This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json) Hash identifier: TbCgf6QZEQzb8zY+27OI/MPXEekeq1MREJd9ErWceaE= Subject key identifier: 1C:1A:43:B7:B5:D8:82:7B:30:5A:9B:87:AF:2D:B0:9D:FF:8E:2F:B6 Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6 Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6 Certificate serial: 019AF23F91CBA1D2EA25CAC82BB39D116DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=) 2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: w+Sb2MmS87giJxYo77vl3LLS1LJFqPuwEgR8Z6rWYzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:cb:a1:d2:ea:25:ca:c8:2b:b3:9d:11:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=1c1a43b7b5d8827b305a9b87af2db09dff8e2fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:f5:88:16:ec:f8:c3:62:6e:5d:52:77:11: 5f:3d:a0:a4:fc:b4:84:41:45:7d:d3:f3:8e:c4:f7: 5a:08:0c:44:00:6a:06:6e:06:23:24:fd:b3:22:ec: be:37:34:8f:62:b5:36:02:63:b0:83:c8:51:8f:8d: f9:3e:04:fb:70:ae:bd:b2:09:cd:54:73:05:bb:d3: 0f:ea:da:cb:34:a7:3c:ae:48:71:ef:1c:5b:76:76: 45:26:63:ca:c0:4c:a2:7b:ed:b9:55:1e:fd:d6:e8: 2c:6d:fa:06:a0:c2:08:6b:de:77:8a:fb:2f:2a:83: b1:db:53:2c:0b:78:18:e9:e2:98:93:48:3e:ab:40: 0b:38:20:d1:4b:58:a5:0d:f4:ca:1c:d8:f2:80:ee: da:a6:21:b4:c3:6f:18:cd:e8:1b:af:21:52:86:c8: a0:83:03:7f:23:c4:63:03:b4:74:68:78:e1:1c:4e: 95:a3:58:c8:26:68:1b:2e:61:03:3b:e3:31:78:68: b5:47:14:72:00:c7:95:ea:b0:e4:b8:45:e0:b9:3e: 30:d4:fa:e7:29:cc:40:9a:32:e9:9d:c2:f2:e9:b3: 1e:f2:51:31:25:50:43:cf:f1:40:19:8b:55:66:f7: 59:3d:07:83:d1:7a:c8:6f:ef:c2:62:52:2c:b8:f1: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:43:B7:B5:D8:82:7B:30:5A:9B:87:AF:2D:B0:9D:FF:8E:2F:B6 X509v3 Authority Key Identifier: keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5e:a7:07:1c:4c:d7:89:82:23:28:be:f3:36:a2:e3:8c:fa: cd:bb:9e:00:97:46:b1:7f:f9:4b:51:90:31:8c:ad:cd:9a:4d: ac:be:6d:6e:57:f8:89:1b:c7:ac:cc:a4:62:f7:62:2a:c6:ee: 2f:21:cc:e9:9e:aa:b9:01:5d:0f:b3:bc:9a:8e:63:d4:1c:87: 70:e3:ec:2d:7c:78:eb:57:95:d0:1a:05:8a:a7:27:3d:6c:fc: 54:6a:8d:51:3f:f9:29:b3:82:b0:46:b4:fb:ec:a9:ae:da:11: 0f:81:35:d4:c2:c7:90:90:6d:7b:fb:f6:47:82:b7:42:f3:2b: d5:7c:a0:46:8b:64:6b:76:e4:62:31:9d:49:be:ba:3c:cb:6c: 09:c2:fb:2f:03:aa:b7:e9:eb:15:9c:26:b6:04:ee:a5:98:cf: 16:cb:56:18:71:f3:70:a7:5d:5a:22:1c:2f:9c:1a:65:82:9b: da:44:34:ce:22:34:f1:50:3a:28:ae:ff:ff:3b:d6:9e:05:f6: f9:b8:b0:84:c8:b5:45:12:98:66:cc:2a:53:f4:b6:70:4e:a1: fb:f0:9b:38:e1:29:ee:a1:45:1e:b3:69:d7:a1:98:0e:c8:23: d7:84:d7:54:e4:45:a3:cb:ee:e9:8b:89:46:34:91:2c:db:d0: 47:83:ee:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5HLodLqJcrIK7OdEW3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj OWM3YzYwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EygxYzFhNDNiN2I1ZDg4MjdiMzA1YTliODdhZjJkYjA5ZGZmOGUyZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/1iBbs+MNibl1SdxFfPaCk/LSE QUV90/OOxPdaCAxEAGoGbgYjJP2zIuy+NzSPYrU2AmOwg8hRj435PgT7cK69sgnN VHMFu9MP6trLNKc8rkhx7xxbdnZFJmPKwEyie+25VR791ugsbfoGoMIIa953ivsv KoOx21MsC3gY6eKYk0g+q0ALOCDRS1ilDfTKHNjygO7apiG0w28YzegbryFShsig gwN/I8RjA7R0aHjhHE6Vo1jIJmgbLmEDO+MxeGi1RxRyAMeV6rDkuEXguT4w1Prn KcxAmjLpncLy6bMe8lExJVBDz/FAGYtVZvdZPQeD0XrIb+/CYlIsuPGe2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwaQ7e12IJ7MFqbh68tsJ3/ji+2MB8GA1UdIwQY MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt Y2Q3YjI4OGQ2ZWEwLzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARV6nBxxM 14mCIyi+8zai44z6zbueAJdGsX/5S1GQMYytzZpNrL5tblf4iRvHrMykYvdiKsbu LyHM6Z6quQFdD7O8mo5j1ByHcOPsLXx461eV0BoFiqcnPWz8VGqNUT/5KbOCsEa0 ++yprtoRD4E11MLHkJBte/v2R4K3QvMr1XygRotka3bkYjGdSb66PMtsCcL7LwOq t+nrFZwmtgTupZjPFstWGHHzcKddWiIcL5waZYKb2kQ0ziI08VA6KK7//zvWngX2 +biwhMi1RRKYZswqU/S2cE6h+/CbOOEp7qFFHrNp16GYDsgj14TXVORFo8vu6YuJ RjSRLNvQR4PuFg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:56 2025 by rpki-client