This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft File: VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json) Hash identifier: /2SG24NTCk4sHTOa0eR4zuk3PbfcCDZ1IoSUsUT4NQM= Subject key identifier: 89:01:F6:87:23:6F:AD:8A:3D:9B:96:37:A7:33:59:13:C5:63:4F:C6 Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Certificate serial: 019B3D22C2B49FA304FF9A07BFB807BFC9A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft Manifest number: 0689 Signing time: Sat 20 Dec 2025 19:00:46 +0000 Manifest this update: Sat 20 Dec 2025 19:00:46 +0000 Manifest next update: Sun 21 Dec 2025 19:00:46 +0000 Files and hashes: 1: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (hash: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=) 2: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (hash: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=) 3: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: 2bNMSUaTIeKcc3yAJU41raOgs7mN3wbLcZaU01N7+AY=) 4: ixZP8lw2F7ZQ1n6z2ul-PVTfMYc.roa (hash: 8HnGm/A9kKO8qk6ptSile1LUya5t/LNEUOnSh7y0uik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:c2:b4:9f:a3:04:ff:9a:07:bf:b8:07:bf:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Validity Not Before: Dec 20 19:00:46 2025 GMT Not After : Dec 21 19:00:46 2025 GMT Subject: CN=8901f687236fad8a3d9b9637a7335913c5634fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:d4:1b:b7:47:bd:62:5c:3a:85:cb:13:11: 04:fe:3c:54:2d:b8:44:7b:7c:20:4c:62:39:9e:53: 7f:0e:9e:b1:54:06:15:7b:37:6f:d7:e1:82:9f:6b: 46:aa:6b:12:06:a9:b1:67:63:e7:ea:fb:d4:6f:55: cc:32:f6:64:d4:77:b0:3c:b1:c1:7a:0c:e4:f6:a1: c3:7d:17:b0:2b:39:6a:a0:fc:58:47:24:b7:34:1e: 6d:ca:2c:44:6a:f9:3d:c4:6c:e6:0e:e7:8b:d0:41: c9:99:24:e1:e8:e5:a8:80:f9:b6:94:e2:b5:e0:59: d9:3e:6c:49:b1:f4:4f:7d:4e:8d:a8:b6:59:d5:e4: 42:1d:b6:83:54:01:ed:1b:21:68:35:3a:34:a4:02: 87:fc:a6:11:09:c3:ea:73:d9:c1:55:3b:92:e8:f0: 21:ea:f5:72:a9:91:fc:de:4a:91:dc:62:db:16:b0: dd:3f:77:f8:8f:a8:1d:04:9b:40:71:5f:72:5d:ba: 19:c2:5c:ce:61:e7:e7:aa:c4:f8:08:d1:f4:0f:44: 92:17:8c:16:12:8d:5b:d2:15:7c:55:81:d3:e6:a4: c2:cb:08:18:38:0d:a7:3f:08:97:18:16:60:3c:e1: 7e:10:e5:e9:f0:7f:6b:53:3e:52:c5:74:0a:1d:74: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:01:F6:87:23:6F:AD:8A:3D:9B:96:37:A7:33:59:13:C5:63:4F:C6 X509v3 Authority Key Identifier: keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:fe:fa:a2:fe:ba:e1:57:bc:83:31:30:c8:52:4f:df:ce: 0b:16:90:ee:c4:82:ef:40:b6:61:bd:61:f4:9a:5f:61:f5:b5: 6f:c2:8d:da:a2:79:2b:87:68:f1:22:67:0c:95:91:e5:10:b8: d4:3c:18:d4:9f:c0:7e:9f:02:7f:ab:b8:6d:04:63:e2:fb:b3: 6a:c4:b2:7d:c3:14:4b:6a:34:69:9b:dc:80:98:24:d2:63:92: a3:53:9f:a3:1a:59:2e:c9:23:b0:26:87:a7:82:c5:43:78:43: 01:84:22:e0:92:fc:9d:06:23:e0:01:a7:ce:3d:bd:d4:95:ce: 5c:11:ff:e7:7c:0c:ec:81:eb:8a:d4:04:db:76:06:56:71:e2: 5b:52:85:bb:32:14:17:fb:f7:16:35:b1:66:eb:71:76:78:2c: 41:2e:e4:2a:72:ff:92:d2:b8:9c:56:2e:47:de:f7:e2:ea:37: 90:bb:a7:25:ee:bb:5d:81:de:bc:09:8c:b2:a3:70:23:61:26: 41:36:38:7b:56:d1:a9:7a:89:fa:2b:93:9d:2e:c1:3e:3e:7e: 5c:31:7a:df:76:b6:c5:51:48:2d:c1:5d:e9:58:67:ad:72:6e: aa:2e:5e:dc:e6:56:f5:c9:16:66:e4:e6:b5:e7:55:63:9e:ab: 54:7f:84:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IsK0n6ME/5oHv7gHv8mgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj ZmJiNTEwHhcNMjUxMjIwMTkwMDQ2WhcNMjUxMjIxMTkwMDQ2WjAzMTEwLwYDVQQD Eyg4OTAxZjY4NzIzNmZhZDhhM2Q5Yjk2MzdhNzMzNTkxM2M1NjM0ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqErUG7dHvWJcOoXLExEE/jxULbhE e3wgTGI5nlN/Dp6xVAYVezdv1+GCn2tGqmsSBqmxZ2Pn6vvUb1XMMvZk1HewPLHB egzk9qHDfRewKzlqoPxYRyS3NB5tyixEavk9xGzmDueL0EHJmSTh6OWogPm2lOK1 4FnZPmxJsfRPfU6NqLZZ1eRCHbaDVAHtGyFoNTo0pAKH/KYRCcPqc9nBVTuS6PAh 6vVyqZH83kqR3GLbFrDdP3f4j6gdBJtAcV9yXboZwlzOYefnqsT4CNH0D0SSF4wW Eo1b0hV8VYHT5qTCywgYOA2nPwiXGBZgPOF+EOXp8H9rUz5SxXQKHXSzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkB9ocjb62KPZuWN6czWRPFY0/GMB8GA1UdIwQY MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct N2UyMTdiZWYyZDllLzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2j++qL+ uuFXvIMxMMhST9/OCxaQ7sSC70C2Yb1h9JpfYfW1b8KN2qJ5K4do8SJnDJWR5RC4 1DwY1J/Afp8Cf6u4bQRj4vuzasSyfcMUS2o0aZvcgJgk0mOSo1OfoxpZLskjsCaH p4LFQ3hDAYQi4JL8nQYj4AGnzj291JXOXBH/53wM7IHritQE23YGVnHiW1KFuzIU F/v3FjWxZutxdngsQS7kKnL/ktK4nFYuR9734uo3kLunJe67XYHevAmMsqNwI2Em QTY4e1bRqXqJ+iuTnS7BPj5+XDF633a2xVFILcFd6VhnrXJuqi5e3OZW9ckWZuTm tedVY56rVH+E8A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:52:48 2025 by rpki-client