This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json) Hash identifier: KN/gEW1pv1u2Vc/tZ1IiAxun4qN64XWdnRZvQFyKIIc= Subject key identifier: 42:8B:4E:B8:B0:11:5A:B0:C2:F3:10:4B:D5:33:C5:46:D3:B4:88:CF Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Certificate serial: 019B3A219199C69C84F8B212E23AEF50FE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft Manifest number: 0AFC Signing time: Sat 20 Dec 2025 05:00:36 +0000 Manifest this update: Sat 20 Dec 2025 05:00:36 +0000 Manifest next update: Sun 21 Dec 2025 05:00:36 +0000 Files and hashes: 1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=) 2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=) 3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=) 4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: s7SOFTn8Ym3QAns2vYZ1Bn8cEBCfQRB48jO1rSnSb2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:91:99:c6:9c:84:f8:b2:12:e2:3a:ef:50:fe:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Validity Not Before: Dec 20 05:00:36 2025 GMT Not After : Dec 21 05:00:36 2025 GMT Subject: CN=428b4eb8b0115ab0c2f3104bd533c546d3b488cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:e7:c3:e6:0f:61:03:fb:f6:82:50:33:e8: c6:83:e3:c0:3b:48:64:ec:8a:a4:4f:9c:88:af:5b: d1:de:6a:a2:a5:8d:50:b3:a1:28:a3:91:c8:92:df: b7:4a:35:d2:8b:d5:d4:7e:6b:8c:97:42:05:5b:60: 25:c4:46:d4:bc:e3:26:dd:49:0e:1f:9a:4e:da:42: ce:3b:9e:94:00:e6:b7:75:2a:82:bf:d1:7d:db:94: ca:eb:0a:47:a6:1a:51:7b:5e:f3:6a:4e:3c:87:dd: 17:24:c5:11:e5:f9:b5:1f:40:3b:6d:47:70:9e:bb: 92:e4:18:23:74:12:8a:26:28:53:93:0b:3a:9f:4a: 3c:07:1f:33:21:e6:5b:42:aa:f1:fc:29:f8:3e:97: 1a:5c:c8:3b:a6:a0:20:bf:7c:de:da:1e:ef:43:b6: 7a:66:79:58:1d:66:24:98:22:79:5e:bc:6a:db:7d: 08:8b:32:8c:4b:74:f9:0f:90:17:00:89:3f:7b:9d: 73:aa:5a:e0:15:97:84:ce:5d:01:bb:fe:77:5b:6b: 49:0f:11:03:51:91:35:ea:67:7d:dc:18:6a:e5:60: c2:e1:ee:7a:86:54:c5:71:84:c4:3d:2e:4b:74:36: e7:3c:32:58:73:fd:c8:12:5e:81:c7:55:20:15:ce: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8B:4E:B8:B0:11:5A:B0:C2:F3:10:4B:D5:33:C5:46:D3:B4:88:CF X509v3 Authority Key Identifier: keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0d:0d:22:a0:24:f5:aa:20:b2:18:45:08:f0:49:97:f2:e1: 90:9c:da:d5:99:6f:7b:fe:9c:5a:31:e2:5b:f4:4b:10:70:fb: 8e:52:5a:a1:35:9d:04:9c:56:28:04:bd:cf:3a:58:9e:7d:14: a4:de:ea:d4:65:a6:79:f8:0f:43:6c:a0:1d:57:5e:f2:34:ce: 9c:49:cd:63:f1:a1:ed:cb:b9:57:21:99:c7:ef:51:83:83:e9: ea:15:a6:f4:59:73:51:45:4c:27:b2:f7:02:93:fc:e8:20:a3: dd:94:e9:87:5c:42:57:ca:d0:a9:c6:70:d4:fe:38:76:d7:5c: 2b:f3:5c:47:20:6e:31:2a:06:58:f9:bd:41:bd:15:5a:9f:3d: 03:83:e0:1e:bb:f6:2e:e9:bd:03:e1:1c:a8:a3:ac:66:5a:a9: 4f:0b:d9:09:33:4a:4c:5c:d0:71:1a:bf:51:6a:a7:82:72:2a: 01:90:25:04:6c:63:7c:b4:88:70:6c:20:34:6d:48:b9:b3:0f: 3c:b7:0a:f6:05:3a:1f:8e:ef:01:9f:46:45:85:6e:03:56:e2: 80:b1:74:5c:4a:ce:1e:ef:3e:9a:88:0c:7d:75:87:5a:a8:96: e6:e2:9e:bf:4f:18:9c:ce:52:70:b9:6c:55:2a:fb:1c:7d:91: 05:62:8e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZGZxpyE+LIS4jrvUP6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy ZTk2MTUwHhcNMjUxMjIwMDUwMDM2WhcNMjUxMjIxMDUwMDM2WjAzMTEwLwYDVQQD Eyg0MjhiNGViOGIwMTE1YWIwYzJmMzEwNGJkNTMzYzU0NmQzYjQ4OGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ/nw+YPYQP79oJQM+jGg+PAO0hk 7IqkT5yIr1vR3mqipY1Qs6Eoo5HIkt+3SjXSi9XUfmuMl0IFW2AlxEbUvOMm3UkO H5pO2kLOO56UAOa3dSqCv9F925TK6wpHphpRe17zak48h90XJMUR5fm1H0A7bUdw nruS5BgjdBKKJihTkws6n0o8Bx8zIeZbQqrx/Cn4PpcaXMg7pqAgv3ze2h7vQ7Z6 ZnlYHWYkmCJ5Xrxq230IizKMS3T5D5AXAIk/e51zqlrgFZeEzl0Bu/53W2tJDxED UZE16md93Bhq5WDC4e56hlTFcYTEPS5LdDbnPDJYc/3IEl6Bx1UgFc4+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKLTriwEVqwwvMQS9UzxUbTtIjPMB8GA1UdIwQY MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct ZWNkZDgxNzQwMDdhLzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg0NIqAk 9aogshhFCPBJl/LhkJza1Zlve/6cWjHiW/RLEHD7jlJaoTWdBJxWKAS9zzpYnn0U pN7q1GWmefgPQ2ygHVde8jTOnEnNY/Gh7cu5VyGZx+9Rg4Pp6hWm9FlzUUVMJ7L3 ApP86CCj3ZTph1xCV8rQqcZw1P44dtdcK/NcRyBuMSoGWPm9Qb0VWp89A4PgHrv2 Lum9A+EcqKOsZlqpTwvZCTNKTFzQcRq/UWqngnIqAZAlBGxjfLSIcGwgNG1IubMP PLcK9gU6H47vAZ9GRYVuA1bigLF0XErOHu8+mogMfXWHWqiW5uKev08YnM5ScLls VSr7HH2RBWKOOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:00:44 2025 by rpki-client