This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft File: VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json) Hash identifier: rf6xkAAm/7IGD7ASw7b3XLnevJi/ebrb83wjIBl+5zY= Subject key identifier: FE:AF:50:8A:83:FB:76:8D:B7:26:37:F5:7F:DF:2A:5D:66:97:C4:B0 Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Certificate serial: 019AF1D17EDAB815F56CB129718B20C8AD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft Manifest number: 0662 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (hash: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=) 2: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (hash: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=) 3: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: goJBqUDBeXwhGksIGGFkJfiQ7NoZqNxFofNRwtmhmsE=) 4: ixZP8lw2F7ZQ1n6z2ul-PVTfMYc.roa (hash: 8HnGm/A9kKO8qk6ptSile1LUya5t/LNEUOnSh7y0uik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7e:da:b8:15:f5:6c:b1:29:71:8b:20:c8:ad:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=feaf508a83fb768db72637f57fdf2a5d6697c4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:6f:0a:0a:80:8b:e4:d2:a2:e6:eb:b8:48: 1c:52:fd:12:52:32:35:7b:aa:67:7e:a3:9d:af:92: f6:2c:32:7f:a6:aa:a0:cb:6e:4a:66:0d:18:18:13: df:12:ca:aa:ec:00:1b:96:c6:11:f9:b4:91:b6:40: 26:2b:6c:ab:ef:5e:78:6a:ec:5f:6a:e7:b3:72:7d: e6:3a:c2:f3:18:71:22:c5:f4:16:25:20:4d:3e:a5: 07:22:51:37:a6:49:83:c4:91:5b:26:69:56:70:d1: 58:c7:bd:72:bb:08:56:df:09:8b:70:22:08:17:19: 29:98:f2:7d:b5:ec:a8:79:d5:6f:55:c7:25:87:de: 4a:d9:cd:6d:5c:10:34:74:54:c0:08:36:ac:a6:1a: 5a:de:63:80:25:39:52:d3:8f:36:84:0e:5e:6c:4d: b6:9a:9c:e6:4d:7e:5d:0f:21:4c:87:8a:7e:66:99: 14:d3:d7:f5:ce:67:39:c4:f9:47:d8:ba:1c:a2:d8: 68:b4:c3:af:0e:f9:cf:34:9f:70:e2:10:5a:08:66: 86:83:46:dd:c7:b5:63:2c:62:31:cd:f7:a9:ed:95: 0a:b8:c1:97:c1:e2:54:73:19:a3:18:e7:3d:2d:27: 1e:d3:91:bd:f3:9a:46:f3:54:96:f9:da:74:b5:72: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AF:50:8A:83:FB:76:8D:B7:26:37:F5:7F:DF:2A:5D:66:97:C4:B0 X509v3 Authority Key Identifier: keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:26:ee:d8:71:09:06:87:d3:6d:27:7a:bb:a4:7b:a0:24:12: b7:77:4c:6f:ef:e4:1a:8b:07:6f:2e:e5:0d:65:e9:3c:c4:26: b6:9b:f2:2a:09:da:48:5d:7b:31:b7:2a:72:f0:87:18:d9:2a: ff:69:bf:f1:f9:7a:2c:ec:cd:15:81:74:08:d9:bc:a1:34:e6: 41:31:6b:a8:1a:ce:72:4d:c6:a7:89:56:3e:9a:b6:ea:ca:33: 78:86:a0:10:88:c9:60:32:af:22:55:63:9b:09:4b:97:c4:82: bf:92:29:3c:19:d4:e1:f9:50:27:d0:73:17:6e:a6:16:1c:54: 46:00:15:79:69:1a:cb:7a:9c:37:49:aa:d1:36:70:cc:2a:7f: ee:01:9d:f2:c7:f3:e5:77:d0:e4:cb:dc:fd:07:a9:83:54:6e: f8:71:2a:0b:57:02:18:02:21:bf:48:62:0b:ab:e9:a8:07:f8: 62:a0:e4:af:fe:9c:68:84:ed:a8:73:4a:c4:e2:af:25:d3:d2: fe:aa:ff:f1:80:13:d9:e2:11:47:63:55:e2:fe:22:0d:0a:8f: 5f:56:aa:5f:91:f6:0e:9b:f0:e6:65:4a:eb:10:53:e8:a1:e1: 3e:85:26:d9:5a:80:12:b3:ef:05:83:c0:5f:a7:5c:5c:92:7c: fc:da:af:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X7auBX1bLEpcYsgyK1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj ZmJiNTEwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EyhmZWFmNTA4YTgzZmI3NjhkYjcyNjM3ZjU3ZmRmMmE1ZDY2OTdjNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzJvCgqAi+TSoubruEgcUv0SUjI1 e6pnfqOdr5L2LDJ/pqqgy25KZg0YGBPfEsqq7AAblsYR+bSRtkAmK2yr7154auxf auezcn3mOsLzGHEixfQWJSBNPqUHIlE3pkmDxJFbJmlWcNFYx71yuwhW3wmLcCII FxkpmPJ9teyoedVvVcclh95K2c1tXBA0dFTACDasphpa3mOAJTlS0482hA5ebE22 mpzmTX5dDyFMh4p+ZpkU09f1zmc5xPlH2LocothotMOvDvnPNJ9w4hBaCGaGg0bd x7VjLGIxzfep7ZUKuMGXweJUcxmjGOc9LSce05G985pG81SW+dp0tXJe0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6vUIqD+3aNtyY39X/fKl1ml8SwMB8GA1UdIwQY MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct N2UyMTdiZWYyZDllLzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYibu2HEJ BofTbSd6u6R7oCQSt3dMb+/kGosHby7lDWXpPMQmtpvyKgnaSF17MbcqcvCHGNkq /2m/8fl6LOzNFYF0CNm8oTTmQTFrqBrOck3Gp4lWPpq26sozeIagEIjJYDKvIlVj mwlLl8SCv5IpPBnU4flQJ9BzF26mFhxURgAVeWkay3qcN0mq0TZwzCp/7gGd8sfz 5XfQ5Mvc/Qepg1Ru+HEqC1cCGAIhv0hiC6vpqAf4YqDkr/6caITtqHNKxOKvJdPS /qr/8YAT2eIRR2NV4v4iDQqPX1aqX5H2Dpvw5mVK6xBT6KHhPoUm2VqAErPvBYPA X6dcXJJ8/Nqv1g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:08 2025 by rpki-client