This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json) Hash identifier: Z82zcqvUTfBiHXZx6Se3Vjy4b5pJVqkaaOt/T+7rh6o= Subject key identifier: 80:DF:68:D8:2C:85:8B:50:08:8B:6E:76:64:AE:EB:27:43:E2:67:5B Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Certificate serial: 019B3F4872D0E0900682FF67C250E59D0789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft Manifest number: 0AB1 Signing time: Sun 21 Dec 2025 05:01:11 +0000 Manifest this update: Sun 21 Dec 2025 05:01:11 +0000 Manifest next update: Mon 22 Dec 2025 05:01:11 +0000 Files and hashes: 1: KUetIJvIbf-RwWScWVCZi9TC7iI.roa (hash: epzj9JFPCcvIPeSXLc/JujoI7wMFChHedAXABI5ULJY=) 2: Pm6S7LF4MF2BvoSNV639-A7oVdg.roa (hash: zRtbA+eEbt7rP8hULiWX7WLL5EfHRRQj7dA9Qx3CuQ0=) 3: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: J9U6Ny79rXVKIKcf+QlgcU3zIEAMXR9n/7iQgBO3Cls=) 4: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:72:d0:e0:90:06:82:ff:67:c2:50:e5:9d:07:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Validity Not Before: Dec 21 05:01:11 2025 GMT Not After : Dec 22 05:01:11 2025 GMT Subject: CN=80df68d82c858b50088b6e7664aeeb2743e2675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:cc:18:ca:b3:b4:0c:80:5c:90:e6:e5:c2: e0:31:1d:95:72:9f:dd:b4:2f:5f:6a:4c:1e:a0:32: a9:94:76:ab:01:4e:e2:a0:3b:9c:80:49:1f:38:69: db:6b:eb:51:ef:fc:d5:da:fe:56:a8:dd:b9:ec:98: 53:02:5f:27:50:1c:41:c1:b3:9c:64:4e:26:05:b5: 25:f0:83:3e:cf:37:f6:78:b6:c9:39:11:09:ce:7d: e7:a0:1d:a1:1c:e9:06:87:3a:ed:26:51:ec:08:5b: ad:36:54:95:fa:2b:ae:a7:65:ea:22:88:b1:88:98: 8e:34:fa:b6:03:1a:15:58:04:18:6a:8f:d1:02:1b: df:a0:c1:2d:d7:03:c1:04:1d:5a:97:79:21:f2:61: 63:66:06:20:ae:99:63:fd:c5:6c:f5:67:47:41:87: 39:56:e0:d5:03:33:26:ed:85:50:41:c5:5a:49:37: c4:7f:0b:e3:f4:f3:9b:31:59:f9:9d:b6:98:7c:c0: 0e:ca:52:59:14:f6:bd:44:9e:dd:4b:6d:cd:78:0c: 22:7f:52:01:92:38:1b:69:b7:39:6a:3b:b8:39:fb: f0:d1:9f:5f:c9:02:0a:eb:f7:7d:13:72:e6:ee:eb: 8b:48:35:b2:d8:00:83:7a:da:77:3a:ca:4b:74:1b: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:68:D8:2C:85:8B:50:08:8B:6E:76:64:AE:EB:27:43:E2:67:5B X509v3 Authority Key Identifier: keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:14:7e:b2:11:1a:66:f1:2c:6f:26:da:7e:a5:4b:ff:68:2e: 47:12:27:b6:e4:33:7f:67:c1:e2:e0:25:ec:65:19:91:37:e9: 96:3e:2e:47:36:01:5f:70:0d:20:62:07:97:dd:8f:9a:15:b1: b4:ba:c2:34:86:e0:bd:18:d3:81:b6:c1:df:7e:7f:0e:ef:6f: b9:50:00:af:f1:69:5b:52:71:f5:3c:b0:fb:e8:8e:ce:3a:ca: b7:9b:da:02:24:8c:9c:a7:bc:98:e1:c0:65:84:a9:5e:fb:99: b3:49:a9:92:80:36:3d:dd:5e:76:fc:c7:48:92:c8:a7:0c:5a: d5:19:2d:8c:fc:ad:bb:82:ae:ef:a3:ea:06:32:85:c4:c6:67: 27:2e:78:0b:0f:c3:18:05:e8:a8:62:2e:3e:d2:e3:82:17:5c: dc:ff:e9:ee:49:87:81:39:ea:5c:40:bf:28:2e:fc:93:c0:fc: cb:72:b0:36:2b:13:71:ad:8b:1c:e1:18:e6:c5:d5:a4:1a:7e: 94:e2:75:55:e2:c0:39:91:6c:24:06:1e:61:8e:5f:2a:5b:a7: 9c:ac:2c:96:b3:5b:32:d0:19:7a:b8:bf:d1:a2:c9:61:ef:b0: b9:1e:39:57:12:e7:28:89:d3:25:40:a4:1b:9c:68:af:f2:0d: 6c:63:05:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHLQ4JAGgv9nwlDlnQeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4 NTViZGUwHhcNMjUxMjIxMDUwMTExWhcNMjUxMjIyMDUwMTExWjAzMTEwLwYDVQQD Eyg4MGRmNjhkODJjODU4YjUwMDg4YjZlNzY2NGFlZWIyNzQzZTI2NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c7MGMqztAyAXJDm5cLgMR2Vcp/d tC9fakweoDKplHarAU7ioDucgEkfOGnba+tR7/zV2v5WqN257JhTAl8nUBxBwbOc ZE4mBbUl8IM+zzf2eLbJOREJzn3noB2hHOkGhzrtJlHsCFutNlSV+iuup2XqIoix iJiONPq2AxoVWAQYao/RAhvfoMEt1wPBBB1al3kh8mFjZgYgrplj/cVs9WdHQYc5 VuDVAzMm7YVQQcVaSTfEfwvj9PObMVn5nbaYfMAOylJZFPa9RJ7dS23NeAwif1IB kjgbabc5aju4Ofvw0Z9fyQIK6/d9E3Lm7uuLSDWy2ACDetp3OspLdBtxWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDfaNgshYtQCItudmSu6ydD4mdbMB8GA1UdIwQY MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt YmEyODg5YWZhYWRkLzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBR+shEa ZvEsbybafqVL/2guRxIntuQzf2fB4uAl7GUZkTfplj4uRzYBX3ANIGIHl92PmhWx tLrCNIbgvRjTgbbB335/Du9vuVAAr/FpW1Jx9Tyw++iOzjrKt5vaAiSMnKe8mOHA ZYSpXvuZs0mpkoA2Pd1edvzHSJLIpwxa1RktjPytu4Ku76PqBjKFxMZnJy54Cw/D GAXoqGIuPtLjghdc3P/p7kmHgTnqXEC/KC78k8D8y3KwNisTca2LHOEY5sXVpBp+ lOJ1VeLAOZFsJAYeYY5fKlunnKwslrNbMtAZeri/0aLJYe+wuR45VxLnKInTJUCk G5xor/INbGMFbw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:56 2025 by rpki-client