This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json) Hash identifier: S2l16KA0DOhmK0AJ//4t4jm5y+XCqJuEnKk5cX78dfc= Subject key identifier: 37:34:1A:07:58:78:F1:00:24:85:93:57:78:DF:F6:51:A2:29:8A:C0 Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a Certificate serial: 019AF2AD8B85776F6F0DE3AE67FB4AFAFE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=) 2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: wlosXMU/2P0qWpfe+YMHbsBgcJLy7FUC3ue9ko4gD+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8b:85:77:6f:6f:0d:e3:ae:67:fb:4a:fa:fe:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=37341a075878f1002485935778dff651a2298ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:c4:1e:a2:9f:e4:4f:f0:c2:c2:36:47:85: 86:df:8d:4e:6f:f6:11:f1:bb:a8:a4:2d:9a:98:21: 88:c6:8c:19:d1:18:2b:0d:91:84:69:8d:dc:3c:ed: 12:74:6e:d2:3a:ee:1c:c3:ba:53:6a:89:d6:44:f5: 7f:82:36:06:ad:46:96:3b:bf:ba:13:03:c5:d7:24: 0e:0e:1f:0d:f4:1d:62:50:72:bc:14:93:d6:93:62: fd:ca:04:2d:1b:7f:3b:77:7b:11:d4:09:9c:68:9c: eb:82:ee:ef:40:a3:c4:40:b5:29:e6:8b:4d:de:e5: 2c:80:74:7b:51:20:51:15:7e:3c:e6:fd:5d:b7:e7: 26:03:6f:67:5b:69:e1:fc:19:be:35:bb:a5:80:4f: 68:40:06:47:38:91:a8:dd:c7:4f:59:d3:27:df:7a: da:a5:af:9f:c3:1b:09:ec:7a:dc:28:62:1c:e1:07: 71:f3:ef:0d:23:18:04:c9:ad:25:c1:0a:db:97:23: 9f:f0:f0:48:b7:54:2d:3b:0c:c7:5e:3e:2a:57:12: 76:f1:2c:5a:af:fe:a4:42:aa:2b:d9:3f:61:35:7b: 7f:69:ae:9e:c0:45:62:f5:8c:6c:b0:d1:18:33:b3: 7a:b1:75:f5:05:fc:3e:f4:36:10:d5:f7:ce:29:af: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:1A:07:58:78:F1:00:24:85:93:57:78:DF:F6:51:A2:29:8A:C0 X509v3 Authority Key Identifier: keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:6a:64:50:f8:4d:9f:34:21:bf:3e:77:bc:fe:d7:0c:8a: 94:6e:a8:4a:51:09:3a:c5:6d:cb:ab:2c:e0:ae:a9:ea:9f:ac: a6:4f:7b:02:bd:bd:6e:98:f6:b6:14:d1:2a:61:1b:d9:95:b8: bf:7b:fd:ca:0b:99:30:15:28:d7:4a:f7:47:0b:59:17:73:a2: 82:2c:88:02:7c:f9:1b:5a:a9:e9:10:01:1c:d0:6b:69:34:47: b0:d9:2b:0a:39:b8:c6:bc:fa:08:aa:d9:ec:64:11:76:a4:25: 18:a4:48:77:10:56:52:87:98:8b:ad:f4:60:5b:c9:51:69:4f: 98:13:21:d6:1c:d8:c8:b4:2e:59:8c:c8:3f:8d:d8:41:18:a6: 56:11:ba:7c:9e:91:d5:fb:5f:fa:8e:cd:fe:9f:55:54:20:a5: 9b:74:d1:25:e4:d7:da:65:95:49:4c:f0:03:d1:09:11:e8:cb: 9f:28:96:d4:d6:e5:22:0f:bb:3c:78:6a:31:93:69:20:d2:88: dc:88:9d:70:99:bc:54:c2:1f:e0:76:67:f0:dd:92:35:0f:50: 08:4a:86:6d:4b:7a:ed:e8:78:cb:ae:13:f4:b7:20:88:fb:14: 07:17:0e:50:7a:77:e5:2e:05:2d:5a:3d:bd:29:92:5e:af:39: 41:60:00:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYuFd29vDeOuZ/tK+v6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzNjMzNDZjMTJmODNjNjBkN2I1Y2ZkZWZlY2QzZTdm ZjBlMmEwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EygzNzM0MWEwNzU4NzhmMTAwMjQ4NTkzNTc3OGRmZjY1MWEyMjk4YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirEHqKf5E/wwsI2R4WG341Ob/YR 8buopC2amCGIxowZ0RgrDZGEaY3cPO0SdG7SOu4cw7pTaonWRPV/gjYGrUaWO7+6 EwPF1yQODh8N9B1iUHK8FJPWk2L9ygQtG387d3sR1AmcaJzrgu7vQKPEQLUp5otN 3uUsgHR7USBRFX485v1dt+cmA29nW2nh/Bm+NbulgE9oQAZHOJGo3cdPWdMn33ra pa+fwxsJ7HrcKGIc4Qdx8+8NIxgEya0lwQrblyOf8PBIt1QtOwzHXj4qVxJ28Sxa r/6kQqor2T9hNXt/aa6ewEVi9YxssNEYM7N6sXX1Bfw+9DYQ1ffOKa8CxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDc0GgdYePEAJIWTV3jf9lGiKYrAMB8GA1UdIwQY MBaAFL36NjNGwS+Dxg17XP3v7NPn/w4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYt MTcxNjE0NjY0NGU2LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYtMTcxNjE0NjY0NGU2 LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIhqZFD4 TZ80Ib8+d7z+1wyKlG6oSlEJOsVty6ss4K6p6p+spk97Ar29bpj2thTRKmEb2ZW4 v3v9yguZMBUo10r3RwtZF3OigiyIAnz5G1qp6RABHNBraTRHsNkrCjm4xrz6CKrZ 7GQRdqQlGKRIdxBWUoeYi630YFvJUWlPmBMh1hzYyLQuWYzIP43YQRimVhG6fJ6R 1ftf+o7N/p9VVCClm3TRJeTX2mWVSUzwA9EJEejLnyiW1NblIg+7PHhqMZNpINKI 3IidcJm8VMIf4HZn8N2SNQ9QCEqGbUt67eh4y64T9LcgiPsUBxcOUHp35S4FLVo9 vSmSXq85QWAASw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:05 2025 by rpki-client