This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json) Hash identifier: k0EGKKQT9UoiXZXZAbBUhz9l5fvOCnwvxcWItXBV0CE= Subject key identifier: 91:A4:50:52:34:81:F1:E7:E3:A9:8F:E7:6B:D3:20:19:A8:D1:50:53 Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd Certificate serial: 019B42806456F04C1372293422F5D0C6647A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft Manifest number: 0125 Signing time: Sun 21 Dec 2025 20:01:09 +0000 Manifest this update: Sun 21 Dec 2025 20:01:09 +0000 Manifest next update: Mon 22 Dec 2025 20:01:09 +0000 Files and hashes: 1: HUuEhM0s6vtmAYifFr2lzsJ1MQg.roa (hash: zjG1+pb3vedtJUzUhZUa3U7vpl6rJzZYBSltaRWkYmA=) 2: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: mVip2g3Ik/zFo9NTjT/HAgkecgOMJzSDkQJhzrFZqh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:64:56:f0:4c:13:72:29:34:22:f5:d0:c6:64:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd Validity Not Before: Dec 21 20:01:09 2025 GMT Not After : Dec 22 20:01:09 2025 GMT Subject: CN=91a450523481f1e7e3a98fe76bd32019a8d15053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:ce:e2:7c:51:04:2d:76:c7:a1:91:2c:33: 39:59:2e:0f:a7:32:ac:bf:bd:48:c4:cb:80:f6:3f: 1c:93:6d:07:9f:9f:ea:c9:f9:17:2a:fa:7a:5c:81: 6a:40:8f:0f:9c:d6:3b:37:79:a5:e6:43:d3:b5:4b: 95:a9:0d:76:7e:e0:3e:5e:1b:73:a1:5b:e6:6b:2b: 3b:e9:4b:d4:c9:87:89:dd:fd:bd:38:99:6b:f7:d1: 7f:50:aa:96:12:a3:87:06:e6:6d:9e:e6:71:16:23: df:60:4a:91:4a:d6:e6:17:4c:2c:fd:ff:f1:27:98: 38:6e:2a:92:4a:16:22:5d:c3:13:7e:91:3d:a6:f3: c2:a6:6e:a4:d4:1a:a3:28:f3:53:ae:8b:81:bd:00: b1:d9:a9:07:ca:74:37:c1:a3:91:3a:e1:5e:60:72: 80:8b:67:ae:f6:ed:b3:15:b7:da:9e:08:63:9a:ad: 98:c3:68:73:3c:62:6b:a2:d4:87:86:ea:fd:1a:fa: c4:fa:39:0d:08:8c:8a:8e:e6:94:13:02:23:00:31: ab:8b:23:fb:b5:55:d7:3f:0c:71:a1:f8:1e:73:8e: 8b:0a:ec:6b:ef:97:9f:34:30:11:b2:35:1a:00:7c: 0e:4f:64:13:e2:91:cc:fb:ba:f5:f8:f0:c9:c5:8a: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:50:52:34:81:F1:E7:E3:A9:8F:E7:6B:D3:20:19:A8:D1:50:53 X509v3 Authority Key Identifier: keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f3:13:a0:12:40:30:52:18:45:ac:38:24:24:f5:92:98:79: f3:95:a9:64:ba:0e:a0:ac:54:42:b8:ed:71:8d:a8:0f:d6:1d: 6f:06:b2:11:17:ff:7b:fc:da:cf:32:fe:b6:e2:12:c1:c8:61: de:28:a7:f1:b0:22:3a:c8:d2:e5:e6:24:39:78:28:77:b9:ed: fc:a5:e5:55:98:55:94:f5:99:dc:27:a1:ef:a8:82:2b:e1:33: 4d:e6:1e:b0:82:e8:e2:f5:c1:4a:50:3e:12:d4:aa:34:b3:ce: c9:82:55:a3:77:c1:fc:38:73:ed:f3:76:86:84:ef:5d:39:52: a3:c9:dc:04:95:33:c7:81:ec:25:6b:d8:15:b9:35:51:22:71: ab:c5:53:ef:bf:45:d4:db:5a:47:64:35:1d:8f:e0:aa:d0:1b: 06:b8:85:c6:b9:7d:a2:38:03:e6:14:d7:ad:3f:f1:09:b8:22: 3d:af:fb:f4:fd:17:2c:4b:db:27:15:fa:6d:ab:ef:84:1b:38: c1:f1:de:d3:f4:ee:79:bd:2d:ac:e5:ff:b1:60:73:a2:c0:df: a6:31:12:03:67:a7:55:22:68:e2:5b:b2:57:be:67:f8:aa:ed: 59:61:50:27:bc:e0:27:d2:db:4f:e1:d5:39:eb:2d:88:08:c3: b6:48:9c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgGRW8EwTcik0IvXQxmR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZmM4MzQ0NDJlMTMwZjRkZTc4MTViZjE2OWI3YTA0YzMw MzlkZGQwHhcNMjUxMjIxMjAwMTA5WhcNMjUxMjIyMjAwMTA5WjAzMTEwLwYDVQQD Eyg5MWE0NTA1MjM0ODFmMWU3ZTNhOThmZTc2YmQzMjAxOWE4ZDE1MDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5DO4nxRBC12x6GRLDM5WS4PpzKs v71IxMuA9j8ck20Hn5/qyfkXKvp6XIFqQI8PnNY7N3ml5kPTtUuVqQ12fuA+Xhtz oVvmays76UvUyYeJ3f29OJlr99F/UKqWEqOHBuZtnuZxFiPfYEqRStbmF0ws/f/x J5g4biqSShYiXcMTfpE9pvPCpm6k1BqjKPNTrouBvQCx2akHynQ3waOROuFeYHKA i2eu9u2zFbfanghjmq2Yw2hzPGJrotSHhur9GvrE+jkNCIyKjuaUEwIjADGriyP7 tVXXPwxxofgec46LCuxr75efNDARsjUaAHwOT2QT4pHM+7r1+PDJxYrp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGkUFI0gfHn46mP52vTIBmo0VBTMB8GA1UdIwQY MBaAFP78g0RC4TD03ngVvxabegTDA53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2Qt ZjkzM2I5NTk4OGMxLzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2QtZjkzM2I5NTk4OGMx LzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfMToBJA MFIYRaw4JCT1kph585WpZLoOoKxUQrjtcY2oD9YdbwayERf/e/zazzL+tuISwchh 3iin8bAiOsjS5eYkOXgod7nt/KXlVZhVlPWZ3Ceh76iCK+EzTeYesILo4vXBSlA+ EtSqNLPOyYJVo3fB/Dhz7fN2hoTvXTlSo8ncBJUzx4HsJWvYFbk1USJxq8VT779F 1NtaR2Q1HY/gqtAbBriFxrl9ojgD5hTXrT/xCbgiPa/79P0XLEvbJxX6bavvhBs4 wfHe0/Tueb0trOX/sWBzosDfpjESA2enVSJo4luyV75n+KrtWWFQJ7zgJ9LbT+HV OestiAjDtkic7A== -----END CERTIFICATE-----Generated at Mon Dec 22 01:39:20 2025 by rpki-client