This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json) Hash identifier: vN59cZohgR9BCY1Wm8TAPTBLdk34cwVldKBV2D4pZvk= Subject key identifier: A0:01:E6:5F:F5:1B:36:6F:D6:F7:74:A4:2A:12:E6:DF:A4:34:EF:FA Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019B3F47D7B7A12462244D0AD046260928F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:00:31 +0000 Manifest this update: Sun 21 Dec 2025 05:00:31 +0000 Manifest next update: Mon 22 Dec 2025 05:00:31 +0000 Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=) 2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=) 3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=) 4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: tShVT44E6Xsip0Rs3l4S1hsjeG1kKWetuaoYqPks/M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d7:b7:a1:24:62:24:4d:0a:d0:46:26:09:28:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Dec 21 05:00:31 2025 GMT Not After : Dec 22 05:00:31 2025 GMT Subject: CN=a001e65ff51b366fd6f774a42a12e6dfa434effa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:d2:bf:44:e7:88:48:43:d5:66:87:a3:ea: c6:7c:d8:6e:aa:e1:b2:6b:18:7d:51:2c:0c:95:c5: f8:b6:74:ce:0e:32:a6:2d:a3:2f:4a:db:34:2a:74: 0f:ef:6a:3c:73:51:c4:87:34:85:b2:f8:84:69:96: d1:23:6e:27:d5:96:de:21:0b:5a:e1:b1:eb:28:11: f5:c0:56:61:ee:46:8b:0f:f4:3c:b9:b1:0e:95:ed: c2:71:ae:99:3e:f6:02:2c:44:86:c2:c4:d0:bb:8c: f4:20:07:ae:cf:d4:09:ed:fc:bf:1e:38:7a:1c:83: 58:1e:37:ec:c3:de:25:4b:28:9c:04:d5:23:a8:43: ae:f1:67:cc:18:d0:1e:5f:8c:df:dc:9c:7c:47:30: 3c:4f:df:09:16:99:44:85:ec:b0:aa:c9:12:95:2e: 54:46:dc:a3:9b:e2:f9:80:6a:6f:0c:7a:19:38:40: 01:f8:20:34:0e:14:b4:fd:12:21:12:23:00:d4:aa: 99:d6:fb:de:b8:73:3c:ec:1d:44:92:85:6f:6c:10: 3f:c1:80:bb:9f:98:46:20:cf:7f:77:97:13:31:7b: 94:84:fa:07:b0:d5:45:f5:33:45:f4:d8:3c:c9:a1: 50:23:a5:08:ac:b0:bf:9b:a6:61:d8:23:cf:cc:99: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:E6:5F:F5:1B:36:6F:D6:F7:74:A4:2A:12:E6:DF:A4:34:EF:FA X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:40:f7:47:87:65:12:49:51:88:74:d3:f8:8d:ed:8c:18: 77:31:5c:7b:8e:23:17:2b:eb:a9:ee:7e:e9:b1:9c:6a:2a:40: ba:08:08:99:21:de:72:bf:86:41:ba:fb:87:aa:af:73:82:92: 3d:0b:89:ba:e3:6c:26:fb:2c:3d:5c:0b:a5:1a:5b:72:b9:24: 36:11:5b:e1:af:33:1a:77:b6:50:88:ff:49:35:b6:9e:5c:5e: c2:81:8f:60:04:87:76:d9:64:eb:98:9e:0b:5a:d0:63:d6:5e: 71:b7:fb:80:84:d8:70:e5:55:c4:10:d2:86:2e:8f:fa:47:8a: 59:12:4a:45:34:ae:9a:e7:07:af:ed:7e:b2:7b:4d:cc:69:da: 11:ab:73:14:8d:92:db:bb:72:ed:bf:b9:9b:78:b3:c6:36:90: 49:d8:27:ad:e4:06:8d:ab:8b:13:47:2e:81:0f:b8:46:55:9c: 5f:53:74:1a:80:66:53:75:fb:e9:b9:cf:1b:8a:bd:04:c4:28: 0e:27:0d:d7:ca:e7:8e:ca:c2:f6:64:a6:60:b4:35:c2:77:51: 05:f6:18:ba:83:90:0b:75:23:d4:e7:6d:20:e0:0a:d0:90:75: 62:08:78:bf:dd:f5:98:e3:60:d4:69:74:7a:a2:79:42:59:0a: fa:a6:01:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9e3oSRiJE0K0EYmCSj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjUxMjIxMDUwMDMxWhcNMjUxMjIyMDUwMDMxWjAzMTEwLwYDVQQD EyhhMDAxZTY1ZmY1MWIzNjZmZDZmNzc0YTQyYTEyZTZkZmE0MzRlZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlPSv0TniEhD1WaHo+rGfNhuquGy axh9USwMlcX4tnTODjKmLaMvSts0KnQP72o8c1HEhzSFsviEaZbRI24n1ZbeIQta 4bHrKBH1wFZh7kaLD/Q8ubEOle3Cca6ZPvYCLESGwsTQu4z0IAeuz9QJ7fy/Hjh6 HINYHjfsw94lSyicBNUjqEOu8WfMGNAeX4zf3Jx8RzA8T98JFplEheywqskSlS5U Rtyjm+L5gGpvDHoZOEAB+CA0DhS0/RIhEiMA1KqZ1vveuHM87B1EkoVvbBA/wYC7 n5hGIM9/d5cTMXuUhPoHsNVF9TNF9Ng8yaFQI6UIrLC/m6Zh2CPPzJn+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAB5l/1GzZv1vd0pCoS5t+kNO/6MB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSdA90eH ZRJJUYh00/iN7YwYdzFce44jFyvrqe5+6bGcaipAuggImSHecr+GQbr7h6qvc4KS PQuJuuNsJvssPVwLpRpbcrkkNhFb4a8zGne2UIj/STW2nlxewoGPYASHdtlk65ie C1rQY9Zecbf7gITYcOVVxBDShi6P+keKWRJKRTSumucHr+1+sntNzGnaEatzFI2S 27ty7b+5m3izxjaQSdgnreQGjauLE0cugQ+4RlWcX1N0GoBmU3X76bnPG4q9BMQo DicN18rnjsrC9mSmYLQ1wndRBfYYuoOQC3Uj1OdtIOAK0JB1Ygh4v931mONg1Gl0 eqJ5QlkK+qYB4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:54 2025 by rpki-client