This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json) Hash identifier: T3od5h7IMJh1zLTnO3l5yMHFxdvq9tMwEiQStcjm0F0= Subject key identifier: 61:A1:14:83:54:4E:19:FA:D7:21:59:43:DE:50:40:96:76:B0:40:50 Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Certificate serial: 019B2EFABB6D7083CBDBC0C0CE9D3FF5374F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft Manifest number: 07B2 Signing time: Thu 18 Dec 2025 01:02:22 +0000 Manifest this update: Thu 18 Dec 2025 01:02:22 +0000 Manifest next update: Fri 19 Dec 2025 01:02:22 +0000 Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=) 2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: D/FHmXIBPfjyxvQZ+jJcVtNnjWdAAXimFtu/VWTL0EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:bb:6d:70:83:cb:db:c0:c0:ce:9d:3f:f5:37:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Validity Not Before: Dec 18 01:02:22 2025 GMT Not After : Dec 19 01:02:22 2025 GMT Subject: CN=61a11483544e19fad7215943de50409676b04050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:e8:f7:da:1c:3f:f6:9f:70:af:35:4e:fa: 8d:b4:d4:cb:c5:45:79:3c:c9:3d:5c:3b:7e:f3:08: 6b:db:a5:46:73:ba:5f:da:6d:63:62:30:d9:5e:74: c0:e7:c2:6e:38:96:71:ec:c2:6a:7d:b8:7a:84:28: cf:de:50:c3:1c:14:ec:d4:84:08:45:c3:55:37:02: 40:d0:e0:35:e5:78:83:c6:ba:e2:84:4f:ac:4b:b0: d4:47:de:50:e4:46:09:5a:b7:ed:e2:72:d2:69:93: 46:43:07:b6:71:23:1c:b8:14:64:3a:7c:77:59:d9: 01:b7:e9:26:d7:b5:4a:de:c5:1c:64:52:3f:54:a3: e6:41:84:d4:78:9e:03:58:44:de:cb:07:80:c1:6e: 12:79:2c:e7:e6:2c:d5:1b:98:6e:93:6e:a7:76:d3: 35:eb:2f:f3:37:34:11:3f:61:5a:92:67:1e:37:5e: 66:e3:e9:ef:b0:cf:74:a0:d4:a2:91:ce:7c:71:be: 82:91:88:80:cb:57:53:1b:8e:c6:0e:fa:0f:ab:3d: fd:7b:b1:5f:6f:99:57:3f:61:05:12:1b:6c:5f:d7: 90:08:1e:b2:e6:cc:f8:85:15:c1:99:0c:59:13:ce: ed:42:3f:1b:32:96:b2:42:f8:5b:05:06:f9:92:08: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:14:83:54:4E:19:FA:D7:21:59:43:DE:50:40:96:76:B0:40:50 X509v3 Authority Key Identifier: keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0c:f6:fa:85:b4:60:0b:12:c5:4c:14:7d:4e:c4:17:86:5e: 82:e4:94:f3:2f:5c:35:3e:89:b4:27:a4:5c:eb:18:34:00:a7: dc:90:b5:87:85:6c:39:3b:a3:ae:b6:c1:03:53:2b:e6:ed:c9: 8c:87:1a:aa:93:cb:1e:05:46:17:42:6b:a2:4b:6c:f4:2c:23: d2:5e:4a:a1:3d:83:c2:49:76:2f:9b:c8:e9:d2:58:2b:63:f2: 60:5f:d9:5d:bf:d0:d4:a9:97:56:21:8a:d0:1e:ee:03:c1:61: 86:e6:27:8a:37:8e:d3:56:0c:11:ff:90:7e:8e:6b:08:47:ca: 77:fb:27:d3:e6:7e:f5:34:d7:1e:e3:ff:03:14:22:d1:1d:05: de:c6:e3:83:46:ff:d3:bb:29:69:11:69:6f:42:9c:ff:b4:d2: 2f:2f:ac:6b:bc:98:9a:b6:ba:5e:1e:e0:5f:55:15:ff:00:17: 17:ef:cb:1d:6c:82:48:49:fb:9e:47:de:87:ff:a7:40:d9:54: cb:79:85:ef:df:74:15:c5:5f:e3:d7:99:48:58:bc:46:09:16: 38:d6:2d:dc:7f:f1:61:76:1a:99:ac:2f:89:db:37:a0:ab:d3: 45:fd:01:2d:09:92:63:aa:f7:c4:97:08:d4:c8:b4:48:66:a4: af:95:a2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+rttcIPL28DAzp0/9TdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi M2FlNDIwHhcNMjUxMjE4MDEwMjIyWhcNMjUxMjE5MDEwMjIyWjAzMTEwLwYDVQQD Eyg2MWExMTQ4MzU0NGUxOWZhZDcyMTU5NDNkZTUwNDA5Njc2YjA0MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bro99ocP/afcK81TvqNtNTLxUV5 PMk9XDt+8whr26VGc7pf2m1jYjDZXnTA58JuOJZx7MJqfbh6hCjP3lDDHBTs1IQI RcNVNwJA0OA15XiDxrrihE+sS7DUR95Q5EYJWrft4nLSaZNGQwe2cSMcuBRkOnx3 WdkBt+km17VK3sUcZFI/VKPmQYTUeJ4DWETeyweAwW4SeSzn5izVG5huk26ndtM1 6y/zNzQRP2FakmceN15m4+nvsM90oNSikc58cb6CkYiAy1dTG47GDvoPqz39e7Ff b5lXP2EFEhtsX9eQCB6y5sz4hRXBmQxZE87tQj8bMpayQvhbBQb5kgi+mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGhFINUThn61yFZQ95QQJZ2sEBQMB8GA1UdIwQY MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3 LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAz2+oW0 YAsSxUwUfU7EF4ZeguSU8y9cNT6JtCekXOsYNACn3JC1h4VsOTujrrbBA1Mr5u3J jIcaqpPLHgVGF0Jrokts9Cwj0l5KoT2Dwkl2L5vI6dJYK2PyYF/ZXb/Q1KmXViGK 0B7uA8FhhuYnijeO01YMEf+Qfo5rCEfKd/sn0+Z+9TTXHuP/AxQi0R0F3sbjg0b/ 07spaRFpb0Kc/7TSLy+sa7yYmra6Xh7gX1UV/wAXF+/LHWyCSEn7nkfeh/+nQNlU y3mF7990FcVf49eZSFi8RgkWONYt3H/xYXYamawvids3oKvTRf0BLQmSY6r3xJcI 1Mi0SGakr5WiTQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:54 2025 by rpki-client