This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json) Hash identifier: 2Dd/gAQDZvfXZAsChjXote/D9Fhvlqa9n+JrTrmU3eI= Subject key identifier: 5A:16:39:51:84:69:A9:18:55:5C:D0:B3:A9:CF:FF:22:0E:61:84:E9 Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f Certificate serial: 019AF209AE42F5A4B9D1689FE9234416AB3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft Manifest number: 0DBE Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=) 2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=) 3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: YKdviSoVBPa7zcX7mAb8BnFZcakwKdu6ZrBY9bfS31k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ae:42:f5:a4:b9:d1:68:9f:e9:23:44:16:ab:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572b4ed92682d718a8fc4488140027406960795f Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=5a1639518469a918555cd0b3a9cfff220e6184e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:74:1f:b1:cb:4f:8a:ee:ae:f6:53:ae:9e: 15:2a:bb:33:e3:14:38:c5:24:c7:82:10:46:14:91: 63:63:0a:47:c0:ca:39:f1:53:22:f2:4c:6d:40:28: 52:bf:91:3d:13:4a:85:26:33:b1:47:35:3e:ff:61: 1b:03:e4:02:de:e7:a3:ec:95:67:49:d3:31:f1:9e: 62:89:4b:4c:d9:a5:e2:d6:c0:72:9b:81:de:5e:16: 77:76:22:20:68:a0:9d:23:cd:e4:d0:ec:7e:e9:c5: dd:41:9c:8e:60:16:23:6b:33:4d:79:da:1a:eb:7f: 1e:24:a3:5d:18:41:79:93:4a:24:d7:9c:e7:07:ce: 92:65:da:45:5a:34:a0:cd:d6:2d:99:ae:cd:fd:c3: 91:4b:d0:f2:46:8d:67:2a:52:a6:19:c7:e6:fb:60: 24:cb:4a:f0:3a:80:c8:dd:7f:6d:0c:c5:dd:92:a7: 8b:81:2a:04:2b:6d:75:b6:71:6d:f8:bd:8f:c1:4e: f4:1c:7a:9e:ed:2b:87:d7:d4:b6:7a:1d:62:96:08: bf:81:e6:c5:c3:48:e5:a9:6b:d0:17:b3:ca:e9:20: 7b:ab:82:c5:fd:f7:4f:cf:0b:ac:29:53:9c:43:76: 79:ba:06:3d:cb:a3:65:1d:1e:69:3b:bd:22:14:aa: fa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:39:51:84:69:A9:18:55:5C:D0:B3:A9:CF:FF:22:0E:61:84:E9 X509v3 Authority Key Identifier: keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:66:f8:74:0d:8f:ef:72:1c:53:1d:1c:e3:01:22:74:cb:d2: a7:05:7f:89:32:fe:91:b9:72:8f:58:0f:30:ea:46:78:03:a0: 84:31:89:35:dc:70:e8:59:85:51:61:c2:ea:33:68:20:e8:38: ce:40:c2:a1:4d:a1:71:a1:34:39:2d:e5:db:b7:9d:91:67:7d: b0:fe:ac:b8:e0:3b:38:21:20:af:5a:64:5a:83:4d:41:6d:b9: 97:df:a0:c0:b7:94:32:29:2e:66:72:ee:81:b5:3d:97:93:b6: 9d:4b:ed:eb:66:a4:73:0f:38:d5:70:5a:91:7a:aa:6a:88:cd: 37:e9:a7:dd:11:d9:9e:30:97:e3:94:e3:10:3a:93:65:c7:65: 8e:58:35:33:8e:98:f9:bb:38:4a:d8:47:dc:92:7d:e7:f6:a9: b7:d8:16:95:98:ce:12:3c:c8:3f:7a:2f:f7:4c:ea:04:0b:6a: 10:9c:b0:42:99:59:ac:aa:23:af:2a:3b:97:1e:6f:89:88:25: eb:06:8b:6b:06:6b:f1:fa:8d:1b:79:4f:e3:d2:c4:3d:1b:e1: 49:86:71:2c:a3:6f:58:ac:f4:41:5f:b4:ed:6e:93:f6:7f:b5: eb:92:18:79:9e:d9:bb:9f:08:db:45:09:31:6b:db:43:dc:72: d9:4f:f2:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa5C9aS50Wif6SNEFqs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2 MDc5NWYwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg1YTE2Mzk1MTg0NjlhOTE4NTU1Y2QwYjNhOWNmZmYyMjBlNjE4NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUV0H7HLT4rurvZTrp4VKrsz4xQ4 xSTHghBGFJFjYwpHwMo58VMi8kxtQChSv5E9E0qFJjOxRzU+/2EbA+QC3uej7JVn SdMx8Z5iiUtM2aXi1sBym4HeXhZ3diIgaKCdI83k0Ox+6cXdQZyOYBYjazNNedoa 638eJKNdGEF5k0ok15znB86SZdpFWjSgzdYtma7N/cORS9DyRo1nKlKmGcfm+2Ak y0rwOoDI3X9tDMXdkqeLgSoEK211tnFt+L2PwU70HHqe7SuH19S2eh1ilgi/gebF w0jlqWvQF7PK6SB7q4LF/fdPzwusKVOcQ3Z5ugY9y6NlHR5pO70iFKr6BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoWOVGEaakYVVzQs6nP/yIOYYTpMB8GA1UdIwQY MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0 LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWb4dA2P 73IcUx0c4wEidMvSpwV/iTL+kblyj1gPMOpGeAOghDGJNdxw6FmFUWHC6jNoIOg4 zkDCoU2hcaE0OS3l27edkWd9sP6suOA7OCEgr1pkWoNNQW25l9+gwLeUMikuZnLu gbU9l5O2nUvt62akcw841XBakXqqaojNN+mn3RHZnjCX45TjEDqTZcdljlg1M46Y +bs4SthH3JJ95/apt9gWlZjOEjzIP3ov90zqBAtqEJywQplZrKojryo7lx5viYgl 6waLawZr8fqNG3lP49LEPRvhSYZxLKNvWKz0QV+07W6T9n+165IYeZ7Zu58I20UJ MWvbQ9xy2U/yiA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:45 2025 by rpki-client