This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json) Hash identifier: I/VHTms4+dr9SqT5RzLu21bXKcvMc4s9Vw4y+HqpNrg= Subject key identifier: 1A:D0:C0:8D:03:3A:B5:E4:EA:D7:19:0D:27:38:92:E5:66:4E:6D:F7 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019AF12CCC47B05E34998FE509460A71C4C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft Manifest number: 0E6A Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=) 2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=) 3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=) 4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: aEBGtYIZi08+ngzmyd1rC3cUKPNzYtCxNxkMdGPt/RY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cc:47:b0:5e:34:99:8f:e5:09:46:0a:71:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=1ad0c08d033ab5e4ead7190d273892e5664e6df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:51:04:f9:f4:2e:85:62:17:b3:02:60:d0: 1a:9c:f9:67:3c:21:d7:5b:40:1f:45:53:77:f3:58: a9:ac:8d:0e:bd:d7:4d:6e:71:4b:0f:5b:7e:09:19: d1:f3:2b:5d:c2:89:41:e4:5d:99:76:e8:cd:0b:77: bc:7f:37:4b:ec:96:48:5f:82:4e:b6:3a:b6:75:e3: a5:4d:c1:f0:6a:b9:cc:7d:d0:a0:f4:22:e0:1b:ab: 44:19:8f:cd:87:6a:78:2f:bb:b6:93:89:5a:df:79: 64:2b:fe:f1:9f:42:5d:d7:b6:20:2c:c7:6c:5d:cf: ad:19:69:68:61:fe:7a:70:53:ff:f8:df:6c:3c:ca: 72:a7:7a:a5:d0:7b:8a:40:24:66:e7:e4:ad:cf:cd: 5a:a7:86:07:6a:35:33:93:88:1d:1f:33:15:d5:71: e2:14:58:ef:b3:41:b3:b1:97:8c:bc:95:88:a3:7b: 16:d0:99:be:65:30:8b:7e:11:50:97:4b:24:1a:a3: 94:88:a2:d0:a0:bf:e3:b4:60:d0:94:fe:ac:d5:04: ae:ad:cb:d2:23:d4:aa:f4:3c:b5:36:71:ab:bc:e7: 17:7e:64:50:2c:f7:e6:cb:a8:42:bc:1d:52:50:21: ea:26:98:4f:3f:55:31:59:76:cd:45:d7:e7:80:5a: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D0:C0:8D:03:3A:B5:E4:EA:D7:19:0D:27:38:92:E5:66:4E:6D:F7 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c6:b6:b8:0a:78:4d:8d:df:63:80:32:c0:d8:de:a6:ba:93: 3e:95:12:3b:9b:0a:93:87:c2:3b:0f:c5:bb:48:71:04:20:a9: 48:32:78:46:e9:ec:f3:71:5d:be:fe:ce:87:aa:f2:4d:15:e0: 3f:aa:88:94:14:ce:ee:89:4c:46:02:e5:f6:e4:5a:e5:88:4a: 6e:f0:cd:b6:7a:32:f9:06:1f:07:5d:6a:a9:6e:00:a4:01:37: 6c:96:2f:3a:08:a0:07:5b:b7:94:e3:cc:19:81:6f:34:80:cb: 7b:ac:44:7a:42:9c:f5:2c:8c:e0:a3:6b:fb:12:66:ad:e8:d4: e9:ce:71:91:3d:36:0c:1c:f9:87:2d:7b:f6:cf:ca:08:0e:3b: 6a:76:91:04:ea:83:42:b0:77:67:4b:1b:66:6b:8b:00:25:f2: 37:b1:bc:1e:a9:bc:87:f2:91:3a:dd:30:95:2f:4b:ec:cd:02: 7b:69:cf:4a:82:b2:83:8a:79:12:d2:14:2e:c2:e2:41:a0:83: a1:f3:f1:28:24:0d:a3:7c:27:29:6f:db:35:6f:5e:11:89:d5: 4d:02:7d:31:b4:26:3a:43:c3:11:c2:77:03:fe:53:7e:1a:d5: 35:ed:b7:6b:05:96:c2:a6:75:57:a4:4c:4d:ff:40:c8:d8:c0: a4:3b:98:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMxHsF40mY/lCUYKccTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EygxYWQwYzA4ZDAzM2FiNWU0ZWFkNzE5MGQyNzM4OTJlNTY2NGU2ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jFRBPn0LoViF7MCYNAanPlnPCHX W0AfRVN381iprI0OvddNbnFLD1t+CRnR8ytdwolB5F2ZdujNC3e8fzdL7JZIX4JO tjq2deOlTcHwarnMfdCg9CLgG6tEGY/Nh2p4L7u2k4la33lkK/7xn0Jd17YgLMds Xc+tGWloYf56cFP/+N9sPMpyp3ql0HuKQCRm5+Stz81ap4YHajUzk4gdHzMV1XHi FFjvs0GzsZeMvJWIo3sW0Jm+ZTCLfhFQl0skGqOUiKLQoL/jtGDQlP6s1QSurcvS I9Sq9Dy1NnGrvOcXfmRQLPfmy6hCvB1SUCHqJphPP1UxWXbNRdfngFr7sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrQwI0DOrXk6tcZDSc4kuVmTm33MB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMa2uAp4 TY3fY4AywNjeprqTPpUSO5sKk4fCOw/Fu0hxBCCpSDJ4Runs83Fdvv7Oh6ryTRXg P6qIlBTO7olMRgLl9uRa5YhKbvDNtnoy+QYfB11qqW4ApAE3bJYvOgigB1u3lOPM GYFvNIDLe6xEekKc9SyM4KNr+xJmrejU6c5xkT02DBz5hy179s/KCA47anaRBOqD QrB3Z0sbZmuLACXyN7G8Hqm8h/KROt0wlS9L7M0Ce2nPSoKyg4p5EtIULsLiQaCD ofPxKCQNo3wnKW/bNW9eEYnVTQJ9MbQmOkPDEcJ3A/5TfhrVNe23awWWwqZ1V6RM Tf9AyNjApDuY+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:03 2025 by rpki-client