This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft File: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft (raw, json) Hash identifier: 3celC26D3CIs9qCMcZLaMrDhvn7sd3mrirFRXvVsLFw= Subject key identifier: 04:3B:15:08:F0:57:CE:0D:0A:71:06:78:E8:5A:EE:43:E5:F3:6D:60 Authority key identifier: BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF Certificate issuer: /CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Certificate serial: 019B6CFC2C05D378D701796D72EA9FA11B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 02:00:24 +0000 Manifest this update: Tue 30 Dec 2025 02:00:24 +0000 Manifest next update: Wed 31 Dec 2025 02:00:24 +0000 Files and hashes: 1: Il2poWeT4F_H4KiL-0HdiaMsadA.roa (hash: VrsL8H9loMqzLX65T7cvzeckeITcvwECmwnt6mshIP0=) 2: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl (hash: LQsxWYnrUE8G8DDg7qye9KRo9PHmoDhbFaTxpbZA5KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:2c:05:d3:78:d7:01:79:6d:72:ea:9f:a1:1b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Validity Not Before: Dec 30 02:00:24 2025 GMT Not After : Dec 31 02:00:24 2025 GMT Subject: CN=043b1508f057ce0d0a710678e85aee43e5f36d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:58:ab:96:a5:5e:0a:90:ff:26:64:88:f6: 3e:cf:1f:e6:b0:a1:38:89:be:f0:e8:33:2a:fe:5b: 6b:06:d9:e4:c1:34:75:99:cc:33:21:46:c0:2b:1c: 05:ec:d7:95:8c:41:d9:5a:7d:68:42:8b:29:2b:4f: ec:eb:ac:d9:6e:da:1f:37:24:4a:08:35:60:cf:72: db:14:59:b9:c5:94:17:9b:5a:61:83:23:82:bc:67: f5:97:67:98:ad:04:32:50:a3:62:53:e6:da:b8:2f: dc:76:7f:1e:49:8b:b1:8c:ae:d0:34:27:5c:a4:2c: 65:a0:4c:a4:a5:c4:87:9d:6f:34:1a:b2:7c:52:87: 66:e2:c1:4b:86:73:6b:05:90:bb:1b:68:b6:2a:15: 61:9d:11:f5:ee:71:55:61:8e:26:60:8a:dd:5a:23: a3:b3:23:55:0e:50:cf:1f:fe:25:8a:ec:02:38:45: d7:96:c5:19:c6:fa:bf:35:b0:d8:5c:6e:fd:08:f7: ea:b0:a1:ef:d5:cd:30:13:b2:ae:72:f3:11:cc:d2: 85:70:93:f4:90:d2:a7:74:35:8a:d9:43:cf:ba:6c: cd:0a:86:65:5e:e7:62:a8:22:31:5d:20:6c:cc:ad: d1:f0:f9:ba:a4:f0:27:ba:72:ea:13:55:92:6b:37: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:15:08:F0:57:CE:0D:0A:71:06:78:E8:5A:EE:43:E5:F3:6D:60 X509v3 Authority Key Identifier: keyid:BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:27:bb:ce:2a:b6:ff:c8:e6:f0:0c:24:9f:2e:08:f5:f1:2d: 96:bc:a1:ba:90:34:dd:86:02:0e:c2:d7:d5:37:77:eb:14:05: 0d:da:ae:16:e4:f5:2d:1d:43:f7:3b:8d:31:f7:69:95:5c:a9: 92:50:c3:de:55:c1:ca:d0:ee:9f:f8:35:b2:61:ab:62:11:51: eb:04:a3:4d:9c:35:13:17:4e:3e:60:ab:8f:3a:40:a9:70:e7: 29:aa:d4:47:c2:ee:ee:62:19:1e:e3:c2:96:18:a8:e4:2c:3d: 8a:d7:80:2b:f6:73:85:a6:28:e2:ac:e0:ac:e8:86:3d:d1:5d: e5:17:b2:62:c4:c9:e3:65:7d:cd:d9:5b:e1:ca:52:cd:26:51: d1:fb:28:88:e8:47:af:bd:88:f2:59:ea:4f:43:26:52:b9:87: e7:5c:ba:13:c4:49:24:f0:cf:1c:40:e2:e2:a9:8c:ac:0a:97: 48:aa:2d:25:d8:6c:79:25:bc:9f:61:57:2b:98:c8:42:9b:35: 79:89:e8:c5:c0:62:4f:80:53:6f:b3:72:68:b7:5b:03:ad:77: 0a:9d:23:89:44:b4:55:fb:83:c0:c8:ff:9c:70:15:7e:7a:73: 8e:cf:98:ef:1c:51:de:f5:6d:15:d6:11:c9:7b:67:86:a2:d5: 81:ea:73:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/CwF03jXAXltcuqfoRspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMDYzZDY1MDUzNGFhOWYwNjkzMWZkOGVkNmUwYmIyNzZl YmQzYmYwHhcNMjUxMjMwMDIwMDI0WhcNMjUxMjMxMDIwMDI0WjAzMTEwLwYDVQQD EygwNDNiMTUwOGYwNTdjZTBkMGE3MTA2NzhlODVhZWU0M2U1ZjM2ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CpYq5alXgqQ/yZkiPY+zx/msKE4 ib7w6DMq/ltrBtnkwTR1mcwzIUbAKxwF7NeVjEHZWn1oQospK0/s66zZbtofNyRK CDVgz3LbFFm5xZQXm1phgyOCvGf1l2eYrQQyUKNiU+bauC/cdn8eSYuxjK7QNCdc pCxloEykpcSHnW80GrJ8Uodm4sFLhnNrBZC7G2i2KhVhnRH17nFVYY4mYIrdWiOj syNVDlDPH/4liuwCOEXXlsUZxvq/NbDYXG79CPfqsKHv1c0wE7KucvMRzNKFcJP0 kNKndDWK2UPPumzNCoZlXudiqCIxXSBszK3R8Pm6pPAnunLqE1WSazfyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ7FQjwV84NCnEGeOha7kPl821gMB8GA1UdIwQY MBaAFLwGPWUFNKqfBpMf2O1uC7J269O/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEt MjE2ZDI4OWYxNzY0LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEtMjE2ZDI4OWYxNzY0 LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCe7ziq2 /8jm8Awkny4I9fEtlryhupA03YYCDsLX1Td36xQFDdquFuT1LR1D9zuNMfdplVyp klDD3lXBytDun/g1smGrYhFR6wSjTZw1ExdOPmCrjzpAqXDnKarUR8Lu7mIZHuPC lhio5Cw9iteAK/ZzhaYo4qzgrOiGPdFd5ReyYsTJ42V9zdlb4cpSzSZR0fsoiOhH r72I8lnqT0MmUrmH51y6E8RJJPDPHEDi4qmMrAqXSKotJdhseSW8n2FXK5jIQps1 eYnoxcBiT4BTb7NyaLdbA613Cp0jiUS0VfuDwMj/nHAVfnpzjs+Y7xxR3vVtFdYR yXtnhqLVgepzYQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:09:33 2025 by rpki-client