This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft File: VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json) Hash identifier: VzVigEJTHnsWqVwJUsIl09nvMXLSNEX8I6RVuVz1Nsk= Subject key identifier: B1:B1:DF:C5:12:60:70:51:13:9C:B8:46:1B:04:7D:7C:A9:06:FD:37 Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03 Certificate issuer: /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603 Certificate serial: 019AF209845240824F94C4899EFE1B7296C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft Manifest number: 16B1 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=) 2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: IN9TdXwEMtTQ5/sTBfZh/N0UwAiCCN4yYIhJYS1RkQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:52:40:82:4f:94:c4:89:9e:fe:1b:72:96:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=b1b1dfc512607051139cb8461b047d7ca906fd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:5f:ac:02:b3:4b:48:81:73:06:d9:90:26: 8a:81:32:42:3f:05:b1:50:d9:29:97:74:c5:05:94: bc:ea:0f:8c:2a:ad:9a:39:8c:c5:94:3e:3c:80:ce: c6:f5:dd:fc:3f:75:05:fc:4a:e5:75:7c:be:e7:48: 55:d1:bd:20:63:00:a3:5e:4e:a6:2b:2e:f0:97:c9: 9b:39:df:46:bf:70:1a:4d:b5:74:17:04:17:e5:94: 61:c5:70:5a:12:52:52:c3:a4:ab:64:a6:53:4a:f3: 32:ad:b4:c3:da:64:78:1e:41:69:f7:fb:4e:da:a1: eb:aa:8b:43:1f:81:86:d7:fd:b8:ee:d6:78:ad:ed: e4:d8:5e:95:e6:b8:c8:ed:b6:d9:39:4d:27:d5:91: df:c7:d8:c5:63:1d:8d:e5:27:f6:10:89:15:83:14: 30:84:6b:5f:e9:fd:2b:b0:f3:04:c8:03:ca:65:c6: f9:e4:c4:5d:83:af:fe:e8:02:33:7d:be:6e:9f:b1: cd:81:05:97:47:bd:37:f5:35:eb:67:1b:1f:62:d6: 30:dc:46:3b:7c:4d:00:91:87:90:42:07:94:42:06: 20:25:3c:2f:83:3a:3c:50:8e:6f:de:ba:06:4f:0b: 63:8d:75:72:2d:b1:87:a1:7a:5c:b9:65:e3:bc:b8: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:DF:C5:12:60:70:51:13:9C:B8:46:1B:04:7D:7C:A9:06:FD:37 X509v3 Authority Key Identifier: keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2f:e2:39:d4:80:ce:af:e4:f5:b1:51:06:bb:83:22:6c:fd: 75:97:d6:87:3d:73:e3:18:50:0d:5d:9c:17:d0:07:af:7e:ce: d4:f7:45:a6:23:f8:fc:2d:97:e1:f1:7f:f3:36:70:da:53:b3: c2:3b:cc:4a:b5:62:73:88:da:04:c4:1a:15:53:86:4b:62:52: f1:6f:c8:21:02:a7:54:05:73:4e:a7:f1:1f:1d:44:c0:5b:88: 2e:9d:46:fd:38:f6:7a:82:31:ce:dc:63:87:95:ce:58:b0:51: 90:90:bb:09:2f:c8:54:49:71:43:f0:93:3e:8f:35:02:fa:cf: 8a:d0:7a:59:c9:f4:02:20:3d:54:3a:a1:8d:55:03:ab:27:44: d4:fb:f3:54:28:fb:5c:89:fc:09:c6:73:31:b2:a7:4d:72:71: ac:9a:6c:96:dd:b1:e0:e0:f4:e9:b2:d4:a3:6d:e8:7c:c9:cb: 02:5b:1f:da:22:ce:0b:18:9f:ae:c1:60:fe:7e:0b:e7:b7:a6: 27:f1:ec:aa:2e:9a:11:c1:ad:4f:fa:df:05:20:67:d1:6d:ae: d3:68:4c:5e:36:9e:15:47:ab:f4:83:74:b6:80:da:85:6c:3a: 6f:25:17:55:03:02:2b:c3:5b:13:bf:3a:bb:36:67:0c:3e:40: 10:62:b3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYRSQIJPlMSJnv4bcpbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OGRjYzVkN2U2ODg3Yzk0MWFlM2IyOGNlM2NiZjJmYjRm MjA2MDMwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhiMWIxZGZjNTEyNjA3MDUxMTM5Y2I4NDYxYjA0N2Q3Y2E5MDZmZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuVfrAKzS0iBcwbZkCaKgTJCPwWx UNkpl3TFBZS86g+MKq2aOYzFlD48gM7G9d38P3UF/ErldXy+50hV0b0gYwCjXk6m Ky7wl8mbOd9Gv3AaTbV0FwQX5ZRhxXBaElJSw6SrZKZTSvMyrbTD2mR4HkFp9/tO 2qHrqotDH4GG1/247tZ4re3k2F6V5rjI7bbZOU0n1ZHfx9jFYx2N5Sf2EIkVgxQw hGtf6f0rsPMEyAPKZcb55MRdg6/+6AIzfb5un7HNgQWXR7039TXrZxsfYtYw3EY7 fE0AkYeQQgeUQgYgJTwvgzo8UI5v3roGTwtjjXVyLbGHoXpcuWXjvLgKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGx38USYHBRE5y4RhsEfXypBv03MB8GA1UdIwQY MBaAFFWNzF1+aIfJQa47KM48vy+08gYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTIt YmQ5YTNiNTVmMTI1LzEvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mMDRhNTctNWVlOS00YjZhLTlkYTItYmQ5YTNiNTVmMTI1 LzEvVlkzTVhYNW9oOGxCcmpzb3pqeV9MN1R5QmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS/iOdSA zq/k9bFRBruDImz9dZfWhz1z4xhQDV2cF9AHr37O1PdFpiP4/C2X4fF/8zZw2lOz wjvMSrVic4jaBMQaFVOGS2JS8W/IIQKnVAVzTqfxHx1EwFuILp1G/Tj2eoIxztxj h5XOWLBRkJC7CS/IVElxQ/CTPo81AvrPitB6Wcn0AiA9VDqhjVUDqydE1PvzVCj7 XIn8CcZzMbKnTXJxrJpslt2x4OD06bLUo23ofMnLAlsf2iLOCxifrsFg/n4L57em J/Hsqi6aEcGtT/rfBSBn0W2u02hMXjaeFUer9IN0toDahWw6byUXVQMCK8NbE786 uzZnDD5AEGKzfA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:34 2025 by rpki-client