This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: Oy6g4zQ8zbjVJF4o9CaH4N/mqUNdcdQ7ZsZoSXbkfG8= Subject key identifier: 9F:D9:67:5F:28:68:80:48:C0:21:F6:F9:E8:9A:BB:2E:59:B5:40:45 Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019B526138CAE94086FCDE9BB7B4C3E9AE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 038D Signing time: Wed 24 Dec 2025 22:01:01 +0000 Manifest this update: Wed 24 Dec 2025 22:01:01 +0000 Manifest next update: Thu 25 Dec 2025 22:01:01 +0000 Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: pJMXdlw9u0USpX3GwgCNPekpDlsu8jgSiuWs3bWu1KM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:38:ca:e9:40:86:fc:de:9b:b7:b4:c3:e9:ae:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Dec 24 22:01:01 2025 GMT Not After : Dec 25 22:01:01 2025 GMT Subject: CN=9fd9675f28688048c021f6f9e89abb2e59b54045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:f4:4a:8f:5d:e2:29:0e:f3:03:09:11:79: 69:c8:76:b1:55:fd:fc:59:81:e0:92:f9:f8:f8:2e: 1a:26:eb:07:f6:7a:23:ab:ea:da:66:4e:fa:4d:03: 60:1a:51:42:8e:60:72:15:84:02:1e:83:0b:47:0a: d7:58:11:fe:26:bf:9e:a8:1a:23:64:8e:18:5c:2e: 14:9f:ba:c2:a2:48:b8:07:35:41:c0:f8:70:d0:dd: c4:05:8e:c6:67:b6:5b:24:64:21:9a:1a:a5:72:75: 34:f2:b4:3c:97:21:58:e5:f6:ad:27:9a:de:91:53: 37:ed:70:19:11:b6:31:b4:a2:ec:09:40:63:d0:18: e6:eb:b7:7c:25:95:cb:1e:2e:e8:35:19:54:33:81: 55:93:ad:d2:93:10:6a:60:d0:59:5c:05:0c:54:b8: 71:8e:51:e9:17:b0:0e:e5:fc:20:87:a3:ad:53:f8: fd:24:d3:41:54:87:57:93:be:04:6e:2a:3c:f1:f9: 9a:b4:86:e8:e7:2e:4f:6d:cd:1f:a8:bd:f6:8e:d2: 19:2d:29:7b:d4:39:0c:92:ef:6f:0d:9d:7a:e0:a0: 25:4e:de:02:e6:fa:32:87:13:9f:8d:47:a7:f5:0f: d3:bd:ba:7b:01:40:94:26:f0:4c:58:3c:d5:11:14: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:67:5F:28:68:80:48:C0:21:F6:F9:E8:9A:BB:2E:59:B5:40:45 X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b5:60:f2:02:c2:26:6f:af:ed:85:e7:bb:ec:a7:81:ac:46: 4e:43:71:bb:49:8d:04:bb:ca:cd:e1:98:5f:ab:69:66:c2:6e: 64:66:1a:c0:36:f7:6e:5e:e0:31:eb:2a:0a:20:ac:1a:cf:10: b1:b3:2e:bd:12:5d:64:44:37:d5:58:0d:01:ec:1e:5b:81:de: cd:05:f8:cd:82:2f:9e:25:66:49:e0:d4:29:c4:3e:20:8e:21: 19:59:ae:eb:ab:8f:eb:c7:a9:15:6d:e2:c8:47:87:97:19:e2: 2d:f8:7c:c1:ae:53:c9:50:02:fb:72:60:08:42:a4:ce:a4:22: d9:fd:10:06:7a:4c:e8:51:c6:e1:4d:89:12:66:a2:19:97:c4: 58:30:3a:fa:45:14:dd:1f:d7:cb:95:8b:ba:17:70:9b:c8:32: 96:09:73:ce:7a:7c:65:f4:48:42:57:ca:86:ad:8e:b6:72:61: 79:a6:c3:62:e9:87:2e:04:65:71:6f:e6:93:7b:21:09:9a:e9: 93:9f:7b:90:5b:37:84:96:ed:fd:ff:be:0d:84:c2:24:77:b5: f1:b1:68:e5:cd:bc:32:4d:11:c2:37:4a:92:66:ff:10:df:8c: 8c:b3:0a:2c:f2:5f:7b:aa:23:f2:f1:f6:8f:0b:e8:4f:18:15: 28:e3:bc:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYTjK6UCG/N6bt7TD6a6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjUxMjI0MjIwMTAxWhcNMjUxMjI1MjIwMTAxWjAzMTEwLwYDVQQD Eyg5ZmQ5Njc1ZjI4Njg4MDQ4YzAyMWY2ZjllODlhYmIyZTU5YjU0MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8n0So9d4ikO8wMJEXlpyHaxVf38 WYHgkvn4+C4aJusH9nojq+raZk76TQNgGlFCjmByFYQCHoMLRwrXWBH+Jr+eqBoj ZI4YXC4Un7rCoki4BzVBwPhw0N3EBY7GZ7ZbJGQhmhqlcnU08rQ8lyFY5fatJ5re kVM37XAZEbYxtKLsCUBj0Bjm67d8JZXLHi7oNRlUM4FVk63SkxBqYNBZXAUMVLhx jlHpF7AO5fwgh6OtU/j9JNNBVIdXk74Ebio88fmatIbo5y5Pbc0fqL32jtIZLSl7 1DkMku9vDZ164KAlTt4C5voyhxOfjUen9Q/Tvbp7AUCUJvBMWDzVERR/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/ZZ18oaIBIwCH2+eiauy5ZtUBFMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrVg8gLC Jm+v7YXnu+yngaxGTkNxu0mNBLvKzeGYX6tpZsJuZGYawDb3bl7gMesqCiCsGs8Q sbMuvRJdZEQ31VgNAeweW4HezQX4zYIvniVmSeDUKcQ+II4hGVmu66uP68epFW3i yEeHlxniLfh8wa5TyVAC+3JgCEKkzqQi2f0QBnpM6FHG4U2JEmaiGZfEWDA6+kUU 3R/Xy5WLuhdwm8gylglzznp8ZfRIQlfKhq2OtnJheabDYumHLgRlcW/mk3shCZrp k597kFs3hJbt/f++DYTCJHe18bFo5c28Mk0RwjdKkmb/EN+MjLMKLPJfe6oj8vH2 jwvoTxgVKOO8Og== -----END CERTIFICATE-----Generated at Thu Dec 25 03:25:54 2025 by rpki-client