This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json) Hash identifier: K8uLDQZX7pkfeyXNwI14YjCzIWFX2+YRg/r3shFUL04= Subject key identifier: 2A:16:2F:D7:6C:55:06:9A:2A:07:A9:F6:43:98:D3:33:5A:C8:10:91 Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Certificate serial: 019AF12ED71CEE67DA3D47E8ADBE521671A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft Manifest number: 0792 Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=) 2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: gstcRqK/RcotJWsOZoJvzTKlemOWE+dnlVkjdpNqXN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d7:1c:ee:67:da:3d:47:e8:ad:be:52:16:71:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42 Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=2a162fd76c55069a2a07a9f64398d3335ac81091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:8a:a3:86:45:ba:57:5d:33:3f:c9:ec:f6: 38:06:d4:0e:e7:f4:49:00:06:ba:f5:96:cd:8f:5f: 32:c2:78:31:1e:7c:d1:05:13:3c:8d:c3:82:ec:cd: c1:73:19:a0:bb:ed:c4:fd:24:2e:e6:bf:28:8f:e3: 66:12:60:2d:ce:fe:77:98:fe:90:45:4f:95:a4:3e: 0a:d3:32:2b:ab:6a:4a:ed:0f:f0:05:59:e1:9b:65: f4:15:be:50:0a:91:dd:d9:e8:14:ac:7f:09:35:a6: e4:70:a2:12:30:dc:5a:4e:47:e6:d4:93:50:35:3b: fc:a2:fa:ef:1f:9f:fe:9d:c6:12:20:35:e2:8b:a4: a4:74:5f:8f:38:12:27:93:b3:d1:1a:d7:ca:c0:51: f7:34:85:9d:c9:88:ea:82:77:a1:32:72:69:04:00: ab:d3:e4:61:70:ff:88:4d:d8:a1:92:ba:9b:62:97: e4:7d:b3:f4:36:a4:21:9f:ba:43:58:86:97:ef:41: 34:b3:ef:4f:0a:e8:bf:be:d4:a6:f4:eb:ee:4a:7d: 8a:95:de:73:db:6f:ab:9f:01:85:b4:c9:c7:79:40: bf:ab:57:d6:ea:5c:4a:03:c0:2c:e0:21:91:ee:8b: 4b:0c:74:c1:19:07:74:90:b0:15:34:ab:27:22:0f: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:16:2F:D7:6C:55:06:9A:2A:07:A9:F6:43:98:D3:33:5A:C8:10:91 X509v3 Authority Key Identifier: keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:af:d8:b3:b8:d4:5e:73:13:af:a3:40:9c:1e:f7:2a:6c:51: 51:c3:45:af:4e:7c:cd:df:32:ee:6a:66:5d:91:9a:c4:4c:02: 6d:cc:e2:ed:45:3a:29:a6:b8:8a:a6:93:5e:5f:18:bf:74:f3: 54:d8:8f:9a:2c:0d:8c:c1:03:2e:e3:f1:7c:d1:78:30:17:2b: 43:3a:bd:38:d9:78:2b:55:8d:c6:6e:83:26:5c:ac:0f:4e:d2: ca:ef:a7:ae:3c:f4:b0:21:1a:0b:62:29:14:17:3c:53:5b:e6: 2b:f2:6b:ff:7a:ca:af:60:c8:02:a8:bc:54:c5:80:4e:3b:d1: eb:fe:0f:0e:a8:52:f8:7d:b4:83:76:17:98:55:a5:2c:c6:81: 3a:7a:f7:63:57:33:b2:bc:78:33:24:d5:ae:90:2c:e6:4f:43: f7:dc:25:ed:df:f2:f9:d5:cc:36:fa:3b:c5:52:0b:06:7d:fd: 67:b9:d5:7b:1d:2a:f7:02:65:bf:dc:c3:b3:e8:0a:81:bd:5a: 17:d5:ad:29:f1:b5:88:61:1e:09:85:6d:cc:ec:b5:ab:69:cc: 11:85:e9:ac:0f:7c:14:36:9f:90:09:03:62:bc:59:86:22:ac: 42:51:f0:09:1f:58:df:41:dd:9c:94:33:73:dd:2f:7d:4b:f9: 00:3a:7c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtcc7mfaPUforb5SFnGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjdkODRmZTE1YTMyNDNjMTAwMDM0N2IwOTkwYmE0NmJi M2FlNDIwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EygyYTE2MmZkNzZjNTUwNjlhMmEwN2E5ZjY0Mzk4ZDMzMzVhYzgxMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCSKo4ZFulddMz/J7PY4BtQO5/RJ AAa69ZbNj18ywngxHnzRBRM8jcOC7M3Bcxmgu+3E/SQu5r8oj+NmEmAtzv53mP6Q RU+VpD4K0zIrq2pK7Q/wBVnhm2X0Fb5QCpHd2egUrH8JNabkcKISMNxaTkfm1JNQ NTv8ovrvH5/+ncYSIDXii6SkdF+POBInk7PRGtfKwFH3NIWdyYjqgnehMnJpBACr 0+RhcP+ITdihkrqbYpfkfbP0NqQhn7pDWIaX70E0s+9PCui/vtSm9OvuSn2Kld5z 22+rnwGFtMnHeUC/q1fW6lxKA8As4CGR7otLDHTBGQd0kLAVNKsnIg9KSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoWL9dsVQaaKgep9kOY0zNayBCRMB8GA1UdIwQY MBaAFL632E/hWjJDwQADR7CZC6Rrs65CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMt ZTdiODYwMzMyY2I3LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNzc0YmQtNmY3ZC00ZDRmLTk2ZGMtZTdiODYwMzMyY2I3 LzEvdnJmWVQtRmFNa1BCQUFOSHNKa0xwR3V6cmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK/Ys7jU XnMTr6NAnB73KmxRUcNFr058zd8y7mpmXZGaxEwCbczi7UU6Kaa4iqaTXl8Yv3Tz VNiPmiwNjMEDLuPxfNF4MBcrQzq9ONl4K1WNxm6DJlysD07Syu+nrjz0sCEaC2Ip FBc8U1vmK/Jr/3rKr2DIAqi8VMWATjvR6/4PDqhS+H20g3YXmFWlLMaBOnr3Y1cz srx4MyTVrpAs5k9D99wl7d/y+dXMNvo7xVILBn39Z7nVex0q9wJlv9zDs+gKgb1a F9WtKfG1iGEeCYVtzOy1q2nMEYXprA98FDafkAkDYrxZhiKsQlHwCR9Y30HdnJQz c90vfUv5ADp80w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:06 2025 by rpki-client