This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json) Hash identifier: 8mFeULfplR3TLEro5Roi3VHCL+LBOYmGqS3VDWigevs= Subject key identifier: 04:F4:CD:64:41:25:3D:F4:82:61:2D:C6:55:A6:71:30:B6:2A:D3:E8 Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Certificate serial: 019AF1644439870231296F1A3E961829B2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft Manifest number: 12A5 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=) 2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: k36agIxXWvs4Zovl1s0uoFKvaxRf35E6VTVBnADbBy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:44:39:87:02:31:29:6f:1a:3e:96:18:29:b2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=04f4cd6441253df482612dc655a67130b62ad3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:86:9c:3d:4e:b2:ff:b9:69:57:6a:85:f2: 98:f2:59:66:98:45:e9:4e:b5:d1:45:cc:24:a6:86: 08:45:27:39:0c:48:34:66:6f:32:2b:2e:f3:52:fe: f4:67:33:58:77:45:34:a4:db:4c:b5:a0:1c:b4:02: 99:ce:dc:15:22:10:cc:cf:87:8f:7e:5f:04:82:50: 1d:cc:d2:81:45:81:6d:43:e9:f6:ac:f5:8a:4c:f6: c4:36:b7:fa:e3:83:66:8c:1f:3a:0a:f5:54:29:ea: 3e:76:f7:28:25:29:01:2a:ef:52:ad:d7:fa:c7:b6: 9d:ad:c9:41:a1:53:96:28:44:0a:fc:59:fe:3a:f1: 8a:4d:7c:32:49:11:8a:56:3a:14:38:61:77:c9:fc: 8d:35:86:e4:36:27:1f:c4:67:73:22:06:f1:35:85: 21:76:18:87:f8:d3:73:3b:0b:8c:f2:0b:5b:f2:13: c7:51:25:93:89:d6:34:ec:ae:d8:b4:dd:47:ad:1c: f9:03:48:33:a9:9b:80:ca:04:cb:4c:6f:c6:88:b2: e2:f7:6b:77:42:e0:f3:2a:f5:fa:ea:f6:c7:79:b1: 81:8a:5c:c8:10:ca:30:a1:a6:87:ca:9c:8b:1f:81: c3:3b:35:84:11:50:aa:fd:e6:c6:6a:c3:c2:ac:93: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:CD:64:41:25:3D:F4:82:61:2D:C6:55:A6:71:30:B6:2A:D3:E8 X509v3 Authority Key Identifier: keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fb:1b:c9:7d:a1:79:f8:75:7f:d0:f3:03:35:d7:9b:3c:d8: 52:68:81:69:be:6c:fc:35:ab:c8:5d:88:59:f8:ac:89:1c:59: a2:e9:21:d3:e5:b5:df:81:1c:68:1a:a7:b3:b1:09:d6:e3:2a: ab:19:bb:9f:ce:46:ab:ca:77:45:5f:66:76:56:dc:54:bc:59: 0f:5d:38:63:ce:d4:00:5e:e5:af:78:d0:5e:6d:1a:58:10:ba: 94:e8:39:83:83:65:6e:28:78:da:aa:2c:de:45:02:53:c8:15: 1e:b7:20:6b:8d:67:91:c4:a6:01:eb:88:10:0c:da:db:99:82: 0b:0b:ca:c8:ea:ea:cd:1f:22:15:eb:f6:b4:05:a7:41:21:12: 00:40:5f:95:d6:32:68:c3:ea:28:70:51:04:23:3a:25:1d:5b: 28:99:d1:79:32:d0:bd:02:67:4f:fd:db:f9:89:0f:af:48:7e: a9:eb:28:aa:a3:64:1c:35:19:d6:cf:e5:36:65:7a:20:0b:a5: af:9d:2d:af:f3:4c:ca:dc:7d:fc:fa:09:bc:70:d7:02:4a:92: e9:be:01:63:ae:69:7a:c6:58:1b:91:a4:40:cf:62:1b:52:48: e3:36:9a:90:a4:a9:01:59:54:fc:a4:81:3d:11:6b:08:77:89: 10:c2:e5:0c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZEQ5hwIxKW8aPpYYKbLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjcwNjZkYTA5YTU2MjI0MjYwZTQ2ZWEyNmRjOWNiMWRi YThlMzcwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygwNGY0Y2Q2NDQxMjUzZGY0ODI2MTJkYzY1NWE2NzEzMGI2MmFkM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkqGnD1Osv+5aVdqhfKY8llmmEXp TrXRRcwkpoYIRSc5DEg0Zm8yKy7zUv70ZzNYd0U0pNtMtaActAKZztwVIhDMz4eP fl8EglAdzNKBRYFtQ+n2rPWKTPbENrf644NmjB86CvVUKeo+dvcoJSkBKu9Srdf6 x7adrclBoVOWKEQK/Fn+OvGKTXwySRGKVjoUOGF3yfyNNYbkNicfxGdzIgbxNYUh dhiH+NNzOwuM8gtb8hPHUSWTidY07K7YtN1HrRz5A0gzqZuAygTLTG/GiLLi92t3 QuDzKvX66vbHebGBilzIEMowoaaHypyLH4HDOzWEEVCq/ebGasPCrJP6LQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAT0zWRBJT30gmEtxlWmcTC2KtPoMB8GA1UdIwQY MBaAFPr3Bm2gmlYiQmDkbqJtycsduo43MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12Y0diYUNhVmlKQ1lPUnVvbTNKeXgyNmpqYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5 LWI3NTk4MzEyMjQ1NS8xLzEtdmNHYmFDYVZpSkNZT1J1b20zSnl4MjZqamMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EzLzZkYmMyZi0wZjBiLTRhMmYtYjE0OS1iNzU5ODMxMjI0 NTUvMS8xLXZjR2JhQ2FWaUpDWU9SdW9tM0p5eDI2ampjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPsb yX2hefh1f9DzAzXXmzzYUmiBab5s/DWryF2IWfisiRxZoukh0+W134EcaBqns7EJ 1uMqqxm7n85Gq8p3RV9mdlbcVLxZD104Y87UAF7lr3jQXm0aWBC6lOg5g4Nlbih4 2qos3kUCU8gVHrcga41nkcSmAeuIEAza25mCCwvKyOrqzR8iFev2tAWnQSESAEBf ldYyaMPqKHBRBCM6JR1bKJnReTLQvQJnT/3b+YkPr0h+qesoqqNkHDUZ1s/lNmV6 IAulr50tr/NMytx9/PoJvHDXAkqS6b4BY65pesZYG5GkQM9iG1JI4zaakKSpAVlU /KSBPRFrCHeJEMLlDA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:16 2025 by rpki-client