This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json) Hash identifier: eP0u9sdLmPy0lPKG1+GHA4TjxhMTkZP3SNGC5YKMhZs= Subject key identifier: 47:00:A8:B0:2D:01:A6:0C:22:71:DB:74:AD:68:1D:35:69:8C:40:90 Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Certificate serial: 019B3A903C89686DFF9075DBC890768273AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 07:01:29 +0000 Manifest this update: Sat 20 Dec 2025 07:01:29 +0000 Manifest next update: Sun 21 Dec 2025 07:01:29 +0000 Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=) 2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: tM+Du76tvdU8FeXWpG8+n3n1Cr72mYlVIVw7HGAb/O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:3c:89:68:6d:ff:90:75:db:c8:90:76:82:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Validity Not Before: Dec 20 07:01:29 2025 GMT Not After : Dec 21 07:01:29 2025 GMT Subject: CN=4700a8b02d01a60c2271db74ad681d35698c4090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:ef:5e:d1:e0:2c:d1:88:5c:21:69:e2:df: f2:44:68:88:05:c4:46:10:fb:72:6a:10:b2:ba:c7: f3:6b:23:52:0e:13:e7:4c:23:8d:7b:40:f2:63:c8: 51:20:a7:fe:b9:19:94:e9:b0:e8:ac:85:76:30:d8: f4:ed:e0:d9:ee:8d:98:37:26:cc:7a:70:3d:f8:ac: 08:42:41:7a:27:b2:ed:75:d4:63:e6:16:ff:31:6f: c0:6d:6f:ef:85:92:4d:05:d7:1a:67:ff:98:a5:50: d7:f7:2e:de:72:ec:58:98:7d:6e:3d:e1:8a:c0:cb: 48:cb:ff:02:6f:f4:e8:d9:ce:74:b7:f2:d5:93:96: 8e:5a:45:54:25:c7:e1:6c:4c:72:4a:2d:c6:2c:c5: fc:bb:62:1b:61:4e:6a:36:9e:fe:a5:9b:23:b0:f5: 56:72:79:53:e9:16:21:1c:fa:ff:2f:0d:3b:77:ae: eb:6e:8d:8a:32:9c:c9:bc:e6:da:9f:17:7d:33:20: 30:95:4a:31:b2:1e:52:85:ad:88:82:32:0b:98:cd: 3f:55:28:ba:97:ed:ca:50:ee:41:a2:b6:1d:16:6c: 60:13:d8:e1:b7:83:71:cd:21:9a:b2:01:64:45:62: 85:a0:fa:a4:a7:b4:80:68:f5:2d:85:3d:2b:36:3a: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:A8:B0:2D:01:A6:0C:22:71:DB:74:AD:68:1D:35:69:8C:40:90 X509v3 Authority Key Identifier: keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:de:48:c1:15:39:06:51:e8:9c:35:50:3b:f4:01:7e:27:9c: ae:62:55:d7:a1:cd:6f:72:80:e1:b9:4a:3e:b8:da:b7:48:50: c3:78:9e:5a:e4:94:41:ea:89:0a:2e:f4:13:c6:9c:69:65:b0: 53:ec:f0:ac:58:45:10:e3:6c:fa:36:15:52:9b:de:fa:11:0d: a9:cb:f9:b1:e4:13:8a:15:e1:03:43:66:ec:70:19:b7:3e:20: 8a:09:ed:cf:e4:42:3d:6a:1e:91:e7:98:29:24:16:20:51:1b: dc:96:15:47:53:6b:81:09:5b:ee:25:70:80:15:cc:17:61:27: 21:a3:88:46:be:c7:f0:ae:08:37:0a:8f:24:21:af:75:16:f4: b6:95:fb:76:fe:e4:a6:bb:4d:12:22:bd:01:03:d9:25:5e:e0: f3:6e:98:96:04:60:98:b6:e8:03:16:a8:7f:80:da:a9:43:e3: f4:a5:83:1d:3d:11:61:e4:3a:96:ce:99:f9:cd:8c:b1:ba:ae: d6:08:55:1e:50:a3:74:65:05:1b:b0:25:72:04:0a:d2:68:8f: 5b:fe:af:f8:88:2b:16:fe:0c:5f:48:6e:d8:e3:87:1d:84:19: a1:36:b6:9d:56:6b:e5:3f:9f:9c:0b:1a:9a:68:bd:55:5c:ad: 8a:49:45:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDyJaG3/kHXbyJB2gnOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3 NzBlYzYwHhcNMjUxMjIwMDcwMTI5WhcNMjUxMjIxMDcwMTI5WjAzMTEwLwYDVQQD Eyg0NzAwYThiMDJkMDFhNjBjMjI3MWRiNzRhZDY4MWQzNTY5OGM0MDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhvvXtHgLNGIXCFp4t/yRGiIBcRG EPtyahCyusfzayNSDhPnTCONe0DyY8hRIKf+uRmU6bDorIV2MNj07eDZ7o2YNybM enA9+KwIQkF6J7LtddRj5hb/MW/AbW/vhZJNBdcaZ/+YpVDX9y7ecuxYmH1uPeGK wMtIy/8Cb/To2c50t/LVk5aOWkVUJcfhbExySi3GLMX8u2IbYU5qNp7+pZsjsPVW cnlT6RYhHPr/Lw07d67rbo2KMpzJvObanxd9MyAwlUoxsh5Sha2IgjILmM0/VSi6 l+3KUO5BorYdFmxgE9jht4NxzSGasgFkRWKFoPqkp7SAaPUthT0rNjq9jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcAqLAtAaYMInHbdK1oHTVpjECQMB8GA1UdIwQY MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt95IwRU5 BlHonDVQO/QBfiecrmJV16HNb3KA4blKPrjat0hQw3ieWuSUQeqJCi70E8acaWWw U+zwrFhFEONs+jYVUpve+hENqcv5seQTihXhA0Nm7HAZtz4gigntz+RCPWoekeeY KSQWIFEb3JYVR1NrgQlb7iVwgBXMF2EnIaOIRr7H8K4INwqPJCGvdRb0tpX7dv7k prtNEiK9AQPZJV7g826YlgRgmLboAxaof4DaqUPj9KWDHT0RYeQ6ls6Z+c2Msbqu 1ghVHlCjdGUFG7AlcgQK0miPW/6v+IgrFv4MX0hu2OOHHYQZoTa2nVZr5T+fnAsa mmi9VVytiklFzg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:46:14 2025 by rpki-client