This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json) Hash identifier: ueFW1Mrw3bmOIFBb7TzDvNuz8VB0kqgMYzJQVMTBeBI= Subject key identifier: 31:9C:DC:47:40:78:E6:AC:B8:76:78:B2:CB:BD:33:4A:F3:A6:C1:D4 Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62 Certificate serial: 019AF2ADA83AE6DF619BCD9FE8518172FA53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft Manifest number: 024B Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: MJ4RLy7CJreAqnDUSlRSwn4juMU.roa (hash: v6JFCrXijEKQQaabThj0nZbCn18vazC8HwmJq1jATUY=) 2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: K98Z1Y97k/KiifUG9V1OZQYVxHP0iFJHw1XM2xESEdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a8:3a:e6:df:61:9b:cd:9f:e8:51:81:72:fa:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=319cdc474078e6acb87678b2cbbd334af3a6c1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:58:99:61:1e:71:2a:17:6e:19:b8:a8:63:35: 97:71:3a:e7:f5:b3:bf:f3:46:93:19:4b:1f:3e:f3: 03:77:c6:13:11:dc:dc:96:3b:5f:5e:3e:29:79:10: 2b:a0:7b:eb:77:ec:82:38:8d:0c:88:e3:22:ec:68: f2:1f:34:29:d5:a7:b7:31:ce:dc:78:ed:7f:cc:6e: f5:13:be:01:a5:be:de:2a:6a:92:66:fa:8a:8a:93: e2:61:00:d1:d3:58:91:66:37:25:fa:ad:62:7b:0c: 37:72:47:1c:d6:b3:aa:5b:60:65:26:0c:1f:ea:9c: 39:8e:a2:64:35:b3:8b:8b:04:ad:73:f4:65:39:77: 65:cf:0a:dd:86:42:e9:98:30:c5:c4:67:2a:02:bc: 4f:49:f2:95:94:3e:1c:54:3a:cb:91:8c:2a:b1:8c: e7:cc:af:5f:32:24:93:10:dc:ab:3f:15:75:28:a4: d6:bb:ce:58:5c:ff:f0:07:4b:26:11:69:68:c4:5c: f0:a2:e4:42:57:c9:47:5e:4f:e7:32:89:b4:99:b9: f7:e2:12:5c:60:9e:50:5e:b3:14:79:61:62:cb:f2: d7:a4:eb:14:91:f4:1a:f6:c5:4c:1d:c8:40:90:bc: b4:d5:1f:cd:58:ad:f6:20:02:3c:1d:1a:86:be:60: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9C:DC:47:40:78:E6:AC:B8:76:78:B2:CB:BD:33:4A:F3:A6:C1:D4 X509v3 Authority Key Identifier: keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c5:af:3f:b0:2d:25:f7:b8:e5:44:be:a2:9d:53:78:c3:4a: 3f:5a:2f:28:28:06:a1:01:6a:90:65:c7:0b:c3:6e:3d:ef:f8: 91:27:15:35:2a:c3:4b:9b:34:b2:3e:f5:5c:a9:58:62:9a:20: 54:30:39:a8:78:81:53:4b:06:ff:7f:2d:6f:bd:2c:6a:37:26: 2c:fd:7d:b5:ab:bc:98:00:db:23:95:e9:2f:a2:55:8e:d8:50: 0e:29:b8:c1:61:15:fd:7f:59:cf:7c:6c:f8:0a:0a:ec:0c:8b: 92:c6:9d:b2:18:0d:63:a0:09:9d:0f:48:f8:68:de:1a:1b:cd: be:f2:11:11:a5:8f:d9:af:d0:0c:12:4c:1f:0c:d0:c0:8c:79: 4e:e3:b1:c6:c4:fd:d8:e7:aa:22:b4:f1:89:ef:62:59:67:27: 28:d8:67:52:1b:19:90:33:68:45:d3:1f:d2:bc:fa:a6:6d:ee: 35:01:d9:65:0f:e9:34:23:2a:73:93:07:b3:ba:1e:03:55:6d: a9:69:6c:dd:e4:57:5e:cd:24:ea:8c:1f:f0:9a:c7:0a:b9:a6: aa:7e:fb:d3:8f:d5:e9:95:f4:5f:6f:cf:9d:d4:b6:e9:36:5d: fd:f8:1c:c1:75:f5:48:81:90:89:ec:30:c7:d7:51:73:ab:8d: a1:94:ed:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrag65t9hm82f6FGBcvpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz ZDFmNjIwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD EygzMTljZGM0NzQwNzhlNmFjYjg3Njc4YjJjYmJkMzM0YWYzYTZjMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71iZYR5xKhduGbioYzWXcTrn9bO/ 80aTGUsfPvMDd8YTEdzcljtfXj4peRAroHvrd+yCOI0MiOMi7GjyHzQp1ae3Mc7c eO1/zG71E74Bpb7eKmqSZvqKipPiYQDR01iRZjcl+q1ieww3ckcc1rOqW2BlJgwf 6pw5jqJkNbOLiwStc/RlOXdlzwrdhkLpmDDFxGcqArxPSfKVlD4cVDrLkYwqsYzn zK9fMiSTENyrPxV1KKTWu85YXP/wB0smEWloxFzwouRCV8lHXk/nMom0mbn34hJc YJ5QXrMUeWFiy/LXpOsUkfQa9sVMHchAkLy01R/NWK32IAI8HRqGvmBv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGc3EdAeOasuHZ4ssu9M0rzpsHUMB8GA1UdIwQY MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3 LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsWvP7At Jfe45US+op1TeMNKP1ovKCgGoQFqkGXHC8NuPe/4kScVNSrDS5s0sj71XKlYYpog VDA5qHiBU0sG/38tb70sajcmLP19tau8mADbI5XpL6JVjthQDim4wWEV/X9Zz3xs +AoK7AyLksadshgNY6AJnQ9I+GjeGhvNvvIREaWP2a/QDBJMHwzQwIx5TuOxxsT9 2OeqIrTxie9iWWcnKNhnUhsZkDNoRdMf0rz6pm3uNQHZZQ/pNCMqc5MHs7oeA1Vt qWls3eRXXs0k6owf8JrHCrmmqn7704/V6ZX0X2/PndS26TZd/fgcwXX1SIGQieww x9dRc6uNoZTtNw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:27 2025 by rpki-client