This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json) Hash identifier: t2E4NyT9a/9XlnTpfpoPrxPUzHSp7Rr9PQEZenhafTY= Subject key identifier: 62:6E:65:F8:0D:5F:5D:56:CC:EF:5D:82:C6:C9:1C:5F:BE:2E:9F:F7 Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Certificate serial: 019B3BA2180D096EA87C44E40104C503C435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft Manifest number: 15A5 Signing time: Sat 20 Dec 2025 12:00:37 +0000 Manifest this update: Sat 20 Dec 2025 12:00:37 +0000 Manifest next update: Sun 21 Dec 2025 12:00:37 +0000 Files and hashes: 1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=) 2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=) 3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=) 4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=) 5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=) 6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: EZRkxcxs/8PG0QLVgu7IA+rk+pHMpjkvK71jmZ5oZy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:18:0d:09:6e:a8:7c:44:e4:01:04:c5:03:c4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Validity Not Before: Dec 20 12:00:37 2025 GMT Not After : Dec 21 12:00:37 2025 GMT Subject: CN=626e65f80d5f5d56ccef5d82c6c91c5fbe2e9ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:d7:83:5f:31:7e:eb:21:58:ab:84:01:14: a0:9b:ac:5b:f8:d0:f2:c1:1c:8d:ad:43:85:67:45: ed:79:df:ff:c2:00:55:00:90:82:fe:ba:42:a3:19: e7:08:3c:bc:26:d1:8f:84:46:56:fc:17:f6:e8:8b: 71:26:87:07:b8:a2:78:f7:fe:c3:7d:d9:ed:05:b1: 2c:60:ab:65:6b:c1:1a:f8:c6:4d:62:56:9f:d8:51: ac:b6:7c:2b:08:1f:4a:08:4d:76:55:fe:20:c7:99: 25:f8:4f:6b:3b:94:50:dc:7c:0e:9d:27:59:c8:40: f2:a3:44:e5:76:5e:9d:1f:fd:22:da:09:0a:ce:ae: 1f:11:95:00:d3:80:5b:ec:4d:54:59:15:7a:9c:9a: 0e:60:8f:ae:1c:5c:7d:a3:68:df:c7:32:3c:47:26: 34:47:44:81:fb:d4:fa:af:2b:c0:ec:1c:a6:69:59: 99:5f:8d:29:02:71:20:21:2f:fe:82:c1:35:e3:5d: d9:33:4b:b3:a5:30:54:71:54:11:f1:f1:1d:9a:07: db:31:91:6a:3b:91:87:00:65:1a:90:d1:54:80:bf: 1d:eb:ec:9f:be:fd:d2:be:ec:a3:c1:86:e4:e5:d1: f7:e1:ba:34:24:2d:7c:16:95:cd:e4:82:74:31:0f: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:65:F8:0D:5F:5D:56:CC:EF:5D:82:C6:C9:1C:5F:BE:2E:9F:F7 X509v3 Authority Key Identifier: keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:42:99:94:ec:81:cb:bd:bf:4a:cf:b1:5f:52:50:c7:eb: 25:60:57:74:4c:03:98:84:8b:b3:fb:38:aa:84:2f:fa:07:c5: 67:06:0e:8d:ce:08:79:5c:ce:62:87:bb:60:13:20:0e:bf:91: fc:ff:49:69:a8:09:af:dd:63:ce:58:ac:fc:51:17:5c:94:b7: cf:30:18:d1:9d:75:6c:78:d7:0e:1c:45:03:4b:32:3c:6e:92: b6:1c:50:61:97:27:54:16:00:0a:b6:c6:b2:a4:c0:7a:ca:df: 65:f7:23:d0:df:ed:23:92:52:a0:30:ef:fb:a1:0c:b9:64:8f: 81:3c:44:00:f2:6a:1d:f7:ad:8f:fc:23:f6:4b:a9:37:09:d0: cc:b4:af:3b:cf:44:53:5c:a0:1c:65:2e:a4:4b:76:7a:15:8e: 17:be:13:77:bf:9d:10:f1:3a:1c:8c:8a:1d:51:5f:df:32:43: 39:58:2b:d9:60:c0:7c:b3:94:e0:ed:36:99:12:0a:58:64:77: f1:35:1f:51:1a:30:51:79:95:46:df:35:74:d1:aa:cd:31:c2: a7:45:8d:80:84:79:af:cb:d6:b3:27:69:34:10:9f:87:bf:fb: 76:00:36:1b:0c:40:1f:35:d5:f0:74:31:48:2a:0c:c8:a5:e4: f8:31:b1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohgNCW6ofETkAQTFA8Q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1 ZDQxZjkwHhcNMjUxMjIwMTIwMDM3WhcNMjUxMjIxMTIwMDM3WjAzMTEwLwYDVQQD Eyg2MjZlNjVmODBkNWY1ZDU2Y2NlZjVkODJjNmM5MWM1ZmJlMmU5ZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t7Xg18xfushWKuEARSgm6xb+NDy wRyNrUOFZ0Xted//wgBVAJCC/rpCoxnnCDy8JtGPhEZW/Bf26ItxJocHuKJ49/7D fdntBbEsYKtla8Ea+MZNYlaf2FGstnwrCB9KCE12Vf4gx5kl+E9rO5RQ3HwOnSdZ yEDyo0Tldl6dH/0i2gkKzq4fEZUA04Bb7E1UWRV6nJoOYI+uHFx9o2jfxzI8RyY0 R0SB+9T6ryvA7BymaVmZX40pAnEgIS/+gsE1413ZM0uzpTBUcVQR8fEdmgfbMZFq O5GHAGUakNFUgL8d6+yfvv3SvuyjwYbk5dH34bo0JC18FpXN5IJ0MQ986QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJuZfgNX11WzO9dgsbJHF++Lp/3MB8GA1UdIwQY MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2 LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0RCmZTs gcu9v0rPsV9SUMfrJWBXdEwDmISLs/s4qoQv+gfFZwYOjc4IeVzOYoe7YBMgDr+R /P9JaagJr91jzlis/FEXXJS3zzAY0Z11bHjXDhxFA0syPG6SthxQYZcnVBYACrbG sqTAesrfZfcj0N/tI5JSoDDv+6EMuWSPgTxEAPJqHfetj/wj9kupNwnQzLSvO89E U1ygHGUupEt2ehWOF74Td7+dEPE6HIyKHVFf3zJDOVgr2WDAfLOU4O02mRIKWGR3 8TUfURowUXmVRt81dNGqzTHCp0WNgIR5r8vWsydpNBCfh7/7dgA2GwxAHzXV8HQx SCoMyKXk+DGxQw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:03:51 2025 by rpki-client