This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json) Hash identifier: Ryj3UeRQAZs2/VPydevlbahoAJR7KZgHygwIdyhOrKg= Subject key identifier: 24:C3:7E:1E:7A:B4:E7:5E:FC:84:A0:02:71:BF:37:41:AE:E9:B6:48 Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5 Certificate serial: 019B240804E3EA72DE158642462FE3EC01BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft Manifest number: 0436 Signing time: Mon 15 Dec 2025 22:01:03 +0000 Manifest this update: Mon 15 Dec 2025 22:01:03 +0000 Manifest next update: Tue 16 Dec 2025 22:01:03 +0000 Files and hashes: 1: 5kqLZgQxvPjZ3-R1JIK5dfgcysw.roa (hash: lJZUCOq4a1uyWOYuADdFBX3wVMiqs3oDIl7Z99UtsuA=) 2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: TXXlX8UMYlx/S7xc45oNs+eSSYoIvRINPeOAPVzOzfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:04:e3:ea:72:de:15:86:42:46:2f:e3:ec:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5 Validity Not Before: Dec 15 22:01:03 2025 GMT Not After : Dec 16 22:01:03 2025 GMT Subject: CN=24c37e1e7ab4e75efc84a00271bf3741aee9b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:9b:25:69:ea:34:ae:16:fb:d5:40:29:03: 1d:1a:e5:9a:ce:51:9e:47:6a:dd:a8:65:2e:6f:2b: b1:86:5a:86:7d:51:6d:70:e8:46:4b:13:a2:68:02: 4b:ef:0b:b7:4a:d2:1e:ec:28:b6:2e:fa:37:4e:0a: b2:99:f8:24:f1:27:b4:c7:5c:0f:b3:59:cc:b3:5f: 4e:dc:c0:60:ae:82:d8:82:ca:5a:38:17:e0:93:f3: 21:12:c4:8e:f5:e5:ef:4a:e5:bc:49:35:6d:c1:84: fa:96:03:c7:7b:cd:90:e1:11:42:fd:94:34:d3:1a: 3d:db:26:b0:f9:30:b9:c9:79:f1:59:1a:d6:b2:4b: c7:d2:4c:e7:1a:06:6c:a5:c6:7b:8e:8e:5b:56:a6: b6:da:30:18:86:58:c6:9f:e1:f8:b5:88:e0:6c:70: d3:72:b0:6d:65:0f:b3:2d:4e:59:06:c7:15:33:40: 66:4d:87:cf:53:1f:ed:00:53:8b:25:45:02:8f:d7: ac:90:a5:18:a4:d4:7b:5d:79:24:49:19:31:33:95: 1d:e5:dc:67:0a:44:5e:83:d2:fc:15:88:ca:80:7e: 0f:01:e7:d7:e0:8d:0e:7c:c5:06:97:0e:72:1e:8a: 0d:7e:e7:81:7d:e0:ba:aa:0a:89:8b:29:bc:88:cd: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C3:7E:1E:7A:B4:E7:5E:FC:84:A0:02:71:BF:37:41:AE:E9:B6:48 X509v3 Authority Key Identifier: keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a9:41:96:23:4f:55:00:9e:41:61:18:97:87:8f:66:dd:17: db:19:81:8c:43:4c:17:8c:bf:e7:b7:14:26:62:91:4b:5e:3a: a1:ca:cf:00:17:6c:8d:ce:36:2b:a1:70:a7:5b:b9:9f:9f:09: a3:6c:16:09:49:1f:1b:24:f0:04:e2:65:da:44:83:c6:48:32: 4b:64:21:94:c0:36:00:2e:f2:78:59:4d:a3:79:8d:e6:26:9b: c3:3e:d4:22:9a:68:12:25:88:c0:86:40:a0:ea:18:9c:b9:36: 5b:87:3d:6e:e9:ff:a8:f4:ad:9f:5b:d5:19:83:73:e9:fc:34: 11:21:ff:d1:be:68:65:40:6f:b4:df:f1:f5:74:8f:ad:f1:1f: 67:9d:18:09:df:6d:f8:f1:e1:f7:81:46:eb:44:32:ac:fc:30: 26:6d:3c:0a:02:97:18:2f:9a:1f:86:a8:71:ff:e1:fc:bb:3a: c0:75:4b:f2:7f:2a:72:09:40:fd:a4:c6:79:d3:56:23:f7:b3: 9d:5c:cf:cb:5d:0c:9b:f1:3c:e5:d3:86:91:e1:83:eb:f4:f8: 30:9b:c6:f9:8d:d4:94:fe:57:55:34:b5:b0:23:d4:33:26:3d: aa:18:ae:5a:24:25:35:ad:eb:a6:e7:67:e3:bf:bf:a1:5a:13: d5:38:ad:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCATj6nLeFYZCRi/j7AG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1 OGQ2ZDUwHhcNMjUxMjE1MjIwMTAzWhcNMjUxMjE2MjIwMTAzWjAzMTEwLwYDVQQD EygyNGMzN2UxZTdhYjRlNzVlZmM4NGEwMDI3MWJmMzc0MWFlZTliNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26bJWnqNK4W+9VAKQMdGuWazlGe R2rdqGUubyuxhlqGfVFtcOhGSxOiaAJL7wu3StIe7Ci2Lvo3Tgqymfgk8Se0x1wP s1nMs19O3MBgroLYgspaOBfgk/MhEsSO9eXvSuW8STVtwYT6lgPHe82Q4RFC/ZQ0 0xo92yaw+TC5yXnxWRrWskvH0kznGgZspcZ7jo5bVqa22jAYhljGn+H4tYjgbHDT crBtZQ+zLU5ZBscVM0BmTYfPUx/tAFOLJUUCj9eskKUYpNR7XXkkSRkxM5Ud5dxn CkReg9L8FYjKgH4PAefX4I0OfMUGlw5yHooNfueBfeC6qgqJiym8iM1sPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTDfh56tOde/ISgAnG/N0Gu6bZIMB8GA1UdIwQY MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct MTYyMGNmZGM3MTE3LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3 LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqlBliNP VQCeQWEYl4ePZt0X2xmBjENMF4y/57cUJmKRS146ocrPABdsjc42K6Fwp1u5n58J o2wWCUkfGyTwBOJl2kSDxkgyS2QhlMA2AC7yeFlNo3mN5iabwz7UIppoEiWIwIZA oOoYnLk2W4c9bun/qPStn1vVGYNz6fw0ESH/0b5oZUBvtN/x9XSPrfEfZ50YCd9t +PHh94FG60QyrPwwJm08CgKXGC+aH4aocf/h/Ls6wHVL8n8qcglA/aTGedNWI/ez nVzPy10Mm/E85dOGkeGD6/T4MJvG+Y3UlP5XVTS1sCPUMyY9qhiuWiQlNa3rpudn 47+/oVoT1TitwQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:00:12 2025 by rpki-client