This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json) Hash identifier: PF0YvxTdiUc1RRzgbHVOt33PeR6kHybdbyiLiA5Qjx8= Subject key identifier: 5E:51:E9:25:78:65:40:3C:53:85:A4:82:B6:52:55:AE:F5:A0:65:AC Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6 Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6 Certificate serial: 019B3D906B586465F38E697A29763A244AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 21:00:33 +0000 Manifest this update: Sat 20 Dec 2025 21:00:33 +0000 Manifest next update: Sun 21 Dec 2025 21:00:33 +0000 Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=) 2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: NpNTP+9w3zCm0Vqf1+NVzxoVbR6/lT/7ICu5PHeFYLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6b:58:64:65:f3:8e:69:7a:29:76:3a:24:4a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6 Validity Not Before: Dec 20 21:00:33 2025 GMT Not After : Dec 21 21:00:33 2025 GMT Subject: CN=5e51e9257865403c5385a482b65255aef5a065ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:6f:54:cc:d8:a8:89:bb:b3:3d:d1:38:11: 9d:24:48:c4:24:8a:2b:ec:1c:06:35:3f:0c:35:22: 70:01:73:b8:fa:c8:fd:f4:08:db:22:0c:15:56:63: 7d:4f:8d:a0:80:c4:68:52:a1:57:c2:14:47:f0:26: ea:eb:12:70:ca:d4:4d:ac:f5:a8:e3:90:db:d2:b8: 8d:2c:2c:ab:51:62:df:68:33:db:6a:bf:cf:3a:4b: fb:95:a6:2f:93:b1:23:ae:21:94:63:a0:2e:d4:58: db:62:a4:e0:a7:2b:90:75:a4:24:10:df:d1:09:5e: cf:8e:c0:71:5e:76:b9:ad:8a:04:33:10:1f:94:61: 09:43:b1:ba:ef:94:3c:cd:14:80:d2:6b:13:f5:08: af:45:76:74:a6:d8:66:52:e3:93:ab:63:db:4a:32: ba:2c:28:04:a3:fb:31:c6:35:c1:ea:a4:26:2e:bd: 04:2b:c1:06:d0:a7:b3:b5:c5:40:08:df:c7:1d:10: 35:16:38:f4:e6:e4:ab:e0:36:91:1d:3e:6c:0d:72: 2a:cf:a7:84:38:34:68:56:dd:02:61:8d:59:27:a9: 19:c3:77:35:ae:da:26:3f:78:ad:9c:ad:2d:4d:d3: 05:9e:dc:39:a4:0a:af:44:30:ac:ec:56:17:50:0d: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:51:E9:25:78:65:40:3C:53:85:A4:82:B6:52:55:AE:F5:A0:65:AC X509v3 Authority Key Identifier: keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cc:c7:d0:05:86:a1:48:c4:5e:dc:37:9a:2c:a0:cb:26:2e: a6:08:8b:80:ef:d8:12:92:71:2f:de:a1:9d:00:e4:1f:a7:fa: 7e:75:55:76:6e:06:30:ad:09:5e:63:22:b3:86:e7:6e:3a:18: 62:f2:1a:34:26:0f:74:8c:1d:52:ea:4d:38:4a:50:0e:b1:58: 8c:33:80:65:5b:63:18:01:3b:8a:b6:25:0a:3a:58:c7:02:e6: e1:29:03:1a:ef:74:a5:f5:70:63:d1:e9:39:88:29:29:b7:ae: e1:16:36:6f:8f:d3:3b:fd:95:24:df:a3:20:be:01:7e:a4:ec: 6e:c3:46:2f:84:1f:25:21:45:f8:ab:53:49:b4:1c:5b:32:e6: 4b:4a:87:6f:69:50:f6:f9:c6:7c:a6:9f:0e:de:7b:11:a6:65: 71:bc:00:5c:73:46:f0:5a:fb:03:87:73:d5:f4:0c:e0:16:0d: 80:e3:d2:ca:b0:8a:5f:2f:2d:07:0f:a4:7b:ff:ee:1f:af:81: c3:09:ed:96:3b:6d:93:61:a2:d6:e7:b7:53:15:30:99:f5:b8: df:d8:d1:5a:de:05:e7:91:11:d9:63:38:d3:2a:69:ee:bc:84: d0:ba:9f:e1:1d:15:2f:df:0f:41:7e:21:a9:c6:10:9a:f5:26: 6a:57:94:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGtYZGXzjml6KXY6JErCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj OWM3YzYwHhcNMjUxMjIwMjEwMDMzWhcNMjUxMjIxMjEwMDMzWjAzMTEwLwYDVQQD Eyg1ZTUxZTkyNTc4NjU0MDNjNTM4NWE0ODJiNjUyNTVhZWY1YTA2NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJVvVMzYqIm7sz3ROBGdJEjEJIor 7BwGNT8MNSJwAXO4+sj99AjbIgwVVmN9T42ggMRoUqFXwhRH8Cbq6xJwytRNrPWo 45Db0riNLCyrUWLfaDPbar/POkv7laYvk7EjriGUY6Au1FjbYqTgpyuQdaQkEN/R CV7PjsBxXna5rYoEMxAflGEJQ7G675Q8zRSA0msT9QivRXZ0pthmUuOTq2PbSjK6 LCgEo/sxxjXB6qQmLr0EK8EG0KeztcVACN/HHRA1Fjj05uSr4DaRHT5sDXIqz6eE ODRoVt0CYY1ZJ6kZw3c1rtomP3itnK0tTdMFntw5pAqvRDCs7FYXUA3eSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5R6SV4ZUA8U4WkgrZSVa71oGWsMB8GA1UdIwQY MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt Y2Q3YjI4OGQ2ZWEwLzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8zH0AWG oUjEXtw3miygyyYupgiLgO/YEpJxL96hnQDkH6f6fnVVdm4GMK0JXmMis4bnbjoY YvIaNCYPdIwdUupNOEpQDrFYjDOAZVtjGAE7irYlCjpYxwLm4SkDGu90pfVwY9Hp OYgpKbeu4RY2b4/TO/2VJN+jIL4BfqTsbsNGL4QfJSFF+KtTSbQcWzLmS0qHb2lQ 9vnGfKafDt57EaZlcbwAXHNG8Fr7A4dz1fQM4BYNgOPSyrCKXy8tBw+ke//uH6+B wwntljttk2Gi1ue3UxUwmfW439jRWt4F55ER2WM40ypp7ryE0Lqf4R0VL98PQX4h qcYQmvUmaleULQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:44 2025 by rpki-client