This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json) Hash identifier: v7JeKmbJC6Lfakyuzsbj2QcsXTWRliFzN1GJ63J3m8o= Subject key identifier: 37:7C:34:88:58:F0:21:7F:E4:A8:52:B5:E8:4E:23:8B:C2:F2:BA:B3 Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d Certificate serial: 019B3FB5E52D09C0277F2966F1B8E53CE774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 07:00:43 +0000 Manifest this update: Sun 21 Dec 2025 07:00:43 +0000 Manifest next update: Mon 22 Dec 2025 07:00:43 +0000 Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=) 2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: JMxabwqIx5VMdHVh4B+kR6pa2RvKhN6hEba0earR0uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:e5:2d:09:c0:27:7f:29:66:f1:b8:e5:3c:e7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d Validity Not Before: Dec 21 07:00:43 2025 GMT Not After : Dec 22 07:00:43 2025 GMT Subject: CN=377c348858f0217fe4a852b5e84e238bc2f2bab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:fe:0c:7a:99:54:51:64:c7:a5:e1:bb:b4: 3d:de:32:69:03:cb:17:e2:bf:ac:19:8a:c8:7b:ef: 8c:f0:99:86:d6:56:ac:67:f9:0c:d7:fc:89:17:be: 0f:5e:7e:85:b6:15:24:c1:32:34:3f:37:9b:f1:ac: 60:03:56:e5:ce:95:ea:c8:a6:a4:4e:e2:92:58:d6: 29:3f:a7:1a:9b:c1:3a:ca:e8:7f:78:36:20:4d:4d: cc:68:06:bf:4f:ee:e3:8c:7b:cf:47:8c:6d:ee:78: bb:a9:53:da:36:76:88:2f:8d:ce:a5:a5:90:f7:94: d4:05:f9:c4:41:ac:da:00:9b:4f:00:51:55:01:f5: 47:bd:cd:99:2c:6b:cc:d4:26:ce:4b:f3:73:1f:31: 1b:17:dd:b7:ec:48:f8:b2:89:de:6a:e8:49:6f:cb: 46:b0:20:ad:ef:04:08:12:e9:a6:93:27:5a:cb:cc: a9:7c:40:80:22:88:2e:72:8f:7c:34:5b:d2:d7:00: 9c:9f:81:d9:77:81:1e:41:6e:5c:a8:f8:67:77:a3: f2:14:da:db:b2:56:8a:79:3b:57:89:bf:18:ff:2b: 80:17:21:fb:d9:2a:8a:af:24:f4:09:56:b5:5b:ad: dc:ee:c8:c9:fa:f0:e2:97:50:c9:94:bb:c4:ff:8f: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:34:88:58:F0:21:7F:E4:A8:52:B5:E8:4E:23:8B:C2:F2:BA:B3 X509v3 Authority Key Identifier: keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ed:87:98:34:dd:c2:78:d3:fc:fc:5b:06:03:d9:c4:e9:0a: bd:9f:e3:5f:08:8e:48:41:8f:ff:58:2b:27:33:88:f9:a9:89: 20:4b:f9:06:d9:3b:2c:40:ef:35:d5:f3:19:a0:14:9d:b4:d6: 3b:12:37:6c:a0:e8:08:5c:59:b6:ff:c4:8d:bb:d8:79:44:a8: 7a:2f:1d:da:0d:eb:60:43:1b:11:70:47:aa:4a:69:35:23:75: 24:47:35:4b:6b:6e:11:c6:03:7e:0b:e1:f7:c0:e4:ab:b6:5e: 19:be:54:4a:8e:e0:bc:40:b1:a1:12:dc:7c:9e:8a:c3:56:05: e0:2c:b5:61:b5:38:f0:46:6f:9d:46:97:d8:21:5e:b6:49:1e: 39:04:a3:ce:d2:b6:21:c3:a5:ad:53:6a:a3:4b:35:13:81:c9: 61:d6:73:7f:a3:1f:6d:2c:ef:b5:60:14:75:85:20:85:b8:02: 80:5e:e7:bb:9a:83:8f:30:76:0f:f4:07:e7:bb:8f:f0:a4:5d: a8:66:7c:47:fa:f8:ff:92:99:26:1e:fa:c3:db:39:f3:37:dc: 87:5c:c3:1b:74:78:58:0a:d4:7f:09:37:60:52:36:ca:03:81: a6:5a:d0:e7:9e:84:4f:a2:bc:a4:f0:63:7d:c9:53:6b:70:3e: 61:f5:0d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/teUtCcAnfylm8bjlPOd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk MTY4N2QwHhcNMjUxMjIxMDcwMDQzWhcNMjUxMjIyMDcwMDQzWjAzMTEwLwYDVQQD EygzNzdjMzQ4ODU4ZjAyMTdmZTRhODUyYjVlODRlMjM4YmMyZjJiYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCb+DHqZVFFkx6Xhu7Q93jJpA8sX 4r+sGYrIe++M8JmG1lasZ/kM1/yJF74PXn6FthUkwTI0Pzeb8axgA1blzpXqyKak TuKSWNYpP6cam8E6yuh/eDYgTU3MaAa/T+7jjHvPR4xt7ni7qVPaNnaIL43OpaWQ 95TUBfnEQazaAJtPAFFVAfVHvc2ZLGvM1CbOS/NzHzEbF9237Ej4soneauhJb8tG sCCt7wQIEummkyday8ypfECAIoguco98NFvS1wCcn4HZd4EeQW5cqPhnd6PyFNrb slaKeTtXib8Y/yuAFyH72SqKryT0CVa1W63c7sjJ+vDil1DJlLvE/4/fhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd8NIhY8CF/5KhStehOI4vC8rqzMB8GA1UdIwQY MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuO2HmDTd wnjT/PxbBgPZxOkKvZ/jXwiOSEGP/1grJzOI+amJIEv5Btk7LEDvNdXzGaAUnbTW OxI3bKDoCFxZtv/EjbvYeUSoei8d2g3rYEMbEXBHqkppNSN1JEc1S2tuEcYDfgvh 98Dkq7ZeGb5USo7gvECxoRLcfJ6Kw1YF4Cy1YbU48EZvnUaX2CFetkkeOQSjztK2 IcOlrVNqo0s1E4HJYdZzf6MfbSzvtWAUdYUghbgCgF7nu5qDjzB2D/QH57uP8KRd qGZ8R/r4/5KZJh76w9s58zfch1zDG3R4WArUfwk3YFI2ygOBplrQ556ET6K8pPBj fclTa3A+YfUNLA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:36:03 2025 by rpki-client