This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json) Hash identifier: 7iVfbudv4uh71MFDSZlWZ6KW+x07/N0QuWM9h5vfGVM= Subject key identifier: 70:7B:72:F5:57:7C:76:06:CC:6B:08:61:2A:F1:52:C0:D6:10:BE:23 Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019AF31D40F6DB155444AB46EBC1FDD03021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft Manifest number: 1542 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=) 2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=) 3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=) 4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: TFvPufrfhpfHttU+VQF2oqGGIR5QphqeWAsjPIjlBfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:40:f6:db:15:54:44:ab:46:eb:c1:fd:d0:30:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=707b72f5577c7606cc6b08612af152c0d610be23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:87:7a:5f:82:34:ef:47:b9:04:92:cf:2a: 2d:b5:dc:4c:c7:75:01:ee:5b:c7:d6:a7:72:d6:eb: 2e:19:bb:b2:7a:44:71:5d:fb:2d:0c:bb:b3:48:50: e7:17:bb:3b:69:97:0d:b5:ef:fe:c3:d8:ab:7f:64: c3:0b:e6:59:7f:97:5e:ec:fc:5f:92:16:ba:c3:95: 1d:42:1a:19:27:46:fe:c6:3d:66:ef:24:6e:48:ff: 7f:4a:6b:3c:5d:00:61:60:be:20:af:77:16:97:1c: 22:ec:11:30:ff:e9:40:d2:09:9e:31:54:8e:d7:b8: 75:b5:74:61:8a:d1:c5:02:12:93:2c:d9:f1:9e:88: 08:cc:8f:ae:64:63:0b:ff:8e:64:8d:fe:e4:59:08: 45:ee:28:12:89:fc:8b:77:39:01:9b:e4:95:55:a8: 3f:f0:02:b0:99:97:c9:c6:8d:be:97:0f:5c:94:e9: 2c:8c:b7:3c:ce:22:27:39:50:4a:fb:5d:d3:15:3b: ec:fa:e4:43:fc:1b:22:5a:ed:c1:9b:ee:f6:ad:fd: 7f:54:e7:80:56:80:12:aa:a9:83:57:8d:e5:02:40: f9:e1:3a:d8:97:f0:db:31:2c:79:d9:16:a1:84:37: f3:fc:0c:eb:95:a9:f2:ae:63:74:0c:17:8a:b5:24: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:72:F5:57:7C:76:06:CC:6B:08:61:2A:F1:52:C0:D6:10:BE:23 X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:c4:0d:94:fd:83:9a:80:ba:90:b6:fe:9c:8b:23:dd:5a: bd:58:b2:d3:b7:84:f2:94:43:25:c7:88:86:1e:16:7b:0e:a5: ba:f6:3e:2a:f6:75:1d:40:24:43:32:ff:de:1e:ab:ca:e6:01: 6a:a8:ed:88:2f:6c:c8:12:c7:d6:1d:00:23:13:7d:ec:74:0b: 71:23:03:49:62:f4:87:db:0b:9b:2b:ab:7c:8e:b0:07:9f:f5: 5a:72:82:26:69:28:0e:6d:c4:13:d5:0d:bd:65:c5:e2:54:91: d1:db:41:86:16:36:64:aa:4f:bc:65:13:f4:52:20:1b:ad:09: 9c:6a:24:bf:e3:1e:1d:d8:33:ce:28:d1:79:0b:c9:0f:96:34: 93:25:a7:15:33:d7:21:fb:cc:4b:2b:0b:ef:16:f1:fc:97:ec: ff:4b:9c:74:89:22:a4:05:2c:13:66:8a:92:fe:1e:0e:2b:c3: 1c:5b:82:d0:5e:ed:f1:d8:21:ca:a4:2a:da:a1:89:34:e9:dc: b6:49:5b:c2:41:7b:09:9b:ed:51:74:2e:98:1a:91:65:04:36: 6b:8f:13:b7:70:00:2e:a0:3f:d6:95:ad:d9:9f:40:37:ff:94: 95:2c:b3:e4:73:48:70:9e:27:b4:fe:f6:04:a8:c5:4c:57:94: a6:93:2d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUD22xVURKtG68H90DAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD Eyg3MDdiNzJmNTU3N2M3NjA2Y2M2YjA4NjEyYWYxNTJjMGQ2MTBiZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeHel+CNO9HuQSSzyottdxMx3UB 7lvH1qdy1usuGbuyekRxXfstDLuzSFDnF7s7aZcNte/+w9irf2TDC+ZZf5de7Pxf kha6w5UdQhoZJ0b+xj1m7yRuSP9/Sms8XQBhYL4gr3cWlxwi7BEw/+lA0gmeMVSO 17h1tXRhitHFAhKTLNnxnogIzI+uZGML/45kjf7kWQhF7igSifyLdzkBm+SVVag/ 8AKwmZfJxo2+lw9clOksjLc8ziInOVBK+13TFTvs+uRD/BsiWu3Bm+72rf1/VOeA VoASqqmDV43lAkD54TrYl/DbMSx52RahhDfz/AzrlanyrmN0DBeKtSRG/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB7cvVXfHYGzGsIYSrxUsDWEL4jMB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn/EDZT9 g5qAupC2/pyLI91avViy07eE8pRDJceIhh4Wew6luvY+KvZ1HUAkQzL/3h6ryuYB aqjtiC9syBLH1h0AIxN97HQLcSMDSWL0h9sLmyurfI6wB5/1WnKCJmkoDm3EE9UN vWXF4lSR0dtBhhY2ZKpPvGUT9FIgG60JnGokv+MeHdgzzijReQvJD5Y0kyWnFTPX IfvMSysL7xbx/Jfs/0ucdIkipAUsE2aKkv4eDivDHFuC0F7t8dghyqQq2qGJNOnc tklbwkF7CZvtUXQumBqRZQQ2a48Tt3AALqA/1pWt2Z9AN/+UlSyz5HNIcJ4ntP72 BKjFTFeUppMtbw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:35 2025 by rpki-client