This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft File: vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json) Hash identifier: HRtVzTLD2i6jYAtyipFwV/HeP4veSEIB/Z63iHOSfgE= Subject key identifier: 8A:56:BE:A4:95:C5:F5:AC:6B:1D:95:E9:83:6B:59:AB:AA:61:12:C2 Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07 Certificate issuer: /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407 Certificate serial: 019B3E6DBD7470DFF560D2C5DCA564011E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft Manifest number: 044A Signing time: Sun 21 Dec 2025 01:02:17 +0000 Manifest this update: Sun 21 Dec 2025 01:02:17 +0000 Manifest next update: Mon 22 Dec 2025 01:02:17 +0000 Files and hashes: 1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: pSRhY69ijx9vQaMwDP6CPhQFafeD8XBoRAeVyzai350=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:bd:74:70:df:f5:60:d2:c5:dc:a5:64:01:1e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407 Validity Not Before: Dec 21 01:02:17 2025 GMT Not After : Dec 22 01:02:17 2025 GMT Subject: CN=8a56bea495c5f5ac6b1d95e9836b59abaa6112c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:56:da:41:54:b7:1c:8a:1a:9d:eb:06:6a: 0d:ec:ea:eb:d4:30:ef:11:90:e0:c9:26:67:52:bf: f0:c9:f0:78:b7:39:bc:70:00:18:7e:35:bf:9f:41: f1:5d:94:d0:cc:53:41:ba:43:58:ab:73:23:f4:77: aa:a9:b8:e8:de:e7:54:76:64:8e:07:4d:34:38:1c: 4d:6d:03:e3:ba:df:45:59:4c:6b:ad:4b:03:5c:f6: 40:98:1c:e4:34:24:d7:d7:80:79:72:aa:f3:7b:c6: 60:d8:62:21:fb:23:a3:dc:1e:68:c5:59:9f:aa:a9: 1d:a8:cb:49:29:c6:b2:b0:88:b4:4c:37:32:b7:fe: b7:15:53:68:92:5b:d7:71:6a:b3:fd:96:38:35:59: 20:11:8d:2b:64:d0:7b:d9:f1:a2:cd:17:54:0c:89: a6:6e:b8:31:3b:21:5d:37:1b:82:96:70:96:a8:dd: ed:a0:f1:dc:bb:2e:5e:3b:ac:1b:66:15:73:4b:1e: 57:39:a4:66:60:03:2d:06:d9:53:c3:3d:78:7b:18: 6d:ce:ed:58:4b:9f:a2:e6:f0:ed:bf:87:83:e9:bd: 23:ea:60:e1:0c:1d:13:7a:2d:da:f5:55:ee:6b:65: 7c:d9:a8:ca:18:b3:14:42:fa:73:e8:5f:4e:0d:c9: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:BE:A4:95:C5:F5:AC:6B:1D:95:E9:83:6B:59:AB:AA:61:12:C2 X509v3 Authority Key Identifier: keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c3:9e:36:f1:17:17:63:28:c8:d0:6e:76:1e:f9:c2:3e:60: 0e:77:e5:d5:b7:5c:5f:18:0e:cb:1e:10:6c:d6:e2:eb:0e:24: 5b:b4:ab:ff:6e:77:98:d1:19:de:36:00:1b:fa:23:72:1f:51: 8a:0a:1c:2a:9a:25:0c:7f:8f:73:69:57:8f:91:8c:b5:a9:ad: 15:6d:3f:49:8d:fb:7b:3e:ef:c4:ef:80:11:17:c6:fb:4e:df: c0:7e:59:c2:8c:b8:82:91:fc:5b:15:db:41:73:2d:4e:55:20: b2:8f:75:c0:bf:34:9e:ef:a9:68:9e:38:db:bb:14:c7:ed:79: 9f:a2:26:e0:a2:45:30:fa:eb:2d:36:3d:63:5d:0d:eb:b5:b4: 1e:93:a6:0b:21:ab:5a:9f:65:37:f4:ce:62:b6:a0:86:ad:bb: 12:c8:96:24:22:54:30:2d:30:38:ab:cb:3d:16:20:da:0e:11: ad:a9:ff:9d:dc:96:88:e6:86:39:e8:67:15:d6:2e:ea:4e:fe: 96:13:1f:ef:e0:7d:92:85:46:e9:fc:e2:d0:b9:e5:09:d2:32: a4:0c:ad:59:25:ec:bb:bf:43:4d:6f:8e:dc:26:33:e3:1d:7f: cf:d8:95:cb:17:a0:3b:44:7e:f6:cc:8f:3a:77:3e:18:57:45: b8:0a:6b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bb10cN/1YNLF3KVkAR4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm NWY0MDcwHhcNMjUxMjIxMDEwMjE3WhcNMjUxMjIyMDEwMjE3WjAzMTEwLwYDVQQD Eyg4YTU2YmVhNDk1YzVmNWFjNmIxZDk1ZTk4MzZiNTlhYmFhNjExMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkFW2kFUtxyKGp3rBmoN7Orr1DDv EZDgySZnUr/wyfB4tzm8cAAYfjW/n0HxXZTQzFNBukNYq3Mj9Heqqbjo3udUdmSO B000OBxNbQPjut9FWUxrrUsDXPZAmBzkNCTX14B5cqrze8Zg2GIh+yOj3B5oxVmf qqkdqMtJKcaysIi0TDcyt/63FVNoklvXcWqz/ZY4NVkgEY0rZNB72fGizRdUDImm brgxOyFdNxuClnCWqN3toPHcuy5eO6wbZhVzSx5XOaRmYAMtBtlTwz14exhtzu1Y S5+i5vDtv4eD6b0j6mDhDB0Tei3a9VXua2V82ajKGLMUQvpz6F9ODclwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpWvqSVxfWsax2V6YNrWauqYRLCMB8GA1UdIwQY MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcOeNvEX F2MoyNBudh75wj5gDnfl1bdcXxgOyx4QbNbi6w4kW7Sr/253mNEZ3jYAG/ojch9R igocKpolDH+Pc2lXj5GMtamtFW0/SY37ez7vxO+AERfG+07fwH5Zwoy4gpH8WxXb QXMtTlUgso91wL80nu+paJ4427sUx+15n6Im4KJFMPrrLTY9Y10N67W0HpOmCyGr Wp9lN/TOYraghq27EsiWJCJUMC0wOKvLPRYg2g4Rran/ndyWiOaGOehnFdYu6k7+ lhMf7+B9koVG6fzi0LnlCdIypAytWSXsu79DTW+O3CYz4x1/z9iVyxegO0R+9syP Onc+GFdFuApr/w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:52:43 2025 by rpki-client