This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json) Hash identifier: pLj4vLTl63w+c/B+jogoPTdFOjrSaA0liGxbTmMRdnM= Subject key identifier: 1A:0E:C3:4A:E0:6E:00:24:0C:FF:61:BA:00:17:70:C6:CB:83:C3:FD Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9 Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9 Certificate serial: 019B3EDA25CD834C0D753C9FCD3CE6DBAB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:42 +0000 Manifest this update: Sun 21 Dec 2025 03:00:42 +0000 Manifest next update: Mon 22 Dec 2025 03:00:42 +0000 Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: koBJVwU1WI5GRwISfqeSDQDPSQgtddra2dZ6z8b0MZU=) 2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:25:cd:83:4c:0d:75:3c:9f:cd:3c:e6:db:ab:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9 Validity Not Before: Dec 21 03:00:42 2025 GMT Not After : Dec 22 03:00:42 2025 GMT Subject: CN=1a0ec34ae06e00240cff61ba001770c6cb83c3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:21:2d:1b:22:6b:58:35:94:f0:23:00:4a: cd:14:6f:13:27:59:03:7a:36:10:8a:89:8f:f5:78: 45:f1:20:c4:8a:19:af:c3:10:df:42:30:04:f7:6c: 50:14:d3:94:5a:c9:23:76:f0:20:47:72:50:31:05: 18:ef:76:92:c2:ab:97:0f:d8:9e:9f:bf:b1:bd:fc: 21:d0:cc:01:ce:cd:93:9b:9c:3a:3d:1b:8e:6b:79: 99:48:d7:fe:4a:aa:83:ba:3f:fa:f9:50:8a:f0:c7: 4d:41:0d:9f:fa:04:43:cd:df:de:83:19:f3:4c:f6: ee:e2:95:86:6f:09:79:a7:cb:0d:3f:ef:e0:49:76: dd:90:ea:52:10:2a:65:37:3b:fa:0d:eb:eb:a3:5c: a7:8c:5f:17:ff:7d:89:23:c4:d7:45:e3:d7:74:ee: 04:4a:5e:09:48:b6:b4:c2:3b:e2:30:bb:4a:94:51: 74:48:67:4a:fa:b2:52:3f:6b:f7:d9:62:63:75:f7: ab:4e:ad:f1:81:94:94:45:55:f1:c9:b8:e4:53:2e: 93:45:56:12:4a:9c:1a:6d:92:f9:29:7e:92:42:62: 68:a1:bd:9e:15:98:b8:d4:4c:8f:39:ae:e9:b5:5e: 45:bd:b7:49:95:c6:71:bc:7c:15:d8:ba:33:50:c4: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:C3:4A:E0:6E:00:24:0C:FF:61:BA:00:17:70:C6:CB:83:C3:FD X509v3 Authority Key Identifier: keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:07:55:96:1c:21:95:38:45:ce:16:fd:d1:1c:c4:c9:89:03: 97:11:dc:2f:46:9c:fc:8b:a9:b3:b0:31:bd:93:3d:e0:e3:a5: 5a:a4:48:88:e0:06:1d:4d:8e:18:17:56:81:56:d2:46:26:eb: 96:b2:85:f2:15:eb:52:f6:f2:f4:e3:c1:07:1c:3a:d3:ca:a3: 9f:b7:0f:15:e1:bc:b6:05:18:b4:6c:c5:57:4b:60:cc:41:29: f5:b4:a9:87:3f:74:fd:a9:fe:53:c2:f3:70:ae:9a:34:b6:59: eb:2c:7b:29:02:93:95:0a:0e:53:c0:9a:74:e0:65:c9:4e:6f: 31:72:b2:ee:37:9b:4d:c1:4c:55:fe:f1:e1:6f:a2:39:a2:ef: ff:e6:40:08:67:f0:c0:49:7c:15:13:b8:f6:3e:07:1b:3d:36: a3:ab:9c:9f:d4:8f:7b:12:87:07:0e:48:ed:fd:67:ce:42:32: 81:7b:41:27:bb:4a:36:4b:29:d9:77:20:07:32:04:28:0a:1f: b3:19:99:66:e8:46:fd:9e:0b:3d:41:ee:21:c8:bd:97:18:c7: 9e:7a:3b:ce:1a:b2:d7:a1:cf:57:8e:46:72:50:5c:c1:5a:eb: 18:1f:e2:aa:d5:7c:45:bd:db:f6:13:ed:35:27:96:a0:db:74: 40:69:79:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2iXNg0wNdTyfzTzm26sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkODJlNjBkMDcyZTUxODU0MzVhOTAwZTMyM2Y0NjM4MDZk NDMzYzkwHhcNMjUxMjIxMDMwMDQyWhcNMjUxMjIyMDMwMDQyWjAzMTEwLwYDVQQD EygxYTBlYzM0YWUwNmUwMDI0MGNmZjYxYmEwMDE3NzBjNmNiODNjM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nshLRsia1g1lPAjAErNFG8TJ1kD ejYQiomP9XhF8SDEihmvwxDfQjAE92xQFNOUWskjdvAgR3JQMQUY73aSwquXD9ie n7+xvfwh0MwBzs2Tm5w6PRuOa3mZSNf+SqqDuj/6+VCK8MdNQQ2f+gRDzd/egxnz TPbu4pWGbwl5p8sNP+/gSXbdkOpSECplNzv6Devro1ynjF8X/32JI8TXRePXdO4E Sl4JSLa0wjviMLtKlFF0SGdK+rJSP2v32WJjdferTq3xgZSURVXxybjkUy6TRVYS SpwabZL5KX6SQmJoob2eFZi41EyPOa7ptV5FvbdJlcZxvHwV2LozUMRuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoOw0rgbgAkDP9hugAXcMbLg8P9MB8GA1UdIwQY MBaAFL2C5g0HLlGFQ1qQDjI/RjgG1DPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAt NDhhY2VmNjcyZTRhLzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAtNDhhY2VmNjcyZTRh LzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawdVlhwh lThFzhb90RzEyYkDlxHcL0ac/Iups7AxvZM94OOlWqRIiOAGHU2OGBdWgVbSRibr lrKF8hXrUvby9OPBBxw608qjn7cPFeG8tgUYtGzFV0tgzEEp9bSphz90/an+U8Lz cK6aNLZZ6yx7KQKTlQoOU8CadOBlyU5vMXKy7jebTcFMVf7x4W+iOaLv/+ZACGfw wEl8FRO49j4HGz02o6ucn9SPexKHBw5I7f1nzkIygXtBJ7tKNksp2XcgBzIEKAof sxmZZuhG/Z4LPUHuIci9lxjHnno7zhqy16HPV45GclBcwVrrGB/iqtV8Rb3b9hPt NSeWoNt0QGl5uQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:33 2025 by rpki-client