This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json) Hash identifier: lrGHvYS33tMmg/b8VjFNIc45txyKqmysnUMrwx1L7bE= Subject key identifier: 6B:06:C3:94:32:0E:08:C2:5A:68:D1:FC:E7:3D:20:F0:2A:C2:7A:26 Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Certificate serial: 019AF0BF39DE23B4294BF3DAECE399D9A27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft Manifest number: 0704 Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=) 2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: vgDWySlk649NQ4ykMjsa1+ZwvXkyFKezYymoDNMfa7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:39:de:23:b4:29:4b:f3:da:ec:e3:99:d9:a2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3 Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=6b06c394320e08c25a68d1fce73d20f02ac27a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:84:53:77:a1:5f:9b:c5:f7:35:56:8e:55: f5:75:0e:80:b7:94:86:d0:91:92:f9:61:b1:7f:f2: 38:3d:dc:5a:0c:ee:d7:99:85:9f:f3:9b:eb:2a:03: 37:0e:54:77:83:e0:30:3b:f9:20:f3:23:2e:93:d5: 8e:33:ee:7a:63:0e:c9:71:ac:ef:ef:ab:0a:46:73: 17:bf:6c:39:2e:e0:a3:88:bd:27:e7:96:f6:3f:54: fd:71:ea:8d:66:bd:2f:58:f8:83:5d:a5:17:9b:19: 5e:b5:7a:87:92:aa:9d:dd:ec:f8:a7:22:7c:cb:49: aa:48:f2:2f:e6:9c:f6:1f:d3:5d:53:79:d2:b0:ef: 51:e9:06:28:21:46:5a:2e:ef:7a:46:db:9e:da:be: e4:19:0b:66:1c:0f:70:bf:0a:20:4f:42:7b:5e:46: 89:a4:1e:a0:a4:e4:80:9c:e5:8a:58:73:3d:bc:8e: 31:c7:a6:bd:1f:a1:b0:45:aa:60:69:29:9a:57:15: 5a:38:2c:66:1a:41:24:5d:43:61:6c:1a:e9:7c:a2: 6e:6f:92:cd:42:1d:4d:26:44:59:c2:87:25:d0:72: fc:f9:3e:b3:6b:84:06:4d:51:ec:74:e1:8b:6a:72: 06:9b:26:81:4d:d7:70:85:04:ee:c6:ed:d8:b9:3b: 6f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:06:C3:94:32:0E:08:C2:5A:68:D1:FC:E7:3D:20:F0:2A:C2:7A:26 X509v3 Authority Key Identifier: keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d9:30:d6:d4:25:88:39:b9:10:03:54:85:f7:88:b3:e7:b2: fe:cb:5b:08:ae:57:f9:9e:99:46:fd:e8:ac:b3:a1:54:37:ec: 8e:da:62:b4:ca:53:3c:cf:d8:c9:57:17:eb:1b:e0:ae:0b:ad: 15:85:99:0c:64:ce:2d:e1:55:1d:49:b6:a3:a5:7c:fa:a3:2c: 54:f7:9f:3a:08:e1:e3:fa:6a:e3:26:17:54:8f:c7:90:a0:f1: 4c:5e:c1:ed:6b:3e:ee:b8:a2:e8:7c:dc:9b:e7:12:8c:21:f6: 5b:b0:e9:7c:ee:0e:52:fc:26:04:1d:81:e6:fd:ef:aa:1c:eb: 2f:98:c3:58:31:0d:2e:46:a4:c7:03:17:27:d4:62:f6:6c:b5: f4:6d:a3:35:ea:7f:41:7a:86:a8:04:24:44:88:8c:37:96:02: f1:0c:8d:da:d2:d0:b6:ae:fb:33:8e:49:de:51:6a:c3:55:fa: 9c:af:88:a7:25:52:30:85:4c:92:af:8d:50:3d:00:dd:3c:5f: 9a:a7:e1:bd:61:03:5f:ed:d6:56:c2:8a:12:66:74:88:3a:05: 6b:87:b6:38:c7:5c:f8:28:13:88:f9:50:8f:ba:ec:53:27:12: e8:8d:5f:74:25:92:c2:84:9e:27:35:ec:ec:e6:f1:d4:23:c8: 1b:76:f1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzneI7QpS/Pa7OOZ2aJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGE4NTU3ZGY3ZmIyYzQxOGY4ZWJmMTdjMGExZWYwNjI1 ZDc0YTMwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD Eyg2YjA2YzM5NDMyMGUwOGMyNWE2OGQxZmNlNzNkMjBmMDJhYzI3YTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BWEU3ehX5vF9zVWjlX1dQ6At5SG 0JGS+WGxf/I4PdxaDO7XmYWf85vrKgM3DlR3g+AwO/kg8yMuk9WOM+56Yw7Jcazv 76sKRnMXv2w5LuCjiL0n55b2P1T9ceqNZr0vWPiDXaUXmxletXqHkqqd3ez4pyJ8 y0mqSPIv5pz2H9NdU3nSsO9R6QYoIUZaLu96Rtue2r7kGQtmHA9wvwogT0J7XkaJ pB6gpOSAnOWKWHM9vI4xx6a9H6GwRapgaSmaVxVaOCxmGkEkXUNhbBrpfKJub5LN Qh1NJkRZwocl0HL8+T6za4QGTVHsdOGLanIGmyaBTddwhQTuxu3YuTtvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsGw5QyDgjCWmjR/Oc9IPAqwnomMB8GA1UdIwQY MBaAFL2KhVfff7LEGPjr8XwKHvBiXXSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2It ZjJjZGI3ZjU3NWU5LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTY5NzItYTFiOS00NTE3LTgyY2ItZjJjZGI3ZjU3NWU5 LzEvdllxRlY5OV9zc1FZLU92eGZBb2U4R0pkZEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItkw1tQl iDm5EANUhfeIs+ey/stbCK5X+Z6ZRv3orLOhVDfsjtpitMpTPM/YyVcX6xvgrgut FYWZDGTOLeFVHUm2o6V8+qMsVPefOgjh4/pq4yYXVI/HkKDxTF7B7Ws+7rii6Hzc m+cSjCH2W7DpfO4OUvwmBB2B5v3vqhzrL5jDWDENLkakxwMXJ9Ri9my19G2jNep/ QXqGqAQkRIiMN5YC8QyN2tLQtq77M45J3lFqw1X6nK+IpyVSMIVMkq+NUD0A3Txf mqfhvWEDX+3WVsKKEmZ0iDoFa4e2OMdc+CgTiPlQj7rsUycS6I1fdCWSwoSeJzXs 7Obx1CPIG3bxFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:53 2025 by rpki-client