This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json) Hash identifier: utT3Fgys0SAO37Qsw3RuH2McKccWoMHQpqlkkEEnii0= Subject key identifier: B0:33:64:15:0F:24:D1:D0:6A:09:D1:97:97:1A:76:2B:36:4E:8D:32 Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124 Certificate serial: 019AF12D59EC7339C3B21B70228891709586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft Manifest number: 03E4 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: hmXypccNvrMJg28CbCreXtGm5abhyTrgT6biwQCuYOc=) 2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:59:ec:73:39:c3:b2:1b:70:22:88:91:70:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=b03364150f24d1d06a09d197971a762b364e8d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:e5:32:7d:aa:b4:b6:74:19:6e:7c:65:3c: f9:38:8e:07:e3:1b:da:df:aa:68:36:74:d0:0c:c4: 13:72:e8:23:9b:65:b8:6d:5b:85:ad:ce:c7:ab:42: 08:18:13:41:45:c0:d0:1a:8c:84:e5:1f:2d:03:4b: b8:ac:ae:26:ce:e4:dc:69:d5:55:92:97:78:2b:e8: ac:c8:70:c2:bd:12:e2:72:bf:5e:11:41:ce:64:ed: 21:c4:9d:eb:75:7a:da:ad:70:49:20:a5:af:0d:2f: ae:02:da:2c:44:c9:e3:1f:c1:86:2c:c1:94:84:e3: 68:0c:85:5b:5d:d6:35:5d:f3:f6:a4:b7:78:70:44: fc:bc:51:a7:55:da:93:ed:2c:d7:04:5c:8f:43:f2: d6:44:52:58:57:47:be:de:31:cd:6b:3b:02:36:8a: 92:46:9b:85:ce:0a:bb:8e:ef:33:a4:05:2d:b8:ea: 1e:94:2e:62:fd:0a:e8:d3:91:f0:b8:d1:50:d3:85: f5:e3:c4:6c:da:ef:0b:da:87:58:9f:21:32:11:5b: c5:b0:9b:d6:77:08:9d:d9:06:b4:e9:c3:91:62:68: f7:2a:6a:f4:90:23:5d:7b:f8:22:79:50:93:3b:1d: 25:28:c2:74:2d:4c:6c:63:1b:8e:ae:1c:14:77:00: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:64:15:0F:24:D1:D0:6A:09:D1:97:97:1A:76:2B:36:4E:8D:32 X509v3 Authority Key Identifier: keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:ae:51:49:d5:98:37:13:e5:c1:e2:cf:25:04:b7:ea:5f:a4: e3:57:00:18:b2:d9:43:ed:f2:b7:d4:73:2b:7d:4c:11:d1:c0: dd:17:13:8e:4f:c7:60:1a:97:58:57:83:e2:d1:cf:5e:d3:1e: 0d:90:13:12:75:da:c7:1d:44:f0:c7:8a:d9:09:a3:a3:e4:17: 68:68:d1:a9:cc:de:7f:cc:87:af:db:a9:8f:13:30:7f:95:4e: 33:f7:b5:7f:e8:92:e1:5c:98:39:c6:89:8e:8d:b5:dc:b0:86: 25:57:c7:92:9b:13:d1:c9:39:d0:54:c8:e4:dd:f2:5e:4b:cb: 45:35:d0:93:c6:a5:60:8b:6d:7d:d8:cb:2e:30:60:d1:be:8e: aa:15:a3:11:f3:36:c5:81:bc:90:18:1b:93:fb:fa:7f:dc:7a: 99:9b:1b:3b:27:96:f1:ee:c9:de:27:34:31:75:e1:24:fb:1d: f8:c1:f4:69:74:75:e9:58:62:ba:73:df:46:ac:e9:4f:91:5a: 66:42:63:89:7d:03:8c:78:5f:4e:74:a2:44:ea:a7:58:05:e0: 09:6b:45:2f:a9:19:3a:96:af:f1:86:eb:b9:69:30:48:68:96: 65:25:ea:36:bd:d6:62:63:2d:66:68:60:34:86:9c:fe:96:4c: ae:f2:70:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVnscznDshtwIoiRcJWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODQ3OWI4MjJiMzUzMmMxOWI5ZWUwMTAyZjk5YTg5ODUw ZGYxMjQwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhiMDMzNjQxNTBmMjRkMWQwNmEwOWQxOTc5NzFhNzYyYjM2NGU4ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcnlMn2qtLZ0GW58ZTz5OI4H4xva 36poNnTQDMQTcugjm2W4bVuFrc7Hq0IIGBNBRcDQGoyE5R8tA0u4rK4mzuTcadVV kpd4K+isyHDCvRLicr9eEUHOZO0hxJ3rdXrarXBJIKWvDS+uAtosRMnjH8GGLMGU hONoDIVbXdY1XfP2pLd4cET8vFGnVdqT7SzXBFyPQ/LWRFJYV0e+3jHNazsCNoqS RpuFzgq7ju8zpAUtuOoelC5i/Qro05HwuNFQ04X148Rs2u8L2odYnyEyEVvFsJvW dwid2Qa06cORYmj3Kmr0kCNde/gieVCTOx0lKMJ0LUxsYxuOrhwUdwBdswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAzZBUPJNHQagnRl5cadis2To0yMB8GA1UdIwQY MBaAFFWEebgis1MsGbnuAQL5momFDfEkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAt MGI1OTFmM2ExYmYwLzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNzk2MjUtNzFiZS00NGZhLTlkNjAtMGI1OTFmM2ExYmYw LzEvVllSNXVDS3pVeXdadWU0QkF2bWFpWVVOOFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyq5RSdWY NxPlweLPJQS36l+k41cAGLLZQ+3yt9RzK31MEdHA3RcTjk/HYBqXWFeD4tHPXtMe DZATEnXaxx1E8MeK2Qmjo+QXaGjRqczef8yHr9upjxMwf5VOM/e1f+iS4VyYOcaJ jo213LCGJVfHkpsT0ck50FTI5N3yXkvLRTXQk8alYIttfdjLLjBg0b6OqhWjEfM2 xYG8kBgbk/v6f9x6mZsbOyeW8e7J3ic0MXXhJPsd+MH0aXR16VhiunPfRqzpT5Fa ZkJjiX0DjHhfTnSiROqnWAXgCWtFL6kZOpav8YbruWkwSGiWZSXqNr3WYmMtZmhg NIac/pZMrvJwgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:46:55 2025 by rpki-client