This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json) Hash identifier: PMBMnpWPKSqhmyeg7Guu4vCPAjTIhiUdsgeHKRryXxs= Subject key identifier: 87:16:88:C2:9E:83:EF:AB:F6:93:A7:46:80:D7:FA:8B:B7:E6:6C:A6 Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124 Certificate serial: 019B3C7E544216A554B7834AF77F09D1BA77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft Manifest number: 040B Signing time: Sat 20 Dec 2025 16:01:10 +0000 Manifest this update: Sat 20 Dec 2025 16:01:10 +0000 Manifest next update: Sun 21 Dec 2025 16:01:10 +0000 Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: PrB1lM4gN3PtQIdX5aJ/H6NR7uB9JGwOAruD63P6R4E=) 2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:54:42:16:a5:54:b7:83:4a:f7:7f:09:d1:ba:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124 Validity Not Before: Dec 20 16:01:10 2025 GMT Not After : Dec 21 16:01:10 2025 GMT Subject: CN=871688c29e83efabf693a74680d7fa8bb7e66ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:7f:f7:ab:67:88:e2:0d:92:f7:36:ec:24: 47:6d:b3:5b:4c:39:87:55:3c:fb:57:d8:4a:eb:a9: 40:a9:10:4f:5f:d4:bf:88:a7:21:2f:a9:b6:5a:39: 1c:e8:69:fe:28:e0:07:55:fa:2b:c6:68:fb:b6:5d: 1f:e6:46:b1:2e:23:43:a2:a0:01:68:54:55:fb:c5: 57:27:65:43:e9:c7:b1:f8:67:fd:22:8b:a3:09:59: e4:a4:4f:39:71:3d:92:86:89:6b:6c:89:e7:9b:5c: 40:36:a1:15:da:b3:44:40:0e:6b:76:22:0a:50:94: f2:6b:7d:b1:e8:bc:91:b2:22:db:82:e5:15:a3:32: 3c:de:04:bb:68:1f:bf:75:ef:f7:56:84:1e:6c:94: 3f:00:5c:f4:0d:81:05:40:0b:31:1b:29:8f:d6:bf: 8f:c6:d5:82:ec:af:85:b3:fa:9b:32:2c:9f:a4:a1: 39:38:a4:33:d8:fc:22:c5:32:ae:84:d6:6f:aa:e5: 7c:ea:d1:75:fc:56:c2:e1:8e:d8:59:95:f6:b1:fd: 06:93:2b:c4:38:73:5f:29:ae:00:9a:fd:9f:89:65: 73:79:08:8e:72:b6:59:3c:38:1f:5e:17:df:97:1a: 44:98:5c:60:aa:ba:d0:91:1b:0c:9c:85:ab:aa:27: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:88:C2:9E:83:EF:AB:F6:93:A7:46:80:D7:FA:8B:B7:E6:6C:A6 X509v3 Authority Key Identifier: keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c9:14:80:b4:b2:35:2a:4d:8c:e7:68:e6:0b:0b:8d:7b:68: 28:41:a6:68:af:c3:a2:a5:9e:c4:42:15:ef:12:69:43:8e:d6: 0d:c6:27:da:da:88:4f:fd:42:8f:a1:f5:b5:ee:2b:82:df:3b: 0b:9f:06:22:e2:3f:1b:9f:65:06:af:39:03:37:39:15:19:62: 73:11:ca:46:08:ac:94:e5:8c:83:63:41:11:1e:b4:b0:10:9d: cd:17:65:f2:c1:ec:09:6a:de:2d:04:68:0f:5b:5d:7c:39:5e: 15:6f:56:90:d6:7a:07:ca:d7:5c:b2:b8:5f:2e:51:67:19:14: e9:56:93:fa:a3:67:8b:42:f7:5c:bf:6b:ca:a4:f8:a5:f9:67: c1:b4:9a:f4:7a:ea:6e:f3:21:32:66:cd:12:1c:15:a0:51:4f: 34:a1:bf:bf:72:68:20:6b:52:9b:05:1e:3a:a2:91:25:08:59: 9e:c3:a8:b8:d1:a8:14:56:df:1b:2c:44:54:14:3a:92:81:f4: 02:3b:80:b8:56:2f:81:cc:7a:32:24:22:32:ea:2a:23:2e:2d: 26:4a:dc:b0:be:e1:3f:16:a8:46:57:60:ac:bd:af:34:52:82: 15:3f:ce:83:19:aa:91:bf:15:b4:65:c4:7a:16:c3:9a:86:9d: f9:9a:ae:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flRCFqVUt4NK938J0bp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw ZGYxMjQwHhcNMjUxMjIwMTYwMTEwWhcNMjUxMjIxMTYwMTEwWjAzMTEwLwYDVQQD Eyg4NzE2ODhjMjllODNlZmFiZjY5M2E3NDY4MGQ3ZmE4YmI3ZTY2Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFd/96tniOINkvc27CRHbbNbTDmH VTz7V9hK66lAqRBPX9S/iKchL6m2Wjkc6Gn+KOAHVforxmj7tl0f5kaxLiNDoqAB aFRV+8VXJ2VD6cex+Gf9IoujCVnkpE85cT2SholrbInnm1xANqEV2rNEQA5rdiIK UJTya32x6LyRsiLbguUVozI83gS7aB+/de/3VoQebJQ/AFz0DYEFQAsxGymP1r+P xtWC7K+Fs/qbMiyfpKE5OKQz2PwixTKuhNZvquV86tF1/FbC4Y7YWZX2sf0GkyvE OHNfKa4Amv2fiWVzeQiOcrZZPDgfXhfflxpEmFxgqrrQkRsMnIWrqietKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcWiMKeg++r9pOnRoDX+ou35mymMB8GA1UdIwQY MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMkUgLSy NSpNjOdo5gsLjXtoKEGmaK/DoqWexEIV7xJpQ47WDcYn2tqIT/1Cj6H1te4rgt87 C58GIuI/G59lBq85Azc5FRlicxHKRgislOWMg2NBER60sBCdzRdl8sHsCWreLQRo D1tdfDleFW9WkNZ6B8rXXLK4Xy5RZxkU6VaT+qNni0L3XL9ryqT4pflnwbSa9Hrq bvMhMmbNEhwVoFFPNKG/v3JoIGtSmwUeOqKRJQhZnsOouNGoFFbfGyxEVBQ6koH0 AjuAuFYvgcx6MiQiMuoqIy4tJkrcsL7hPxaoRldgrL2vNFKCFT/Ogxmqkb8VtGXE ehbDmoad+ZquLg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:46 2025 by rpki-client