This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json) Hash identifier: xCTrJHF2ZgN5s7hpq7PMRS4Bhm9AWqATKJ03pSTupXc= Subject key identifier: 0F:14:39:5C:1A:A5:B2:E2:F3:F1:51:87:6C:AB:10:AB:A5:4A:A1:D8 Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Certificate serial: 019AF3892121A6D04DA7B5F720DF8FA10111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=) 2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: n3USYaWc9CAnUp4vWMN+TSNe6oRo8sLkd7vtuCSAGeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:21:21:a6:d0:4d:a7:b5:f7:20:df:8f:a1:01:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=0f14395c1aa5b2e2f3f151876cab10aba54aa1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:b1:59:b1:81:24:0b:a4:37:31:58:6d:e3: 3f:14:56:dd:b8:f9:d2:99:32:f4:d7:43:58:cd:91: 6c:cd:b7:a5:a5:7d:5e:53:18:36:86:2c:c8:8b:4a: d7:69:f2:12:d1:5f:0f:1f:04:20:00:a6:1c:a8:0b: 78:e8:7f:36:82:95:c0:d1:76:7c:db:71:0b:0a:e6: 28:5a:48:d9:f2:61:e4:cb:a3:e4:09:2e:05:ad:cf: 96:dd:af:dd:08:be:29:a7:e3:6f:61:ae:74:23:96: 49:aa:66:e2:61:d3:93:8d:0a:17:b7:4a:2e:db:ef: 26:0b:1e:be:0d:35:8d:60:45:94:04:75:57:7a:c7: 81:58:52:68:9d:5e:8a:ac:6b:93:a6:ac:88:36:01: 79:ef:7d:2e:66:66:2a:e1:54:9d:c5:4c:c2:45:84: 94:ab:61:e1:3e:88:4e:3a:a4:79:c5:fc:2a:92:5b: 01:19:df:f9:38:b8:42:07:57:db:2b:82:58:b9:e5: 91:56:87:0d:0b:9a:e3:b9:08:89:f0:0f:cc:d4:01: 68:eb:87:2b:6f:f9:30:28:8d:f8:04:af:b8:fa:ea: 2f:c0:66:25:d7:6b:90:9a:0b:54:38:5e:5d:6e:24: c9:e1:12:3b:58:c2:e3:b3:cf:ff:46:35:e3:22:5b: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:14:39:5C:1A:A5:B2:E2:F3:F1:51:87:6C:AB:10:AB:A5:4A:A1:D8 X509v3 Authority Key Identifier: keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7c:52:28:5f:2a:8c:97:c8:ca:5c:0b:dc:e5:19:1d:0c:71: b7:cc:61:1d:3b:4a:cf:c9:90:97:2d:f8:3c:f6:e3:64:a9:ae: ea:50:24:9b:8b:2a:08:03:86:68:8f:02:63:99:a8:8b:98:5c: f4:8c:7d:7b:4a:96:84:87:47:fe:d8:da:90:a5:a1:51:92:b9: 88:1b:6c:2a:f8:b0:59:01:b9:f6:26:d9:c1:c9:49:48:48:d9: 26:2c:d0:84:7f:6c:d1:23:f7:1e:ea:28:f8:f1:b3:54:51:f4: 9d:69:9d:5f:e5:b7:e0:e0:4a:81:3f:cd:bd:ae:0b:09:75:3c: c8:f9:1d:0e:2f:d6:c7:ac:f8:7a:e7:c3:e7:ba:13:29:93:d5: b6:9e:a7:b5:9c:23:23:4a:a7:c5:14:d1:33:fd:51:00:0d:7b: 77:20:61:2d:b1:7c:06:b2:ce:af:29:6a:d8:63:cc:ec:fe:00: 5c:4a:1e:14:3d:ce:9b:84:7b:67:50:b8:7e:34:40:be:10:2e: 4c:ee:e7:c7:29:80:49:b9:0e:f5:13:af:00:c0:93:61:9d:24: 0a:eb:a6:7f:67:82:cd:9d:94:5d:40:a3:f3:ac:cf:bb:1a:75: 4f:9e:33:06:ff:a7:c2:b7:93:24:94:fc:d4:e9:e3:24:ce:b3: c2:34:cf:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSEhptBNp7X3IN+PoQERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm OGIyNDQwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EygwZjE0Mzk1YzFhYTViMmUyZjNmMTUxODc2Y2FiMTBhYmE1NGFhMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKxWbGBJAukNzFYbeM/FFbduPnS mTL010NYzZFszbelpX1eUxg2hizIi0rXafIS0V8PHwQgAKYcqAt46H82gpXA0XZ8 23ELCuYoWkjZ8mHky6PkCS4Frc+W3a/dCL4pp+NvYa50I5ZJqmbiYdOTjQoXt0ou 2+8mCx6+DTWNYEWUBHVXeseBWFJonV6KrGuTpqyINgF5730uZmYq4VSdxUzCRYSU q2HhPohOOqR5xfwqklsBGd/5OLhCB1fbK4JYueWRVocNC5rjuQiJ8A/M1AFo64cr b/kwKI34BK+4+uovwGYl12uQmgtUOF5dbiTJ4RI7WMLjs8//RjXjIlvt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8UOVwapbLi8/FRh2yrEKulSqHYMB8GA1UdIwQY MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2 LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHxSKF8q jJfIylwL3OUZHQxxt8xhHTtKz8mQly34PPbjZKmu6lAkm4sqCAOGaI8CY5moi5hc 9Ix9e0qWhIdH/tjakKWhUZK5iBtsKviwWQG59ibZwclJSEjZJizQhH9s0SP3Huoo +PGzVFH0nWmdX+W34OBKgT/Nva4LCXU8yPkdDi/Wx6z4eufD57oTKZPVtp6ntZwj I0qnxRTRM/1RAA17dyBhLbF8BrLOrylq2GPM7P4AXEoeFD3Om4R7Z1C4fjRAvhAu TO7nxymASbkO9ROvAMCTYZ0kCuumf2eCzZ2UXUCj86zPuxp1T54zBv+nwreTJJT8 1OnjJM6zwjTPvw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:22 2025 by rpki-client