This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json) Hash identifier: aGPHIUeBpDnRt6lkWyuj6XILMs2OAugmhNelrOCwYnA= Subject key identifier: 9B:5E:A1:1A:E9:BA:7A:C0:82:1C:56:72:A8:D2:D9:C3:3A:F3:7E:0A Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Certificate serial: 019AF12D14ED22635ED375750C0C450D0815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft Manifest number: 06E1 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=) 2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: bKorw1vql3k+A+q9/LU5NtjkCBESi8rl5VBwEAPJ+G0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:ed:22:63:5e:d3:75:75:0c:0c:45:0d:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=9b5ea11ae9ba7ac0821c5672a8d2d9c33af37e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:1b:38:50:35:65:38:eb:de:17:b8:bc:f4: 2a:c1:f7:37:50:d8:b6:63:a5:ec:91:85:28:c8:0d: 87:08:c5:d8:b6:bc:7a:ed:18:4e:c4:ef:13:4e:6c: 8e:42:a6:38:77:05:13:f7:6c:cc:33:37:39:81:76: b6:ff:3f:0b:c9:a9:6e:07:c2:69:c5:cf:ff:9d:f7: a6:a9:ca:59:be:51:9a:90:2d:dc:20:c8:14:55:ee: ba:68:d9:c4:f2:a3:9a:43:26:37:28:1b:38:bc:5d: 66:b9:8d:c0:7c:0b:bb:58:68:7a:b0:c7:7a:6e:12: f3:4e:94:87:1c:f5:2b:e8:fc:b2:11:97:ef:94:38: df:a3:08:51:04:d4:99:9c:6b:00:4d:ef:83:03:66: 1c:b1:ab:bb:94:28:1f:cc:ba:72:65:53:4e:9d:f1: 92:eb:35:4a:e8:ff:57:48:02:ce:fb:3d:a7:47:b1: 1f:96:ac:23:33:8f:15:e1:9a:33:2a:73:6a:ec:c2: aa:c0:73:01:59:fa:d1:d7:6e:a4:1f:a3:fd:dd:22: 7e:75:a9:76:70:e0:b9:c9:26:46:e9:eb:d5:f9:60: 60:fa:b4:94:4a:4f:05:b3:78:15:2c:1e:dd:ed:cd: b7:26:4c:2a:91:93:86:ba:01:d3:29:8a:6e:d0:ce: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5E:A1:1A:E9:BA:7A:C0:82:1C:56:72:A8:D2:D9:C3:3A:F3:7E:0A X509v3 Authority Key Identifier: keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bb:e3:a8:4b:81:4a:0b:a3:df:46:ac:ba:91:a3:3f:9f:cf: 72:f3:d9:c0:29:b7:be:86:63:03:41:3e:e5:1f:76:d8:ac:9f: 6a:bb:0c:76:cf:59:28:3c:2f:c0:a7:76:42:3f:99:75:a6:72: ee:a2:c8:df:fe:69:8b:11:68:c0:99:a1:66:93:8e:6b:b3:d3: 09:c0:9f:bf:c4:07:f8:5e:1a:8f:7f:9f:ac:9b:13:22:fe:1b: f0:75:eb:d1:78:ff:e6:46:11:85:41:90:35:8d:5b:f4:de:e0: ea:8c:ce:3d:bd:e7:5a:ac:55:19:d3:84:88:ff:f7:16:c5:77: 85:33:33:e2:6c:1d:3f:77:6a:cd:52:c0:6b:61:1a:d1:51:72: 50:6e:f2:a9:c3:d1:34:5f:fd:d7:50:fa:62:e6:e4:31:48:87: ba:c1:69:9d:e8:c5:3f:55:9d:4e:5b:d8:51:fe:6e:5c:b5:4e: b2:a0:3a:5d:58:86:6a:34:e7:92:b9:8c:ed:15:be:a8:6d:93: 91:48:15:ed:e2:57:47:4f:95:76:d9:19:d2:78:66:9d:00:b0: ca:67:23:21:c2:90:5d:12:c6:19:90:a2:65:3b:0c:7d:b6:83: 46:ce:f0:7e:23:7d:0b:00:5b:f7:14:21:40:e4:4f:e8:ca:e9: 74:3c:6d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRTtImNe03V1DAxFDQgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw YzE5M2YwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg5YjVlYTExYWU5YmE3YWMwODIxYzU2NzJhOGQyZDljMzNhZjM3ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0obOFA1ZTjr3he4vPQqwfc3UNi2 Y6XskYUoyA2HCMXYtrx67RhOxO8TTmyOQqY4dwUT92zMMzc5gXa2/z8LyaluB8Jp xc//nfemqcpZvlGakC3cIMgUVe66aNnE8qOaQyY3KBs4vF1muY3AfAu7WGh6sMd6 bhLzTpSHHPUr6PyyEZfvlDjfowhRBNSZnGsATe+DA2Ycsau7lCgfzLpyZVNOnfGS 6zVK6P9XSALO+z2nR7EflqwjM48V4ZozKnNq7MKqwHMBWfrR126kH6P93SJ+dal2 cOC5ySZG6evV+WBg+rSUSk8Fs3gVLB7d7c23JkwqkZOGugHTKYpu0M63yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJteoRrpunrAghxWcqjS2cM6834KMB8GA1UdIwQY MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5 LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7vjqEuB Sguj30asupGjP5/PcvPZwCm3voZjA0E+5R922KyfarsMds9ZKDwvwKd2Qj+ZdaZy 7qLI3/5pixFowJmhZpOOa7PTCcCfv8QH+F4aj3+frJsTIv4b8HXr0Xj/5kYRhUGQ NY1b9N7g6ozOPb3nWqxVGdOEiP/3FsV3hTMz4mwdP3dqzVLAa2Ea0VFyUG7yqcPR NF/911D6YubkMUiHusFpnejFP1WdTlvYUf5uXLVOsqA6XViGajTnkrmM7RW+qG2T kUgV7eJXR0+VdtkZ0nhmnQCwymcjIcKQXRLGGZCiZTsMfbaDRs7wfiN9CwBb9xQh QORP6MrpdDxtVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:29 2025 by rpki-client