This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json) Hash identifier: 4CM00AsGHi2CeyIclS82rXmQ43rGAUAEAJ2hi2D/2O8= Subject key identifier: B7:FF:6A:B8:FE:4F:48:41:DC:6E:17:4C:FF:D5:B0:13:FE:12:0D:4F Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Certificate serial: 019B676825A9C25E987E96AFC0BB3BC8088E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft Manifest number: 1732 Signing time: Mon 29 Dec 2025 00:00:37 +0000 Manifest this update: Mon 29 Dec 2025 00:00:37 +0000 Manifest next update: Tue 30 Dec 2025 00:00:37 +0000 Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=) 2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: 6xu7/RcveUV74GE5HHsKTGMU5Qh9fuyAS0MhhGHd0i8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:25:a9:c2:5e:98:7e:96:af:c0:bb:3b:c8:08:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Validity Not Before: Dec 29 00:00:37 2025 GMT Not After : Dec 30 00:00:37 2025 GMT Subject: CN=b7ff6ab8fe4f4841dc6e174cffd5b013fe120d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:3d:7b:0a:11:e6:ff:5b:62:51:32:4c:f0: 68:1b:a8:0e:79:4d:fc:10:ea:30:e3:b9:77:0c:57: 16:96:1c:b2:7f:7e:7f:02:03:1a:25:45:43:73:74: 5d:74:1d:8d:0d:4a:f2:bb:ba:c6:4b:dc:4b:f8:6a: df:96:d2:4a:55:a4:38:c5:73:1c:e1:bc:96:36:1d: 25:aa:13:15:58:03:b1:55:4c:4c:f0:68:ce:b1:ab: 26:e7:8b:98:40:a2:e1:4a:e5:14:f2:40:4e:5f:53: 35:77:03:bb:a8:f3:d2:79:22:0e:a2:6b:10:11:39: 1b:2d:44:33:28:4b:fd:6c:d1:b0:dd:4c:29:34:c2: e4:a4:95:98:f2:13:54:71:4a:c8:9f:8f:8d:96:12: b0:b8:ea:ff:95:03:60:ac:e0:38:53:d6:25:e5:be: b0:2b:0a:35:16:84:70:1c:37:d0:67:84:25:12:34: e4:b4:e0:c5:c7:30:30:e0:be:0e:ca:ed:89:66:64: 8c:2b:9a:18:91:87:f2:7c:ff:60:05:28:15:78:5a: d9:b8:f3:10:d0:6e:b2:a4:f8:a1:7b:c8:a0:87:67: 68:bb:ee:f6:08:54:e2:69:74:c4:80:ae:2d:7f:b2: 96:97:0c:e7:f1:5e:f2:f3:40:4c:fa:4b:10:3e:43: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:6A:B8:FE:4F:48:41:DC:6E:17:4C:FF:D5:B0:13:FE:12:0D:4F X509v3 Authority Key Identifier: keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b2:d7:43:3e:cf:a2:67:d1:99:b6:56:d3:7b:05:ea:51:96: 68:ff:13:51:45:19:d7:5f:d7:33:ee:d1:13:16:c7:48:fa:28: 71:e8:78:77:28:bb:f1:93:28:5c:4d:9d:02:c6:bf:2e:54:15: 61:a6:38:1f:00:02:bd:d2:04:ca:88:41:ed:0f:6b:44:08:e0: a1:0b:70:47:c5:6b:39:10:27:43:f5:b3:56:45:d6:43:17:91: cf:82:48:5a:9b:57:6e:95:f7:dc:55:00:91:ec:58:31:d7:a8: cd:3d:5f:20:f7:5d:41:ce:73:fd:43:ed:c1:21:f1:99:86:22: 5a:48:31:0f:66:59:7c:fe:f1:df:3f:9c:94:fa:16:c0:64:ec: 83:9c:70:13:2c:1e:e1:2e:e3:38:a9:29:a8:52:f9:34:fa:1c: e2:9c:3f:cf:63:74:f4:56:05:24:69:70:83:7a:21:ee:42:25: 73:7d:b8:f1:b5:3a:75:b0:19:7a:a4:aa:53:d7:a2:cb:c1:22: c6:ae:7a:3a:25:c2:a7:51:24:4c:01:79:d8:17:78:6f:f9:aa: 4d:c9:79:b6:2f:39:e7:65:9e:a3:90:56:4d:f1:f2:37:13:ae: 7b:23:ff:2a:c0:5c:95:46:27:1b:4e:17:3d:67:ce:44:39:1c: 35:9c:de:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaCWpwl6YfpavwLs7yAiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm OGIyNDQwHhcNMjUxMjI5MDAwMDM3WhcNMjUxMjMwMDAwMDM3WjAzMTEwLwYDVQQD EyhiN2ZmNmFiOGZlNGY0ODQxZGM2ZTE3NGNmZmQ1YjAxM2ZlMTIwZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumU9ewoR5v9bYlEyTPBoG6gOeU38 EOow47l3DFcWlhyyf35/AgMaJUVDc3RddB2NDUryu7rGS9xL+GrfltJKVaQ4xXMc 4byWNh0lqhMVWAOxVUxM8GjOsasm54uYQKLhSuUU8kBOX1M1dwO7qPPSeSIOomsQ ETkbLUQzKEv9bNGw3UwpNMLkpJWY8hNUcUrIn4+NlhKwuOr/lQNgrOA4U9Yl5b6w Kwo1FoRwHDfQZ4QlEjTktODFxzAw4L4Oyu2JZmSMK5oYkYfyfP9gBSgVeFrZuPMQ 0G6ypPihe8igh2dou+72CFTiaXTEgK4tf7KWlwzn8V7y80BM+ksQPkMgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf/arj+T0hB3G4XTP/VsBP+Eg1PMB8GA1UdIwQY MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2 LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLLXQz7P omfRmbZW03sF6lGWaP8TUUUZ11/XM+7RExbHSPooceh4dyi78ZMoXE2dAsa/LlQV YaY4HwACvdIEyohB7Q9rRAjgoQtwR8VrORAnQ/WzVkXWQxeRz4JIWptXbpX33FUA kexYMdeozT1fIPddQc5z/UPtwSHxmYYiWkgxD2ZZfP7x3z+clPoWwGTsg5xwEywe 4S7jOKkpqFL5NPoc4pw/z2N09FYFJGlwg3oh7kIlc3248bU6dbAZeqSqU9eiy8Ei xq56OiXCp1EkTAF52Bd4b/mqTcl5ti8552Weo5BWTfHyNxOueyP/KsBclUYnG04X PWfORDkcNZzegQ== -----END CERTIFICATE-----Generated at Mon Dec 29 06:52:18 2025 by rpki-client