This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft File: vflgsO5rxdD2oMZKafL4Yln9zVg.mft (raw, json) Hash identifier: yA1sBxeFuNld1AUylopXmjOy0bKbzonrL3fQPK8j5M0= Subject key identifier: 73:E2:CA:3F:E8:DB:5C:76:AF:E5:9E:B4:28:06:E0:35:96:6D:9A:DD Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58 Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58 Certificate serial: 019AF2AD6188895CBC79953A49263C9513E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft Manifest number: 163A Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: rEdLOhgJ5xMWvLwmv0wizm-cOW0.roa (hash: 5KEvRv7KqMLhpYGvFA0tU5bp6PFE1qlP3ELvibmeSX4=) 2: vflgsO5rxdD2oMZKafL4Yln9zVg.crl (hash: bl2l4NQiwwjy25mvlAii2Jw9xcDtQussSp578vNB+pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:61:88:89:5c:bc:79:95:3a:49:26:3c:95:13:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=73e2ca3fe8db5c76afe59eb42806e035966d9add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:84:f1:bd:76:94:13:f5:fc:45:9f:17:be: f2:ed:53:6f:43:33:0d:69:d2:77:ea:59:be:ef:d7: 71:0d:80:1a:51:8f:d8:fc:96:09:83:52:96:f2:09: 17:62:bc:e4:2b:1d:db:b7:c4:bd:98:48:9c:2a:09: 3d:bd:bc:70:0e:96:14:e5:95:ae:22:48:cf:7d:35: 3b:c2:61:31:0f:5e:93:bb:56:fc:7e:35:3f:11:21: 05:ff:13:df:ab:d5:ca:5c:0a:6d:47:dd:ce:41:9e: d9:ab:04:87:fa:1d:38:37:98:74:58:30:36:7b:27: 3d:68:d4:ce:90:41:0e:79:5c:a2:56:29:27:4b:cf: d9:a1:11:36:6f:ae:32:6c:06:e3:81:b5:0b:36:6b: bd:fa:c3:67:02:b7:2b:fe:94:9d:0c:34:97:8f:d7: 86:8f:af:c2:2d:cb:82:e6:08:16:9a:27:76:b0:c6: f9:54:e9:9f:e0:87:2a:9c:7a:60:d0:b8:52:f6:a0: bf:b8:b3:0d:ff:64:81:21:a4:64:5e:be:80:d9:49: f1:be:e0:a5:9c:00:75:73:41:16:b6:8f:20:50:97: cc:fb:9e:6a:ef:dd:b2:1d:1a:cc:aa:46:db:3b:78: 39:70:29:04:3e:74:72:9e:6e:f7:e0:a8:58:e3:27: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E2:CA:3F:E8:DB:5C:76:AF:E5:9E:B4:28:06:E0:35:96:6D:9A:DD X509v3 Authority Key Identifier: keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:82:cd:e7:56:95:71:06:fb:02:75:6a:a3:86:ef:25:40:53: 58:ee:ae:13:08:3a:91:d7:67:61:f3:23:da:84:8a:d8:21:52: 97:fd:d8:98:3d:4a:dc:20:44:fb:0d:36:7c:85:ee:54:14:5d: fb:b6:ee:52:1b:c4:0e:59:52:33:f0:82:4c:0b:e7:96:68:6f: ee:fc:8d:c3:7f:6c:fb:db:cc:2d:ec:a3:b6:13:d0:9d:d3:1a: 70:59:15:05:9e:ed:ff:48:d0:38:a5:9e:bc:2b:b0:77:a1:65: a7:f6:ce:03:0c:c9:80:c0:41:41:d4:a8:13:f8:16:a0:1e:99: cb:a8:70:87:f5:6c:12:ea:6d:cd:16:1e:2e:dd:f6:43:81:c0: 9c:db:d6:00:e0:17:60:46:58:8d:e5:62:8f:27:ad:a3:3d:29: 9b:a1:17:c5:db:38:5d:d9:a9:a8:53:3e:e5:97:bc:a3:25:ea: 31:27:3a:e2:85:0a:b1:92:be:d3:f5:ac:3c:4f:8c:bc:1e:2b: b3:1e:e2:18:65:d1:9f:2a:ac:a8:c2:0b:07:fb:3e:08:87:59: 5f:a7:82:42:56:ce:e1:c9:88:55:a8:e5:4c:77:42:42:ed:6a: 02:0f:6d:96:58:f1:13:de:49:b1:87:c4:2e:c0:b8:5f:6c:84: 78:32:2c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWGIiVy8eZU6SSY8lRPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjk2MGIwZWU2YmM1ZDBmNmEwYzY0YTY5ZjJmODYyNTlm ZGNkNTgwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD Eyg3M2UyY2EzZmU4ZGI1Yzc2YWZlNTllYjQyODA2ZTAzNTk2NmQ5YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ2E8b12lBP1/EWfF77y7VNvQzMN adJ36lm+79dxDYAaUY/Y/JYJg1KW8gkXYrzkKx3bt8S9mEicKgk9vbxwDpYU5ZWu IkjPfTU7wmExD16Tu1b8fjU/ESEF/xPfq9XKXAptR93OQZ7ZqwSH+h04N5h0WDA2 eyc9aNTOkEEOeVyiViknS8/ZoRE2b64ybAbjgbULNmu9+sNnArcr/pSdDDSXj9eG j6/CLcuC5ggWmid2sMb5VOmf4IcqnHpg0LhS9qC/uLMN/2SBIaRkXr6A2UnxvuCl nAB1c0EWto8gUJfM+55q792yHRrMqkbbO3g5cCkEPnRynm734KhY4ycVZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPiyj/o21x2r+WetCgG4DWWbZrdMB8GA1UdIwQY MBaAFL35YLDua8XQ9qDGSmny+GJZ/c1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZsZ3NPNXJ4ZEQyb01aS2FmTDRZbG45elZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzY4NGEtMTJjMi00MjNhLWJkM2Et M2RkZmZkZWI5MjA3LzEvdmZsZ3NPNXJ4ZEQyb01aS2FmTDRZbG45elZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzY4NGEtMTJjMi00MjNhLWJkM2EtM2RkZmZkZWI5MjA3 LzEvdmZsZ3NPNXJ4ZEQyb01aS2FmTDRZbG45elZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoLN51aV cQb7AnVqo4bvJUBTWO6uEwg6kddnYfMj2oSK2CFSl/3YmD1K3CBE+w02fIXuVBRd +7buUhvEDllSM/CCTAvnlmhv7vyNw39s+9vMLeyjthPQndMacFkVBZ7t/0jQOKWe vCuwd6Flp/bOAwzJgMBBQdSoE/gWoB6Zy6hwh/VsEuptzRYeLt32Q4HAnNvWAOAX YEZYjeVijyetoz0pm6EXxds4XdmpqFM+5Ze8oyXqMSc64oUKsZK+0/WsPE+MvB4r sx7iGGXRnyqsqMILB/s+CIdZX6eCQlbO4cmIVajlTHdCQu1qAg9tlljxE95JsYfE LsC4X2yEeDIsTw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:54 2025 by rpki-client