This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft File: vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json) Hash identifier: epbUdtsgijnclUXvAUp657rzakp+iCX9SDCx5bT/0fo= Subject key identifier: D3:15:92:40:E7:B2:A7:76:AD:B2:B1:AF:2F:59:52:A7:49:79:1E:FB Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6 Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6 Certificate serial: 019AF31B47F165DC4DD7274028F295DC1E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft Manifest number: 06A1 Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=) 2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: ey2CWZ8KdldQMPY/gP53yqQ27uuKbdXYsDpwXzH6eg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:47:f1:65:dc:4d:d7:27:40:28:f2:95:dc:1e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6 Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=d3159240e7b2a776adb2b1af2f5952a749791efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:cb:af:66:ad:d6:0f:b7:21:36:c1:9e:66: 31:29:00:95:0b:ac:07:d6:d8:94:64:60:49:dd:de: 2d:24:fa:53:d7:2d:b4:f0:c7:d0:87:b8:0d:a5:29: 1c:03:fd:ee:79:1c:db:00:8d:7a:5c:31:0b:3a:2b: f0:71:19:08:10:c7:52:ba:64:bc:d6:7b:6a:2c:90: 26:5f:ae:1e:8d:dc:3b:e9:2e:a9:0a:d1:ec:6f:32: 90:7b:a6:0f:42:ff:8c:a0:a7:22:a6:63:6d:ec:d8: 6e:84:f0:04:c0:78:68:ea:06:08:4a:b5:b6:6f:fa: 7c:33:50:ce:32:e5:50:24:3a:f7:d0:1d:2c:8c:10: a4:7d:65:71:b0:46:b7:de:39:d5:d1:ed:54:25:4e: de:49:92:36:4a:e7:24:1d:0d:79:22:0e:71:96:22: 22:ab:85:d3:13:e6:e5:34:ef:f0:d1:b8:9a:c2:2a: 9e:ea:70:db:fc:5d:ba:29:ba:7c:2f:1a:8a:4a:86: 76:e3:e9:e9:c2:65:e2:11:84:35:8d:01:5a:7b:5a: a3:1b:46:6b:8d:9f:35:1d:61:d7:94:b9:23:e4:1a: 6f:27:40:eb:42:77:6a:e8:1b:c4:54:d1:ac:7f:79: 5b:c7:74:a3:ee:e4:b6:5a:ae:33:12:5c:cb:82:e3: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:92:40:E7:B2:A7:76:AD:B2:B1:AF:2F:59:52:A7:49:79:1E:FB X509v3 Authority Key Identifier: keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:07:29:0c:35:33:b4:4e:01:65:eb:ff:b3:fc:9d:d3:d3: c6:8e:e1:cd:33:03:c1:ad:db:02:89:ed:9d:27:6a:27:10:7c: 73:9a:94:ad:e7:d7:e1:bd:70:89:9b:38:dc:7a:aa:fe:ee:fb: a7:ee:d3:0b:c2:de:85:16:7b:90:61:c6:4e:30:c6:41:fe:3a: 52:41:6f:77:25:88:de:e9:ff:32:43:1b:12:b2:df:af:3b:be: e7:a0:0e:fe:d4:88:80:21:a0:07:5e:56:bc:17:19:7c:b2:8e: 08:6e:5a:aa:00:bd:94:5b:03:63:15:55:90:71:c9:a3:18:c4: ef:e5:03:37:7a:f8:e9:de:20:2e:f4:d9:bb:8f:9a:9a:aa:59: 41:e9:16:a0:95:96:76:69:63:f4:c1:ae:07:51:be:d8:85:b7: 0c:9f:35:3b:85:0a:a2:54:ea:31:ec:c0:63:ea:a4:98:59:43: d7:fb:b6:81:ea:4a:88:0c:13:84:d4:7e:23:39:f7:fd:62:bb: fd:ca:cd:3f:27:a8:6b:51:ca:41:4f:f5:2e:c7:fe:9d:ab:93: da:a3:36:b6:dd:a1:61:c8:55:c9:86:93:d7:75:f8:bf:30:3f: 5c:3d:b2:11:af:3a:6f:4e:2f:2d:67:2d:78:7e:56:0a:ea:7b: 34:48:16:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0fxZdxN1ydAKPKV3B6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjM1ODc2YWYxYzdlZjgyNDExYjQwNGE3MGQ4OGI3OTE2 NTA5ZjYwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD EyhkMzE1OTI0MGU3YjJhNzc2YWRiMmIxYWYyZjU5NTJhNzQ5NzkxZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34XLr2at1g+3ITbBnmYxKQCVC6wH 1tiUZGBJ3d4tJPpT1y208MfQh7gNpSkcA/3ueRzbAI16XDELOivwcRkIEMdSumS8 1ntqLJAmX64ejdw76S6pCtHsbzKQe6YPQv+MoKcipmNt7NhuhPAEwHho6gYISrW2 b/p8M1DOMuVQJDr30B0sjBCkfWVxsEa33jnV0e1UJU7eSZI2SuckHQ15Ig5xliIi q4XTE+blNO/w0biawiqe6nDb/F26Kbp8LxqKSoZ24+npwmXiEYQ1jQFae1qjG0Zr jZ81HWHXlLkj5BpvJ0DrQndq6BvEVNGsf3lbx3Sj7uS2Wq4zElzLguNUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMVkkDnsqd2rbKxry9ZUqdJeR77MB8GA1UdIwQY MBaAFLxjWHavHH74JBG0BKcNiLeRZQn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUt ZmZhZTIwNzAwZTkzLzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUtZmZhZTIwNzAwZTkz LzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3gHKQw1 M7ROAWXr/7P8ndPTxo7hzTMDwa3bAontnSdqJxB8c5qUrefX4b1wiZs43Hqq/u77 p+7TC8LehRZ7kGHGTjDGQf46UkFvdyWI3un/MkMbErLfrzu+56AO/tSIgCGgB15W vBcZfLKOCG5aqgC9lFsDYxVVkHHJoxjE7+UDN3r46d4gLvTZu4+amqpZQekWoJWW dmlj9MGuB1G+2IW3DJ81O4UKolTqMezAY+qkmFlD1/u2gepKiAwThNR+Izn3/WK7 /crNPyeoa1HKQU/1Lsf+nauT2qM2tt2hYchVyYaT13X4vzA/XD2yEa86b04vLWct eH5WCup7NEgWUA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:36:52 2025 by rpki-client