This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft File: _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json) Hash identifier: DmCFPyrNm174e5x8bRwVh1Fl86SAzH3kqbF8eVlq7Sk= Subject key identifier: 02:0F:2C:AB:41:10:F9:22:35:93:88:36:EF:00:3D:C5:2B:57:3B:CB Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Certificate serial: 019B292F4454A57C1A22ABD153BA7DECCCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft Manifest number: 0A7B Signing time: Tue 16 Dec 2025 22:02:02 +0000 Manifest this update: Tue 16 Dec 2025 22:02:02 +0000 Manifest next update: Wed 17 Dec 2025 22:02:02 +0000 Files and hashes: 1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=) 2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: leKPsGyGBKZRJfDWSrGiBibSlkbgkus9z87uQGeeqAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:44:54:a5:7c:1a:22:ab:d1:53:ba:7d:ec:cc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Validity Not Before: Dec 16 22:02:02 2025 GMT Not After : Dec 17 22:02:02 2025 GMT Subject: CN=020f2cab4110f92235938836ef003dc52b573bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:cd:41:d1:f9:65:39:00:d9:91:00:bb:9e: 06:34:2b:90:0f:41:ff:4a:c6:9c:fb:be:79:20:e6: 92:4e:97:b0:25:d7:27:90:33:f0:40:fb:56:84:eb: ca:f5:cb:f1:3c:1f:b5:e6:05:98:97:c1:8d:09:c6: 5f:c5:c2:ea:44:92:12:65:8a:1c:31:ca:fc:c9:58: 2e:ff:2c:65:5d:38:30:6d:14:92:57:f9:2b:75:9e: 2a:ee:71:b8:9d:10:6c:c9:96:fe:a0:fe:12:84:fa: a8:33:12:37:d4:66:a3:07:a7:2a:04:bd:10:d2:c1: c6:67:e3:bb:53:f8:bb:02:5f:23:73:73:3f:e9:b3: 67:76:a8:23:c8:2a:b1:83:64:01:f0:68:b6:c4:2b: 92:db:52:a3:8d:c0:0b:c0:25:97:07:ad:d9:79:28: 26:78:18:5d:65:e3:64:ba:92:a1:53:85:1f:3d:df: c0:96:5a:44:3d:a8:ef:88:13:4a:68:07:81:67:9e: db:5e:d8:d2:e9:0c:a3:9c:00:9d:e5:64:3d:64:c2: 42:d3:e0:57:84:3a:9c:9f:0d:42:90:c0:7b:32:41: d4:66:84:16:6e:5b:a2:1f:41:88:12:95:16:2d:bb: ec:02:83:40:90:77:68:00:cc:43:04:ce:4f:c8:8f: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:2C:AB:41:10:F9:22:35:93:88:36:EF:00:3D:C5:2B:57:3B:CB X509v3 Authority Key Identifier: keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:42:f5:fd:c0:a0:ae:95:ea:45:42:ec:04:f9:47:a7:ba:bc: 38:9d:3a:67:a6:67:e0:12:26:59:ed:4f:6f:7d:21:c1:6a:78: da:22:48:3d:f0:c3:8c:32:86:d0:e8:ba:a4:8d:51:04:61:f4: 96:29:48:fc:33:57:b5:af:75:ff:a4:6a:c7:cb:39:24:c2:f5: 55:f7:4c:63:bd:94:32:9c:61:3c:95:e4:b5:a8:29:be:b2:19: cf:63:c3:65:f7:b6:0f:b2:ec:28:2d:55:34:29:ab:ed:13:a8: 6d:31:e8:83:d4:26:7c:cc:2a:26:5b:7e:c8:1b:27:70:04:97: 3c:1d:28:c4:31:2e:97:18:3d:56:1f:a3:c2:2f:d2:98:b8:5f: 2b:89:c4:6a:ca:40:4c:50:8e:a5:93:04:96:0b:6d:6f:95:26: 82:f9:03:c0:4a:86:7e:96:b3:e6:bb:eb:0b:f7:a1:b1:16:77: 38:0c:40:e8:3b:11:37:d1:15:96:76:b3:e4:46:99:7e:81:9d: b7:5b:fe:44:d6:d0:1b:34:11:fc:f6:aa:8a:af:d0:88:bc:cf: 9d:c0:32:a4:f2:22:de:08:77:9d:90:cb:44:2b:43:d2:7c:d2: 18:87:1e:b1:59:bd:ad:b3:6f:6b:8c:93:c3:e0:2b:3f:93:d8: 38:52:b8:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL0RUpXwaIqvRU7p97MzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjdmZDU3MTBhZTVhNDczZTE1OGRjM2ZkNmM4ZjE3ZWZh M2U1NWIwHhcNMjUxMjE2MjIwMjAyWhcNMjUxMjE3MjIwMjAyWjAzMTEwLwYDVQQD EygwMjBmMmNhYjQxMTBmOTIyMzU5Mzg4MzZlZjAwM2RjNTJiNTczYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M/NQdH5ZTkA2ZEAu54GNCuQD0H/ Ssac+755IOaSTpewJdcnkDPwQPtWhOvK9cvxPB+15gWYl8GNCcZfxcLqRJISZYoc Mcr8yVgu/yxlXTgwbRSSV/krdZ4q7nG4nRBsyZb+oP4ShPqoMxI31GajB6cqBL0Q 0sHGZ+O7U/i7Al8jc3M/6bNndqgjyCqxg2QB8Gi2xCuS21KjjcALwCWXB63ZeSgm eBhdZeNkupKhU4UfPd/AllpEPajviBNKaAeBZ57bXtjS6QyjnACd5WQ9ZMJC0+BX hDqcnw1CkMB7MkHUZoQWbluiH0GIEpUWLbvsAoNAkHdoAMxDBM5PyI9KdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIPLKtBEPkiNZOINu8APcUrVzvLMB8GA1UdIwQY MBaAFP73/VcQrlpHPhWNw/1sjxfvo+VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODIt NDUzZDM3YjQ5MjFjLzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODItNDUzZDM3YjQ5MjFj LzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEL1/cCg rpXqRULsBPlHp7q8OJ06Z6Zn4BImWe1Pb30hwWp42iJIPfDDjDKG0Oi6pI1RBGH0 lilI/DNXta91/6Rqx8s5JML1VfdMY72UMpxhPJXktagpvrIZz2PDZfe2D7LsKC1V NCmr7ROobTHog9QmfMwqJlt+yBsncASXPB0oxDEulxg9Vh+jwi/SmLhfK4nEaspA TFCOpZMElgttb5UmgvkDwEqGfpaz5rvrC/ehsRZ3OAxA6DsRN9EVlnaz5EaZfoGd t1v+RNbQGzQR/Paqiq/QiLzPncAypPIi3gh3nZDLRCtD0nzSGIcesVm9rbNva4yT w+ArP5PYOFK4UA== -----END CERTIFICATE-----Generated at Wed Dec 17 08:42:51 2025 by rpki-client