This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json) Hash identifier: RE6mdgo0kTrdil/cKDvZLUXILrcX/7rAOWklCvy7S/M= Subject key identifier: 44:F8:DD:FE:0D:20:9C:BB:E6:A8:2F:B2:27:AA:CF:89:25:07:C1:4C Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Certificate serial: 019B424AF5E00BE2D480ACD32A0347634652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 19:02:47 +0000 Manifest this update: Sun 21 Dec 2025 19:02:47 +0000 Manifest next update: Mon 22 Dec 2025 19:02:47 +0000 Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=) 2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: t2TCKZGlplN6hxfN4luJfRrfsu9Uh9vOdpc13gyed8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:f5:e0:0b:e2:d4:80:ac:d3:2a:03:47:63:46:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6 Validity Not Before: Dec 21 19:02:47 2025 GMT Not After : Dec 22 19:02:47 2025 GMT Subject: CN=44f8ddfe0d209cbbe6a82fb227aacf892507c14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:79:ed:7b:b8:85:2f:6e:5d:0a:36:9c:42: ca:66:41:45:44:5d:61:98:56:66:07:28:06:64:2c: 5c:b8:b0:df:72:13:bb:0f:21:6a:18:71:6e:7e:3b: 8a:9b:07:a3:ac:f7:aa:59:99:1c:39:75:6b:14:49: 11:75:24:26:e6:3d:b9:d0:ee:82:cc:3e:a2:4c:8a: 23:1d:e6:ac:41:c6:33:35:b5:1f:78:ad:2f:60:6b: 83:0d:59:47:94:f1:a3:26:1d:0e:a8:db:20:4c:53: 8e:d9:a4:8a:6d:c3:16:ff:d2:9c:72:47:4b:ec:5c: 16:7f:05:c9:18:4e:79:ac:d9:d5:3c:8f:a1:93:1d: f8:46:30:99:8d:79:74:9a:1e:95:0e:99:90:8d:89: fa:26:11:94:14:8b:d9:b8:8f:3a:13:91:9e:23:d1: fa:c4:c2:2b:c9:cb:9f:6b:bb:f4:45:fd:33:33:77: 73:56:4d:7e:ac:b7:96:63:29:ea:00:8a:f9:cc:de: 4c:79:d0:4d:e4:ff:86:54:b7:84:25:95:b2:20:55: 9f:8d:09:86:a0:da:d4:31:23:74:72:4f:6d:1d:fa: 03:25:25:48:53:c4:73:09:32:f0:9d:0b:32:9f:4c: e3:ff:1e:70:4d:78:eb:75:a1:ab:21:97:3c:43:10: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:DD:FE:0D:20:9C:BB:E6:A8:2F:B2:27:AA:CF:89:25:07:C1:4C X509v3 Authority Key Identifier: keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:af:51:9f:fc:3b:81:c6:d1:9f:65:64:75:c9:1b:4e:90: a5:4b:0f:c5:8c:bd:b7:a4:74:8c:6b:fd:d6:cd:c5:39:48:f3: cf:6f:1d:52:38:8b:7c:f3:5d:b0:9a:e7:f0:c5:11:f6:dc:15: a6:e8:15:4f:54:cd:32:dc:c6:d8:e3:9c:7d:b5:6b:6d:1d:b3: bd:36:67:a8:fe:f2:54:e9:1c:12:53:65:45:67:97:0c:b5:be: 09:71:d5:c2:0d:70:df:19:bc:2e:de:0f:f3:6d:d7:a1:3c:4a: dd:75:e0:2c:5f:bf:d3:1b:4e:d2:46:18:48:49:3a:b6:1f:fd: df:d5:8f:08:e8:1a:aa:7e:92:7e:f7:69:7f:34:2f:0b:e7:dd: 70:df:1f:db:fc:a1:32:9c:ef:5f:fb:ba:e1:6c:5e:37:df:85: 4f:ae:a2:ad:49:25:4f:9c:11:dd:c3:47:e1:72:6f:45:e8:ce: a4:fe:5b:aa:7e:00:f1:75:2b:c2:73:e4:77:a4:bf:d3:84:6b: 33:3c:1b:a7:16:fb:84:6f:3e:4b:38:03:52:28:82:db:70:fe: 2c:a2:9d:4d:15:41:2a:bd:e7:27:c0:98:8f:ce:09:c1:59:b9: f8:bb:aa:28:ae:65:33:16:5b:b6:bb:6d:42:d8:31:66:98:a4: b2:97:f0:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSvXgC+LUgKzTKgNHY0ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3 NzBlYzYwHhcNMjUxMjIxMTkwMjQ3WhcNMjUxMjIyMTkwMjQ3WjAzMTEwLwYDVQQD Eyg0NGY4ZGRmZTBkMjA5Y2JiZTZhODJmYjIyN2FhY2Y4OTI1MDdjMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTB57Xu4hS9uXQo2nELKZkFFRF1h mFZmBygGZCxcuLDfchO7DyFqGHFufjuKmwejrPeqWZkcOXVrFEkRdSQm5j250O6C zD6iTIojHeasQcYzNbUfeK0vYGuDDVlHlPGjJh0OqNsgTFOO2aSKbcMW/9KcckdL 7FwWfwXJGE55rNnVPI+hkx34RjCZjXl0mh6VDpmQjYn6JhGUFIvZuI86E5GeI9H6 xMIrycufa7v0Rf0zM3dzVk1+rLeWYynqAIr5zN5MedBN5P+GVLeEJZWyIFWfjQmG oNrUMSN0ck9tHfoDJSVIU8RzCTLwnQsyn0zj/x5wTXjrdaGrIZc8QxAhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET43f4NIJy75qgvsieqz4klB8FMMB8GA1UdIwQY MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE2vUZ/8 O4HG0Z9lZHXJG06QpUsPxYy9t6R0jGv91s3FOUjzz28dUjiLfPNdsJrn8MUR9twV pugVT1TNMtzG2OOcfbVrbR2zvTZnqP7yVOkcElNlRWeXDLW+CXHVwg1w3xm8Lt4P 823XoTxK3XXgLF+/0xtO0kYYSEk6th/939WPCOgaqn6SfvdpfzQvC+fdcN8f2/yh MpzvX/u64WxeN9+FT66irUklT5wR3cNH4XJvRejOpP5bqn4A8XUrwnPkd6S/04Rr Mzwbpxb7hG8+SzgDUiiC23D+LKKdTRVBKr3nJ8CYj84JwVm5+LuqKK5lMxZbtrtt QtgxZpikspfwCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:17 2025 by rpki-client