6d:b7:fc:db:d3:ea:49:e6:14: 1a:6c:04:8f:6a:b8:a2:6b:3d:68:04:5b:ad:b4:aa: 33:95:86:82:8c:e5:ad:a3:3f:d8:7a:9d:12:b9:d0: e7:c6:f9:4e:ba:4b:36:ca:42:a7:64:39:20:fb:79: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:D8:FB:47:CE:0E:E6:C0:6D:19:19:25:E8:71:F9:11:F9:3E:6A X509v3 Authority Key Identifier: keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:49:ba:a6:84:bb:f9:13:c3:bc:c4:c4:8f:9c:0d:b5:d0:cb: 79:af:b4:b2:ab:2e:be:eb:af:58:d2:61:02:f3:f1:a7:e7:80: 84:cb:ea:30:9c:a6:ff:ff:ee:ba:93:3e:0f:63:e7:ef:45:cf: ba:87:a3:4b:88:bd:75:c6:93:93:db:95:43:ab:cd:a1:e1:f6: eb:f6:50:49:1b:c8:c7:78:5d:c2:12:7d:ac:8e:1a:92:9d:7e: d0:10:09:a1:e9:85:c1:de:38:ab:86:c6:be:27:31:40:9d:db: 96:c9:6c:28:a4:b5:3c:87:3f:19:c5:7f:18:7d:18:32:51:1a: 9f:5a:7b:a7:72:cc:42:cb:78:96:00:e8:f2:0f:b4:86:d1:f0: 6a:22:77:1a:c0:df:4d:07:1d:e7:18:05:27:3e:e0:65:92:b7: ff:0b:20:b6:e4:d7:45:8e:e8:c1:ac:2b:0d:d1:81:e2:8f:ea: fc:31:85:3a:4d:d9:9f:aa:79:71:64:76:dc:06:bb:f3:d5:77: 7d:2e:23:86:17:ce:17:84:de:f2:47:7e:87:6d:a0:91:51:82: b3:f1:25:9b:cb:3b:b0:89:7d:f4:5b:a0:32:e6:00:96:41:b4: f4:a8:28:83:a5:dc:bc:07:aa:19:87:05:ad:37:4d:4c:6c:1f: b1:8f:fa:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkcUM3qhbfQ8r2MEWIPCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDhjYzM1NDg4YmQ5ZTZmMzEyYjIwZmM3NmExMDI3MmYw Y2RlZGEwHhcNMjUxMjIxMTEwMDUzWhcNMjUxMjIyMTEwMDUzWjAzMTEwLwYDVQQD EyhlNTk3ZDhmYjQ3Y2UwZWU2YzA2ZDE5MTkyNWU4NzFmOTExZjkzZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTx3wgZC6kgeZ5chr+4hDtAWKQz/ JzmCHlwy/NYoVm3kcP0/cX6kG+VUK9H3K2HYJCqUdsqqB8C+VIIov2fcA3rgx+wl b6IfF1HN7D3zFqCycApAnqYA3KbmY3J5v+An3YmGgOINfckcBR1skA9h9lPsrq4v nWadEXFJu4M5wKkBmqdSa9FcNqqABqoBoi8MmQjOfHk0Mdsy2HaWoVty5IMdGg2S amlrxwvkAh6v7iF2L3fREP8dluCmvlwIOf+VCEvBO+XYsANtt/zb0+pJ5hQabASP ariiaz1oBFuttKozlYaCjOWtoz/Yep0SudDnxvlOuks2ykKnZDkg+3l41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWX2PtHzg7mwG0ZGSXocfkR+T5qMB8GA1UdIwQY MBaAFL5IzDVIi9nm8xKyD8dqECcvDN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQt NDliYzQzNjYwYzk3LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kMjY5NzEtYjdhOC00ZWRlLThiYjQtNDliYzQzNjYwYzk3 LzEvdmtqTU5VaUwyZWJ6RXJJUHgyb1FKeThNM3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEm6poS7 +RPDvMTEj5wNtdDLea+0sqsuvuuvWNJhAvPxp+eAhMvqMJym///uupM+D2Pn70XP uoejS4i9dcaTk9uVQ6vNoeH26/ZQSRvIx3hdwhJ9rI4akp1+0BAJoemFwd44q4bG vicxQJ3blslsKKS1PIc/GcV/GH0YMlEan1p7p3LMQst4lgDo8g+0htHwaiJ3GsDf TQcd5xgFJz7gZZK3/wsgtuTXRY7owawrDdGB4o/q/DGFOk3Zn6p5cWR23Aa789V3 fS4jhhfOF4Te8kd+h22gkVGCs/Elm8s7sIl99FugMuYAlkG09Kgog6XcvAeqGYcF rTdNTGwfsY/6JQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:46 2025 by rpki-client