This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json) Hash identifier: PCLE+P+16Bwz3Vh4nHbp6bRab/gguQ3kiPcnCybebd4= Subject key identifier: 31:B0:CC:32:5C:58:A1:6C:97:4E:17:EA:B0:1A:70:19:28:9C:9D:23 Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f Certificate serial: 019AF12DDD359B538F82E149370DED7AEA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: YRCw8capBePpwpoXp8a/9VrTWPoiNZy+E6M/w8zTwpk=) 2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:dd:35:9b:53:8f:82:e1:49:37:0d:ed:7a:ea:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=31b0cc325c58a16c974e17eab01a7019289c9d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:c3:dd:52:36:42:0f:80:fa:72:e3:2d:f6: 60:55:41:db:22:39:ba:d8:2b:ae:20:d2:b2:01:68: 42:f4:04:2b:6a:c8:de:8d:5e:ab:fe:d2:40:63:c1: d0:a4:da:54:d5:80:1c:61:2b:4b:55:ad:2d:6a:85: fb:26:eb:e5:ed:dc:3b:fc:c6:ff:ed:86:d3:dc:15: d4:ff:20:9e:33:99:ac:2f:4a:cb:fb:77:7b:0b:bf: 13:44:a5:5a:7b:1b:44:3a:73:6e:12:e7:08:25:ec: 77:79:dd:b6:3d:39:ff:13:d5:94:23:da:b0:c8:1d: 86:64:05:e7:de:d0:f3:f8:83:5c:a0:c0:66:ab:ff: ea:1e:5e:f2:49:a3:19:41:6b:9a:9b:2a:e2:b9:ab: c2:4d:74:39:82:75:ed:6d:84:76:f2:a6:fb:b2:91: 44:2b:5a:e2:b9:99:b2:82:81:89:89:2f:69:12:b7: 67:7a:0d:c3:e6:29:1e:7c:4a:05:86:94:53:12:e1: 83:55:77:c6:e8:b8:b8:2b:9f:71:cb:c1:b4:bb:51: b3:02:cf:a4:11:67:b0:ac:d5:dd:53:28:e6:b8:b5: 30:08:95:29:88:b7:23:09:8e:46:2a:c2:25:82:5b: a2:e8:c1:45:0f:9e:15:15:7c:15:72:16:f5:d9:a9: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B0:CC:32:5C:58:A1:6C:97:4E:17:EA:B0:1A:70:19:28:9C:9D:23 X509v3 Authority Key Identifier: keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:b2:8a:60:2c:1b:78:94:92:14:db:82:ff:2a:f6:0a:0c: c3:26:c3:96:47:fb:36:2c:54:66:4e:5f:81:db:d0:e3:c5:33: 5c:dc:fa:00:f4:05:84:fb:47:62:41:88:ad:b8:6e:5d:8f:90: 2f:d2:32:21:8c:62:70:3f:01:2b:ae:81:77:db:c4:4b:1d:c7: 80:2d:a4:c4:d0:c0:c6:e5:b8:18:57:bf:ab:a5:81:09:b6:19: 82:d0:e1:40:74:44:ce:31:67:51:07:f0:ec:4d:d7:44:ae:f8: 4f:c9:3c:d5:26:e2:e5:04:c3:e6:95:ae:68:91:77:36:d2:c8: c5:b1:e5:00:2e:9c:99:32:17:1a:ed:72:b5:5a:59:63:33:30: f2:63:c7:b5:42:a7:4c:e7:6d:11:f7:55:df:fd:b1:a6:b7:d5: 23:5f:dc:80:47:05:2d:ca:5e:dc:73:33:be:ff:fe:e5:34:bc: c8:38:06:d8:90:8c:7f:0e:a6:87:90:27:8b:5d:c4:33:45:d7: c3:22:43:b2:43:8f:fd:67:80:2a:96:39:10:07:3b:44:cb:3a: de:b4:08:dc:84:36:66:ab:b5:9b:62:52:12:e6:26:24:2d:e5: f4:d5:11:4b:d9:34:66:d1:63:72:e0:2a:32:f3:ae:15:9b:eb: 5f:b3:da:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLd01m1OPguFJNw3teupWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx YTU1MWYwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EygzMWIwY2MzMjVjNThhMTZjOTc0ZTE3ZWFiMDFhNzAxOTI4OWM5ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+bD3VI2Qg+A+nLjLfZgVUHbIjm6 2CuuINKyAWhC9AQrasjejV6r/tJAY8HQpNpU1YAcYStLVa0taoX7Juvl7dw7/Mb/ 7YbT3BXU/yCeM5msL0rL+3d7C78TRKVaextEOnNuEucIJex3ed22PTn/E9WUI9qw yB2GZAXn3tDz+INcoMBmq//qHl7ySaMZQWuamyriuavCTXQ5gnXtbYR28qb7spFE K1riuZmygoGJiS9pErdneg3D5ikefEoFhpRTEuGDVXfG6Li4K59xy8G0u1GzAs+k EWewrNXdUyjmuLUwCJUpiLcjCY5GKsIlglui6MFFD54VFXwVchb12anbkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGwzDJcWKFsl04X6rAacBkonJ0jMB8GA1UdIwQY MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4 LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKCyimAs G3iUkhTbgv8q9goMwybDlkf7NixUZk5fgdvQ48UzXNz6APQFhPtHYkGIrbhuXY+Q L9IyIYxicD8BK66Bd9vESx3HgC2kxNDAxuW4GFe/q6WBCbYZgtDhQHREzjFnUQfw 7E3XRK74T8k81Sbi5QTD5pWuaJF3NtLIxbHlAC6cmTIXGu1ytVpZYzMw8mPHtUKn TOdtEfdV3/2xprfVI1/cgEcFLcpe3HMzvv/+5TS8yDgG2JCMfw6mh5Ani13EM0XX wyJDskOP/WeAKpY5EAc7RMs63rQI3IQ2Zqu1m2JSEuYmJC3l9NURS9k0ZtFjcuAq MvOuFZvrX7Pacw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:26 2025 by rpki-client