This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json) Hash identifier: p3oekRvGRIkeA5pblkLEjw6UQcsTUkPmmp5jTFo9n7k= Subject key identifier: 52:DF:83:BA:2D:2C:E3:CB:55:AA:40:47:CC:D6:8D:77:E9:ED:9D:AC Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Certificate serial: 019B3EDAF8907F265844697DC35DEB7CEDE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft Manifest number: 0AD7 Signing time: Sun 21 Dec 2025 03:01:36 +0000 Manifest this update: Sun 21 Dec 2025 03:01:36 +0000 Manifest next update: Mon 22 Dec 2025 03:01:36 +0000 Files and hashes: 1: 7nuD8elhlIUxcTnbEPvLA6ZLn5I.roa (hash: 90o2vgvA2ZcVDu1EqRM6Q9Z2wROKMEItuuXmbaFjrpw=) 2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: 8pkAlz5bv6Ze00gival0200RvCaxutQEOsYW/0To7yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:f8:90:7f:26:58:44:69:7d:c3:5d:eb:7c:ed:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Validity Not Before: Dec 21 03:01:36 2025 GMT Not After : Dec 22 03:01:36 2025 GMT Subject: CN=52df83ba2d2ce3cb55aa4047ccd68d77e9ed9dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:40:8f:4e:bc:bc:bd:eb:fc:6a:a3:93:2d: 8d:ef:a6:fe:e7:ff:aa:b9:4a:e4:5b:ea:6b:52:41: a1:de:9f:92:06:cc:4f:b2:97:82:34:05:29:59:ac: 8b:4d:6c:2f:d3:46:6d:b6:49:f5:4c:b5:67:4d:e1: 2d:48:c1:22:3f:54:1a:29:fd:8c:c8:98:18:f9:20: 7d:d3:c9:3f:39:51:5c:84:1d:9d:6e:d2:8c:35:72: 78:44:19:4b:52:5e:ca:33:e2:c1:ae:30:ae:4f:9b: af:d9:08:54:af:5f:21:ef:dc:82:99:fe:a2:4a:33: 9d:0d:88:2c:db:48:32:94:d0:b6:01:e8:54:38:63: e0:52:7b:9b:6d:b1:70:b6:db:72:f8:1e:ca:64:46: 51:08:39:73:2b:d5:be:11:9c:7e:c9:8e:89:4b:ce: 84:95:e7:65:15:f4:e6:35:63:e1:b3:43:cc:89:90: b8:08:69:e5:28:85:b9:76:85:d5:83:49:0a:94:fe: 1f:e1:01:57:8a:3b:9c:49:77:44:db:f1:5d:c3:62: 9d:6d:4d:fa:6a:72:5d:0f:ab:e9:22:e6:62:56:93: ad:f4:48:d8:01:44:c4:52:39:0d:b3:28:88:63:32: 50:82:20:ce:08:6a:f5:3d:90:68:92:d0:50:c2:aa: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:83:BA:2D:2C:E3:CB:55:AA:40:47:CC:D6:8D:77:E9:ED:9D:AC X509v3 Authority Key Identifier: keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:4f:01:e1:7a:0c:35:00:84:70:95:d2:0e:34:02:b5:ff:c0: f4:2b:16:e4:fb:4d:6f:c7:4a:4b:73:a3:74:05:42:93:06:91: 69:56:94:c5:93:0d:26:6c:03:2c:f7:36:4f:27:3b:52:07:e6: 63:5a:fe:05:46:92:3c:e1:29:b8:49:81:6f:47:f4:d0:65:b9: 1d:60:95:b7:74:07:18:c9:52:50:67:44:8c:a3:9b:d4:7b:97: 45:04:cc:e3:89:67:1a:8e:59:33:41:98:0a:59:f6:c3:99:fc: 0a:8c:0f:fd:44:2f:f5:be:fa:87:e0:87:3c:f6:33:6f:c8:53: bf:4f:04:fd:32:e3:53:8e:2d:d1:48:92:ce:09:2c:59:e1:d3: b2:34:48:ee:ae:96:6c:9f:08:99:e2:27:1d:01:03:17:80:02: ee:7c:03:60:46:71:ee:db:3a:53:07:87:3b:5b:6c:f4:22:c8: cf:22:c8:e5:8a:17:29:a7:3d:fa:95:db:05:c0:d5:b6:ec:76: ca:5a:ec:2e:7c:26:ce:30:75:25:64:a4:30:4a:76:a1:78:a6: c2:19:3e:a9:ee:be:41:5d:d5:bf:1f:7c:6c:b5:fe:63:89:d7: 62:05:8d:1c:02:8f:a4:16:13:02:e0:f0:76:2c:3e:2c:30:2a: c5:29:9f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2viQfyZYRGl9w13rfO3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0 ZjhjYjEwHhcNMjUxMjIxMDMwMTM2WhcNMjUxMjIyMDMwMTM2WjAzMTEwLwYDVQQD Eyg1MmRmODNiYTJkMmNlM2NiNTVhYTQwNDdjY2Q2OGQ3N2U5ZWQ5ZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rRAj068vL3r/Gqjky2N76b+5/+q uUrkW+prUkGh3p+SBsxPspeCNAUpWayLTWwv00Zttkn1TLVnTeEtSMEiP1QaKf2M yJgY+SB908k/OVFchB2dbtKMNXJ4RBlLUl7KM+LBrjCuT5uv2QhUr18h79yCmf6i SjOdDYgs20gylNC2AehUOGPgUnubbbFwttty+B7KZEZRCDlzK9W+EZx+yY6JS86E ledlFfTmNWPhs0PMiZC4CGnlKIW5doXVg0kKlP4f4QFXijucSXdE2/Fdw2KdbU36 anJdD6vpIuZiVpOt9EjYAUTEUjkNsyiIYzJQgiDOCGr1PZBoktBQwqoU2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLfg7otLOPLVapAR8zWjXfp7Z2sMB8GA1UdIwQY MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2 LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA308B4XoM NQCEcJXSDjQCtf/A9CsW5PtNb8dKS3OjdAVCkwaRaVaUxZMNJmwDLPc2Tyc7Ugfm Y1r+BUaSPOEpuEmBb0f00GW5HWCVt3QHGMlSUGdEjKOb1HuXRQTM44lnGo5ZM0GY Cln2w5n8CowP/UQv9b76h+CHPPYzb8hTv08E/TLjU44t0UiSzgksWeHTsjRI7q6W bJ8ImeInHQEDF4AC7nwDYEZx7ts6UweHO1ts9CLIzyLI5YoXKac9+pXbBcDVtux2 ylrsLnwmzjB1JWSkMEp2oXimwhk+qe6+QV3Vvx98bLX+Y4nXYgWNHAKPpBYTAuDw diw+LDAqxSmfMA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:12 2025 by rpki-client