This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json) Hash identifier: jZjfubT5Q2ZFBIVJTZeVY+d0TrXk2M03Clr2Ob9R584= Subject key identifier: 72:E7:89:9F:1F:68:C7:6B:2D:BD:36:E2:C1:D3:0F:B8:6A:17:58:E4 Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Certificate serial: 019B668D03C6C92899D8BFC224CB4D8B7682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 20:01:16 +0000 Manifest this update: Sun 28 Dec 2025 20:01:16 +0000 Manifest next update: Mon 29 Dec 2025 20:01:16 +0000 Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: d5NYZoaPs/8sQglNuU6WXSjms5Q/mpZHWN+avP7umGs=) 2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8d:03:c6:c9:28:99:d8:bf:c2:24:cb:4d:8b:76:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Validity Not Before: Dec 28 20:01:16 2025 GMT Not After : Dec 29 20:01:16 2025 GMT Subject: CN=72e7899f1f68c76b2dbd36e2c1d30fb86a1758e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:f1:81:cf:a7:04:bc:ab:23:67:df:f6:05: 49:78:fb:19:3f:dd:02:5d:d6:82:fc:11:29:df:58: cf:04:ae:5d:13:4d:1c:6d:8b:8e:57:bd:7b:62:1f: 16:41:84:41:c0:24:20:52:dc:8a:10:98:ee:1f:b4: f0:89:80:3c:a8:8e:62:31:a1:0d:00:da:aa:de:3f: 3d:c2:76:cd:83:19:b7:89:9e:d1:dc:3f:15:04:0d: d4:29:16:c7:fb:7d:81:ea:01:05:ab:7c:cf:f5:b8: bc:14:02:d5:2b:bf:e8:eb:29:e3:52:2a:e7:77:fd: bb:d1:21:a3:96:83:f1:fc:82:18:0a:94:8e:13:80: d4:1f:c1:25:76:ff:4d:f6:10:83:60:a7:f9:ff:dd: d6:8c:45:77:67:dd:d1:58:82:0b:66:53:aa:90:01: 27:86:0b:60:dc:3c:17:c0:29:e1:e4:13:98:96:17: 19:49:d2:7f:5f:bb:b8:ad:cf:f8:86:51:74:07:1f: c4:94:97:d5:e3:c2:0c:52:4f:22:e2:af:50:7d:48: f9:8d:3b:ae:c6:a5:20:c8:82:15:47:6c:26:e7:d8: a7:21:6b:95:4d:c2:7f:c2:05:41:e7:82:ea:4d:7b: 85:40:4f:61:73:06:a6:da:f1:41:69:4f:8a:a0:0f: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:89:9F:1F:68:C7:6B:2D:BD:36:E2:C1:D3:0F:B8:6A:17:58:E4 X509v3 Authority Key Identifier: keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0d:d9:a1:26:9a:88:1c:18:cf:f3:aa:f4:27:9e:19:e8:b0: 6b:50:70:f9:40:70:09:d9:a9:0a:57:db:e2:b2:df:84:1f:04: 4d:6f:65:59:2c:3c:c4:45:8e:b5:bd:24:68:7d:5a:eb:69:db: d4:d4:66:2b:eb:04:7e:77:44:cb:bf:00:9e:84:e6:7e:be:79: 4b:3f:24:14:9e:69:b6:60:4a:d1:bf:a6:e8:36:7d:74:21:de: ef:14:64:8a:c7:c8:cb:33:01:12:d5:74:59:59:0d:49:7f:5d: f4:ed:40:30:b3:54:44:7b:ff:88:9c:c9:cd:6c:53:71:57:83: 61:a8:d8:ca:37:5a:f7:2a:e1:6e:09:80:e4:62:bb:35:cb:91: 15:95:17:f9:3c:3f:89:db:9b:9f:ce:e6:8f:04:d7:bd:aa:a1: 0e:58:87:54:21:2f:ca:ba:ac:df:39:a0:c3:ab:cb:cf:07:bf: 32:52:3c:15:7e:07:06:61:db:68:0e:a5:58:82:1a:73:7a:ac: 1f:c4:b7:64:31:03:18:c8:bc:e5:da:f3:29:ca:c5:3d:0f:80: 10:57:33:be:eb:cc:7b:47:16:5b:4d:f5:48:22:22:33:e9:18: ea:29:bc:d5:ed:03:6b:96:52:1e:5c:db:7e:2a:2c:52:97:fd: 60:ee:d7:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjQPGySiZ2L/CJMtNi3aCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmFiZDg1YTU4OTkxYWI3MWExN2ZkNzU0MWZiOGRlOTZm NTVhN2QwHhcNMjUxMjI4MjAwMTE2WhcNMjUxMjI5MjAwMTE2WjAzMTEwLwYDVQQD Eyg3MmU3ODk5ZjFmNjhjNzZiMmRiZDM2ZTJjMWQzMGZiODZhMTc1OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjxgc+nBLyrI2ff9gVJePsZP90C XdaC/BEp31jPBK5dE00cbYuOV717Yh8WQYRBwCQgUtyKEJjuH7TwiYA8qI5iMaEN ANqq3j89wnbNgxm3iZ7R3D8VBA3UKRbH+32B6gEFq3zP9bi8FALVK7/o6ynjUirn d/270SGjloPx/IIYCpSOE4DUH8Eldv9N9hCDYKf5/93WjEV3Z93RWIILZlOqkAEn hgtg3DwXwCnh5BOYlhcZSdJ/X7u4rc/4hlF0Bx/ElJfV48IMUk8i4q9QfUj5jTuu xqUgyIIVR2wm59inIWuVTcJ/wgVB54LqTXuFQE9hcwam2vFBaU+KoA+IwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLniZ8faMdrLb024sHTD7hqF1jkMB8GA1UdIwQY MBaAFFcqvYWliZGrcaF/11QfuN6W9Vp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYt NjFmYWMyODZkMzg3LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYtNjFmYWMyODZkMzg3 LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA3ZoSaa iBwYz/Oq9CeeGeiwa1Bw+UBwCdmpClfb4rLfhB8ETW9lWSw8xEWOtb0kaH1a62nb 1NRmK+sEfndEy78AnoTmfr55Sz8kFJ5ptmBK0b+m6DZ9dCHe7xRkisfIyzMBEtV0 WVkNSX9d9O1AMLNURHv/iJzJzWxTcVeDYajYyjda9yrhbgmA5GK7NcuRFZUX+Tw/ idubn87mjwTXvaqhDliHVCEvyrqs3zmgw6vLzwe/MlI8FX4HBmHbaA6lWIIac3qs H8S3ZDEDGMi85drzKcrFPQ+AEFczvuvMe0cWW031SCIiM+kY6im81e0Da5ZSHlzb fiosUpf9YO7XWA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:08:47 2025 by rpki-client