This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft File: VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json) Hash identifier: aLVofvqEGFDYHb0qy9V4RXwdZVo2oO+pA70sgZTZaRY= Subject key identifier: 0B:82:B4:74:67:3D:30:93:65:FB:02:0A:7C:0F:EC:53:DC:08:68:F3 Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5 Certificate issuer: /CN=572bc93f1580fc95274d983940f3efaede304ae5 Certificate serial: 019AF50B9FE05F4CC858D8964DD3DC2692F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft Manifest number: 0B2E Signing time: Sat 06 Dec 2025 19:02:50 +0000 Manifest this update: Sat 06 Dec 2025 19:02:50 +0000 Manifest next update: Sun 07 Dec 2025 19:02:50 +0000 Files and hashes: 1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=) 2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: ykO4b28cGK4foIX1NsOQbPhZGF98/Ek/EExUOUGntp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9f:e0:5f:4c:c8:58:d8:96:4d:d3:dc:26:92:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5 Validity Not Before: Dec 6 19:02:50 2025 GMT Not After : Dec 7 19:02:50 2025 GMT Subject: CN=0b82b474673d309365fb020a7c0fec53dc0868f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:ad:a3:2a:28:98:72:04:a5:03:18:90:ac: 4d:1e:35:21:69:aa:df:ff:80:27:ad:93:b2:8c:d3: ab:50:65:4b:0a:8d:e2:b4:cd:d3:61:99:ce:a6:6d: e9:44:a2:8a:f4:53:37:88:c0:33:40:b1:11:1f:79: 30:1c:a6:c0:2f:05:da:0b:92:e4:93:d9:25:3c:d7: 01:47:ac:ea:7b:63:f6:8c:b8:b5:60:47:04:73:b8: 03:8d:72:d2:40:c7:18:f1:98:f7:53:f4:f8:56:b5: 29:29:9b:f0:05:7b:f9:39:41:cd:73:e0:b0:a2:c9: 28:75:e7:b9:7a:93:92:df:3e:60:f1:e8:dd:a8:6b: 26:93:2f:5d:60:64:79:d4:c2:eb:97:ea:73:45:6a: fb:44:e6:6c:75:6c:fc:51:11:c5:96:eb:ac:16:af: a5:86:42:7a:04:f2:49:64:51:08:b5:5a:7e:f0:e2: 95:a3:c4:c2:3d:b4:36:10:d2:33:9a:ed:0d:d1:51: ec:24:ee:79:42:37:a0:ad:03:02:fd:7d:bd:58:82: b1:ec:15:65:07:ec:1e:07:68:03:d9:6f:d9:68:5d: 31:49:8c:34:e5:6e:7c:d9:3a:0f:a1:18:54:61:81: 19:8d:ab:4b:41:fa:27:0b:53:96:ba:32:04:6f:37: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:82:B4:74:67:3D:30:93:65:FB:02:0A:7C:0F:EC:53:DC:08:68:F3 X509v3 Authority Key Identifier: keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:52:cc:28:0d:39:3d:ba:cb:1a:92:80:b8:a8:29:1c:14:6e: 77:00:c8:03:21:77:25:c1:f9:cd:b8:fc:c3:06:4a:ad:e5:9a: 1b:0b:24:ff:69:d0:4f:df:e2:4d:50:d0:4a:7d:cf:80:77:7e: ea:cb:a9:ed:32:d2:be:b8:c6:cc:c1:23:d8:be:f1:61:3d:0e: ae:48:b0:53:93:b1:87:c6:ad:32:d2:43:ce:d3:e9:84:94:0e: f0:bc:35:1d:5a:33:3b:fb:59:11:47:2c:0e:ed:ec:83:b2:a7: d9:bd:6c:de:ce:5c:6d:bb:c3:73:64:ac:03:e8:8f:92:a6:f9: 5e:96:3b:18:d1:47:58:54:cf:4f:a5:01:2b:23:82:a7:17:31: e9:16:21:97:c0:99:33:df:00:6a:c8:ea:64:22:1d:c3:1c:ed: 8f:c4:36:cd:2f:47:37:93:67:05:b9:79:69:25:89:d1:84:c9: d6:c8:c6:37:46:a9:99:3a:49:24:01:d3:2a:55:17:72:f0:11: 4a:dd:ac:45:29:e7:e6:90:61:0a:cd:b8:ff:b3:aa:35:66:57: a7:27:9c:0c:09:0e:38:95:9c:87:bb:3a:2d:d0:54:28:c0:be: cf:91:3e:dd:b3:97:80:c2:66:1f:fe:0b:fa:3c:11:0d:85:51: cf:62:2e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5/gX0zIWNiWTdPcJpL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJjOTNmMTU4MGZjOTUyNzRkOTgzOTQwZjNlZmFlZGUz MDRhZTUwHhcNMjUxMjA2MTkwMjUwWhcNMjUxMjA3MTkwMjUwWjAzMTEwLwYDVQQD EygwYjgyYjQ3NDY3M2QzMDkzNjVmYjAyMGE3YzBmZWM1M2RjMDg2OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEOtoyoomHIEpQMYkKxNHjUhaarf /4AnrZOyjNOrUGVLCo3itM3TYZnOpm3pRKKK9FM3iMAzQLERH3kwHKbALwXaC5Lk k9klPNcBR6zqe2P2jLi1YEcEc7gDjXLSQMcY8Zj3U/T4VrUpKZvwBXv5OUHNc+Cw oskodee5epOS3z5g8ejdqGsmky9dYGR51MLrl+pzRWr7ROZsdWz8URHFluusFq+l hkJ6BPJJZFEItVp+8OKVo8TCPbQ2ENIzmu0N0VHsJO55QjegrQMC/X29WIKx7BVl B+weB2gD2W/ZaF0xSYw05W582ToPoRhUYYEZjatLQfonC1OWujIEbzcwhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuCtHRnPTCTZfsCCnwP7FPcCGjzMB8GA1UdIwQY MBaAFFcryT8VgPyVJ02YOUDz767eMErlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWY1NWMtNjAzMi00MWMyLWJhYTQt MTA4MGU4NjVlYzZjLzEvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWY1NWMtNjAzMi00MWMyLWJhYTQtMTA4MGU4NjVlYzZj LzEvVnl2SlB4V0FfSlVuVFpnNVFQUHZydDR3U3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVLMKA05 PbrLGpKAuKgpHBRudwDIAyF3JcH5zbj8wwZKreWaGwsk/2nQT9/iTVDQSn3PgHd+ 6sup7TLSvrjGzMEj2L7xYT0OrkiwU5Oxh8atMtJDztPphJQO8Lw1HVozO/tZEUcs Du3sg7Kn2b1s3s5cbbvDc2SsA+iPkqb5XpY7GNFHWFTPT6UBKyOCpxcx6RYhl8CZ M98AasjqZCIdwxztj8Q2zS9HN5NnBbl5aSWJ0YTJ1sjGN0apmTpJJAHTKlUXcvAR St2sRSnn5pBhCs24/7OqNWZXpyecDAkOOJWch7s6LdBUKMC+z5E+3bOXgMJmH/4L +jwRDYVRz2Iugw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:00 2025 by rpki-client