This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json) Hash identifier: UYVNzQu5Ofl30Jo1VTTOZ0iWMGABjCexdImdSXSIJ78= Subject key identifier: 6A:E4:10:21:4A:2D:61:00:4B:73:65:D2:F2:5F:5B:7F:CA:D6:A8:60 Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Certificate serial: 019B443855BB740D048CC46D836AACE54926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft Manifest number: 07BD Signing time: Mon 22 Dec 2025 04:01:41 +0000 Manifest this update: Mon 22 Dec 2025 04:01:41 +0000 Manifest next update: Tue 23 Dec 2025 04:01:41 +0000 Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=) 2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: AnGA9GcYSNJXQIa00+A7UiumeKR3Kl0k2EjZiYadDwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:55:bb:74:0d:04:8c:c4:6d:83:6a:ac:e5:49:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Validity Not Before: Dec 22 04:01:41 2025 GMT Not After : Dec 23 04:01:41 2025 GMT Subject: CN=6ae410214a2d61004b7365d2f25f5b7fcad6a860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:26:3a:ee:84:8c:ce:bb:11:32:8e:61:58: 87:ac:5b:44:7c:af:c5:6b:0a:34:f4:a2:95:f5:b1: ac:28:1a:56:ca:a9:d2:a5:fd:d7:69:09:c8:03:88: 57:84:96:f7:7a:35:3b:d5:27:42:e6:18:57:2b:83: d7:ef:b6:db:a9:55:8e:85:25:b2:f5:4f:e9:ed:ee: 32:20:2b:b0:25:60:93:32:8c:cb:d8:2f:f5:b7:74: 53:cc:2d:0b:93:be:74:ca:35:6c:3a:f4:8e:f2:38: 68:c8:f1:5b:82:df:bb:22:ef:c8:2e:17:0b:e1:65: c7:56:c9:12:38:cb:17:94:ee:63:3c:5c:bd:a1:e3: b2:68:53:b0:f9:da:dc:cf:bf:ef:27:58:69:84:ca: 62:dd:25:9c:09:3b:3b:31:69:0a:30:50:26:01:48: 5a:e1:8b:95:7b:6e:15:1a:13:d0:b3:d1:53:98:92: d4:aa:22:70:cd:8d:4e:57:00:9b:91:0b:af:15:fc: 0d:b6:c3:3c:6e:47:b3:88:d5:97:f8:e7:25:de:12: ed:a7:7b:6b:1b:31:d3:9c:8f:cd:4f:3a:dc:aa:33: 8d:25:9d:4c:71:1d:18:10:94:81:b4:21:1b:0a:72: f4:6d:f1:9f:d0:d8:35:46:22:af:48:b8:26:1e:8c: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E4:10:21:4A:2D:61:00:4B:73:65:D2:F2:5F:5B:7F:CA:D6:A8:60 X509v3 Authority Key Identifier: keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:34:89:95:9d:ea:e8:94:28:4f:dc:28:36:99:5f:18:9a: 9b:47:b9:80:ad:6c:5c:15:81:98:6a:4b:8e:dd:67:c3:1c:6d: 7a:53:e0:c0:d2:63:19:71:b5:7f:3a:06:df:a2:3a:a1:5c:f1: a9:51:06:4b:d7:81:a5:6b:97:54:82:3d:64:07:3b:31:0b:21: ee:d7:72:14:6e:ee:d4:0d:94:3d:d5:fa:81:04:1d:90:cb:0f: 4a:42:d5:44:f0:72:d6:0c:ab:b5:0e:7f:21:a7:fd:e0:c6:ac: d5:ac:c6:b3:ae:1a:98:e8:92:ce:ca:46:2d:2a:2c:0f:5d:36: 2d:8b:5c:d5:b1:97:b2:01:dc:4a:cd:3f:3e:40:29:5d:01:4f: 74:56:f2:7b:b8:d2:a6:9e:3b:46:44:2c:8b:a4:71:98:20:5d: c8:e3:09:a6:3a:c7:19:d1:dd:6f:61:05:07:91:2c:94:f6:de: 7e:37:32:61:c7:02:37:d3:79:f7:8e:f6:83:5e:62:ba:d3:e8: f3:75:00:01:32:11:3f:04:dd:57:27:f9:06:07:93:21:72:ca: 8d:78:c6:a9:49:ce:51:1d:0c:b1:f8:b0:ed:b2:a3:7d:4c:67: c8:d2:f3:d2:fa:16:0f:e9:6c:48:74:2d:40:ab:28:36:90:01: fc:d2:05:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOFW7dA0EjMRtg2qs5UkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi M2FlNDIwHhcNMjUxMjIyMDQwMTQxWhcNMjUxMjIzMDQwMTQxWjAzMTEwLwYDVQQD Eyg2YWU0MTAyMTRhMmQ2MTAwNGI3MzY1ZDJmMjVmNWI3ZmNhZDZhODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnYmOu6EjM67ETKOYViHrFtEfK/F awo09KKV9bGsKBpWyqnSpf3XaQnIA4hXhJb3ejU71SdC5hhXK4PX77bbqVWOhSWy 9U/p7e4yICuwJWCTMozL2C/1t3RTzC0Lk750yjVsOvSO8jhoyPFbgt+7Iu/ILhcL 4WXHVskSOMsXlO5jPFy9oeOyaFOw+drcz7/vJ1hphMpi3SWcCTs7MWkKMFAmAUha 4YuVe24VGhPQs9FTmJLUqiJwzY1OVwCbkQuvFfwNtsM8bkeziNWX+Ocl3hLtp3tr GzHTnI/NTzrcqjONJZ1McR0YEJSBtCEbCnL0bfGf0Ng1RiKvSLgmHowpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrkECFKLWEAS3Nl0vJfW3/K1qhgMB8GA1UdIwQY MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3 LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKQ0iZWd 6uiUKE/cKDaZXxiam0e5gK1sXBWBmGpLjt1nwxxtelPgwNJjGXG1fzoG36I6oVzx qVEGS9eBpWuXVII9ZAc7MQsh7tdyFG7u1A2UPdX6gQQdkMsPSkLVRPBy1gyrtQ5/ Iaf94Mas1azGs64amOiSzspGLSosD102LYtc1bGXsgHcSs0/PkApXQFPdFbye7jS pp47RkQsi6RxmCBdyOMJpjrHGdHdb2EFB5EslPbefjcyYccCN9N59472g15iutPo 83UAATIRPwTdVyf5BgeTIXLKjXjGqUnOUR0Msfiw7bKjfUxnyNLz0voWD+lsSHQt QKsoNpAB/NIFVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:14 2025 by rpki-client