This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json) Hash identifier: Iocl+ZKqjv9gGVqo7vSLwQEqEm9few+7/huU8FmZlrk= Subject key identifier: 1B:B4:EF:60:48:55:A2:98:6B:00:72:CE:41:F1:94:1F:63:EC:85:D7 Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Certificate serial: 019AF163FD605842FB87454C3008CE85B2FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft Manifest number: C4 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: Lg4eCFYIYf5ZVutlcdxYXCP2T1k.roa (hash: /UYXd+Jxi7mk5U3i4C8s/Xff/x03jpYmnvrS9R7HXwg=) 2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: 0s/q5tcoj0aStKN73+lFMNyyxJvIpS172m9UXysND1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fd:60:58:42:fb:87:45:4c:30:08:ce:85:b2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=1bb4ef604855a2986b0072ce41f1941f63ec85d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:2f:17:7e:0e:e4:16:94:57:8e:81:22:1a: a2:fc:da:82:27:26:4b:c8:32:2d:83:15:ea:6c:bb: 8f:5a:82:3c:7d:bf:11:bf:28:0d:aa:ad:1b:9c:39: db:6e:ef:89:43:0a:54:76:04:5c:83:f3:d8:7a:b8: 7a:60:46:ca:7c:05:bf:0b:d0:82:1f:7f:07:a2:ca: c7:ca:de:94:03:c0:fe:de:68:57:3f:01:9e:36:94: bd:12:f9:88:dd:1e:5f:43:08:30:e8:97:be:e2:d6: 58:01:ba:37:da:36:6a:55:b1:61:fc:f8:1b:c2:3a: 6a:ab:08:d3:18:03:73:7f:9a:71:21:a8:54:54:55: fd:82:2d:99:d3:b2:2b:bf:d0:f7:1d:b5:60:2b:c3: d4:0f:b2:65:20:c1:92:ba:f2:7d:0b:d1:23:88:c4: e9:23:d1:b7:c5:81:9a:f7:77:b2:66:e8:f7:4d:4c: c2:3a:39:f4:30:a8:58:16:c2:a1:db:b0:5f:29:34: e6:10:2e:7a:0c:85:51:6f:91:1a:ed:32:4d:25:15: 2c:58:7f:da:a1:4b:26:d0:3d:aa:ea:a8:f4:11:b1: d5:40:2c:1a:e4:42:04:27:8f:df:0e:2a:24:ca:ba: 82:83:94:79:43:ce:fe:f3:a1:11:18:dc:d4:bb:5e: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B4:EF:60:48:55:A2:98:6B:00:72:CE:41:F1:94:1F:63:EC:85:D7 X509v3 Authority Key Identifier: keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c2:d3:b2:bf:d8:3a:93:99:b5:67:e1:0a:f4:be:76:9e:f4: 6e:3b:60:7e:30:80:0c:ca:f4:3f:e0:99:db:36:b9:f7:b3:a5: 16:e6:b0:be:09:ef:c2:91:e3:c2:97:2c:65:0c:4d:69:fe:74: 71:64:19:31:e4:24:c1:68:b0:b8:95:ff:04:8b:73:62:36:ce: e5:b0:84:b0:12:1c:43:43:63:22:56:c9:92:50:ba:13:e0:dd: e2:b0:f6:13:e7:16:7b:31:05:a2:c4:91:1a:f0:2f:da:10:b6: c2:d3:a6:d8:fc:7a:f9:b6:d6:98:d9:e1:a6:d5:c0:29:9c:ba: 12:79:d1:74:53:99:b4:58:bc:97:08:ed:93:ac:ad:15:bb:8a: ca:c9:45:9a:2f:3d:fc:4e:3e:f5:61:d2:c4:aa:52:20:93:df: 2b:16:42:70:ff:6b:6e:b0:65:9c:2c:c6:80:51:2e:fd:8c:41: 17:85:3e:82:34:ed:41:cc:c9:f8:f9:75:ae:87:c6:cd:92:8e: 44:e9:7a:de:8e:7d:6f:9e:80:62:4a:09:7b:af:88:97:33:a5: 25:09:ee:60:73:3b:d2:5a:d5:70:fe:9b:e6:29:4e:da:cb:50: 89:99:c9:0c:f6:16:0e:08:5f:a7:85:51:61:df:69:b9:d1:fc: ea:a5:5b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/1gWEL7h0VMMAjOhbL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz MGU2NjUwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EygxYmI0ZWY2MDQ4NTVhMjk4NmIwMDcyY2U0MWYxOTQxZjYzZWM4NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQvF34O5BaUV46BIhqi/NqCJyZL yDItgxXqbLuPWoI8fb8RvygNqq0bnDnbbu+JQwpUdgRcg/PYerh6YEbKfAW/C9CC H38HosrHyt6UA8D+3mhXPwGeNpS9EvmI3R5fQwgw6Je+4tZYAbo32jZqVbFh/Pgb wjpqqwjTGANzf5pxIahUVFX9gi2Z07Irv9D3HbVgK8PUD7JlIMGSuvJ9C9EjiMTp I9G3xYGa93eyZuj3TUzCOjn0MKhYFsKh27BfKTTmEC56DIVRb5Ea7TJNJRUsWH/a oUsm0D2q6qj0EbHVQCwa5EIEJ4/fDiokyrqCg5R5Q87+86ERGNzUu17qCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu072BIVaKYawByzkHxlB9j7IXXMB8GA1UdIwQY MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksLTsr/Y OpOZtWfhCvS+dp70bjtgfjCADMr0P+CZ2za597OlFuawvgnvwpHjwpcsZQxNaf50 cWQZMeQkwWiwuJX/BItzYjbO5bCEsBIcQ0NjIlbJklC6E+Dd4rD2E+cWezEFosSR GvAv2hC2wtOm2Px6+bbWmNnhptXAKZy6EnnRdFOZtFi8lwjtk6ytFbuKyslFmi89 /E4+9WHSxKpSIJPfKxZCcP9rbrBlnCzGgFEu/YxBF4U+gjTtQczJ+Pl1rofGzZKO ROl63o59b56AYkoJe6+IlzOlJQnuYHM70lrVcP6b5ilO2stQiZnJDPYWDghfp4VR Yd9pudH86qVbHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:27 2025 by rpki-client