This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json) Hash identifier: Qw5gkEEcsSo7gARPpUltLtZkGLtkkT21W4CYI+nx0H0= Subject key identifier: 23:68:AC:0A:80:9C:61:00:A4:7C:20:1E:CF:13:30:6F:13:53:7E:96 Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Certificate serial: 019B4A046B12CBD9E6175790CE52E57C36AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 07:02:42 +0000 Manifest this update: Tue 23 Dec 2025 07:02:42 +0000 Manifest next update: Wed 24 Dec 2025 07:02:42 +0000 Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=) 2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: nUgzK2F1st0ZAqwj7hClDyJbyRJWmRU5IxY1AdmUid8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:6b:12:cb:d9:e6:17:57:90:ce:52:e5:7c:36:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Validity Not Before: Dec 23 07:02:42 2025 GMT Not After : Dec 24 07:02:42 2025 GMT Subject: CN=2368ac0a809c6100a47c201ecf13306f13537e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:e8:0a:ce:1e:2c:6d:cf:5b:f2:f4:8f:d0: 95:00:b6:5a:c8:de:82:0c:9e:32:4e:87:fa:a0:92: 5a:41:2f:80:31:6a:1a:f4:0e:e1:51:d8:e4:6b:c9: 14:01:81:ea:21:e3:21:06:8e:bf:18:71:34:06:e2: b9:56:49:4e:a6:c0:ab:e2:d5:26:87:53:9d:3b:c2: 9a:84:78:d0:21:bc:9d:7a:a4:a0:67:8e:1b:83:0f: 2c:4f:2b:d3:8f:8d:ba:d6:df:c9:72:3c:5f:f5:95: 35:50:54:a1:e5:43:f0:25:7c:48:3a:30:d7:87:4b: 06:2d:f8:ce:5b:e3:89:13:d1:f6:6f:fa:0b:55:f5: 7a:44:5a:c4:85:cc:b6:02:62:59:7f:1e:e3:1e:2c: 6f:45:3f:6e:1a:05:fb:58:eb:f1:5b:1d:fd:85:99: af:e2:96:1d:fe:1b:cd:a1:d7:93:f6:40:d6:37:45: d9:8f:7d:ca:4d:c3:0f:c1:b3:1e:fa:e2:df:80:1f: 06:75:a7:c2:36:69:6e:f8:34:7c:6b:a5:8b:4e:d8: 78:ff:43:74:a6:c0:f2:cd:ce:78:91:c6:cc:ae:d1: e4:1a:f1:c1:71:17:08:0f:35:0a:2d:50:a4:55:b5: 28:27:5e:f5:9d:f0:3a:1c:57:45:ae:3d:17:93:d4: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:AC:0A:80:9C:61:00:A4:7C:20:1E:CF:13:30:6F:13:53:7E:96 X509v3 Authority Key Identifier: keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:28:e7:5e:d7:88:72:15:21:49:a6:7a:a4:f8:94:b4:71: 3e:4d:ce:da:b3:b3:6c:ad:a1:92:bb:a0:e0:14:46:d7:d8:9b: c1:8a:6a:ca:fb:c1:1c:ef:c4:86:72:cb:80:5f:b8:58:d7:37: ef:48:d5:00:aa:c9:24:4c:29:26:8a:d3:c0:a4:ef:25:a7:74: e1:d4:41:0c:99:04:85:e3:26:63:b6:58:41:e4:4f:47:d6:a1: ff:af:9f:59:8a:cc:94:09:76:3a:ee:5c:d2:a1:e1:57:82:06: 15:58:57:c0:be:6c:bb:04:05:62:b7:64:a3:83:18:2d:51:72: e7:36:4a:ba:68:3d:c4:89:16:96:03:33:d9:fa:eb:7d:cc:65: 2b:d9:e1:0c:91:2b:9c:59:80:45:25:9a:2a:00:bd:c0:cd:a9: bd:f3:c5:83:5e:f5:76:49:9e:92:f8:9a:f8:37:5d:28:6c:f6: b9:9c:69:4d:a2:2d:f5:7b:ac:b6:ff:c7:3a:dd:89:75:e2:4d: eb:7e:06:8b:84:e0:e6:1d:1d:27:d4:f6:1e:e0:80:2b:a5:18: 7b:0a:32:af:30:d0:2b:5e:9f:54:02:9c:94:1e:93:99:f8:7a: 79:f5:e2:1c:9c:d9:3a:31:b5:8d:92:10:0f:4d:cf:7f:9c:55: 0a:c9:25:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBGsSy9nmF1eQzlLlfDauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3 NzBlYzYwHhcNMjUxMjIzMDcwMjQyWhcNMjUxMjI0MDcwMjQyWjAzMTEwLwYDVQQD EygyMzY4YWMwYTgwOWM2MTAwYTQ3YzIwMWVjZjEzMzA2ZjEzNTM3ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn33oCs4eLG3PW/L0j9CVALZayN6C DJ4yTof6oJJaQS+AMWoa9A7hUdjka8kUAYHqIeMhBo6/GHE0BuK5VklOpsCr4tUm h1OdO8KahHjQIbydeqSgZ44bgw8sTyvTj4261t/Jcjxf9ZU1UFSh5UPwJXxIOjDX h0sGLfjOW+OJE9H2b/oLVfV6RFrEhcy2AmJZfx7jHixvRT9uGgX7WOvxWx39hZmv 4pYd/hvNodeT9kDWN0XZj33KTcMPwbMe+uLfgB8GdafCNmlu+DR8a6WLTth4/0N0 psDyzc54kcbMrtHkGvHBcRcIDzUKLVCkVbUoJ171nfA6HFdFrj0Xk9S3ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNorAqAnGEApHwgHs8TMG8TU36WMB8GA1UdIwQY MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwQo517X iHIVIUmmeqT4lLRxPk3O2rOzbK2hkrug4BRG19ibwYpqyvvBHO/EhnLLgF+4WNc3 70jVAKrJJEwpJorTwKTvJad04dRBDJkEheMmY7ZYQeRPR9ah/6+fWYrMlAl2Ou5c 0qHhV4IGFVhXwL5suwQFYrdko4MYLVFy5zZKumg9xIkWlgMz2frrfcxlK9nhDJEr nFmARSWaKgC9wM2pvfPFg171dkmekvia+DddKGz2uZxpTaIt9Xustv/HOt2JdeJN 634Gi4Tg5h0dJ9T2HuCAK6UYewoyrzDQK16fVAKclB6Tmfh6efXiHJzZOjG1jZIQ D03Pf5xVCsklkQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:18 2025 by rpki-client