This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: lt6OQECF7g7fqQqPsZSJEhqzfaMMWq0TjdtRXc1YkQE= Subject key identifier: A9:44:D6:9C:67:69:66:01:7A:C3:D4:62:E4:10:C3:CC:70:28:A1:06 Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019AF1D1F71C564CD83892215AF63159F92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 035B Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: /zCRxJ9l7+h3dC/HB2NXzy8mLrYS19EWt1GqivC3aK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f7:1c:56:4c:d8:38:92:21:5a:f6:31:59:f9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=a944d69c676966017ac3d462e410c3cc7028a106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:bf:1c:cf:a3:f1:3a:48:23:8f:23:42:26: ae:32:9f:c8:53:9d:8c:e4:c4:00:24:fa:a1:30:83: 7b:5e:e7:44:01:24:ed:22:8f:fc:7c:65:02:47:d1: 21:ec:e6:2a:80:f2:ed:58:70:30:bf:c1:85:50:d9: 2d:89:13:ba:15:4c:33:97:bb:80:2e:62:c2:a5:a9: 45:2e:2a:1d:e8:f1:26:01:db:ac:34:4a:7d:de:05: 8a:43:64:d3:1b:02:fb:df:ae:f3:a2:40:d4:b4:f1: 8a:3c:0d:ec:d3:93:82:77:39:0d:ec:31:46:bc:71: c4:e5:88:41:26:2e:9e:5c:bf:38:b4:8e:48:48:83: a3:0c:00:d4:3d:e2:aa:3a:19:56:7e:29:7c:4a:8e: 18:79:49:c5:9d:e7:a5:54:67:d7:02:94:5c:2b:ba: 18:fd:9c:e3:70:6e:bb:23:18:e3:3b:95:88:71:b9: fa:04:a2:30:82:42:0e:5b:15:c0:76:1f:74:e3:f2: 30:bd:b0:4c:f6:15:73:55:72:29:45:3b:69:6d:7b: 31:cd:a0:04:5c:9a:2d:1b:df:79:d6:90:d8:80:50: 34:1e:4f:8b:03:84:fe:5c:5f:c9:0b:cd:ca:92:64: b2:c9:55:29:27:44:9e:63:a3:41:4c:22:f9:26:6c: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:D6:9C:67:69:66:01:7A:C3:D4:62:E4:10:C3:CC:70:28:A1:06 X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0d:e2:26:e2:3e:0b:d6:14:df:f6:e8:e0:47:fb:b2:90:02: c6:02:48:8e:28:5d:3e:da:0b:e0:e7:3d:5a:24:a5:78:d8:b0: b4:70:bd:39:fa:47:81:a7:d9:26:95:9a:7e:2a:5f:1d:ff:6f: 5a:07:7d:5d:fc:0b:03:63:3a:7f:5b:41:0f:38:b6:7d:f1:55: f9:17:b2:62:37:55:c4:3c:6c:84:1b:07:0f:7f:29:a4:34:5d: 60:b9:37:e4:f0:a8:61:fd:86:ec:04:0a:0b:7b:56:ff:d2:9d: 58:50:8d:41:c3:fc:82:41:89:e9:4d:ee:80:c6:74:e3:3a:6a: 4a:ad:15:63:c4:7a:46:4e:5a:dc:a5:e6:33:f9:04:46:6a:0f: 0f:e1:9a:c9:e3:19:a2:78:40:c5:ea:a5:46:8f:4a:10:a4:07: 78:04:e9:e6:7b:fa:25:34:77:27:74:f9:d9:b3:a8:b8:26:31: bc:74:f1:d7:a2:10:91:55:ef:f1:0c:c8:aa:dd:39:79:46:cf: c1:17:9c:e4:7f:34:c0:75:74:f7:60:c2:e4:6a:09:78:f5:94: b9:b0:5e:84:f7:94:54:32:50:6a:ac:3f:2a:94:0d:b6:a4:2e: 67:98:69:4d:05:85:3a:24:dd:62:2c:3c:d5:d3:04:2c:59:c7: 0d:ec:bc:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fccVkzYOJIhWvYxWfksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EyhhOTQ0ZDY5YzY3Njk2NjAxN2FjM2Q0NjJlNDEwYzNjYzcwMjhhMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/2/HM+j8TpII48jQiauMp/IU52M 5MQAJPqhMIN7XudEASTtIo/8fGUCR9Eh7OYqgPLtWHAwv8GFUNktiRO6FUwzl7uA LmLCpalFLiod6PEmAdusNEp93gWKQ2TTGwL7367zokDUtPGKPA3s05OCdzkN7DFG vHHE5YhBJi6eXL84tI5ISIOjDADUPeKqOhlWfil8So4YeUnFneelVGfXApRcK7oY /ZzjcG67IxjjO5WIcbn6BKIwgkIOWxXAdh904/IwvbBM9hVzVXIpRTtpbXsxzaAE XJotG9951pDYgFA0Hk+LA4T+XF/JC83KkmSyyVUpJ0SeY6NBTCL5JmyTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlE1pxnaWYBesPUYuQQw8xwKKEGMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ3iJuI+ C9YU3/bo4Ef7spACxgJIjihdPtoL4Oc9WiSleNiwtHC9OfpHgafZJpWafipfHf9v Wgd9XfwLA2M6f1tBDzi2ffFV+ReyYjdVxDxshBsHD38ppDRdYLk35PCoYf2G7AQK C3tW/9KdWFCNQcP8gkGJ6U3ugMZ04zpqSq0VY8R6Rk5a3KXmM/kERmoPD+GayeMZ onhAxeqlRo9KEKQHeATp5nv6JTR3J3T52bOouCYxvHTx16IQkVXv8QzIqt05eUbP wRec5H80wHV092DC5GoJePWUubBehPeUVDJQaqw/KpQNtqQuZ5hpTQWFOiTdYiw8 1dMELFnHDey8Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:51:36 2025 by rpki-client