This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft File: viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json) Hash identifier: f58+PLViE5KX7vpE7YIrctnENJZBYGlXhIwWeRt6Jas= Subject key identifier: 37:64:F6:CD:E2:05:8C:A9:B6:EA:B6:25:42:EA:F0:9A:BB:28:1C:EA Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A Certificate issuer: /CN=be2cac78d75db18e73cae03e1abe59874952931a Certificate serial: 019AF12E788DA2134D05DB6AC4E0094AB69B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft Manifest number: 1474 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: Rxf1wjvuGrxbBYsA7uTqPew8bOA+av0kkpWvP5BJ01o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:8d:a2:13:4d:05:db:6a:c4:e0:09:4a:b6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=3764f6cde2058ca9b6eab62542eaf09abb281cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:0e:a5:43:2e:2d:e4:43:14:5f:65:a9:90: d5:b7:11:c5:90:0a:a7:a9:23:46:3b:66:18:ca:f6: 33:37:16:30:fe:cd:31:fa:bb:4e:69:27:67:5e:6e: 19:7c:2b:ff:78:7e:bc:e8:fd:be:ec:6e:bc:33:f6: f2:33:82:ad:e4:29:c2:f8:06:48:e7:fd:15:d9:18: b6:42:7e:de:65:c9:f6:11:f7:ff:08:e2:66:bb:32: 2a:77:82:03:0a:0d:8d:61:fd:47:03:8f:b7:32:38: 2a:be:a9:f8:bd:7c:23:b6:12:a6:51:78:a5:3b:c2: d4:9a:df:07:de:5c:f8:03:43:2b:a4:3c:07:96:a2: 82:66:79:91:86:20:24:68:c2:02:d7:e8:06:0c:15: 6d:fb:a4:48:73:d5:2e:76:32:01:9a:ab:e4:c2:4e: 9d:0e:dd:da:d1:b5:e9:75:5d:d2:09:d3:81:26:55: 4b:b1:6e:52:b6:68:dc:c8:38:1e:c0:85:8a:9e:84: cd:ae:77:72:74:2c:89:8a:62:92:54:a7:ea:4d:6f: dc:41:5c:d8:75:f2:a4:6f:6f:81:6a:92:07:a5:b9: 64:e7:c6:2b:c1:6f:af:dd:5e:64:d3:21:8d:de:6e: 34:c4:23:b4:5f:6c:69:89:2b:fc:94:15:e0:ac:50: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:F6:CD:E2:05:8C:A9:B6:EA:B6:25:42:EA:F0:9A:BB:28:1C:EA X509v3 Authority Key Identifier: keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e3:b2:e7:60:22:ef:30:60:17:9d:ab:09:23:a8:63:67:26: a7:20:e3:bd:98:45:18:13:8c:c3:c3:91:90:c3:7d:1f:1a:c4: e5:c5:f3:ed:09:e0:da:fd:fb:2e:52:40:04:58:3e:c8:11:17: 32:51:3e:45:6a:4e:7e:e8:e6:8a:3a:76:f4:7e:c0:da:08:a2: 7a:6d:96:72:e9:90:7c:24:8a:7e:15:d8:25:92:f4:86:1b:a1: 72:c3:4e:f0:51:19:86:9f:76:cc:9e:49:da:13:69:0a:a1:9f: f3:08:fd:d0:9d:59:b0:5b:8c:43:e4:bd:4e:e6:1d:5c:f5:ef: 42:67:ad:de:f6:b2:ff:89:d2:0f:80:b5:d8:00:f5:3e:e2:8b: ad:3c:62:de:5b:ac:a7:8d:ff:87:2b:c6:68:f1:d9:59:99:ba: d6:26:0d:4e:9c:8e:37:48:cd:b3:d7:8e:c7:34:a6:34:1e:ca: e8:13:03:7c:d6:bb:46:ec:d0:87:79:18:1c:6f:90:82:19:b5: 27:25:cc:a8:b6:a1:fe:11:5a:c4:a9:a9:40:a4:32:53:30:7e: ea:d2:13:f7:af:65:6a:ee:12:82:f7:ab:17:33:9d:f5:fe:14: e1:9c:c0:23:43:44:39:87:4d:14:28:53:c4:f4:d2:22:68:8e: d4:9a:46:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLniNohNNBdtqxOAJSrabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMmNhYzc4ZDc1ZGIxOGU3M2NhZTAzZTFhYmU1OTg3NDk1 MjkzMWEwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EygzNzY0ZjZjZGUyMDU4Y2E5YjZlYWI2MjU0MmVhZjA5YWJiMjgxY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptoOpUMuLeRDFF9lqZDVtxHFkAqn qSNGO2YYyvYzNxYw/s0x+rtOaSdnXm4ZfCv/eH686P2+7G68M/byM4Kt5CnC+AZI 5/0V2Ri2Qn7eZcn2Eff/COJmuzIqd4IDCg2NYf1HA4+3Mjgqvqn4vXwjthKmUXil O8LUmt8H3lz4A0MrpDwHlqKCZnmRhiAkaMIC1+gGDBVt+6RIc9UudjIBmqvkwk6d Dt3a0bXpdV3SCdOBJlVLsW5StmjcyDgewIWKnoTNrndydCyJimKSVKfqTW/cQVzY dfKkb2+BapIHpblk58YrwW+v3V5k0yGN3m40xCO0X2xpiSv8lBXgrFCcOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdk9s3iBYyptuq2JULq8Jq7KBzqMB8GA1UdIwQY MBaAFL4srHjXXbGOc8rgPhq+WYdJUpMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDct ODQyMDM4MTI0NzYzLzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85OTg4ODYtMmY5OC00MGM2LWI4ZDctODQyMDM4MTI0NzYz LzEvdml5c2VOZGRzWTV6eXVBLUdyNVpoMGxTa3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOOy52Ai 7zBgF52rCSOoY2cmpyDjvZhFGBOMw8ORkMN9HxrE5cXz7Qng2v37LlJABFg+yBEX MlE+RWpOfujmijp29H7A2giiem2WcumQfCSKfhXYJZL0hhuhcsNO8FEZhp92zJ5J 2hNpCqGf8wj90J1ZsFuMQ+S9TuYdXPXvQmet3vay/4nSD4C12AD1PuKLrTxi3lus p43/hyvGaPHZWZm61iYNTpyON0jNs9eOxzSmNB7K6BMDfNa7RuzQh3kYHG+Qghm1 JyXMqLah/hFaxKmpQKQyUzB+6tIT969lau4SgverFzOd9f4U4ZzAI0NEOYdNFChT xPTSImiO1JpGIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:39 2025 by rpki-client