This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json) Hash identifier: 8qLwpruDwVdYYxLpbguM1OCSbXi21GAOqIGfizZjnGU= Subject key identifier: AA:ED:C2:AD:B5:8C:51:42:6D:F5:2E:EA:FC:1D:9D:1C:DD:48:6C:82 Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d Certificate serial: 019AF27712D391A6EE7ABCE317D08856F377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=) 2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: IfmKAbFIVl433Au/6kkxDe4AJwfgqPw1kn4Z1AdwZbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:12:d3:91:a6:ee:7a:bc:e3:17:d0:88:56:f3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=aaedc2adb58c51426df52eeafc1d9d1cdd486c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:ee:e6:b0:d1:0f:b2:ea:29:bd:c8:3b:54: 96:63:40:9d:f3:e3:2d:72:23:2d:e8:1c:6f:59:a7: 31:ce:4e:b9:58:9c:07:b5:d5:2d:c4:5e:33:0a:39: 1b:a7:da:27:0b:c0:23:f7:2f:bd:9f:91:de:aa:37: 60:67:9b:ea:04:c7:8e:3e:79:1e:d9:e2:09:7a:55: 83:d6:2b:44:14:8f:34:6e:0d:37:33:f7:f3:6a:04: c9:cd:52:07:86:fd:42:0a:9c:d4:12:8a:8c:ad:19: dc:39:73:92:02:b6:d9:ff:aa:b1:58:d5:cc:2d:72: 6f:2c:26:6c:d1:96:ec:1e:00:14:01:9f:eb:83:5f: 65:ae:2c:e9:c5:68:06:92:12:58:bf:2c:4e:0a:82: 21:c7:91:d7:2e:9f:c0:8e:2a:3f:8c:a2:f9:48:b1: 13:4f:d1:fb:72:f2:1f:bf:2d:77:73:64:67:f9:5a: 5f:d6:cf:43:a7:29:ab:02:d5:9b:03:8c:74:10:bc: 5b:a3:e0:3b:14:32:35:29:58:f1:cf:b3:43:df:33: 61:54:f6:6d:59:57:58:d4:c1:6e:50:1d:6b:2f:61: 3b:89:11:c0:89:5c:67:13:87:f0:4e:22:97:bc:a9: 6b:f8:3c:8e:75:62:b4:32:ae:1f:34:24:d5:8a:70: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:C2:AD:B5:8C:51:42:6D:F5:2E:EA:FC:1D:9D:1C:DD:48:6C:82 X509v3 Authority Key Identifier: keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2d:2d:2d:47:f3:d4:64:21:f6:3d:b4:9e:49:32:b6:8d:4c: 93:cc:c8:3e:52:c7:25:6c:85:9e:27:20:2c:eb:fb:0f:4a:87: 3c:61:90:86:c7:84:48:4d:af:58:5b:3f:78:37:74:fa:c6:b6: 28:9b:89:1f:41:00:2f:f9:79:c9:4c:ee:3b:24:17:56:39:e8: f0:f3:ac:a2:34:1a:b4:4d:c6:d6:e4:ec:73:bf:a6:e8:27:c2: 07:38:40:17:15:68:4f:70:d4:8c:3f:da:e1:58:15:24:5b:3d: 2b:2b:82:eb:00:61:2f:80:fa:34:78:0f:44:88:3a:25:2e:13: 56:c4:a5:7f:db:57:be:7c:5c:99:ee:68:9e:5b:fc:c7:a3:81: 1d:7f:3e:fb:4e:72:44:ae:b5:62:80:50:35:fd:39:94:2b:df: 0d:da:56:6c:bc:ae:07:38:c7:6e:34:c6:0d:6f:e3:a2:ae:45: 83:e6:cd:85:0b:82:8e:51:49:23:00:d6:2a:20:51:a8:c9:b4: d1:34:e7:b0:ff:47:34:cd:df:25:09:28:51:e9:0c:5b:7e:06: 76:f0:25:bc:59:2c:8c:0a:27:5a:8c:9f:51:80:a1:5b:66:28: e6:f0:16:c3:fd:88:a7:6e:05:2a:58:74:9e:47:94:ed:bf:ce: b1:69:36:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxLTkabuerzjF9CIVvN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk MTY4N2QwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EyhhYWVkYzJhZGI1OGM1MTQyNmRmNTJlZWFmYzFkOWQxY2RkNDg2YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3u5rDRD7LqKb3IO1SWY0Cd8+Mt ciMt6BxvWacxzk65WJwHtdUtxF4zCjkbp9onC8Aj9y+9n5HeqjdgZ5vqBMeOPnke 2eIJelWD1itEFI80bg03M/fzagTJzVIHhv1CCpzUEoqMrRncOXOSArbZ/6qxWNXM LXJvLCZs0ZbsHgAUAZ/rg19lrizpxWgGkhJYvyxOCoIhx5HXLp/Ajio/jKL5SLET T9H7cvIfvy13c2Rn+Vpf1s9DpymrAtWbA4x0ELxbo+A7FDI1KVjxz7ND3zNhVPZt WVdY1MFuUB1rL2E7iRHAiVxnE4fwTiKXvKlr+DyOdWK0Mq4fNCTVinA75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrtwq21jFFCbfUu6vwdnRzdSGyCMB8GA1UdIwQY MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC0tLUfz 1GQh9j20nkkyto1Mk8zIPlLHJWyFnicgLOv7D0qHPGGQhseESE2vWFs/eDd0+sa2 KJuJH0EAL/l5yUzuOyQXVjno8POsojQatE3G1uTsc7+m6CfCBzhAFxVoT3DUjD/a 4VgVJFs9KyuC6wBhL4D6NHgPRIg6JS4TVsSlf9tXvnxcme5onlv8x6OBHX8++05y RK61YoBQNf05lCvfDdpWbLyuBzjHbjTGDW/joq5Fg+bNhQuCjlFJIwDWKiBRqMm0 0TTnsP9HNM3fJQkoUekMW34GdvAlvFksjAonWoyfUYChW2Yo5vAWw/2Ip24FKlh0 nkeU7b/OsWk2mg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:31 2025 by rpki-client