This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json) Hash identifier: 8hkokeMt+6TIwy8/IkP2cPxhIWKpOMXI9F6aRQGl8Ps= Subject key identifier: D8:61:DD:D2:4A:5A:61:C2:C2:7D:54:B5:C5:D1:F4:15:CC:29:0E:90 Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f Certificate serial: 019B10131E437B21A96BD0F6A046CB410963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft Manifest number: 1406 Signing time: Fri 12 Dec 2025 01:00:46 +0000 Manifest this update: Fri 12 Dec 2025 01:00:46 +0000 Manifest next update: Sat 13 Dec 2025 01:00:46 +0000 Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: 5puE4U4+VbIHcMXo/KihY0JW7fAIQNZEVR8ZNbNfTWw=) 2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:1e:43:7b:21:a9:6b:d0:f6:a0:46:cb:41:09:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f Validity Not Before: Dec 12 01:00:46 2025 GMT Not After : Dec 13 01:00:46 2025 GMT Subject: CN=d861ddd24a5a61c2c27d54b5c5d1f415cc290e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f1:7a:24:90:9a:26:e1:77:ef:07:3d:e0:cc: 9b:81:13:e4:a8:b3:2b:76:9d:5f:a5:b2:76:24:0b: d3:ba:04:8c:9d:4a:d6:74:62:e3:84:d9:f2:b4:21: c0:06:40:d7:c6:a3:42:d0:60:89:52:31:04:ef:5a: 01:58:f2:dc:11:c0:00:1a:8f:81:98:bd:d7:d8:9f: 74:ad:3d:c0:77:96:2d:27:1f:2d:15:fe:20:bc:91: f5:26:1d:1c:7c:d3:33:71:97:d9:c0:63:96:e2:cf: fd:2f:be:77:c3:12:64:d6:1f:56:20:5f:1c:50:52: 98:e2:33:c8:13:36:a9:c1:ee:31:d1:ac:66:95:f1: 3a:20:1b:2b:ff:0f:a7:83:41:6d:89:e3:a8:64:c5: 2c:e4:55:9e:52:a7:dc:54:e3:3d:3b:40:d4:fd:ed: d8:67:2d:0b:6c:7c:7c:eb:26:d9:40:81:33:89:b1: 54:a6:46:ed:90:07:9c:be:a4:a8:56:ab:69:56:c0: 53:d5:09:d6:1c:53:7f:60:c7:70:c1:fb:cd:a4:93: 02:e1:a5:88:82:94:89:a0:b6:5d:bc:aa:24:42:90: 52:7a:e0:8d:66:35:e2:db:82:2a:1d:6f:70:b8:9b: 8b:6f:c2:43:f3:f0:fe:19:5f:60:45:e7:53:79:b3: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:61:DD:D2:4A:5A:61:C2:C2:7D:54:B5:C5:D1:F4:15:CC:29:0E:90 X509v3 Authority Key Identifier: keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:33:d8:07:6a:00:f6:e2:c3:ed:05:2b:20:0a:da:30:20:b8: fb:6b:7d:ea:60:86:fe:e6:50:a0:9b:2e:7a:c9:68:53:40:b1: 94:f7:e8:97:9d:72:8c:43:69:34:73:e0:d5:12:04:13:16:d6: 29:a8:b3:0e:e9:cf:52:84:de:be:f9:ec:f4:5d:97:83:94:7f: 10:34:a8:3e:6d:0b:9f:79:5d:5e:20:9d:86:07:4b:ac:c1:b7: ce:85:74:31:af:43:0e:ed:f9:1c:35:9c:69:27:e0:dc:a0:bf: 79:a5:03:5d:db:40:18:c2:73:d4:2b:ec:45:8e:7d:4f:c0:25: 52:f7:17:0e:0d:4c:7b:a2:eb:e8:9c:ce:42:f3:94:d7:50:3d: b6:03:94:9a:5e:63:2f:7a:82:2d:e2:5a:91:61:90:49:3e:b4: 92:91:d2:6a:50:1b:e2:50:d2:db:df:0b:58:32:ab:da:ef:66: 35:66:98:df:8f:89:c4:9a:fe:67:5f:57:90:fc:5f:c3:c4:75: a2:be:38:9f:3a:f3:56:67:ef:a4:7f:9c:7c:7d:1e:7f:f0:cb: 95:b7:c3:59:9c:31:1c:31:27:dd:14:16:63:9d:0c:9c:f4:95: c8:56:de:62:68:3a:a9:7a:b8:f6:a6:40:e2:a1:f4:3c:49:0b: 32:88:b2:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEx5DeyGpa9D2oEbLQQljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx YTU1MWYwHhcNMjUxMjEyMDEwMDQ2WhcNMjUxMjEzMDEwMDQ2WjAzMTEwLwYDVQQD EyhkODYxZGRkMjRhNWE2MWMyYzI3ZDU0YjVjNWQxZjQxNWNjMjkwZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PF6JJCaJuF37wc94MybgRPkqLMr dp1fpbJ2JAvTugSMnUrWdGLjhNnytCHABkDXxqNC0GCJUjEE71oBWPLcEcAAGo+B mL3X2J90rT3Ad5YtJx8tFf4gvJH1Jh0cfNMzcZfZwGOW4s/9L753wxJk1h9WIF8c UFKY4jPIEzapwe4x0axmlfE6IBsr/w+ng0FtieOoZMUs5FWeUqfcVOM9O0DU/e3Y Zy0LbHx86ybZQIEzibFUpkbtkAecvqSoVqtpVsBT1QnWHFN/YMdwwfvNpJMC4aWI gpSJoLZdvKokQpBSeuCNZjXi24IqHW9wuJuLb8JD8/D+GV9gRedTebMY1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhh3dJKWmHCwn1UtcXR9BXMKQ6QMB8GA1UdIwQY MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4 LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDPYB2oA 9uLD7QUrIAraMCC4+2t96mCG/uZQoJsuesloU0CxlPfol51yjENpNHPg1RIEExbW KaizDunPUoTevvns9F2Xg5R/EDSoPm0Ln3ldXiCdhgdLrMG3zoV0Ma9DDu35HDWc aSfg3KC/eaUDXdtAGMJz1CvsRY59T8AlUvcXDg1Me6Lr6JzOQvOU11A9tgOUml5j L3qCLeJakWGQST60kpHSalAb4lDS298LWDKr2u9mNWaY34+JxJr+Z19XkPxfw8R1 or44nzrzVmfvpH+cfH0ef/DLlbfDWZwxHDEn3RQWY50MnPSVyFbeYmg6qXq49qZA 4qH0PEkLMoiyhw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:45:00 2025 by rpki-client