This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json) Hash identifier: oQgls7lE6EXs2qwCwRHyxKTYlaRV3cpUAXdkXhweaNY= Subject key identifier: 87:E7:11:0B:CC:25:AE:F1:69:7D:AA:CD:4B:B0:86:73:7B:78:9F:C9 Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124 Certificate serial: 019B32D66FE3E70163303A586EE92A02B59B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft Manifest number: 0406 Signing time: Thu 18 Dec 2025 19:01:12 +0000 Manifest this update: Thu 18 Dec 2025 19:01:12 +0000 Manifest next update: Fri 19 Dec 2025 19:01:12 +0000 Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: dtB3bZPxAuPzmFj2cl3NAohiDMW4sua2m0yC3bRsI1Q=) 2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:6f:e3:e7:01:63:30:3a:58:6e:e9:2a:02:b5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124 Validity Not Before: Dec 18 19:01:12 2025 GMT Not After : Dec 19 19:01:12 2025 GMT Subject: CN=87e7110bcc25aef1697daacd4bb086737b789fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:6a:3b:7b:da:ef:2d:66:e3:41:fd:26:d2: 85:ee:c6:3f:1f:41:b2:9f:3a:4c:60:57:58:f9:ed: ea:ea:4b:47:72:62:f5:eb:f7:6f:df:49:07:fc:3b: dc:44:fb:5c:87:de:21:b1:a6:cd:6e:33:5d:84:4d: ef:42:48:a3:ea:4b:38:19:f4:6d:96:d6:95:b5:69: ab:01:96:5c:e1:9a:9b:ee:f6:61:0f:38:47:0b:87: da:76:0c:59:42:83:17:c2:b1:fa:be:e1:65:11:5b: 29:aa:97:53:59:5a:20:a9:c6:34:16:5d:34:dc:5f: 20:10:df:c3:90:b9:e5:24:95:b6:3e:e1:52:d9:f3: 53:e7:c1:12:7d:28:89:cd:20:c2:ef:65:00:22:03: 58:e7:19:59:82:b7:d2:ff:01:45:1f:c7:1e:14:92: b7:c4:c1:04:f7:f2:f8:de:2e:3a:c1:d5:aa:8c:bf: 00:d0:cc:2d:ef:9a:4b:0f:c7:f9:d6:76:5f:57:49: a5:c6:79:0c:a1:e0:ac:fa:d7:5a:5e:f7:74:27:55: a3:98:df:ad:bd:59:9f:cb:d3:1d:3b:e7:14:0a:3e: 0e:4b:df:80:f6:78:29:e6:bd:e4:37:d5:98:ef:83: ec:28:ac:e7:d0:a0:0b:29:95:d2:dd:98:d9:60:28: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E7:11:0B:CC:25:AE:F1:69:7D:AA:CD:4B:B0:86:73:7B:78:9F:C9 X509v3 Authority Key Identifier: keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d6:de:00:b8:97:c7:12:43:24:bc:7c:10:fd:22:19:9e:63: f3:45:51:ed:7f:be:97:43:e6:48:9e:47:67:c9:c7:4d:e7:8b: 0b:8d:77:9f:25:90:58:22:97:01:60:43:02:1a:b7:7f:84:25: 3c:aa:fa:ae:d0:cc:38:0a:9c:3c:cb:f6:b8:c9:62:6d:78:4e: aa:2b:6e:2c:37:21:d9:9e:01:05:89:a6:f4:9c:d3:5d:4f:cd: 19:1a:57:d8:ed:99:3a:6e:17:ef:b2:f6:f5:72:ee:a1:7e:b0: cd:94:b4:60:72:47:12:dd:33:e1:82:9f:d7:8e:1a:7a:56:9f: c2:dc:75:6c:a7:b0:1b:a7:8d:58:cb:0f:ac:29:74:f0:d1:04: 8d:06:bd:a5:55:ee:62:a8:d7:5c:fa:4b:75:6d:ba:a9:3b:23: 0c:db:61:38:3e:ad:40:83:b4:e1:15:67:00:73:51:8c:65:60: e1:c7:da:fa:d9:a2:00:50:13:8c:00:3f:6b:e4:65:eb:aa:1c: 0c:fb:21:b9:47:dd:12:24:99:48:2b:ef:bf:a3:f0:1f:e3:41: 41:aa:f2:73:7e:a4:95:2e:56:2b:15:ee:e8:5d:70:d5:6b:0c: 02:1b:89:cf:d6:92:0f:32:42:8d:9f:45:4b:a5:ca:dc:0d:6c: cf:cb:9b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1m/j5wFjMDpYbukqArWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw ZGYxMjQwHhcNMjUxMjE4MTkwMTEyWhcNMjUxMjE5MTkwMTEyWjAzMTEwLwYDVQQD Eyg4N2U3MTEwYmNjMjVhZWYxNjk3ZGFhY2Q0YmIwODY3MzdiNzg5ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttZqO3va7y1m40H9JtKF7sY/H0Gy nzpMYFdY+e3q6ktHcmL16/dv30kH/DvcRPtch94hsabNbjNdhE3vQkij6ks4GfRt ltaVtWmrAZZc4Zqb7vZhDzhHC4fadgxZQoMXwrH6vuFlEVspqpdTWVogqcY0Fl00 3F8gEN/DkLnlJJW2PuFS2fNT58ESfSiJzSDC72UAIgNY5xlZgrfS/wFFH8ceFJK3 xMEE9/L43i46wdWqjL8A0Mwt75pLD8f51nZfV0mlxnkMoeCs+tdaXvd0J1WjmN+t vVmfy9MdO+cUCj4OS9+A9ngp5r3kN9WY74PsKKzn0KALKZXS3ZjZYCh1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfnEQvMJa7xaX2qzUuwhnN7eJ/JMB8GA1UdIwQY MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9beALiX xxJDJLx8EP0iGZ5j80VR7X++l0PmSJ5HZ8nHTeeLC413nyWQWCKXAWBDAhq3f4Ql PKr6rtDMOAqcPMv2uMlibXhOqituLDch2Z4BBYmm9JzTXU/NGRpX2O2ZOm4X77L2 9XLuoX6wzZS0YHJHEt0z4YKf144aelafwtx1bKewG6eNWMsPrCl08NEEjQa9pVXu YqjXXPpLdW26qTsjDNthOD6tQIO04RVnAHNRjGVg4cfa+tmiAFATjAA/a+Rl66oc DPshuUfdEiSZSCvvv6PwH+NBQaryc36klS5WKxXu6F1w1WsMAhuJz9aSDzJCjZ9F S6XK3A1sz8ubTA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:04 2025 by rpki-client