This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json) Hash identifier: nQBAhx+Exzehq4rBQSqtCeV5Psnn5EZGAADfxKhK/f8= Subject key identifier: 1D:C1:7B:3F:C3:10:AA:70:E1:05:E8:AA:39:1D:D5:9F:1D:0F:87:BC Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Certificate serial: 019AF1D1FA00BB353BC80E1B92CCF0EA9BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=) 2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=) 3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=) 4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: xynUC5YvI7wZB0xto+Jh8xcG1FJ26FFRqr8PzJcfuYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fa:00:bb:35:3b:c8:0e:1b:92:cc:f0:ea:9b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=1dc17b3fc310aa70e105e8aa391dd59f1d0f87bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:d8:3c:77:e9:02:80:10:b7:f5:08:4d:3a: 61:5f:2a:c2:02:70:71:f4:ff:d4:7f:a4:b1:01:68: 7a:ea:60:9e:ee:11:5b:02:41:59:2b:8e:5e:83:3f: 97:e3:e4:e0:5b:08:a2:1f:4e:07:ac:21:cb:7d:96: 0f:0d:d6:a3:1c:e3:3d:16:b3:a0:46:10:9a:36:7b: 5a:46:81:85:25:5c:cd:28:32:d5:c0:72:42:83:08: bd:7d:f6:76:a4:c7:03:39:1f:4b:0e:85:34:8e:2f: 63:72:6a:c3:0a:e2:7a:c4:6a:64:77:62:51:00:15: a0:66:57:e0:1b:3f:c7:2d:0e:1a:91:3e:7f:c5:c2: 0d:41:6b:dc:35:cd:aa:c5:80:2f:c1:02:2c:e6:0d: ef:a3:e9:f5:4a:56:c8:39:f0:6b:9f:3c:8e:76:62: a2:9d:9d:42:9f:4d:8b:58:be:88:10:6b:22:dc:35: b2:35:27:03:dd:4a:d8:58:34:7d:d5:84:9e:e7:fc: e0:37:ea:64:d6:d8:c7:da:49:5e:89:09:0c:6f:49: 6c:b6:6e:3e:cf:06:0a:b3:1e:5e:c0:a9:76:80:28: d0:22:65:d0:c2:cd:f1:8d:8d:26:d1:66:f0:63:60: 8f:a1:eb:82:d6:46:f2:37:f6:f4:57:bc:57:0e:e6: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:7B:3F:C3:10:AA:70:E1:05:E8:AA:39:1D:D5:9F:1D:0F:87:BC X509v3 Authority Key Identifier: keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a1:bc:3d:d3:e0:d4:25:ed:fe:b9:24:40:1f:23:cc:8e:dc: b5:74:f8:ea:68:db:b1:14:2a:a1:30:1e:81:51:d1:fb:ee:4d: 50:55:77:1e:3e:98:08:ba:21:e1:9c:29:34:d5:45:33:ac:3c: 8c:33:86:6c:91:db:5d:00:a2:34:59:00:47:7f:cf:33:aa:02: a2:65:fa:96:c8:ed:4b:fd:bd:b7:fb:78:41:8c:64:0d:e8:8b: da:d9:b3:72:f2:0f:90:fa:e0:3f:37:e9:19:0f:b9:fb:d8:e5: c6:09:d6:95:fb:6a:9a:b5:17:85:f0:f8:97:0a:3f:c0:7d:07: 47:9f:f7:54:b4:95:66:12:f3:6d:e1:f6:27:09:57:37:ac:6c: 27:f8:2a:a5:5e:eb:fc:53:a8:e9:3b:97:30:06:96:2f:d0:0a: c0:41:a6:c1:8f:65:21:e7:3a:ae:2c:0c:16:6f:54:ac:fe:d8: 87:44:a6:10:50:39:82:60:a9:f6:7e:62:2a:56:16:e3:28:8f: 03:a9:dc:4b:89:2d:94:64:bc:9a:98:46:59:9d:cc:57:8d:e7: d4:d5:e1:10:6a:d7:3b:2e:b6:d9:db:ba:d1:e3:05:e1:f1:9e: a1:ef:41:c6:50:39:f4:78:99:25:4b:0c:e0:12:56:c7:83:9d: 47:ad:60:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0foAuzU7yA4bkszw6purMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw YTZmZDkwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EygxZGMxN2IzZmMzMTBhYTcwZTEwNWU4YWEzOTFkZDU5ZjFkMGY4N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw13YPHfpAoAQt/UITTphXyrCAnBx 9P/Uf6SxAWh66mCe7hFbAkFZK45egz+X4+TgWwiiH04HrCHLfZYPDdajHOM9FrOg RhCaNntaRoGFJVzNKDLVwHJCgwi9ffZ2pMcDOR9LDoU0ji9jcmrDCuJ6xGpkd2JR ABWgZlfgGz/HLQ4akT5/xcINQWvcNc2qxYAvwQIs5g3vo+n1SlbIOfBrnzyOdmKi nZ1Cn02LWL6IEGsi3DWyNScD3UrYWDR91YSe5/zgN+pk1tjH2kleiQkMb0lstm4+ zwYKsx5ewKl2gCjQImXQws3xjY0m0WbwY2CPoeuC1kbyN/b0V7xXDubYvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Bez/DEKpw4QXoqjkd1Z8dD4e8MB8GA1UdIwQY MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaG8PdPg 1CXt/rkkQB8jzI7ctXT46mjbsRQqoTAegVHR++5NUFV3Hj6YCLoh4ZwpNNVFM6w8 jDOGbJHbXQCiNFkAR3/PM6oComX6lsjtS/29t/t4QYxkDeiL2tmzcvIPkPrgPzfp GQ+5+9jlxgnWlftqmrUXhfD4lwo/wH0HR5/3VLSVZhLzbeH2JwlXN6xsJ/gqpV7r /FOo6TuXMAaWL9AKwEGmwY9lIec6riwMFm9UrP7Yh0SmEFA5gmCp9n5iKlYW4yiP A6ncS4ktlGS8mphGWZ3MV43n1NXhEGrXOy622du60eMF4fGeoe9BxlA59HiZJUsM 4BJWx4OdR61gjA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:26 2025 by rpki-client