This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json) Hash identifier: qywZkW4Q9fQ+Dl/gwsWS/Cdrir6+PsgRFOKcs/NWC1A= Subject key identifier: 43:C0:7A:E4:09:2B:94:DA:54:BB:DA:DE:46:FE:5A:11:17:A5:0E:1F Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Certificate serial: 019B597762D2B411F472B554D1E96F35856A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft Manifest number: 07C8 Signing time: Fri 26 Dec 2025 07:02:34 +0000 Manifest this update: Fri 26 Dec 2025 07:02:34 +0000 Manifest next update: Sat 27 Dec 2025 07:02:34 +0000 Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=) 2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: DYVxpZ2xvIfeLbKgQWcD+kaCFlSwDPHuqflCoT6NrlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:62:d2:b4:11:f4:72:b5:54:d1:e9:6f:35:85:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Validity Not Before: Dec 26 07:02:34 2025 GMT Not After : Dec 27 07:02:34 2025 GMT Subject: CN=43c07ae4092b94da54bbdade46fe5a1117a50e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:a6:1b:36:be:07:af:f1:1a:12:11:13:b1: df:c7:a2:1f:31:b0:e6:f9:93:3e:29:78:c2:07:38: bb:45:96:1c:d8:9b:36:e9:00:29:82:f1:4f:f7:4f: 2d:e2:1b:8b:9f:93:ac:56:d2:7a:e6:7c:29:d4:e0: e1:19:41:df:e2:00:21:31:50:5e:e5:af:5d:ab:95: 86:7d:2e:59:94:af:e6:c4:d7:1a:b7:e3:eb:56:d2: de:32:06:cf:44:80:cf:42:6f:be:45:3d:ca:d5:cb: d3:0f:46:63:1a:39:d7:e1:09:bd:bf:13:7e:9a:2b: 96:eb:27:24:96:f6:84:00:6d:83:d4:4f:a7:05:95: 23:38:a1:7f:67:7c:5e:fd:17:05:fc:64:a6:66:24: 83:89:15:cd:84:be:74:a0:df:ea:f6:89:b0:8b:cc: d6:55:4b:e2:c8:33:c1:d0:2e:93:8e:4b:c6:61:f9: 82:b2:b3:58:c6:fa:95:12:3b:5d:f6:28:24:f9:ba: e4:ed:87:f6:36:61:3f:9a:40:a5:a4:04:ad:3d:97: d4:7c:aa:2b:1b:9a:8d:8a:80:4a:06:9e:30:75:a2: b8:3d:17:5b:2d:11:8a:40:05:6a:3d:34:30:f6:fa: 4c:79:f3:21:22:55:cb:d7:77:3e:59:03:63:37:8d: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C0:7A:E4:09:2B:94:DA:54:BB:DA:DE:46:FE:5A:11:17:A5:0E:1F X509v3 Authority Key Identifier: keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5d:fa:bd:42:d4:ed:ae:e5:aa:3f:e6:48:3d:26:f2:8b:24: 5b:b4:21:06:e7:44:e4:c8:51:8e:80:04:5a:82:b1:80:45:39: ac:60:94:41:5f:5f:ab:02:1d:ff:c5:b9:18:a1:68:89:84:d9: 7d:96:80:e5:e6:da:cd:26:7c:94:f4:bc:a5:f3:3c:ec:e0:b2: d7:93:8a:e9:87:fa:db:6c:c0:e1:d7:66:18:30:cb:c4:62:19: fa:67:ee:f2:fb:61:01:a1:47:31:d1:77:af:8f:ff:6b:99:91: 33:6c:fc:15:41:f9:1f:1b:b4:44:6b:2e:53:9f:1a:c9:5a:5c: 0b:df:0d:b2:8f:2d:4e:7a:16:fb:18:ea:c0:2c:a5:2d:9f:4c: c0:a0:d7:f2:44:77:77:53:7a:7b:8b:87:ce:b7:d7:63:eb:4e: af:74:38:90:75:3d:16:a1:ce:d2:d5:e4:24:bf:31:ab:0f:1e: 44:79:a0:59:e7:3e:17:0c:74:bb:c9:e7:ff:70:b3:0f:ff:b6: e8:11:49:36:5e:33:63:cd:ba:ff:23:63:17:c1:a4:b4:88:76: 19:fc:1f:5b:f8:c0:83:fa:52:4d:32:5e:5c:b1:59:be:9c:d5: b9:d6:c9:cf:b0:2b:01:bd:09:88:98:e3:21:89:14:d6:36:35: a4:20:be:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd2LStBH0crVU0elvNYVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi M2FlNDIwHhcNMjUxMjI2MDcwMjM0WhcNMjUxMjI3MDcwMjM0WjAzMTEwLwYDVQQD Eyg0M2MwN2FlNDA5MmI5NGRhNTRiYmRhZGU0NmZlNWExMTE3YTUwZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+mGza+B6/xGhIRE7Hfx6IfMbDm +ZM+KXjCBzi7RZYc2Js26QApgvFP908t4huLn5OsVtJ65nwp1ODhGUHf4gAhMVBe 5a9dq5WGfS5ZlK/mxNcat+PrVtLeMgbPRIDPQm++RT3K1cvTD0ZjGjnX4Qm9vxN+ miuW6ycklvaEAG2D1E+nBZUjOKF/Z3xe/RcF/GSmZiSDiRXNhL50oN/q9omwi8zW VUviyDPB0C6TjkvGYfmCsrNYxvqVEjtd9igk+brk7Yf2NmE/mkClpAStPZfUfKor G5qNioBKBp4wdaK4PRdbLRGKQAVqPTQw9vpMefMhIlXL13c+WQNjN41I9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPAeuQJK5TaVLva3kb+WhEXpQ4fMB8GA1UdIwQY MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3 LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV36vULU 7a7lqj/mSD0m8oskW7QhBudE5MhRjoAEWoKxgEU5rGCUQV9fqwId/8W5GKFoiYTZ fZaA5ebazSZ8lPS8pfM87OCy15OK6Yf622zA4ddmGDDLxGIZ+mfu8vthAaFHMdF3 r4//a5mRM2z8FUH5Hxu0RGsuU58ayVpcC98Nso8tTnoW+xjqwCylLZ9MwKDX8kR3 d1N6e4uHzrfXY+tOr3Q4kHU9FqHO0tXkJL8xqw8eRHmgWec+Fwx0u8nn/3CzD/+2 6BFJNl4zY826/yNjF8GktIh2GfwfW/jAg/pSTTJeXLFZvpzVudbJz7ArAb0JiJjj IYkU1jY1pCC+wA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:43 2025 by rpki-client