This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft File: VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json) Hash identifier: KUtnULswwUp1+ATXxJk9n18IddY4uN7vz5nxpDaW7pE= Subject key identifier: C4:BC:29:10:61:E2:D7:E8:37:7C:1E:7A:43:D2:D6:37:AA:32:7D:57 Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5 Certificate issuer: /CN=572bc93f1580fc95274d983940f3efaede304ae5 Certificate serial: 019B597628B85C66261E4FDE39254D7FCB43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft Manifest number: 0B62 Signing time: Fri 26 Dec 2025 07:01:14 +0000 Manifest this update: Fri 26 Dec 2025 07:01:14 +0000 Manifest next update: Sat 27 Dec 2025 07:01:14 +0000 Files and hashes: 1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=) 2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: jpojDcLfDte7PjE0Cp+VIpz5KCFXqtDCT/5arAujikk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:28:b8:5c:66:26:1e:4f:de:39:25:4d:7f:cb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5 Validity Not Before: Dec 26 07:01:14 2025 GMT Not After : Dec 27 07:01:14 2025 GMT Subject: CN=c4bc291061e2d7e8377c1e7a43d2d637aa327d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:2f:79:b2:2d:97:ad:cf:d8:1a:f0:6b:2c: ea:45:ad:c1:69:cb:35:3e:e8:46:d1:60:5a:20:84: 01:83:26:da:3f:67:9e:17:5a:fc:a1:d3:38:d0:f9: 54:0d:58:77:69:d4:37:3b:dd:c7:02:80:48:dc:1c: 46:83:35:fc:a6:ab:a9:53:95:03:e7:47:fb:5e:06: fb:a0:d1:29:8d:66:13:d0:c6:3b:b4:73:24:ed:7d: a4:3e:96:9c:0a:a1:4e:6d:7e:77:3e:7f:40:a3:13: 69:41:16:bd:1e:81:9d:43:4c:2a:8d:54:1a:62:7f: b3:60:0e:11:48:0d:a1:74:97:51:b7:5a:2d:13:11: 99:17:1b:e7:d1:f6:25:8f:52:6e:84:d5:ca:41:7f: 19:43:4a:f7:90:dd:f2:71:2c:29:30:97:ce:f0:57: 9e:08:b7:38:2e:d7:50:6d:40:3c:e0:4d:45:b2:e2: 89:6d:81:92:d6:aa:14:cb:5d:24:2c:b2:0d:07:81: 5f:79:93:d0:3d:5a:60:e3:b3:96:a4:a7:1d:8b:d3: 08:36:8d:5e:e3:40:5e:2e:5b:7a:05:79:70:86:2d: 32:57:f8:47:85:92:46:f6:f8:6b:ee:87:d8:82:2f: 2a:a3:e9:6b:bc:88:f9:10:96:f2:44:48:8e:ce:0d: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BC:29:10:61:E2:D7:E8:37:7C:1E:7A:43:D2:D6:37:AA:32:7D:57 X509v3 Authority Key Identifier: keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d3:f7:db:d4:62:1c:0e:01:8d:74:8c:86:7d:96:ff:5d:fa: 21:11:7b:65:28:12:3e:89:1b:19:c9:4e:32:b4:3d:29:99:6c: 7b:ea:1b:1c:ab:34:cb:aa:74:71:ac:32:b2:cc:c8:b9:f9:d1: 10:6b:2b:0d:f4:b2:55:8c:88:3e:08:ae:d7:fb:54:7d:bf:38: ae:24:f3:dc:64:5d:e5:7f:3f:96:97:f2:5a:d5:dc:bd:c1:c9: 81:48:53:a2:e3:0c:53:4e:3d:4c:1d:f8:e8:c2:0b:c4:b2:56: 25:df:a0:8b:52:0a:43:ac:2a:1e:ae:93:a2:1d:4d:0e:76:e6: 79:cd:cb:b2:bd:7b:75:63:9c:77:58:37:53:42:9e:00:7a:04: 55:53:99:1f:06:75:43:61:93:00:65:f4:18:96:54:79:2a:04: f5:f3:10:5a:f4:e0:0c:69:64:53:f5:99:44:d9:60:c0:07:4f: 0c:4e:2e:ea:f4:ca:d5:3c:07:8b:86:f6:f8:fa:dd:02:61:3e: 0f:df:64:89:ad:38:ee:8d:47:e8:fd:55:35:4f:1c:20:ce:29: b5:66:bc:b0:8f:3b:50:19:68:c3:cc:35:25:7f:21:ae:01:18: ff:81:5a:f7:47:03:c3:35:fc:84:6b:70:ce:3d:03:07:23:7f: 11:da:79:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdii4XGYmHk/eOSVNf8tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJjOTNmMTU4MGZjOTUyNzRkOTgzOTQwZjNlZmFlZGUz MDRhZTUwHhcNMjUxMjI2MDcwMTE0WhcNMjUxMjI3MDcwMTE0WjAzMTEwLwYDVQQD EyhjNGJjMjkxMDYxZTJkN2U4Mzc3YzFlN2E0M2QyZDYzN2FhMzI3ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWgvebItl63P2BrwayzqRa3Bacs1 PuhG0WBaIIQBgybaP2eeF1r8odM40PlUDVh3adQ3O93HAoBI3BxGgzX8pqupU5UD 50f7Xgb7oNEpjWYT0MY7tHMk7X2kPpacCqFObX53Pn9AoxNpQRa9HoGdQ0wqjVQa Yn+zYA4RSA2hdJdRt1otExGZFxvn0fYlj1JuhNXKQX8ZQ0r3kN3ycSwpMJfO8Fee CLc4LtdQbUA84E1FsuKJbYGS1qoUy10kLLINB4FfeZPQPVpg47OWpKcdi9MINo1e 40BeLlt6BXlwhi0yV/hHhZJG9vhr7ofYgi8qo+lrvIj5EJbyREiOzg3QuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS8KRBh4tfoN3weekPS1jeqMn1XMB8GA1UdIwQY MBaAFFcryT8VgPyVJ02YOUDz767eMErlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWY1NWMtNjAzMi00MWMyLWJhYTQt MTA4MGU4NjVlYzZjLzEvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWY1NWMtNjAzMi00MWMyLWJhYTQtMTA4MGU4NjVlYzZj LzEvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtP329Ri HA4BjXSMhn2W/136IRF7ZSgSPokbGclOMrQ9KZlse+obHKs0y6p0cawysszIufnR EGsrDfSyVYyIPgiu1/tUfb84riTz3GRd5X8/lpfyWtXcvcHJgUhTouMMU049TB34 6MILxLJWJd+gi1IKQ6wqHq6Toh1NDnbmec3Lsr17dWOcd1g3U0KeAHoEVVOZHwZ1 Q2GTAGX0GJZUeSoE9fMQWvTgDGlkU/WZRNlgwAdPDE4u6vTK1TwHi4b2+PrdAmE+ D99kia047o1H6P1VNU8cIM4ptWa8sI87UBlow8w1JX8hrgEY/4Fa90cDwzX8hGtw zj0DByN/Edp5PA== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:43 2025 by rpki-client