This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json) Hash identifier: j0vAMUsKS+hK/QpXBuGBSQVjUcbAhCfTNlEde6UJFFU= Subject key identifier: 71:CC:64:DA:0F:8F:2C:5E:0A:4D:32:1E:E9:AE:27:F6:93:5F:DC:08 Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Certificate serial: 019B47A6CCF68185C023B38F4DF0578BDDE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft Manifest number: 0731 Signing time: Mon 22 Dec 2025 20:01:12 +0000 Manifest this update: Mon 22 Dec 2025 20:01:12 +0000 Manifest next update: Tue 23 Dec 2025 20:01:12 +0000 Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=) 2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: 6ZAM8dLg5kNQ4YUbsDWXFl3ynu90dAzCUONMB/7bipw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:cc:f6:81:85:c0:23:b3:8f:4d:f0:57:8b:dd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Validity Not Before: Dec 22 20:01:12 2025 GMT Not After : Dec 23 20:01:12 2025 GMT Subject: CN=71cc64da0f8f2c5e0a4d321ee9ae27f6935fdc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:2e:ab:35:10:4d:5b:7e:17:c7:97:d9:79: 15:5d:f2:97:73:60:c0:72:42:48:1a:d9:33:d9:3e: ce:5d:5f:10:43:26:19:ab:9a:2f:a1:20:c3:6b:b6: ce:7d:91:8e:ce:05:32:9e:17:39:69:f0:b4:13:a2: 41:de:a9:cb:58:61:ba:cb:ad:bb:22:6e:72:10:1c: c4:f1:d4:ae:f6:b5:09:25:19:96:dd:24:0d:90:e3: 80:3b:8e:cf:08:46:17:2c:1f:81:d7:11:09:ab:96: f9:84:f3:58:44:9e:2d:78:dc:0a:0c:c1:f4:66:5e: 5f:db:89:c5:1c:ac:0f:93:65:51:d7:f3:9c:a0:1c: 9f:10:3e:38:11:14:2f:a2:72:ff:1a:0e:64:a4:b3: 68:51:65:35:58:3b:c3:6c:dd:0c:db:37:80:51:45: 62:f3:c4:10:94:50:36:26:f1:04:41:5a:c5:04:c1: 09:66:bd:ec:b0:8d:ae:4e:c8:da:bf:e2:a6:08:2d: db:0d:7b:9d:c8:5a:3c:46:3d:48:86:1f:7b:0b:d4: 42:1a:a9:1b:4b:c8:fa:32:b9:fa:a6:2d:b1:9e:04: 69:d2:57:32:e8:fe:1b:69:9e:12:b2:a2:67:32:13: 6c:8b:21:6a:6a:b6:36:b8:a0:2f:a9:62:f3:a6:7b: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:64:DA:0F:8F:2C:5E:0A:4D:32:1E:E9:AE:27:F6:93:5F:DC:08 X509v3 Authority Key Identifier: keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3b:a3:58:57:49:f7:e4:99:f3:e1:aa:f5:dc:94:a2:39:94: 47:dd:7b:86:50:0b:89:b9:50:bf:bd:db:63:f6:28:9d:7a:43: 49:c3:fc:df:23:6d:1f:94:bf:02:ab:e6:8c:06:ff:52:43:c8: 29:0f:91:6e:6e:30:f5:34:b0:c7:bd:b1:9a:e4:80:9c:8c:0c: 70:3e:53:06:35:64:77:28:1d:ae:3f:6a:08:f9:ef:aa:25:dd: 28:5d:f2:60:77:5f:93:5a:0b:8d:a8:03:9e:ba:0a:9b:8c:d4: 5b:50:f7:25:6d:3a:71:64:46:2d:56:a1:52:27:e2:65:b3:8e: 67:2a:61:c2:f4:0d:3d:03:e2:14:05:2e:9e:be:1b:0a:8a:3e: 2a:8c:fe:c1:22:72:23:e0:fa:87:76:12:1f:f1:81:28:91:46: 58:8c:a5:d0:f0:b1:0f:d3:33:64:df:82:8c:24:73:f5:82:37: 1f:d0:85:97:9d:c1:ac:bb:66:f2:bf:55:90:05:9f:57:d8:bd: b3:bc:bc:47:65:c7:a3:63:2b:6e:c9:c2:b0:2e:f6:e9:08:af: fa:54:1b:42:82:11:c0:bc:9b:36:5b:15:82:b8:68:e6:88:43: 9d:57:14:e5:81:6f:b9:ae:fb:06:56:8b:cd:d6:ad:ea:bd:b9: 55:4a:a5:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpsz2gYXAI7OPTfBXi93mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGE4NTU3ZGY3ZmIyYzQxOGY4ZWJmMTdjMGExZWYwNjI1 ZDc0YTMwHhcNMjUxMjIyMjAwMTEyWhcNMjUxMjIzMjAwMTEyWjAzMTEwLwYDVQQD Eyg3MWNjNjRkYTBmOGYyYzVlMGE0ZDMyMWVlOWFlMjdmNjkzNWZkYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspAuqzUQTVt+F8eX2XkVXfKXc2DA ckJIGtkz2T7OXV8QQyYZq5ovoSDDa7bOfZGOzgUynhc5afC0E6JB3qnLWGG6y627 Im5yEBzE8dSu9rUJJRmW3SQNkOOAO47PCEYXLB+B1xEJq5b5hPNYRJ4teNwKDMH0 Zl5f24nFHKwPk2VR1/OcoByfED44ERQvonL/Gg5kpLNoUWU1WDvDbN0M2zeAUUVi 88QQlFA2JvEEQVrFBMEJZr3ssI2uTsjav+KmCC3bDXudyFo8Rj1Ihh97C9RCGqkb S8j6Mrn6pi2xngRp0lcy6P4baZ4SsqJnMhNsiyFqarY2uKAvqWLzpntOFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHMZNoPjyxeCk0yHumuJ/aTX9wIMB8GA1UdIwQY MBaAFL2KhVfff7LEGPjr8XwKHvBiXXSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2It ZjJjZGI3ZjU3NWU5LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2ItZjJjZGI3ZjU3NWU5 LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjujWFdJ 9+SZ8+Gq9dyUojmUR917hlALiblQv73bY/YonXpDScP83yNtH5S/AqvmjAb/UkPI KQ+Rbm4w9TSwx72xmuSAnIwMcD5TBjVkdygdrj9qCPnvqiXdKF3yYHdfk1oLjagD nroKm4zUW1D3JW06cWRGLVahUifiZbOOZyphwvQNPQPiFAUunr4bCoo+Koz+wSJy I+D6h3YSH/GBKJFGWIyl0PCxD9MzZN+CjCRz9YI3H9CFl53BrLtm8r9VkAWfV9i9 s7y8R2XHo2MrbsnCsC726Qiv+lQbQoIRwLybNlsVgrho5ohDnVcU5YFvua77BlaL zdat6r25VUqlZA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:00 2025 by rpki-client