This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json) Hash identifier: eTXq+MFdjxeHjrEVRS5j0CmS9yWAXbSt/thE9Knl1pY= Subject key identifier: A0:48:70:67:1F:1F:87:97:B7:EA:F5:B7:6C:A8:DF:D1:0C:8D:BF:0F Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Certificate serial: 019AF465AE463F53959004EE5560CDC31ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft Manifest number: 0644 Signing time: Sat 06 Dec 2025 16:01:35 +0000 Manifest this update: Sat 06 Dec 2025 16:01:35 +0000 Manifest next update: Sun 07 Dec 2025 16:01:35 +0000 Files and hashes: 1: 7oEw8EFmquKMrLL8-hfLmIwZUQY.roa (hash: UnWZTOCHUCj50Mpn5ZUqFaqkSFvoIDWjjwDqigNU5NY=) 2: Ck3Jvy5ijt5-_NFGYo-OlYqf3Jo.roa (hash: Ngn9iQ8GLL0NfQbzc69TCLUMH0IFa8vev/CQWXBGYeI=) 3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: mLHYMV+sNnt6fiyRyMT5TnLouSa7qB03xnyYZ5U11Wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:ae:46:3f:53:95:90:04:ee:55:60:cd:c3:1a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Validity Not Before: Dec 6 16:01:35 2025 GMT Not After : Dec 7 16:01:35 2025 GMT Subject: CN=a04870671f1f8797b7eaf5b76ca8dfd10c8dbf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:4e:c8:ed:66:90:6a:1b:b3:10:8b:90:ee: 2e:d6:b0:4a:86:5a:13:67:53:c6:d6:19:31:69:f4: 23:02:f5:51:0d:ed:f8:1e:c5:51:30:ed:91:d1:83: dc:e0:b5:bf:e3:c0:dd:a0:d0:77:b5:b3:15:33:b7: 2e:3f:5e:7c:19:c3:5f:2d:52:42:84:06:9b:e8:be: 83:49:f3:17:83:74:17:47:96:46:99:3d:3c:19:f8: da:5a:4f:11:d4:b3:97:ed:d7:f2:e6:14:4d:8a:67: ec:fe:e7:9d:6d:15:1c:bc:84:66:b8:b1:88:b0:0f: ca:ca:12:a7:75:57:5d:8d:cf:a6:20:ed:f3:97:bd: 52:2c:a4:46:db:c1:01:99:41:3e:b1:87:ca:85:92: e3:9f:3b:f0:8a:f4:b8:1f:20:79:10:88:13:a7:8f: 1e:0a:6f:5b:37:d4:2d:39:61:15:00:67:49:11:ec: 75:fa:83:15:f3:e5:94:44:cb:35:a3:5d:8e:ca:35: a4:9e:07:b4:f4:51:2d:05:35:24:a4:0f:cc:b8:2c: 42:7f:21:9a:89:49:ac:8f:80:62:05:d1:8d:49:20: e8:79:a9:a9:72:04:92:e4:ce:ea:bc:35:de:f2:66: 39:27:d0:c3:c2:f4:33:ec:fb:ea:60:41:70:2e:40: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:70:67:1F:1F:87:97:B7:EA:F5:B7:6C:A8:DF:D1:0C:8D:BF:0F X509v3 Authority Key Identifier: keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:29:87:5b:ad:17:97:c3:97:5a:26:c4:75:81:a4:55:36:11: ea:0e:f4:c4:ea:95:b0:11:47:81:1b:f4:50:7b:cb:dd:ef:e9: 5a:81:b0:d0:97:bd:e7:c8:6b:11:22:31:8b:a8:af:80:42:6d: 5e:de:ba:67:75:cc:6f:43:d1:d5:66:9b:b6:2e:3f:ba:d9:98: 4b:91:3e:2b:e1:06:fc:64:cd:3f:7c:34:7e:da:ef:de:b3:57: c9:e8:91:fc:7c:17:7a:df:86:eb:db:1c:30:2c:ca:fb:b1:d2: 1c:c9:4d:4d:3a:21:2a:e9:b1:38:81:7e:d8:3a:2b:1c:64:1e: de:a4:e2:39:6f:71:05:b1:e5:49:80:52:e0:ff:8f:d8:67:39: cc:15:85:aa:43:eb:db:b5:c7:76:9b:c7:89:12:13:82:e7:96: 31:1e:a4:3c:5b:e5:ee:7d:06:18:42:ca:df:2a:8c:c0:ff:f0: 65:33:fe:de:8d:35:24:28:ab:5c:d9:b8:d2:00:f7:73:60:e7: 9e:2c:90:b5:40:42:29:55:3b:3b:ce:ef:cd:7c:02:ea:8d:f4: 07:60:07:50:f2:1a:4d:8b:bd:10:28:11:71:7e:29:71:71:b1: ce:4e:8c:44:e9:e9:19:67:d7:a6:00:e7:13:51:11:78:ac:04: d7:61:9f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Za5GP1OVkATuVWDNwxq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3 ZTgxZTAwHhcNMjUxMjA2MTYwMTM1WhcNMjUxMjA3MTYwMTM1WjAzMTEwLwYDVQQD EyhhMDQ4NzA2NzFmMWY4Nzk3YjdlYWY1Yjc2Y2E4ZGZkMTBjOGRiZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IFOyO1mkGobsxCLkO4u1rBKhloT Z1PG1hkxafQjAvVRDe34HsVRMO2R0YPc4LW/48DdoNB3tbMVM7cuP158GcNfLVJC hAab6L6DSfMXg3QXR5ZGmT08GfjaWk8R1LOX7dfy5hRNimfs/uedbRUcvIRmuLGI sA/KyhKndVddjc+mIO3zl71SLKRG28EBmUE+sYfKhZLjnzvwivS4HyB5EIgTp48e Cm9bN9QtOWEVAGdJEex1+oMV8+WURMs1o12OyjWknge09FEtBTUkpA/MuCxCfyGa iUmsj4BiBdGNSSDoeampcgSS5M7qvDXe8mY5J9DDwvQz7PvqYEFwLkCxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBIcGcfH4eXt+r1t2yo39EMjb8PMB8GA1UdIwQY MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCmHW60X l8OXWibEdYGkVTYR6g70xOqVsBFHgRv0UHvL3e/pWoGw0Je958hrESIxi6ivgEJt Xt66Z3XMb0PR1Wabti4/utmYS5E+K+EG/GTNP3w0ftrv3rNXyeiR/HwXet+G69sc MCzK+7HSHMlNTTohKumxOIF+2DorHGQe3qTiOW9xBbHlSYBS4P+P2Gc5zBWFqkPr 27XHdpvHiRITgueWMR6kPFvl7n0GGELK3yqMwP/wZTP+3o01JCirXNm40gD3c2Dn niyQtUBCKVU7O87vzXwC6o30B2AHUPIaTYu9ECgRcX4pcXGxzk6MROnpGWfXpgDn E1EReKwE12Gfyg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:47:45 2025 by rpki-client