This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json) Hash identifier: YFTxwgOL6zk6t4f9TQwdlsfJmxlCRJBUhQFwhQqPqEQ= Subject key identifier: 09:37:26:B1:74:88:46:A6:BC:44:07:13:4B:77:B7:B2:AC:A1:E0:0F Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f Certificate serial: 019B255257A07F6BE3754A608333C1DB3351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft Manifest number: 1411 Signing time: Tue 16 Dec 2025 04:01:51 +0000 Manifest this update: Tue 16 Dec 2025 04:01:51 +0000 Manifest next update: Wed 17 Dec 2025 04:01:51 +0000 Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: 0BrO5M+gH+vNsKDkBfB7fw0QvwU5gOGIZF+1ZFQnioM=) 2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:57:a0:7f:6b:e3:75:4a:60:83:33:c1:db:33:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f Validity Not Before: Dec 16 04:01:51 2025 GMT Not After : Dec 17 04:01:51 2025 GMT Subject: CN=093726b1748846a6bc4407134b77b7b2aca1e00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:2b:9e:fc:f3:d2:b4:4c:9d:87:3d:38:d2: d4:8f:5a:49:0f:69:83:c7:e3:d6:e9:5d:ad:45:e2: 33:13:59:a2:48:a8:16:c6:5d:c3:7a:02:3a:0f:06: 04:1c:43:3a:b3:3d:cd:b4:cb:81:b9:23:ec:12:33: c2:96:dc:89:79:16:70:75:bb:36:c1:4c:bd:30:1f: 5d:4a:70:9d:81:b0:93:27:5e:cd:67:2f:65:ba:b2: ea:79:25:e0:ad:be:08:10:d0:6c:3a:ad:f1:70:41: ee:5f:5d:1f:02:8d:6a:fb:d1:b0:ba:35:92:5e:24: d0:00:13:2a:52:ad:81:6b:32:e2:94:b9:d6:d2:fe: d0:db:6f:d7:bb:1d:f0:3c:99:dd:7c:ae:79:90:ce: f9:c6:36:10:25:8f:55:eb:55:cb:a9:fd:ad:01:f0: 2e:9d:db:1e:5b:ed:4b:8c:67:a0:e9:29:18:6d:ca: 47:a0:d2:8f:dc:a0:c5:22:d6:d7:9b:0d:80:76:29: 8f:a2:7f:c6:a9:e4:d3:ba:12:c6:b4:07:77:a6:72: 77:f6:9d:7e:2a:01:61:0b:3f:9d:49:c2:92:da:be: bc:1f:e3:4f:ed:ef:e3:ab:c5:57:4c:31:79:d0:42: 0d:2a:83:0b:22:9c:61:85:32:13:27:a4:e1:f9:0a: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:26:B1:74:88:46:A6:BC:44:07:13:4B:77:B7:B2:AC:A1:E0:0F X509v3 Authority Key Identifier: keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:72:35:cb:ee:52:ea:88:2a:8b:29:6b:fb:c0:84:59:d1:9f: 3d:82:0f:3f:5d:13:1f:0b:8d:ec:43:4f:ee:e7:b7:11:2a:bd: 27:f8:66:ae:ce:a8:35:c5:bf:98:e4:28:a0:6c:9a:02:d6:4a: b7:1d:7c:2c:ee:4d:a2:3d:b9:15:91:61:f8:d0:0e:ff:e4:26: 93:f2:71:02:e6:d5:c8:76:61:02:69:e8:6c:43:d5:81:31:cb: 00:29:d2:f4:29:df:24:ae:92:ad:e5:26:14:dd:01:f0:11:35: ae:8e:ff:2d:9f:f3:ac:94:e2:d0:74:2b:d9:30:0f:e0:ab:37: ce:d8:0c:4d:f0:dd:16:52:a5:45:02:b7:7e:2e:9d:83:0c:53: 07:2a:ea:55:7a:d4:88:48:2b:52:08:dc:94:eb:b0:fa:57:a4: 7f:19:65:f1:2e:64:ac:2e:b1:da:75:4d:00:d8:e0:8d:2e:f1: 2b:39:9f:95:97:35:53:d5:ff:6d:91:9e:5b:e6:69:cf:51:9f: ea:5b:7f:21:61:4c:cc:cc:88:40:99:8e:7c:20:62:03:ef:68: 56:1c:e9:69:fc:8b:99:55:2c:a0:53:52:76:f6:bc:47:20:c8: 1b:9b:5e:d1:b5:a6:1e:0a:fa:9f:04:73:4a:39:e2:f3:ea:b6: cd:59:f7:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUlegf2vjdUpggzPB2zNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx YTU1MWYwHhcNMjUxMjE2MDQwMTUxWhcNMjUxMjE3MDQwMTUxWjAzMTEwLwYDVQQD EygwOTM3MjZiMTc0ODg0NmE2YmM0NDA3MTM0Yjc3YjdiMmFjYTFlMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS0rnvzz0rRMnYc9ONLUj1pJD2mD x+PW6V2tReIzE1miSKgWxl3DegI6DwYEHEM6sz3NtMuBuSPsEjPCltyJeRZwdbs2 wUy9MB9dSnCdgbCTJ17NZy9lurLqeSXgrb4IENBsOq3xcEHuX10fAo1q+9GwujWS XiTQABMqUq2BazLilLnW0v7Q22/Xux3wPJndfK55kM75xjYQJY9V61XLqf2tAfAu ndseW+1LjGeg6SkYbcpHoNKP3KDFItbXmw2AdimPon/GqeTTuhLGtAd3pnJ39p1+ KgFhCz+dScKS2r68H+NP7e/jq8VXTDF50EINKoMLIpxhhTITJ6Th+QoCjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk3JrF0iEamvEQHE0t3t7KsoeAPMB8GA1UdIwQY MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4 LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3I1y+5S 6ogqiylr+8CEWdGfPYIPP10THwuN7ENP7ue3ESq9J/hmrs6oNcW/mOQooGyaAtZK tx18LO5Noj25FZFh+NAO/+Qmk/JxAubVyHZhAmnobEPVgTHLACnS9CnfJK6SreUm FN0B8BE1ro7/LZ/zrJTi0HQr2TAP4Ks3ztgMTfDdFlKlRQK3fi6dgwxTByrqVXrU iEgrUgjclOuw+lekfxll8S5krC6x2nVNANjgjS7xKzmflZc1U9X/bZGeW+Zpz1Gf 6lt/IWFMzMyIQJmOfCBiA+9oVhzpafyLmVUsoFNSdva8RyDIG5te0bWmHgr6nwRz Sjni8+q2zVn3LA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:44 2025 by rpki-client