This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json) Hash identifier: aHwPU05r+FnNdOPfW40Zou79WwFjgCYvBPrVfZdayJU= Subject key identifier: 6A:D2:AB:96:93:91:7E:94:86:5D:8A:FC:66:20:5B:46:32:E2:AD:9A Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019B1D2A1F1DD05FF44B3C7D3915CD8FCA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 14:00:58 +0000 Manifest this update: Sun 14 Dec 2025 14:00:58 +0000 Manifest next update: Mon 15 Dec 2025 14:00:58 +0000 Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=) 2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: qoE51ng+LYz+dBEBcqMx+3oS2aRhAz7367La2ovdtl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:1f:1d:d0:5f:f4:4b:3c:7d:39:15:cd:8f:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Dec 14 14:00:58 2025 GMT Not After : Dec 15 14:00:58 2025 GMT Subject: CN=6ad2ab9693917e94865d8afc66205b4632e2ad9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:84:f1:8d:48:d7:96:fd:b3:39:8d:9e:ee: 73:6b:f8:ed:8a:6f:08:b6:37:dc:ee:f7:00:56:15: 5b:72:a0:0d:30:e4:6e:b6:4d:5e:cf:2e:be:34:70: 4f:e9:3e:dd:83:ae:a3:f7:dd:62:3b:a9:1e:b4:0f: 55:7f:2e:9f:6c:34:6d:61:53:3a:b0:13:48:54:b9: 57:e1:41:e0:24:8a:fe:84:89:07:ef:d3:38:ba:5a: d8:7a:b6:e4:63:15:17:3b:04:10:3c:b6:65:38:a6: ed:67:29:66:a9:e9:49:34:5a:92:cf:2f:db:db:35: c6:ed:15:a3:16:9e:9f:2c:d9:74:7c:68:00:fc:1d: 3b:3a:7d:00:84:b5:c8:a1:21:34:7f:c6:85:22:b9: 49:00:f7:55:19:a5:98:89:e8:f4:83:98:68:32:d0: 24:43:39:cd:de:dc:81:06:69:e6:dd:8f:bc:ac:9a: 1e:ca:d4:ca:2e:67:11:c0:ae:90:df:d0:6c:e0:45: 74:12:06:c0:b3:55:78:a0:c6:2c:05:fc:36:2b:1c: 41:eb:b1:f4:e9:1b:bc:83:84:44:33:1b:be:bb:7d: 17:68:db:1b:d3:c4:d3:83:9a:d0:16:96:d7:fa:8f: c5:03:26:a1:57:2e:59:2b:b9:51:6b:4e:77:48:54: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D2:AB:96:93:91:7E:94:86:5D:8A:FC:66:20:5B:46:32:E2:AD:9A X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:35:27:a9:24:24:9e:29:1c:63:62:20:bb:6c:7a:21:02:be: 17:2d:47:d0:9b:a6:f0:ff:d7:51:42:10:d8:1a:57:fc:41:6e: 66:4c:af:81:c3:0b:73:6c:88:81:ef:93:33:ce:72:84:ad:d6: e4:dd:f3:74:f2:41:90:4b:a2:9b:8d:bd:f4:bf:77:2e:2c:8d: f3:ae:90:ce:cd:c1:8c:2f:5a:31:c3:e2:23:dc:da:a3:19:07: a5:c0:04:e5:80:c2:28:2f:c5:bd:35:69:dd:5a:53:c0:39:41: c2:a3:43:16:e5:54:4e:63:55:01:fc:09:6b:b8:21:e6:af:5e: f7:43:1b:a0:db:9e:02:2d:14:e0:3f:b3:2e:bb:47:1f:cd:10: d4:80:bc:ce:bf:a8:49:33:d5:9e:49:72:f9:bc:d7:bc:02:cf: bf:fd:0f:a2:11:9a:f7:33:49:bd:a2:69:95:da:47:e5:d7:2a: e3:48:b4:47:7a:d9:4c:fb:57:32:6d:c7:40:16:f4:91:33:1b: b8:5b:20:a2:39:46:e9:93:28:76:c0:a4:1d:79:f1:bc:41:10: f3:40:87:90:ee:5b:ba:24:40:60:e2:48:29:72:ea:cf:cc:fc: 3a:41:ae:fb:ae:c6:d1:e2:64:06:e2:e2:64:36:34:2f:99:f5: 43:78:b4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKh8d0F/0Szx9ORXNj8okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjUxMjE0MTQwMDU4WhcNMjUxMjE1MTQwMDU4WjAzMTEwLwYDVQQD Eyg2YWQyYWI5NjkzOTE3ZTk0ODY1ZDhhZmM2NjIwNWI0NjMyZTJhZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVyE8Y1I15b9szmNnu5za/jtim8I tjfc7vcAVhVbcqANMORutk1ezy6+NHBP6T7dg66j991iO6ketA9Vfy6fbDRtYVM6 sBNIVLlX4UHgJIr+hIkH79M4ulrYerbkYxUXOwQQPLZlOKbtZylmqelJNFqSzy/b 2zXG7RWjFp6fLNl0fGgA/B07On0AhLXIoSE0f8aFIrlJAPdVGaWYiej0g5hoMtAk QznN3tyBBmnm3Y+8rJoeytTKLmcRwK6Q39Bs4EV0EgbAs1V4oMYsBfw2KxxB67H0 6Ru8g4REMxu+u30XaNsb08TTg5rQFpbX+o/FAyahVy5ZK7lRa053SFTeXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrSq5aTkX6Uhl2K/GYgW0Yy4q2aMB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjUnqSQk nikcY2Igu2x6IQK+Fy1H0Jum8P/XUUIQ2BpX/EFuZkyvgcMLc2yIge+TM85yhK3W 5N3zdPJBkEuim4299L93LiyN866Qzs3BjC9aMcPiI9zaoxkHpcAE5YDCKC/FvTVp 3VpTwDlBwqNDFuVUTmNVAfwJa7gh5q9e90MboNueAi0U4D+zLrtHH80Q1IC8zr+o STPVnkly+bzXvALPv/0PohGa9zNJvaJpldpH5dcq40i0R3rZTPtXMm3HQBb0kTMb uFsgojlG6ZModsCkHXnxvEEQ80CHkO5buiRAYOJIKXLqz8z8OkGu+67G0eJkBuLi ZDY0L5n1Q3i03Q== -----END CERTIFICATE-----Generated at Mon Dec 15 00:31:20 2025 by rpki-client