This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json) Hash identifier: SPhzFzISCVSGAFlvFAOc6gVngqun6GfOAELdj03RH7M= Subject key identifier: B7:02:D6:65:D8:4B:4F:DE:BD:F0:B4:4F:12:2D:5F:D8:87:32:D8:30 Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5 Certificate serial: 019B40FFDA72577BC8E7BC42F4F16DAC6DB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft Manifest number: 0445 Signing time: Sun 21 Dec 2025 13:01:07 +0000 Manifest this update: Sun 21 Dec 2025 13:01:07 +0000 Manifest next update: Mon 22 Dec 2025 13:01:07 +0000 Files and hashes: 1: 5kqLZgQxvPjZ3-R1JIK5dfgcysw.roa (hash: lJZUCOq4a1uyWOYuADdFBX3wVMiqs3oDIl7Z99UtsuA=) 2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: DESOOGt+oqR3HTYpohmf9H11uOZwCPqRHH5P1QUh+C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:da:72:57:7b:c8:e7:bc:42:f4:f1:6d:ac:6d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5 Validity Not Before: Dec 21 13:01:07 2025 GMT Not After : Dec 22 13:01:07 2025 GMT Subject: CN=b702d665d84b4fdebdf0b44f122d5fd88732d830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:8b:07:06:5c:f0:f5:42:a8:b1:15:10:d4: 9c:91:6a:89:93:5d:d4:d4:b3:65:c3:cf:65:7e:34: a1:85:f6:40:00:70:31:ec:e2:40:25:d5:60:68:e5: cd:cb:d6:f1:1c:2e:88:9f:e0:3a:a2:b7:87:9d:15: ca:e9:3d:b4:3a:18:fe:16:65:bd:eb:31:e3:69:ba: 97:cd:a9:19:fc:39:b8:b9:71:8a:99:6f:13:2b:09: a1:d8:87:6b:6f:47:5e:00:fa:20:12:38:8d:ab:dd: 16:ee:3e:c7:cc:48:be:03:2b:19:79:2b:78:54:0d: 12:ef:4c:fe:80:29:07:46:df:af:1b:ec:73:cd:5d: d0:44:7e:d3:d4:3b:26:37:23:2c:84:fa:89:88:8e: 70:17:2e:9a:49:c0:e1:6c:69:3d:1f:a5:00:1b:5f: b6:b6:09:75:b6:89:94:01:4a:85:b6:91:1e:95:20: a7:cf:ad:b5:8e:b1:96:a2:ab:d0:b6:20:8c:40:33: 05:a7:fc:eb:ff:c8:34:fa:89:e2:30:ab:52:d2:07: 14:94:e2:26:14:b4:0a:e7:9b:00:d3:50:cd:e3:ea: d4:56:e9:df:5b:61:c0:28:e0:0f:6e:70:b7:17:1a: 1e:1a:c9:e4:1a:42:7e:80:61:46:55:78:de:b0:8c: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:D6:65:D8:4B:4F:DE:BD:F0:B4:4F:12:2D:5F:D8:87:32:D8:30 X509v3 Authority Key Identifier: keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:32:83:ae:63:01:82:1d:85:c5:fc:0c:a1:c1:f2:d6:9f: cb:f3:46:ed:61:4b:53:59:89:f7:12:90:c6:f8:b4:6d:38:91: 3c:ed:6f:f9:55:c5:48:20:f2:06:04:46:b8:4e:97:5e:23:dd: c4:b9:dc:11:82:5b:20:aa:a1:cc:50:a0:0b:aa:fb:11:b4:dc: fa:1b:fb:75:2e:76:e6:46:3b:60:49:27:9d:38:fb:16:86:02: f8:a8:f8:4b:89:3a:e6:9d:a5:63:b4:91:7d:7f:65:f4:21:23: 40:b6:81:83:27:79:bf:bd:e2:76:4e:e5:33:4d:05:b6:b7:41: 41:81:7d:81:f1:a3:e7:a8:b5:c6:6f:8f:78:31:f4:a2:09:89: 62:83:28:af:77:ca:7c:ec:31:39:22:1c:bb:6a:1f:35:c2:2d: 84:fe:e0:99:70:e5:b4:70:fa:f4:9b:1f:81:c3:de:d4:a0:22: 3d:46:93:34:08:57:ec:50:b3:d5:17:87:97:bd:dc:47:89:7c: 05:09:4d:29:be:60:a7:20:db:3c:1c:3b:8c:6a:f5:1a:4a:46: e4:dd:4b:69:a1:18:06:dc:d3:94:d3:02:a1:a4:90:20:1e:c7: 57:82:36:98:0f:4d:5a:c0:c6:d6:77:73:82:f2:e4:5b:88:01: b8:a8:2a:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/9pyV3vI57xC9PFtrG21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1 OGQ2ZDUwHhcNMjUxMjIxMTMwMTA3WhcNMjUxMjIyMTMwMTA3WjAzMTEwLwYDVQQD EyhiNzAyZDY2NWQ4NGI0ZmRlYmRmMGI0NGYxMjJkNWZkODg3MzJkODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFiLBwZc8PVCqLEVENSckWqJk13U 1LNlw89lfjShhfZAAHAx7OJAJdVgaOXNy9bxHC6In+A6oreHnRXK6T20Ohj+FmW9 6zHjabqXzakZ/Dm4uXGKmW8TKwmh2Idrb0deAPogEjiNq90W7j7HzEi+AysZeSt4 VA0S70z+gCkHRt+vG+xzzV3QRH7T1DsmNyMshPqJiI5wFy6aScDhbGk9H6UAG1+2 tgl1tomUAUqFtpEelSCnz621jrGWoqvQtiCMQDMFp/zr/8g0+oniMKtS0gcUlOIm FLQK55sA01DN4+rUVunfW2HAKOAPbnC3FxoeGsnkGkJ+gGFGVXjesIz60QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcC1mXYS0/evfC0TxItX9iHMtgwMB8GA1UdIwQY MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct MTYyMGNmZGM3MTE3LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3 LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeoyg65j AYIdhcX8DKHB8tafy/NG7WFLU1mJ9xKQxvi0bTiRPO1v+VXFSCDyBgRGuE6XXiPd xLncEYJbIKqhzFCgC6r7EbTc+hv7dS525kY7YEknnTj7FoYC+Kj4S4k65p2lY7SR fX9l9CEjQLaBgyd5v73idk7lM00FtrdBQYF9gfGj56i1xm+PeDH0ogmJYoMor3fK fOwxOSIcu2ofNcIthP7gmXDltHD69JsfgcPe1KAiPUaTNAhX7FCz1ReHl73cR4l8 BQlNKb5gpyDbPBw7jGr1GkpG5N1LaaEYBtzTlNMCoaSQIB7HV4I2mA9NWsDG1ndz gvLkW4gBuKgqTw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:59:10 2025 by rpki-client