This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json) Hash identifier: OONgiSyJU5XGbAsDU0Go5Zn+7soZvf9Tvwa6dvzB8pk= Subject key identifier: F9:00:A0:A5:EB:9D:AB:3B:6F:B9:FD:CC:F9:02:42:CF:D7:24:C9:D0 Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Certificate serial: 019B3A21B58115B053E98995026E7AA42E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft Manifest number: 072A Signing time: Sat 20 Dec 2025 05:00:46 +0000 Manifest this update: Sat 20 Dec 2025 05:00:46 +0000 Manifest next update: Sun 21 Dec 2025 05:00:46 +0000 Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=) 2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: adw1ydQP1xBoG4K6L6FgkkD5/n2vr63G7nNfOaAC1CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:b5:81:15:b0:53:e9:89:95:02:6e:7a:a4:2e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Validity Not Before: Dec 20 05:00:46 2025 GMT Not After : Dec 21 05:00:46 2025 GMT Subject: CN=f900a0a5eb9dab3b6fb9fdccf90242cfd724c9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:69:af:9c:81:13:11:d6:6b:80:55:05:49: ee:4e:a5:f4:5b:19:ff:cd:4e:a0:ba:53:a1:ef:18: 20:8b:bc:98:c1:99:e0:1c:8a:1b:df:53:62:96:c2: 11:c8:ed:69:66:d3:3e:fb:09:2d:d7:14:e8:3d:86: c1:52:93:9b:92:ac:e0:88:75:76:66:7e:8e:ea:5f: 8b:7f:95:01:7c:26:e2:ab:f1:a5:c0:41:1a:83:bd: 8d:5b:8f:20:27:08:d7:a7:e7:72:4a:89:7b:00:71: 01:1e:07:4f:81:f6:0d:45:be:0a:d7:91:37:8b:6b: 7d:4c:33:7d:36:ca:ca:8f:9e:81:c9:ff:70:bd:ad: cc:95:f4:59:e9:d2:c7:be:10:16:d0:aa:c8:e8:3d: 1f:90:20:4a:b8:d8:c8:e2:88:d3:83:e1:be:db:f0: 66:32:b4:22:bc:d2:12:6d:a6:c8:52:14:d4:ac:a7: 6b:4d:80:45:65:30:55:af:73:2f:61:00:9d:96:ee: e9:85:65:8e:07:3f:47:51:29:4c:e6:86:91:d9:04: 44:55:55:4a:fe:cf:e4:4b:6b:ff:36:9c:9b:c0:c3: 40:e5:b5:1e:6e:33:1a:86:16:53:43:ef:9d:f4:8d: 49:0f:dc:8d:85:2d:de:34:ed:35:6b:23:8b:4f:91: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:A0:A5:EB:9D:AB:3B:6F:B9:FD:CC:F9:02:42:CF:D7:24:C9:D0 X509v3 Authority Key Identifier: keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:90:4b:2e:65:37:24:1a:c8:37:2e:94:9f:63:e4:37:e7:8f: ba:8f:38:7d:a5:ae:c2:96:91:a3:a3:77:09:77:ad:f4:3c:16: f3:30:8b:7f:e1:1a:f0:5d:a7:e4:f7:cb:6b:d4:d4:57:64:a7: 18:ec:05:6d:8e:c4:eb:bb:f5:9b:76:dd:7d:0e:ea:f6:f6:a7: 52:8e:ac:d2:d0:3b:04:1c:ae:a5:ea:fb:b3:be:59:08:a5:ee: 1d:13:7c:95:5e:e9:00:a1:2d:be:50:a9:51:56:e9:58:a9:59: 5b:1e:aa:db:6e:0d:d5:69:23:44:f9:bd:c6:5a:0e:63:39:bb: ea:e3:77:ba:09:96:5e:4a:ce:cd:1b:9b:9b:aa:b1:75:8f:2b: de:f1:a8:94:f1:2b:de:3e:b6:c7:c5:b9:07:3e:e8:ef:79:52: 57:15:9c:fd:f7:5e:47:3b:5a:7d:df:dd:60:59:ac:95:07:5d: 5c:60:e1:6e:5c:00:ae:24:5b:b6:76:2b:5c:fe:bf:50:c2:62: 65:c4:d1:8f:ea:3b:c1:ee:06:86:87:c9:9a:ac:d0:96:8c:49: ab:ac:6f:3b:55:05:72:e9:80:fe:49:f1:f5:45:b3:bd:e2:24: 60:a3:90:78:c8:c7:d2:ae:89:41:33:8a:26:a3:c4:c2:c1:28: c5:f4:93:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IbWBFbBT6YmVAm56pC4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGE4NTU3ZGY3ZmIyYzQxOGY4ZWJmMTdjMGExZWYwNjI1 ZDc0YTMwHhcNMjUxMjIwMDUwMDQ2WhcNMjUxMjIxMDUwMDQ2WjAzMTEwLwYDVQQD EyhmOTAwYTBhNWViOWRhYjNiNmZiOWZkY2NmOTAyNDJjZmQ3MjRjOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Rpr5yBExHWa4BVBUnuTqX0Wxn/ zU6gulOh7xggi7yYwZngHIob31NilsIRyO1pZtM++wkt1xToPYbBUpObkqzgiHV2 Zn6O6l+Lf5UBfCbiq/GlwEEag72NW48gJwjXp+dySol7AHEBHgdPgfYNRb4K15E3 i2t9TDN9NsrKj56Byf9wva3MlfRZ6dLHvhAW0KrI6D0fkCBKuNjI4ojTg+G+2/Bm MrQivNISbabIUhTUrKdrTYBFZTBVr3MvYQCdlu7phWWOBz9HUSlM5oaR2QREVVVK /s/kS2v/NpybwMNA5bUebjMahhZTQ++d9I1JD9yNhS3eNO01ayOLT5EfRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkAoKXrnas7b7n9zPkCQs/XJMnQMB8GA1UdIwQY MBaAFL2KhVfff7LEGPjr8XwKHvBiXXSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2It ZjJjZGI3ZjU3NWU5LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2ItZjJjZGI3ZjU3NWU5 LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2JBLLmU3 JBrINy6Un2PkN+ePuo84faWuwpaRo6N3CXet9DwW8zCLf+Ea8F2n5PfLa9TUV2Sn GOwFbY7E67v1m3bdfQ7q9vanUo6s0tA7BByuper7s75ZCKXuHRN8lV7pAKEtvlCp UVbpWKlZWx6q224N1WkjRPm9xloOYzm76uN3ugmWXkrOzRubm6qxdY8r3vGolPEr 3j62x8W5Bz7o73lSVxWc/fdeRztafd/dYFmslQddXGDhblwAriRbtnYrXP6/UMJi ZcTRj+o7we4GhofJmqzQloxJq6xvO1UFcumA/knx9UWzveIkYKOQeMjH0q6JQTOK JqPEwsEoxfST9g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:41 2025 by rpki-client