This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json) Hash identifier: kIY24EOiDHqpoEev9YDOYZlEL+WHxtxVdCnyG0xgr3Y= Subject key identifier: AF:C2:1B:5A:B8:02:04:A2:9A:BE:F5:E0:14:56:47:72:B5:3E:A6:CF Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Certificate serial: 019B698D819E85573FF6A77B3627FFCC430B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft Manifest number: 16F5 Signing time: Mon 29 Dec 2025 10:00:39 +0000 Manifest this update: Mon 29 Dec 2025 10:00:39 +0000 Manifest next update: Tue 30 Dec 2025 10:00:39 +0000 Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=) 2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: CwDd0R5k6Jpcn5zwTlatLUZx/ZhyQRE3gpz9ZZHWh84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:81:9e:85:57:3f:f6:a7:7b:36:27:ff:cc:43:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Validity Not Before: Dec 29 10:00:39 2025 GMT Not After : Dec 30 10:00:39 2025 GMT Subject: CN=afc21b5ab80204a29abef5e014564772b53ea6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:e8:26:db:4a:73:bc:7c:90:29:a8:8f:13: 1e:7d:3a:f1:3c:95:33:71:3a:3f:6a:0f:eb:ca:ec: 17:f8:b2:ec:da:cf:a3:50:0c:8c:66:e6:1f:de:6a: 01:c1:95:c3:0d:24:7c:52:9f:4a:da:79:02:b7:db: ab:e4:21:c0:5f:27:67:39:c0:72:f1:6c:b9:33:83: 86:fc:93:d2:cc:83:70:d2:45:93:79:b5:f1:60:0b: 1c:02:d3:95:52:a4:0a:df:3f:01:a9:85:8e:4e:40: ac:bc:5d:57:71:8d:23:1a:5f:5a:4e:4c:3f:9a:09: 3c:ac:4b:1a:29:c3:ec:ad:05:be:1a:fb:c0:ad:34: a8:a3:cd:e2:7c:e7:72:53:c2:cd:0b:72:43:8d:73: f4:c8:54:c7:61:b9:ea:f2:b6:72:f9:64:23:f7:fd: e0:77:95:da:df:5a:ca:43:2b:7e:56:1d:a6:ee:22: 82:85:be:47:6e:97:a2:a9:0a:60:3c:96:c6:3c:97: 4f:84:3c:06:1a:1f:dd:a7:ed:12:ed:13:0c:1b:ff: 80:81:65:16:c7:ae:7c:51:88:0e:41:f5:e6:9c:5f: a2:5f:aa:6d:3e:1b:6f:82:19:4e:6f:30:96:6d:a8: be:bc:fc:b3:eb:7f:2c:23:56:a9:3c:61:d6:9b:70: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C2:1B:5A:B8:02:04:A2:9A:BE:F5:E0:14:56:47:72:B5:3E:A6:CF X509v3 Authority Key Identifier: keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:78:5b:49:4f:d3:99:bb:7d:26:c5:c8:bb:fa:91:73:28:df: c6:eb:57:99:30:d3:e9:79:0d:d3:78:2a:98:66:6f:7b:ca:8e: 98:3c:f2:1c:a4:cc:33:11:05:31:b2:22:3b:e6:b0:27:0e:47: 27:20:e9:8a:47:22:24:2a:d4:81:92:be:2e:68:ab:c2:59:71: 6c:33:4b:81:df:98:3d:09:25:de:08:73:19:b5:03:cf:a8:48: 2b:76:26:21:ed:41:14:4d:67:79:5a:91:c6:de:25:a1:59:bd: ec:81:df:ce:af:8f:54:97:94:52:41:07:75:16:dd:a8:2e:44: a7:20:04:19:85:1d:de:57:44:68:05:50:1d:48:d6:b8:b0:32: 17:b4:80:13:68:76:a4:82:bd:d2:26:54:62:e3:fc:0b:08:b7: 33:ae:83:30:58:5e:2e:ae:c6:1a:98:fe:ef:b5:dd:7d:05:cb: b0:dc:65:95:b7:48:09:a0:82:4a:f8:b6:15:ba:48:55:ac:14: 42:d0:59:37:ce:bb:71:ec:68:18:11:b9:2c:1b:2b:18:57:1d: 26:82:b5:69:6c:06:c4:a0:48:5f:6e:55:57:df:bd:94:13:72: 51:25:34:dd:6e:17:79:62:b8:a1:9e:89:a9:19:66:19:e2:73: 5e:2b:dc:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjYGehVc/9qd7Nif/zEMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTNkMGJiNDIyYjBiY2E3MDY3MTZjMjBmN2FkNThkZDI3 NjU0NzEwHhcNMjUxMjI5MTAwMDM5WhcNMjUxMjMwMTAwMDM5WjAzMTEwLwYDVQQD EyhhZmMyMWI1YWI4MDIwNGEyOWFiZWY1ZTAxNDU2NDc3MmI1M2VhNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGToJttKc7x8kCmojxMefTrxPJUz cTo/ag/ryuwX+LLs2s+jUAyMZuYf3moBwZXDDSR8Up9K2nkCt9ur5CHAXydnOcBy 8Wy5M4OG/JPSzINw0kWTebXxYAscAtOVUqQK3z8BqYWOTkCsvF1XcY0jGl9aTkw/ mgk8rEsaKcPsrQW+GvvArTSoo83ifOdyU8LNC3JDjXP0yFTHYbnq8rZy+WQj9/3g d5Xa31rKQyt+Vh2m7iKChb5HbpeiqQpgPJbGPJdPhDwGGh/dp+0S7RMMG/+AgWUW x658UYgOQfXmnF+iX6ptPhtvghlObzCWbai+vPyz638sI1apPGHWm3DzIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/CG1q4AgSimr714BRWR3K1PqbPMB8GA1UdIwQY MBaAFL2j0LtCKwvKcGcWwg961Y3SdlRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEt ZjIzMjgzNjAxNzY0LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEtZjIzMjgzNjAxNzY0 LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnhbSU/T mbt9JsXIu/qRcyjfxutXmTDT6XkN03gqmGZve8qOmDzyHKTMMxEFMbIiO+awJw5H JyDpikciJCrUgZK+LmirwllxbDNLgd+YPQkl3ghzGbUDz6hIK3YmIe1BFE1neVqR xt4loVm97IHfzq+PVJeUUkEHdRbdqC5EpyAEGYUd3ldEaAVQHUjWuLAyF7SAE2h2 pIK90iZUYuP8Cwi3M66DMFheLq7GGpj+77XdfQXLsNxllbdICaCCSvi2FbpIVawU QtBZN867cexoGBG5LBsrGFcdJoK1aWwGxKBIX25VV9+9lBNyUSU03W4XeWK4oZ6J qRlmGeJzXivcZg== -----END CERTIFICATE-----Generated at Mon Dec 29 16:14:00 2025 by rpki-client