This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json) Hash identifier: oaVt/h/nXzgIZMRH+0/3wKsij2OBSKuzgi2/BT1Vwgo= Subject key identifier: AC:D5:B9:AC:7B:03:1C:B4:22:72:30:3F:A7:03:35:3D:81:C0:2A:80 Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Certificate serial: 019B4B836DA3DFF348F44EAB1BD752653661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft Manifest number: 0733 Signing time: Tue 23 Dec 2025 14:01:02 +0000 Manifest this update: Tue 23 Dec 2025 14:01:02 +0000 Manifest next update: Wed 24 Dec 2025 14:01:02 +0000 Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=) 2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: vR4V0rZlifrQyIh0yxjAPX5a3IhpJx08VR+HC2IRgO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:6d:a3:df:f3:48:f4:4e:ab:1b:d7:52:65:36:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Validity Not Before: Dec 23 14:01:02 2025 GMT Not After : Dec 24 14:01:02 2025 GMT Subject: CN=acd5b9ac7b031cb42272303fa703353d81c02a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:bc:9e:ea:b4:0a:b4:41:7d:bc:64:58:9c: fb:07:62:24:09:58:34:fe:5c:ef:0a:c8:13:39:35: 93:74:e7:13:bf:63:3d:24:1e:78:71:cf:64:73:92: 50:cc:bb:36:18:48:8b:42:7e:64:12:1d:c1:9c:ca: cc:b8:11:96:08:01:6a:38:36:76:94:b1:1a:df:6f: 5d:f1:55:75:8a:6c:c7:e1:00:45:45:b1:e3:0b:23: e4:6a:be:89:92:c0:25:f8:40:08:77:5d:39:f8:67: 81:7f:90:fe:1c:50:7f:33:f1:37:94:98:1d:32:78: 01:e9:66:81:fd:b5:8b:91:16:77:d8:b2:60:14:6c: 70:a7:4d:da:ea:44:03:8f:82:5c:40:70:e6:5c:19: 7e:c0:5a:a3:5f:2f:20:22:63:92:b7:0d:6b:cf:4f: 64:a5:55:2c:29:01:2f:0e:6b:8d:24:55:dc:a1:3e: a9:bc:ad:c3:de:2c:92:df:f8:70:45:98:16:b5:79: b1:23:23:48:df:87:72:6f:54:9b:72:9d:a9:b4:20: a3:76:ac:d9:ed:6e:dc:ee:04:8b:6f:f7:6b:6e:5d: a2:06:55:5b:1a:7f:29:fd:7c:41:1a:d7:23:51:c2: a2:53:22:4a:d1:eb:9a:2c:e0:ec:e1:82:bd:22:c5: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D5:B9:AC:7B:03:1C:B4:22:72:30:3F:A7:03:35:3D:81:C0:2A:80 X509v3 Authority Key Identifier: keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a5:9c:c3:5e:f4:37:aa:f7:ab:c1:e2:ea:f9:42:aa:16:63: 8b:e5:a1:b3:09:5b:38:dc:c6:a1:30:93:53:f2:d0:47:f3:f2: de:eb:88:23:7c:38:58:20:54:ea:ae:04:61:86:ca:b6:4b:71: d3:a1:28:4b:3e:d0:82:5d:dd:95:86:af:78:36:ae:e2:db:38: de:ba:e3:12:f1:3c:49:f4:84:67:1e:33:e6:d4:88:26:e7:41: b4:21:b0:53:ac:db:d5:b3:22:f6:84:ce:5f:1e:cd:5d:53:62: d3:f1:40:03:85:3c:be:d9:42:40:ee:73:28:70:19:2d:ae:45: ad:c6:fe:af:29:fb:e6:d2:df:2a:1e:29:25:b2:87:d9:cf:64: 76:e9:bb:ab:35:9a:c5:50:29:91:8b:ca:59:4e:ce:aa:fc:45: fb:a3:29:4d:51:51:84:6e:7c:13:95:02:55:d3:80:48:d0:ec: b4:5f:1c:5b:28:67:8b:01:1c:e5:e9:db:ba:6b:d8:af:dd:57: d0:02:d4:de:1e:9f:8d:77:26:52:86:7a:6f:44:27:b6:1e:41: a4:d7:86:38:c0:e3:88:20:04:dd:e8:d3:b8:93:0a:df:04:1f: 4a:a7:e7:1e:f3:8a:fd:da:31:b9:ae:33:30:5e:b7:ca:1a:ed: 26:8d:d2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg22j3/NI9E6rG9dSZTZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGE4NTU3ZGY3ZmIyYzQxOGY4ZWJmMTdjMGExZWYwNjI1 ZDc0YTMwHhcNMjUxMjIzMTQwMTAyWhcNMjUxMjI0MTQwMTAyWjAzMTEwLwYDVQQD EyhhY2Q1YjlhYzdiMDMxY2I0MjI3MjMwM2ZhNzAzMzUzZDgxYzAyYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu28nuq0CrRBfbxkWJz7B2IkCVg0 /lzvCsgTOTWTdOcTv2M9JB54cc9kc5JQzLs2GEiLQn5kEh3BnMrMuBGWCAFqODZ2 lLEa329d8VV1imzH4QBFRbHjCyPkar6JksAl+EAId105+GeBf5D+HFB/M/E3lJgd MngB6WaB/bWLkRZ32LJgFGxwp03a6kQDj4JcQHDmXBl+wFqjXy8gImOStw1rz09k pVUsKQEvDmuNJFXcoT6pvK3D3iyS3/hwRZgWtXmxIyNI34dyb1Sbcp2ptCCjdqzZ 7W7c7gSLb/drbl2iBlVbGn8p/XxBGtcjUcKiUyJK0euaLODs4YK9IsUw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzVuax7Axy0InIwP6cDNT2BwCqAMB8GA1UdIwQY MBaAFL2KhVfff7LEGPjr8XwKHvBiXXSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2It ZjJjZGI3ZjU3NWU5LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2ItZjJjZGI3ZjU3NWU5 LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqWcw170 N6r3q8Hi6vlCqhZji+WhswlbONzGoTCTU/LQR/Py3uuII3w4WCBU6q4EYYbKtktx 06EoSz7Qgl3dlYaveDau4ts43rrjEvE8SfSEZx4z5tSIJudBtCGwU6zb1bMi9oTO Xx7NXVNi0/FAA4U8vtlCQO5zKHAZLa5Frcb+ryn75tLfKh4pJbKH2c9kdum7qzWa xVApkYvKWU7OqvxF+6MpTVFRhG58E5UCVdOASNDstF8cWyhniwEc5enbumvYr91X 0ALU3h6fjXcmUoZ6b0Qnth5BpNeGOMDjiCAE3ejTuJMK3wQfSqfnHvOK/doxua4z MF63yhrtJo3SXA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:15:20 2025 by rpki-client