This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json) Hash identifier: elgQBUegDMEA61FG/Fv3Auz41LwrZjTxmggrrzt0KlA= Subject key identifier: 07:39:C3:96:D6:79:B9:6F:02:F0:65:8F:FC:D5:74:BE:A2:4E:E1:52 Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Certificate serial: 019B3BA227A3D02C0FD4EB44E152806BB494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft Manifest number: 1555 Signing time: Sat 20 Dec 2025 12:00:41 +0000 Manifest this update: Sat 20 Dec 2025 12:00:41 +0000 Manifest next update: Sun 21 Dec 2025 12:00:41 +0000 Files and hashes: 1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=) 2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=) 3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 4bmsPdd+w1HPWjtb52oNcyElizFq+ZfBHwifI/DFVm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:27:a3:d0:2c:0f:d4:eb:44:e1:52:80:6b:b4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Validity Not Before: Dec 20 12:00:41 2025 GMT Not After : Dec 21 12:00:41 2025 GMT Subject: CN=0739c396d679b96f02f0658ffcd574bea24ee152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:89:4d:5c:05:50:3d:b2:c0:00:0c:55:04: fc:de:93:bf:b3:98:15:49:4a:5b:e0:33:ec:77:6d: a9:a0:d1:ed:78:3e:e5:0d:9e:05:b1:a4:2c:a4:a8: 61:71:37:9a:16:14:98:9b:45:8f:c6:9b:1d:e2:14: 85:65:3c:61:a8:25:12:3b:4e:4b:53:b7:67:61:96: d1:37:be:56:79:39:9e:3d:d6:38:8f:45:5c:74:53: 06:66:2d:df:6d:52:a6:e9:be:95:53:62:cf:50:61: b5:d8:9d:46:ea:38:78:6c:f4:8c:af:b5:36:f0:d0: a3:e9:41:5e:51:6d:6f:be:93:81:81:61:b3:ff:62: 59:43:5b:6f:3f:61:83:01:79:76:56:a2:23:5d:9f: 73:b9:70:91:82:cf:62:78:00:6a:10:bb:3b:fc:c9: c1:a6:e6:8f:0d:08:d6:79:71:cc:ef:a8:ee:2e:f1: ed:a1:96:96:13:e5:1c:e9:af:70:c2:b3:60:51:2e: ea:46:b4:8d:46:f6:17:b9:56:3a:aa:19:06:ba:ec: 06:5f:4d:e2:dd:6b:94:c8:cb:0e:85:b2:8f:b8:96: e0:da:a8:97:9e:1c:cb:e0:4b:0a:95:b1:78:2d:aa: 46:38:5f:fe:66:e9:47:6a:ee:69:ea:6c:7c:b0:ec: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:39:C3:96:D6:79:B9:6F:02:F0:65:8F:FC:D5:74:BE:A2:4E:E1:52 X509v3 Authority Key Identifier: keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:04:48:29:9b:42:0d:4b:0b:6b:94:11:26:da:fb:c2:46:0d: da:19:5f:40:bf:74:64:02:be:2c:bb:74:2a:33:99:02:63:fe: c2:40:f0:91:93:c7:57:d8:b6:37:5c:6c:50:93:d4:7b:ee:d3: f8:03:79:30:93:fd:6b:cd:df:5a:dc:b5:51:5c:af:25:c3:32: 7c:56:3c:f4:8e:d0:dd:27:3f:45:7c:8d:f1:f0:fb:a4:a0:1b: 7a:c5:4f:67:ac:95:37:b2:fd:23:aa:32:63:af:04:fe:d1:61: 51:a2:b0:a0:91:4e:af:1f:f1:d3:66:37:af:27:4e:05:96:a7: 0e:78:41:00:21:e0:b1:38:41:b7:d7:de:7a:0b:cb:8f:2a:d9: 2a:26:28:d1:37:4c:7f:ec:49:ac:33:de:b8:3c:eb:7a:e7:84: e5:dc:25:ef:39:59:75:bf:e8:2f:f4:57:1b:dd:26:74:e1:c5: 06:7b:d1:e6:58:9f:d0:f2:5d:a8:d9:49:1b:89:0a:68:15:5c: b0:cb:2d:12:84:2d:ea:7b:04:71:eb:b2:82:2d:8b:9e:ff:bd: 27:94:a5:44:65:57:75:e0:c1:5d:78:4b:3e:6c:8b:f1:dc:81: 8e:3e:23:8c:5f:3b:fd:82:74:41:54:af:ab:2a:71:68:0e:83: 24:fe:2f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oiej0CwP1OtE4VKAa7SUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj YjQ0MzAwHhcNMjUxMjIwMTIwMDQxWhcNMjUxMjIxMTIwMDQxWjAzMTEwLwYDVQQD EygwNzM5YzM5NmQ2NzliOTZmMDJmMDY1OGZmY2Q1NzRiZWEyNGVlMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeyJTVwFUD2ywAAMVQT83pO/s5gV SUpb4DPsd22poNHteD7lDZ4FsaQspKhhcTeaFhSYm0WPxpsd4hSFZTxhqCUSO05L U7dnYZbRN75WeTmePdY4j0VcdFMGZi3fbVKm6b6VU2LPUGG12J1G6jh4bPSMr7U2 8NCj6UFeUW1vvpOBgWGz/2JZQ1tvP2GDAXl2VqIjXZ9zuXCRgs9ieABqELs7/MnB puaPDQjWeXHM76juLvHtoZaWE+Uc6a9wwrNgUS7qRrSNRvYXuVY6qhkGuuwGX03i 3WuUyMsOhbKPuJbg2qiXnhzL4EsKlbF4LapGOF/+ZulHau5p6mx8sOxdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAc5w5bWeblvAvBlj/zVdL6iTuFSMB8GA1UdIwQY MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4 LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwRIKZtC DUsLa5QRJtr7wkYN2hlfQL90ZAK+LLt0KjOZAmP+wkDwkZPHV9i2N1xsUJPUe+7T +AN5MJP9a83fWty1UVyvJcMyfFY89I7Q3Sc/RXyN8fD7pKAbesVPZ6yVN7L9I6oy Y68E/tFhUaKwoJFOrx/x02Y3rydOBZanDnhBACHgsThBt9feegvLjyrZKiYo0TdM f+xJrDPeuDzreueE5dwl7zlZdb/oL/RXG90mdOHFBnvR5lif0PJdqNlJG4kKaBVc sMstEoQt6nsEceuygi2Lnv+9J5SlRGVXdeDBXXhLPmyL8dyBjj4jjF87/YJ0QVSv qypxaA6DJP4vfg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:26:55 2025 by rpki-client