This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json) Hash identifier: UliGM98LTGJizvsWgnnWdTaHPPGU3h/FQdX7SgUNVZg= Subject key identifier: 3C:C8:DB:6A:3A:EF:0B:0C:8E:AF:6D:4B:D5:AD:52:45:47:E2:E3:32 Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5 Certificate serial: 019B3F1165E64CE285F028A904C53C9F0296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft Manifest number: 0444 Signing time: Sun 21 Dec 2025 04:01:03 +0000 Manifest this update: Sun 21 Dec 2025 04:01:03 +0000 Manifest next update: Mon 22 Dec 2025 04:01:03 +0000 Files and hashes: 1: 5kqLZgQxvPjZ3-R1JIK5dfgcysw.roa (hash: lJZUCOq4a1uyWOYuADdFBX3wVMiqs3oDIl7Z99UtsuA=) 2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: vvZ5+iNusxVg9rqhtTAqyY/nny9xOqm0gQrMoiZnWLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:65:e6:4c:e2:85:f0:28:a9:04:c5:3c:9f:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5 Validity Not Before: Dec 21 04:01:03 2025 GMT Not After : Dec 22 04:01:03 2025 GMT Subject: CN=3cc8db6a3aef0b0c8eaf6d4bd5ad524547e2e332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:f0:c2:ae:da:31:14:3e:9f:1a:ca:a6:57: 04:fb:2c:be:0d:d8:5a:9e:18:e9:ac:bf:f6:47:cd: 76:52:26:f3:91:7c:4b:e5:fc:32:e9:ec:75:06:d0: a2:2b:1f:73:25:9e:36:3e:0a:21:1b:b7:c7:03:8d: de:96:ec:2e:4e:dd:5f:bc:13:b1:66:20:be:2f:46: 64:89:dc:5b:86:5b:67:46:0e:5b:c8:d5:c5:ca:44: a4:21:d8:62:d7:75:21:84:00:1d:12:a1:25:9f:7f: 9c:98:08:b9:c3:c9:45:37:6a:89:42:dc:04:08:a9: 0d:e9:5d:b4:33:ed:24:9b:5c:d4:7b:2f:62:3c:1b: 01:a3:ef:7f:83:15:ef:16:d6:53:44:be:29:4c:f9: 1a:11:0b:f2:20:67:ec:ed:0a:8c:d8:75:c6:77:3a: a7:1a:a7:83:a6:3d:df:ef:f6:b9:51:01:7a:af:3b: 8b:a3:55:b3:4d:2b:45:e4:43:c6:5d:33:a0:24:20: f6:97:a8:4c:6c:b8:b1:ec:cf:b1:fb:6d:54:83:73: db:e1:cd:e3:89:72:4c:44:08:45:f1:ae:f0:0e:26: ca:b6:a9:97:c3:92:8e:18:9d:b2:60:72:cd:bb:87: 6c:87:09:47:b9:26:49:e2:75:9e:53:cb:3e:5c:97: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:DB:6A:3A:EF:0B:0C:8E:AF:6D:4B:D5:AD:52:45:47:E2:E3:32 X509v3 Authority Key Identifier: keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:48:70:3b:4e:99:db:7a:6c:98:e8:dc:14:f2:b9:bc:12:7a: dd:55:7d:a3:4a:4c:9f:7f:87:05:c4:0e:1c:10:68:17:3f:04: 30:df:f1:71:1b:36:f3:8b:75:72:3d:57:2c:f4:1f:b6:66:63: a2:d5:cf:ba:00:08:14:e1:38:3f:fb:69:f2:6c:60:65:6c:4c: f6:ca:89:00:6b:8d:4e:fe:29:b4:cc:ac:2a:27:b3:5f:88:61: e7:6e:29:6b:0d:22:17:ed:2b:43:bb:a6:73:f5:c7:17:49:89: 64:56:e8:6a:72:99:10:5d:b6:df:ce:89:c5:df:23:d3:b1:4c: ce:f4:9c:2d:95:fa:f7:1e:12:89:62:05:c9:ba:fe:5d:fe:4e: 8a:43:45:bc:c5:27:c3:9d:39:21:97:ab:bf:08:c9:5e:86:c4: c9:40:2f:28:4e:f8:fa:00:ed:7d:13:6e:c9:54:4d:0f:82:16: 1c:82:29:65:63:74:d9:65:12:50:fb:f8:82:40:81:ab:f4:15: 78:23:f7:64:79:76:ec:8b:3a:ff:6a:62:6e:42:61:ec:37:58: e9:b9:03:26:76:34:4e:00:ba:e4:00:7f:4d:82:cc:2a:14:d2: 87:b7:0f:d2:b1:08:8a:b2:c0:22:3b:57:d6:73:de:4d:89:fa: 57:e6:90:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EWXmTOKF8CipBMU8nwKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1 OGQ2ZDUwHhcNMjUxMjIxMDQwMTAzWhcNMjUxMjIyMDQwMTAzWjAzMTEwLwYDVQQD EygzY2M4ZGI2YTNhZWYwYjBjOGVhZjZkNGJkNWFkNTI0NTQ3ZTJlMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dTwwq7aMRQ+nxrKplcE+yy+Ddha nhjprL/2R812UibzkXxL5fwy6ex1BtCiKx9zJZ42PgohG7fHA43eluwuTt1fvBOx ZiC+L0ZkidxbhltnRg5byNXFykSkIdhi13UhhAAdEqEln3+cmAi5w8lFN2qJQtwE CKkN6V20M+0km1zUey9iPBsBo+9/gxXvFtZTRL4pTPkaEQvyIGfs7QqM2HXGdzqn GqeDpj3f7/a5UQF6rzuLo1WzTStF5EPGXTOgJCD2l6hMbLix7M+x+21Ug3Pb4c3j iXJMRAhF8a7wDibKtqmXw5KOGJ2yYHLNu4dshwlHuSZJ4nWeU8s+XJfpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzI22o67wsMjq9tS9WtUkVH4uMyMB8GA1UdIwQY MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct MTYyMGNmZGM3MTE3LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3 LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUhwO06Z 23psmOjcFPK5vBJ63VV9o0pMn3+HBcQOHBBoFz8EMN/xcRs284t1cj1XLPQftmZj otXPugAIFOE4P/tp8mxgZWxM9sqJAGuNTv4ptMysKiezX4hh524paw0iF+0rQ7um c/XHF0mJZFboanKZEF22386Jxd8j07FMzvScLZX69x4SiWIFybr+Xf5OikNFvMUn w505IZervwjJXobEyUAvKE74+gDtfRNuyVRND4IWHIIpZWN02WUSUPv4gkCBq/QV eCP3ZHl27Is6/2pibkJh7DdY6bkDJnY0TgC65AB/TYLMKhTSh7cP0rEIirLAIjtX 1nPeTYn6V+aQjA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:58 2025 by rpki-client