This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json) Hash identifier: jK5Adouo8Oz9Lf68Eu/3zlGHuZLeIaQk9pRLFUT0rt8= Subject key identifier: 6C:26:06:CE:51:A2:C1:E2:F0:D2:7C:7F:DF:C4:C6:1F:41:7D:EC:03 Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Certificate serial: 019AF0BF739D3CF80A611FCF47C160244D33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: EqQctpcjigzGr1fFYcQhQdlUKU1+5CBeBBgIIdU4+tg=) 2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:73:9d:3c:f8:0a:61:1f:cf:47:c1:60:24:4d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=6c2606ce51a2c1e2f0d27c7fdfc4c61f417dec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:3a:34:f8:e6:3e:c7:8f:12:da:43:bb:4a: c9:89:7c:7b:9b:4a:ac:19:8c:91:c2:10:02:a0:98: e8:74:6e:35:f7:17:ea:90:fa:83:77:6d:d8:8b:48: cd:ab:e1:c0:2f:f7:2a:36:9f:8e:e0:76:2f:1e:af: 3e:9a:ee:42:02:56:13:00:ea:1c:3e:11:64:c3:b0: 2e:4e:d2:b7:45:0a:d4:1b:bc:d9:33:bf:9b:31:0f: c0:6a:df:a0:7a:01:78:76:d3:d8:4c:5e:59:68:e1: 73:4a:b9:8b:03:27:5b:7e:c2:bd:53:aa:b1:fc:72: a3:0a:59:43:21:7a:ad:92:c9:a0:ac:e7:29:4d:0f: 66:db:ff:5a:ff:0c:04:dd:aa:5e:e1:38:14:99:d0: 93:7c:87:59:46:6e:f0:38:e5:4f:8f:4a:fc:4c:59: 87:86:14:7d:5b:54:67:fe:a1:7a:35:e3:e3:c4:9a: a7:f2:2a:b3:2d:c8:4c:81:f0:e5:bc:2b:3c:06:67: f7:5b:ce:ff:59:75:2b:c2:84:67:d6:04:95:95:c9: b9:09:e9:cf:b2:47:a4:a3:54:31:f7:59:99:20:12: 6b:37:52:e7:32:77:81:6f:f3:48:7a:88:34:8e:e2: b6:af:44:69:be:a7:2e:72:9d:30:27:c9:1d:80:8f: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:06:CE:51:A2:C1:E2:F0:D2:7C:7F:DF:C4:C6:1F:41:7D:EC:03 X509v3 Authority Key Identifier: keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:41:97:4d:60:59:28:6a:3b:a9:4d:c2:ef:a8:cb:63:ff:b3: 3a:94:92:8e:b6:f8:40:8a:d1:a0:c0:e4:58:82:e9:ef:4a:99: 7e:1d:e8:71:5f:38:2c:a1:88:77:26:82:16:c6:e9:d4:b3:8f: 60:db:17:ec:7e:9a:68:dd:7c:3c:bf:17:ca:ab:24:0f:d1:37: 39:ba:a8:7e:14:fa:f1:3c:cf:14:5f:3c:7a:21:08:56:6a:e0: 96:5c:ff:a4:ae:df:16:68:ec:c4:e6:1a:7c:a8:35:b0:f3:95: 9e:96:89:ec:48:41:5c:fb:83:05:ff:6e:4f:66:19:ed:55:81: 1b:a1:04:a8:e3:5f:0d:f7:44:6e:13:fa:68:16:79:06:96:9a: db:aa:03:9b:02:f5:e7:52:46:29:e6:51:86:ea:87:c3:64:65: 0f:ae:06:f0:55:89:9e:8c:ec:28:09:3d:d0:2d:ce:12:df:94: 8d:37:64:13:77:78:b0:70:b9:8d:8c:0f:ad:96:a1:60:3a:07: 45:53:51:b7:72:69:d3:a1:2c:cd:0a:d2:8e:08:58:9f:c8:9a: f8:81:c8:5b:c6:f1:f5:36:a0:89:af:ea:36:81:c7:a9:91:87: da:4a:97:a4:9a:ba:c3:73:6f:71:52:23:bc:df:99:b1:3e:92: 2b:56:5e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3OdPPgKYR/PR8FgJE0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmFiZDg1YTU4OTkxYWI3MWExN2ZkNzU0MWZiOGRlOTZm NTVhN2QwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD Eyg2YzI2MDZjZTUxYTJjMWUyZjBkMjdjN2ZkZmM0YzYxZjQxN2RlYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42s6NPjmPsePEtpDu0rJiXx7m0qs GYyRwhACoJjodG419xfqkPqDd23Yi0jNq+HAL/cqNp+O4HYvHq8+mu5CAlYTAOoc PhFkw7AuTtK3RQrUG7zZM7+bMQ/Aat+gegF4dtPYTF5ZaOFzSrmLAydbfsK9U6qx /HKjCllDIXqtksmgrOcpTQ9m2/9a/wwE3ape4TgUmdCTfIdZRm7wOOVPj0r8TFmH hhR9W1Rn/qF6NePjxJqn8iqzLchMgfDlvCs8Bmf3W87/WXUrwoRn1gSVlcm5CenP skeko1Qx91mZIBJrN1LnMneBb/NIeog0juK2r0Rpvqcucp0wJ8kdgI+nEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwmBs5RosHi8NJ8f9/Exh9BfewDMB8GA1UdIwQY MBaAFFcqvYWliZGrcaF/11QfuN6W9Vp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYt NjFmYWMyODZkMzg3LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYtNjFmYWMyODZkMzg3 LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEGXTWBZ KGo7qU3C76jLY/+zOpSSjrb4QIrRoMDkWILp70qZfh3ocV84LKGIdyaCFsbp1LOP YNsX7H6aaN18PL8XyqskD9E3ObqofhT68TzPFF88eiEIVmrgllz/pK7fFmjsxOYa fKg1sPOVnpaJ7EhBXPuDBf9uT2YZ7VWBG6EEqONfDfdEbhP6aBZ5Bpaa26oDmwL1 51JGKeZRhuqHw2RlD64G8FWJnozsKAk90C3OEt+UjTdkE3d4sHC5jYwPrZahYDoH RVNRt3Jp06EszQrSjghYn8ia+IHIW8bx9Tagia/qNoHHqZGH2kqXpJq6w3NvcVIj vN+ZsT6SK1Ze4g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:25 2025 by rpki-client