This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft File: viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json) Hash identifier: f9gokhH52+0SDg2DZ5pL3Qvye8N2E/ciJtBWewpk1eM= Subject key identifier: D3:8A:F3:E3:E2:C9:12:92:69:91:16:2E:F1:9F:D1:CB:A4:20:7E:BA Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A Certificate issuer: /CN=be2cac78d75db18e73cae03e1abe59874952931a Certificate serial: 019B424AA6DA6D3DEC473F964EF8F8FFD00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft Manifest number: 149E Signing time: Sun 21 Dec 2025 19:02:27 +0000 Manifest this update: Sun 21 Dec 2025 19:02:27 +0000 Manifest next update: Mon 22 Dec 2025 19:02:27 +0000 Files and hashes: 1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: 3dZYma4I1aoGHGzCCXvFGI252tWe0Vzi+6DpNTNIdco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:a6:da:6d:3d:ec:47:3f:96:4e:f8:f8:ff:d0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a Validity Not Before: Dec 21 19:02:27 2025 GMT Not After : Dec 22 19:02:27 2025 GMT Subject: CN=d38af3e3e2c912926991162ef19fd1cba4207eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:05:a4:08:6c:9e:20:b5:9c:bd:db:1c:77: 86:cb:7e:fd:f9:9f:8f:da:88:80:2c:21:c2:56:ae: 9f:01:d6:88:94:47:8c:85:be:dc:53:9e:68:ad:52: ef:60:34:81:39:c3:41:ad:54:5b:1a:9a:6f:10:03: 92:c3:73:82:27:3a:5c:d8:0f:00:50:1e:65:ea:3e: bd:f8:8e:38:fd:8a:eb:2b:8c:37:11:db:6c:4e:72: 97:0c:11:f1:f6:68:bd:45:cc:1c:69:bc:17:25:61: b7:92:75:f6:a6:5d:0f:c1:4f:ef:e5:9e:76:aa:c7: 98:c1:8e:cb:fb:84:18:85:09:9c:f7:d9:d4:3e:1f: 4a:73:d4:77:73:a5:b4:a3:36:72:d3:77:6a:29:08: 4c:f0:de:6c:a3:72:c9:0c:67:52:06:90:1e:79:5f: 87:de:e4:af:b8:39:5e:b5:72:33:19:29:82:ed:92: 7a:51:f8:c9:02:28:d3:ca:35:a2:4c:90:81:e6:f4: 5f:f9:20:31:11:98:4c:a8:1e:0a:c3:7e:85:e4:65: 16:61:ee:55:a8:cd:00:e3:b1:2c:9c:ad:83:b8:c8: e7:2e:cd:61:52:ea:a8:ff:d8:49:6b:d5:c8:c1:fe: e1:4e:3b:99:59:64:91:8e:44:82:19:40:ce:2b:69: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:F3:E3:E2:C9:12:92:69:91:16:2E:F1:9F:D1:CB:A4:20:7E:BA X509v3 Authority Key Identifier: keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1c:7f:52:50:ae:08:9f:b4:c4:31:2c:9b:ed:05:76:90:4d: 8f:8b:a3:d8:57:1f:31:5d:3f:a5:13:83:2f:44:8f:e2:26:81: 7b:57:9e:b6:39:9b:e3:ba:3a:60:a5:e8:f0:fd:a7:df:d4:a7: 5c:31:dc:a4:e0:90:03:23:b1:1c:dd:6e:19:bb:d3:16:0a:1d: 3a:90:aa:6b:a4:70:e3:47:4a:90:38:91:8d:a5:8f:e7:d6:f6: 90:b6:3e:da:80:d9:0a:77:d8:82:6d:36:0f:9f:31:17:83:5d: f0:8a:70:7d:e2:4f:d6:25:5c:65:58:87:85:30:ec:30:45:7c: 02:aa:50:2c:ed:b7:68:b3:09:16:df:81:78:d6:4f:a3:ae:a0: c6:bc:47:b4:cb:28:d8:3e:d5:19:8b:6c:77:df:65:b2:67:23: 27:fb:39:89:24:86:e4:1d:e9:d1:df:85:09:f8:6d:c1:99:a7: 40:c1:24:8c:dd:38:87:f5:cb:74:c1:7f:e6:0b:d1:95:e2:03: c4:e2:23:74:a0:88:9b:17:3a:38:c7:f3:be:6b:5e:6c:49:c3: 7c:6d:20:d2:38:23:5f:68:56:c5:b3:15:80:97:76:32:61:df: 09:7a:aa:fc:2b:25:22:1f:3c:4e:1e:32:55:de:9b:49:ad:50: a6:6c:3a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqbabT3sRz+WTvj4/9ALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMmNhYzc4ZDc1ZGIxOGU3M2NhZTAzZTFhYmU1OTg3NDk1 MjkzMWEwHhcNMjUxMjIxMTkwMjI3WhcNMjUxMjIyMTkwMjI3WjAzMTEwLwYDVQQD EyhkMzhhZjNlM2UyYzkxMjkyNjk5MTE2MmVmMTlmZDFjYmE0MjA3ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+4FpAhsniC1nL3bHHeGy379+Z+P 2oiALCHCVq6fAdaIlEeMhb7cU55orVLvYDSBOcNBrVRbGppvEAOSw3OCJzpc2A8A UB5l6j69+I44/YrrK4w3EdtsTnKXDBHx9mi9RcwcabwXJWG3knX2pl0PwU/v5Z52 qseYwY7L+4QYhQmc99nUPh9Kc9R3c6W0ozZy03dqKQhM8N5so3LJDGdSBpAeeV+H 3uSvuDletXIzGSmC7ZJ6UfjJAijTyjWiTJCB5vRf+SAxEZhMqB4Kw36F5GUWYe5V qM0A47EsnK2DuMjnLs1hUuqo/9hJa9XIwf7hTjuZWWSRjkSCGUDOK2nTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOK8+PiyRKSaZEWLvGf0cukIH66MB8GA1UdIwQY MBaAFL4srHjXXbGOc8rgPhq+WYdJUpMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDct ODQyMDM4MTI0NzYzLzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDctODQyMDM4MTI0NzYz LzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBx/UlCu CJ+0xDEsm+0FdpBNj4uj2FcfMV0/pRODL0SP4iaBe1eetjmb47o6YKXo8P2n39Sn XDHcpOCQAyOxHN1uGbvTFgodOpCqa6Rw40dKkDiRjaWP59b2kLY+2oDZCnfYgm02 D58xF4Nd8IpwfeJP1iVcZViHhTDsMEV8AqpQLO23aLMJFt+BeNZPo66gxrxHtMso 2D7VGYtsd99lsmcjJ/s5iSSG5B3p0d+FCfhtwZmnQMEkjN04h/XLdMF/5gvRleID xOIjdKCImxc6OMfzvmtebEnDfG0g0jgjX2hWxbMVgJd2MmHfCXqq/CslIh88Th4y Vd6bSa1Qpmw6HQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:41:26 2025 by rpki-client