This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json) Hash identifier: 39FKvU2JZA6tXSkZwDAGAkD4avY5kNtT+qAPb4es1uE= Subject key identifier: 92:E7:FE:70:5E:75:76:F9:57:47:78:CA:C3:31:F7:DF:10:EF:C8:80 Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Certificate serial: 019AF61C9373B33FC74F24D61E15181DFA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft Manifest number: 0D69 Signing time: Sun 07 Dec 2025 00:00:58 +0000 Manifest this update: Sun 07 Dec 2025 00:00:58 +0000 Manifest next update: Mon 08 Dec 2025 00:00:58 +0000 Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=) 2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: FmHPY2wPbP6+zaSpTAam4XEPHY1L3K9ZW8YRGvty2Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:93:73:b3:3f:c7:4f:24:d6:1e:15:18:1d:fa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Validity Not Before: Dec 7 00:00:58 2025 GMT Not After : Dec 8 00:00:58 2025 GMT Subject: CN=92e7fe705e7576f9574778cac331f7df10efc880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:d2:4f:c9:6b:33:e2:23:0f:d5:ec:cc:5f: 24:5c:10:d8:41:c6:ce:ce:0f:79:9c:af:b9:a1:6c: 99:21:a7:4c:7a:a4:71:3f:54:e8:d2:d0:d1:a0:f0: f3:ec:8f:f6:6d:23:86:20:41:90:ff:25:77:b6:33: 4c:0c:f7:2c:93:0b:b9:1f:8d:b1:cb:c1:d8:7b:2a: 29:c4:6c:9d:0d:a2:43:97:ff:ca:b2:2a:58:e1:f8: 09:be:8b:dd:86:cf:41:82:9b:08:72:87:22:a3:34: 85:8d:89:d4:f9:55:85:b7:58:3d:88:e3:4a:64:fb: 97:a9:2b:7d:01:25:d4:3c:1e:3e:06:ad:b7:92:76: 91:61:c5:99:8a:63:96:70:12:73:6e:b0:b6:b9:4b: f1:1b:3c:06:1a:4e:df:8a:10:7c:6f:bb:18:73:bf: 22:15:28:c2:f9:f5:df:26:40:0d:16:4a:8e:f5:09: f3:f8:f9:5c:d9:6b:a3:88:1a:30:ef:f5:5e:5e:ba: b1:3b:39:b0:18:d8:a5:b7:90:22:4b:94:0a:77:61: 34:06:d6:a1:f4:4e:c8:e6:59:dd:a4:a8:21:f5:6d: 9d:f7:0e:65:98:4b:c5:48:02:89:84:bd:42:06:98: d1:d3:61:7e:cd:64:dd:c7:7b:b1:dd:d3:c6:31:ce: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:FE:70:5E:75:76:F9:57:47:78:CA:C3:31:F7:DF:10:EF:C8:80 X509v3 Authority Key Identifier: keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5e:42:09:81:89:1f:90:0e:ba:eb:12:07:3b:39:15:47:dc: af:80:71:a6:d7:de:7f:3e:3b:94:ff:05:fe:6c:d5:56:f5:26: 7d:48:c7:01:c2:3c:0c:94:50:4a:96:d2:f7:6e:f4:c7:2c:d8: 04:16:f1:72:c4:3a:e6:2f:39:e4:73:c0:17:99:30:77:eb:31: 15:50:52:0c:55:9c:b9:5b:94:77:16:ec:50:78:ed:3f:c6:5d: c6:54:a4:de:4f:6d:b4:1a:7a:04:15:21:1d:15:f0:02:06:54: 51:8e:56:27:73:bf:35:3a:1f:85:db:51:b3:e4:a8:f4:ae:b8: d1:2d:46:61:40:9a:e2:bc:ee:73:9e:71:cb:f5:4e:48:00:6e: b0:08:21:c1:c4:fe:5d:0e:ec:67:e4:d2:40:55:04:0a:ab:92: a4:0c:21:e6:49:1c:5b:3e:8f:39:03:a1:dc:65:19:b0:90:95: 46:9b:68:f8:83:8d:de:c4:ee:79:16:44:e1:ab:4c:fa:3b:c2: c1:1a:1c:e7:07:e2:82:8a:4b:6c:f7:d7:27:c0:fd:10:8e:09: 2e:c7:b9:9e:c7:d5:19:55:98:d5:c0:d6:98:6d:d0:a3:4c:1e: 5a:3c:9f:cb:d2:ab:1d:ba:3c:a6:9c:1e:3a:db:cf:a3:f8:ee: b4:75:08:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJNzsz/HTyTWHhUYHfp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2 ZDAxNTQwHhcNMjUxMjA3MDAwMDU4WhcNMjUxMjA4MDAwMDU4WjAzMTEwLwYDVQQD Eyg5MmU3ZmU3MDVlNzU3NmY5NTc0Nzc4Y2FjMzMxZjdkZjEwZWZjODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6TST8lrM+IjD9XszF8kXBDYQcbO zg95nK+5oWyZIadMeqRxP1To0tDRoPDz7I/2bSOGIEGQ/yV3tjNMDPcskwu5H42x y8HYeyopxGydDaJDl//KsipY4fgJvovdhs9BgpsIcociozSFjYnU+VWFt1g9iONK ZPuXqSt9ASXUPB4+Bq23knaRYcWZimOWcBJzbrC2uUvxGzwGGk7fihB8b7sYc78i FSjC+fXfJkANFkqO9Qnz+Plc2WujiBow7/VeXrqxOzmwGNilt5AiS5QKd2E0Btah 9E7I5lndpKgh9W2d9w5lmEvFSAKJhL1CBpjR02F+zWTdx3ux3dPGMc7bqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLn/nBedXb5V0d4ysMx998Q78iAMB8GA1UdIwQY MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt OWJlODY5YTljNjBjLzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsV5CCYGJ H5AOuusSBzs5FUfcr4Bxptfefz47lP8F/mzVVvUmfUjHAcI8DJRQSpbS9270xyzY BBbxcsQ65i855HPAF5kwd+sxFVBSDFWcuVuUdxbsUHjtP8ZdxlSk3k9ttBp6BBUh HRXwAgZUUY5WJ3O/NTofhdtRs+So9K640S1GYUCa4rzuc55xy/VOSABusAghwcT+ XQ7sZ+TSQFUECquSpAwh5kkcWz6POQOh3GUZsJCVRpto+ION3sTueRZE4atM+jvC wRoc5wfigopLbPfXJ8D9EI4JLse5nsfVGVWY1cDWmG3Qo0weWjyfy9KrHbo8ppwe OtvPo/jutHUIEA== -----END CERTIFICATE-----Generated at Sun Dec 7 10:18:12 2025 by rpki-client