This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: 9YQc7aiMwo15yHuDCicB3EM2GgOilrM7yv74gDfNINs= Subject key identifier: 4C:45:48:B7:17:51:44:A8:E4:BC:D3:F3:66:89:16:F8:C5:21:89:D4 Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019B3D234289B96FBE66027D3F0C06CF499A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 0382 Signing time: Sat 20 Dec 2025 19:01:19 +0000 Manifest this update: Sat 20 Dec 2025 19:01:19 +0000 Manifest next update: Sun 21 Dec 2025 19:01:19 +0000 Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: sXTaRDUVUkVFapfwV/NtR3l5+LV4hy5qJICFNlp7fe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:42:89:b9:6f:be:66:02:7d:3f:0c:06:cf:49:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Dec 20 19:01:19 2025 GMT Not After : Dec 21 19:01:19 2025 GMT Subject: CN=4c4548b7175144a8e4bcd3f3668916f8c52189d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:f5:30:bf:f8:54:b6:01:aa:33:16:fc:f6: 85:2c:0a:89:06:cf:fa:da:a6:29:88:76:f8:15:2c: 59:3f:3e:7b:5e:3b:f6:95:5f:d5:5e:e9:85:f7:8a: 26:c8:51:b5:e8:e7:3f:c4:9c:cd:32:8f:2d:b1:d7: 54:75:5d:bc:64:92:7d:d3:0d:f2:78:ec:14:be:2f: 49:63:dc:fc:d0:d5:b3:d0:cb:da:aa:13:ef:00:f0: 9d:06:b2:81:0e:65:44:7a:e5:fa:ba:98:b9:76:61: c8:c2:ce:12:b3:38:a5:92:53:aa:51:a7:96:ce:64: 45:31:8c:19:3a:f9:7a:ec:ba:a4:d0:47:ca:87:a8: 0c:3f:a0:03:24:95:7d:e1:ba:81:2b:93:b5:6c:c0: 55:6a:05:43:c7:44:d8:36:5c:75:f2:c5:2c:44:d2: b4:6d:40:5e:0d:37:bb:0d:fa:24:73:e0:8d:3e:e6: c8:db:3c:b6:3f:1a:93:01:74:6d:29:72:82:a7:ea: 7c:e1:d2:19:d6:4c:e9:9b:46:2e:5a:2b:68:fa:53: 21:59:e9:bf:28:25:a8:e3:ed:88:99:c0:d9:13:49: f4:a9:88:58:e5:4e:5d:20:aa:0f:a3:b6:83:de:94: 36:e6:a2:95:74:c9:94:45:e6:b7:e1:ef:02:a1:ac: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:48:B7:17:51:44:A8:E4:BC:D3:F3:66:89:16:F8:C5:21:89:D4 X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5e:be:8f:a9:60:62:04:bf:86:ff:6e:03:b7:e8:3a:40:02: 3b:91:8e:d5:15:fa:a2:7c:8f:93:f0:d8:84:a0:62:fd:b3:c4: da:d3:55:10:71:0f:99:f0:4a:e1:19:2d:27:62:54:e2:ba:55: 92:24:f3:d4:f7:cf:56:f9:6c:5d:ae:42:ec:1b:cd:12:0a:17: 1a:a3:03:8d:04:2d:65:ff:84:54:51:0a:28:59:1e:b0:28:7c: 3d:ac:6a:64:22:af:b5:6d:fa:1c:05:c4:35:d3:17:a4:fc:8e: 19:da:4c:c7:76:44:84:5b:6c:dd:24:3d:79:80:ff:0a:7f:5a: 06:ee:ef:f3:a3:b3:af:a7:c4:0f:e9:0c:44:ca:37:14:4a:41: 2b:4f:c9:db:29:33:3a:a1:f6:36:9f:15:92:35:8f:03:6b:97: 7b:93:63:84:89:11:88:af:0a:29:de:15:bf:1c:b6:8d:b7:ad: e0:a2:0c:fb:4b:7c:01:dd:3a:49:8e:55:72:97:ba:c3:3e:9a: 27:8f:02:94:2e:e1:89:58:9c:56:ac:fb:66:c3:21:4d:36:59: d5:0e:bc:af:62:45:b1:2a:f5:d5:d4:31:67:79:ee:4a:ac:73: 24:d5:58:da:94:96:b7:b2:90:80:7b:b3:b7:ea:4b:41:fb:ae: 2b:64:37:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0KJuW++ZgJ9PwwGz0maMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjUxMjIwMTkwMTE5WhcNMjUxMjIxMTkwMTE5WjAzMTEwLwYDVQQD Eyg0YzQ1NDhiNzE3NTE0NGE4ZTRiY2QzZjM2Njg5MTZmOGM1MjE4OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWL1ML/4VLYBqjMW/PaFLAqJBs/6 2qYpiHb4FSxZPz57Xjv2lV/VXumF94omyFG16Oc/xJzNMo8tsddUdV28ZJJ90w3y eOwUvi9JY9z80NWz0MvaqhPvAPCdBrKBDmVEeuX6upi5dmHIws4SszilklOqUaeW zmRFMYwZOvl67Lqk0EfKh6gMP6ADJJV94bqBK5O1bMBVagVDx0TYNlx18sUsRNK0 bUBeDTe7Dfokc+CNPubI2zy2PxqTAXRtKXKCp+p84dIZ1kzpm0YuWito+lMhWem/ KCWo4+2ImcDZE0n0qYhY5U5dIKoPo7aD3pQ25qKVdMmURea34e8CoaxF6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExFSLcXUUSo5LzT82aJFvjFIYnUMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV6+j6lg YgS/hv9uA7foOkACO5GO1RX6onyPk/DYhKBi/bPE2tNVEHEPmfBK4RktJ2JU4rpV kiTz1PfPVvlsXa5C7BvNEgoXGqMDjQQtZf+EVFEKKFkesCh8PaxqZCKvtW36HAXE NdMXpPyOGdpMx3ZEhFts3SQ9eYD/Cn9aBu7v86Ozr6fED+kMRMo3FEpBK0/J2ykz OqH2Np8VkjWPA2uXe5NjhIkRiK8KKd4Vvxy2jbet4KIM+0t8Ad06SY5Vcpe6wz6a J48ClC7hiVicVqz7ZsMhTTZZ1Q68r2JFsSr11dQxZ3nuSqxzJNVY2pSWt7KQgHuz t+pLQfuuK2Q3EA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:46 2025 by rpki-client