This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json) Hash identifier: mYSaek1N9KIvLunf1KFydX4I+HniUUFCOom9w61t+84= Subject key identifier: F4:1D:3F:C8:78:8C:16:5F:5D:07:5B:94:A4:CE:0C:8B:54:9C:F8:45 Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e Certificate serial: 019AF31D662C96FDFEFAF9FE7877077B4046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=) 2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: fXHdQ/fVTuuSUi7049ExE28cZk2hvn6myCRi+OZkwCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:66:2c:96:fd:fe:fa:f9:fe:78:77:07:7b:40:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=f41d3fc8788c165f5d075b94a4ce0c8b549cf845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:b7:c2:84:f2:a9:48:08:6e:3e:58:4a:b7: 1c:b9:69:75:b1:d4:73:8a:3a:dd:8a:a0:0c:22:e7: be:64:26:1f:a9:a7:9d:7a:fd:1e:19:24:57:0f:83: 6e:11:23:b2:2f:ed:57:fb:61:7e:5b:34:94:a5:ee: 56:a7:84:30:9f:52:56:a9:df:16:c4:8a:3a:55:38: e9:8c:c0:45:e7:5d:89:e3:a8:03:54:a2:f7:94:9c: 58:46:f1:97:63:d7:c6:4c:91:33:32:a0:1e:23:68: 38:ca:35:fc:53:81:0f:3d:80:f6:01:0d:0f:d5:06: 65:c2:16:80:62:b0:c2:84:23:41:b0:56:f5:f7:4b: 35:c9:c4:96:2a:d7:23:de:ab:f3:f2:d2:74:9e:04: 0e:e0:b1:11:55:cf:f3:54:c3:ef:ec:3b:6e:82:52: 61:40:16:b1:2c:e7:1b:6a:ba:5a:f6:f3:c3:52:92: df:92:4c:24:d1:2a:d0:e2:5a:1d:ae:29:31:8c:b4: 1f:41:17:d9:81:d6:6d:9b:54:d1:08:d8:3b:fa:88: 02:70:0e:67:26:a9:46:01:02:1a:d7:d7:ab:68:5b: a2:c0:c0:e4:a1:84:c2:89:78:f6:dd:45:f5:2a:db: 2b:a8:76:7a:db:3b:05:70:45:fd:b8:09:d5:d7:13: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:3F:C8:78:8C:16:5F:5D:07:5B:94:A4:CE:0C:8B:54:9C:F8:45 X509v3 Authority Key Identifier: keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:10:15:55:67:d7:a3:2c:75:3e:11:bc:3d:8e:13:91:4c: 1b:8d:1f:c6:09:a7:35:4a:f2:61:38:43:b9:fe:10:3d:27:ea: b2:38:6d:2d:74:50:c0:f6:71:16:61:36:9a:70:81:e1:05:dc: 68:24:18:a0:43:63:72:79:9d:45:2b:01:43:06:b3:39:f4:a9: fe:4a:6b:31:b8:33:5c:4b:f5:d9:34:c9:f0:7d:84:ae:24:33: 2f:1c:30:bb:2b:bb:f4:8c:92:ba:dd:f9:5c:db:d5:e9:d7:a8: 87:4e:aa:21:21:02:3e:86:11:00:17:d1:2f:ef:ba:db:3c:e3: e9:0b:52:50:85:ac:23:05:93:d7:e7:ae:53:39:a4:75:0b:bb: f1:9c:6f:93:37:83:b8:2b:4a:fb:60:b7:74:ef:ff:5b:07:ab: 6a:5e:2b:c7:9c:d8:84:b8:16:76:fb:11:40:17:c3:5e:e0:0e: 37:a1:4f:1b:fe:12:44:30:54:72:bd:45:98:51:83:43:c3:75: 0f:ca:d9:3d:97:67:3e:df:99:b2:fb:9d:e7:22:1c:19:b4:7d: 21:c7:c8:e6:81:84:bc:b9:30:92:c4:59:68:83:96:3c:67:b8: 96:74:d2:a5:e0:fc:3d:e1:d8:86:b9:52:94:6f:4d:e4:1f:22: 41:13:fa:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWYslv3++vn+eHcHe0BGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjViNzEyZjJlNDkzMmMxYzAzMDMxMmQxOTRhNTk3ODgz ZjNkNWUwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD EyhmNDFkM2ZjODc4OGMxNjVmNWQwNzViOTRhNGNlMGM4YjU0OWNmODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw+3woTyqUgIbj5YSrccuWl1sdRz ijrdiqAMIue+ZCYfqaedev0eGSRXD4NuESOyL+1X+2F+WzSUpe5Wp4Qwn1JWqd8W xIo6VTjpjMBF512J46gDVKL3lJxYRvGXY9fGTJEzMqAeI2g4yjX8U4EPPYD2AQ0P 1QZlwhaAYrDChCNBsFb190s1ycSWKtcj3qvz8tJ0ngQO4LERVc/zVMPv7DtuglJh QBaxLOcbarpa9vPDUpLfkkwk0SrQ4lodrikxjLQfQRfZgdZtm1TRCNg7+ogCcA5n JqlGAQIa19eraFuiwMDkoYTCiXj23UX1KtsrqHZ62zsFcEX9uAnV1xMqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQdP8h4jBZfXQdblKTODItUnPhFMB8GA1UdIwQY MBaAFL31txLy5JMsHAMDEtGUpZeIPz1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMt NmM1YzM0NTg2ZjZlLzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMtNmM1YzM0NTg2ZjZl LzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwMQFVVn 16MsdT4RvD2OE5FMG40fxgmnNUryYThDuf4QPSfqsjhtLXRQwPZxFmE2mnCB4QXc aCQYoENjcnmdRSsBQwazOfSp/kprMbgzXEv12TTJ8H2EriQzLxwwuyu79IySut35 XNvV6deoh06qISECPoYRABfRL++62zzj6QtSUIWsIwWT1+euUzmkdQu78ZxvkzeD uCtK+2C3dO//Wweral4rx5zYhLgWdvsRQBfDXuAON6FPG/4SRDBUcr1FmFGDQ8N1 D8rZPZdnPt+Zsvud5yIcGbR9IcfI5oGEvLkwksRZaIOWPGe4lnTSpeD8PeHYhrlS lG9N5B8iQRP6zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:31 2025 by rpki-client