This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json) Hash identifier: YVuWDbdFYTeXcYmT+0I+VghsKVrbkYxqoYI4rC+xo5c= Subject key identifier: 77:3E:A6:FF:3F:37:83:BD:DE:6E:A8:EC:53:A0:C7:F4:56:D7:F6:98 Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f Certificate serial: 019B3F48B738FBFDCC1AF53377F3CAE231EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft Manifest number: 0DE6 Signing time: Sun 21 Dec 2025 05:01:28 +0000 Manifest this update: Sun 21 Dec 2025 05:01:28 +0000 Manifest next update: Mon 22 Dec 2025 05:01:28 +0000 Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=) 2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=) 3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: SvfLS4pwgS23AxDw0grJ9tky/I4tji1PXs0G6SJa6RA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b7:38:fb:fd:cc:1a:f5:33:77:f3:ca:e2:31:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572b4ed92682d718a8fc4488140027406960795f Validity Not Before: Dec 21 05:01:28 2025 GMT Not After : Dec 22 05:01:28 2025 GMT Subject: CN=773ea6ff3f3783bdde6ea8ec53a0c7f456d7f698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:fa:fb:d1:ba:90:58:ea:a4:cd:0a:09:b4: 0f:5f:fa:cb:60:39:05:35:0c:c3:17:53:82:c4:36: 4a:d6:a5:bf:b6:59:28:19:6e:5c:e4:97:14:5a:a9: db:d0:5d:ce:e5:57:a4:a9:bc:54:c3:7e:02:38:1e: 5c:da:8e:05:8c:61:14:e7:bb:d8:7a:66:4a:2e:11: ad:47:fa:90:a7:00:71:f6:2b:e5:68:d4:95:60:e3: d5:f1:88:ec:d0:a8:a2:cd:b3:32:d0:d0:5a:fd:e3: 40:bc:ea:f3:af:ff:10:c3:48:6c:fd:bf:a6:6d:2a: fb:f5:30:16:dc:0b:43:df:11:cc:7d:02:52:ad:ea: 6f:b1:e0:f0:94:24:30:5e:64:8f:55:3a:db:b3:24: e3:fa:da:c4:77:d0:38:2c:44:e1:33:5b:de:eb:0e: 8b:10:3c:ec:b0:78:95:5e:f3:c0:dc:a0:c5:35:ef: 0d:98:80:2f:a5:ee:2f:34:ad:1f:9d:89:e2:fe:61: 74:24:d1:8c:75:93:b6:31:9f:95:8b:0f:0f:b8:f7: 19:08:e6:cf:76:bd:ec:85:c0:27:6a:9d:4f:d6:c3: 12:2d:2d:59:75:50:c4:cf:4f:2c:d6:29:a7:99:4c: 4f:d2:de:a4:24:50:35:45:1a:24:6b:34:d0:75:53: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:A6:FF:3F:37:83:BD:DE:6E:A8:EC:53:A0:C7:F4:56:D7:F6:98 X509v3 Authority Key Identifier: keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ad:05:6f:94:3d:0a:1e:ff:a3:75:b5:63:3e:01:23:4f:19: da:c6:01:df:08:fe:63:77:5f:af:0e:0a:f2:8b:02:7f:1d:0b: cc:f0:ff:5a:97:3b:be:b6:5c:5b:c8:ee:a0:e4:22:67:80:0b: e0:4b:c9:23:3a:95:47:92:4f:1e:de:ee:a0:44:c5:d5:7f:7d: 93:ba:57:78:55:0e:09:11:b0:5d:0d:f0:ae:ca:a2:fe:9d:96: 3c:1c:b8:49:cd:d5:2c:21:8a:bd:27:c7:be:13:ef:50:11:18: a9:3f:81:6b:2d:c0:c8:6f:21:51:1e:1e:6f:e8:0d:5f:3e:e1: 08:97:dc:da:77:43:85:89:33:b0:23:5d:05:c0:2b:95:55:84: 3e:9c:9e:2b:e4:63:39:65:ac:c5:18:be:a7:59:be:3b:84:0d: a9:a7:d7:50:ec:4a:da:0e:2e:2e:a6:86:75:3f:a4:08:09:0d: 6d:28:57:b1:08:9a:25:dd:fe:ee:11:73:90:ce:a8:98:22:16: 33:dd:25:b5:e3:b7:7e:5e:28:3c:b0:2c:9d:88:38:1e:32:df: 27:0d:09:c0:fb:ca:9a:c9:3b:54:30:59:d4:84:fc:67:57:32: f2:7d:3d:5d:be:9b:63:5a:56:84:d3:3c:86:58:68:43:8c:9c: 00:77:31:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLc4+/3MGvUzd/PK4jHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2 MDc5NWYwHhcNMjUxMjIxMDUwMTI4WhcNMjUxMjIyMDUwMTI4WjAzMTEwLwYDVQQD Eyg3NzNlYTZmZjNmMzc4M2JkZGU2ZWE4ZWM1M2EwYzdmNDU2ZDdmNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q36+9G6kFjqpM0KCbQPX/rLYDkF NQzDF1OCxDZK1qW/tlkoGW5c5JcUWqnb0F3O5VekqbxUw34COB5c2o4FjGEU57vY emZKLhGtR/qQpwBx9ivlaNSVYOPV8Yjs0KiizbMy0NBa/eNAvOrzr/8Qw0hs/b+m bSr79TAW3AtD3xHMfQJSrepvseDwlCQwXmSPVTrbsyTj+trEd9A4LEThM1ve6w6L EDzssHiVXvPA3KDFNe8NmIAvpe4vNK0fnYni/mF0JNGMdZO2MZ+Viw8PuPcZCObP dr3shcAnap1P1sMSLS1ZdVDEz08s1imnmUxP0t6kJFA1RRokazTQdVN2rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc+pv8/N4O93m6o7FOgx/RW1/aYMB8GA1UdIwQY MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0 LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK0Fb5Q9 Ch7/o3W1Yz4BI08Z2sYB3wj+Y3dfrw4K8osCfx0LzPD/Wpc7vrZcW8juoOQiZ4AL 4EvJIzqVR5JPHt7uoETF1X99k7pXeFUOCRGwXQ3wrsqi/p2WPBy4Sc3VLCGKvSfH vhPvUBEYqT+Bay3AyG8hUR4eb+gNXz7hCJfc2ndDhYkzsCNdBcArlVWEPpyeK+Rj OWWsxRi+p1m+O4QNqafXUOxK2g4uLqaGdT+kCAkNbShXsQiaJd3+7hFzkM6omCIW M90lteO3fl4oPLAsnYg4HjLfJw0JwPvKmsk7VDBZ1IT8Z1cy8n09Xb6bY1pWhNM8 hlhoQ4ycAHcxPg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:32:03 2025 by rpki-client