This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft File: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft (raw, json) Hash identifier: P6KqyGD/+eepEJ1IKGQF1Tw6aYyY2NBKxqjhuyL1B+M= Subject key identifier: 71:73:2A:7D:8D:9E:8B:5B:89:1F:F8:7B:BF:85:52:2E:0B:19:E3:BF Authority key identifier: BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF Certificate issuer: /CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Certificate serial: 019AF163D9F3FEE1DBEDA99E66EC2318F002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: Il2poWeT4F_H4KiL-0HdiaMsadA.roa (hash: VrsL8H9loMqzLX65T7cvzeckeITcvwECmwnt6mshIP0=) 2: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl (hash: uqova1HT3iCI1Tpjopxiw/aUS8TLcqtFVSoH3uDpfwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d9:f3:fe:e1:db:ed:a9:9e:66:ec:23:18:f0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=71732a7d8d9e8b5b891ff87bbf85522e0b19e3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:af:47:50:fa:33:3d:86:6d:52:d9:64:36: 88:7b:30:bf:17:25:62:ea:bc:46:66:53:44:17:69: e6:d6:c4:92:09:d7:39:6c:00:4a:34:32:22:79:aa: 6f:7f:78:dd:36:9c:b4:24:fc:db:4a:8b:68:9b:05: 7d:1a:a8:d4:35:bf:4f:8c:4c:f1:21:b2:17:b7:c3: 34:b5:f1:aa:48:d1:5b:69:fa:13:d5:e1:47:7b:e8: 39:25:27:03:eb:05:17:be:43:4e:17:17:96:b4:13: b0:34:2f:b5:0c:04:39:b9:63:b0:c6:2f:4f:4e:2a: c4:60:f6:3f:6d:76:55:c7:cc:b6:f7:7d:49:27:99: 5a:e9:19:70:17:2f:e6:d9:21:1e:1d:95:95:05:1e: 91:53:b7:ac:e2:58:df:85:ff:e4:eb:fc:78:22:e1: bf:3c:f8:c2:fd:0c:92:16:27:a9:30:cf:61:26:6f: 16:a6:95:1d:2b:8b:8c:45:5c:5d:f8:37:45:9d:6a: d2:49:18:11:aa:14:df:27:28:0c:9c:4f:30:d1:7d: 2d:a8:4f:4a:2e:6c:2b:2f:bd:92:c0:96:8a:17:f4: ac:1f:a1:5c:55:dd:cf:bb:86:b3:3e:f0:66:42:3a: f0:63:1e:2d:f1:c2:a9:e3:25:dd:fd:bf:52:82:4e: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:2A:7D:8D:9E:8B:5B:89:1F:F8:7B:BF:85:52:2E:0B:19:E3:BF X509v3 Authority Key Identifier: keyid:BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0c:73:86:c3:51:e2:e9:7e:eb:52:12:bb:31:2d:d4:07:d4: fb:88:54:55:b2:c2:31:6f:bc:45:ab:28:ca:f4:ae:9c:99:79: 29:39:7d:77:d8:c9:fb:12:81:fc:26:e7:2c:bf:ed:b5:e9:6c: a7:50:a9:b2:de:e8:f6:0d:e2:5f:6e:01:e4:a9:5d:a0:6d:cd: 02:74:69:6f:7f:c2:ed:ac:22:6b:dd:48:31:59:6a:42:43:38: ed:d3:35:77:aa:c1:3e:a4:03:51:05:f5:24:8c:e2:5a:b4:f6: 96:9f:e2:67:8b:8a:39:2f:4c:21:2d:14:c6:32:8f:18:24:0c: 7f:5b:22:7b:5a:cc:cc:1d:6d:2d:10:a2:83:2e:52:a5:6a:6c: 7a:03:cc:34:93:5d:4a:f7:0e:b1:c7:af:cf:e1:84:63:16:ce: e5:bc:e3:90:cf:a0:f8:40:61:4e:d9:91:8b:15:b9:e6:94:d9: b9:91:b2:46:1c:7d:9f:c0:ac:ba:f7:25:8c:c3:3e:dc:3a:6c: 5e:4b:51:ad:ff:5b:46:6d:94:94:67:e4:6c:5c:06:8b:32:3a: 2a:66:30:f4:7c:a0:8b:f6:d4:55:87:38:66:6f:b0:59:cd:b3: e7:67:d3:e7:39:6c:0e:75:fe:dd:98:78:56:ce:8b:0f:16:0a: 5d:2d:42:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9nz/uHb7ameZuwjGPACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMDYzZDY1MDUzNGFhOWYwNjkzMWZkOGVkNmUwYmIyNzZl YmQzYmYwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD Eyg3MTczMmE3ZDhkOWU4YjViODkxZmY4N2JiZjg1NTIyZTBiMTllM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMqvR1D6Mz2GbVLZZDaIezC/FyVi 6rxGZlNEF2nm1sSSCdc5bABKNDIieapvf3jdNpy0JPzbSotomwV9GqjUNb9PjEzx IbIXt8M0tfGqSNFbafoT1eFHe+g5JScD6wUXvkNOFxeWtBOwNC+1DAQ5uWOwxi9P TirEYPY/bXZVx8y2931JJ5la6RlwFy/m2SEeHZWVBR6RU7es4ljfhf/k6/x4IuG/ PPjC/QySFiepMM9hJm8WppUdK4uMRVxd+DdFnWrSSRgRqhTfJygMnE8w0X0tqE9K LmwrL72SwJaKF/SsH6FcVd3Pu4azPvBmQjrwYx4t8cKp4yXd/b9Sgk5gBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFzKn2NnotbiR/4e7+FUi4LGeO/MB8GA1UdIwQY MBaAFLwGPWUFNKqfBpMf2O1uC7J269O/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEt MjE2ZDI4OWYxNzY0LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEtMjE2ZDI4OWYxNzY0 LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgxzhsNR 4ul+61ISuzEt1AfU+4hUVbLCMW+8RasoyvSunJl5KTl9d9jJ+xKB/CbnLL/ttels p1Cpst7o9g3iX24B5KldoG3NAnRpb3/C7awia91IMVlqQkM47dM1d6rBPqQDUQX1 JIziWrT2lp/iZ4uKOS9MIS0UxjKPGCQMf1sie1rMzB1tLRCigy5SpWpsegPMNJNd SvcOscevz+GEYxbO5bzjkM+g+EBhTtmRixW55pTZuZGyRhx9n8CsuvcljMM+3Dps XktRrf9bRm2UlGfkbFwGizI6KmYw9Hygi/bUVYc4Zm+wWc2z52fT5zlsDnX+3Zh4 Vs6LDxYKXS1Chw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:02 2025 by rpki-client