This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json) Hash identifier: fOAywmfTXDUdd6Qr/C7kzLyD05lASg0ssk7sVcLvkIQ= Subject key identifier: 5A:BF:A7:FD:9E:2E:7E:0E:F5:65:F8:19:80:1C:D7:A5:DE:EB:F0:65 Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Certificate serial: 019B428060B9EC464992457C74EE978C12F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft Manifest number: 12CF Signing time: Sun 21 Dec 2025 20:01:08 +0000 Manifest this update: Sun 21 Dec 2025 20:01:08 +0000 Manifest next update: Mon 22 Dec 2025 20:01:08 +0000 Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=) 2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: lp6+mU8LxQ9fNGTa9DaueLWw2pFQuLfa/dHAjdRl3hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:60:b9:ec:46:49:92:45:7c:74:ee:97:8c:12:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37 Validity Not Before: Dec 21 20:01:08 2025 GMT Not After : Dec 22 20:01:08 2025 GMT Subject: CN=5abfa7fd9e2e7e0ef565f819801cd7a5deebf065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:74:b7:97:b4:c7:0e:d5:af:de:43:72:84: 26:88:0c:8a:14:06:a8:a0:fb:c4:09:8c:e2:0f:a0: ff:4b:03:50:cc:42:ca:fb:71:ed:ce:dc:ef:a3:67: c0:02:85:65:5a:36:88:0b:1e:c5:02:2b:be:c0:b7: 3b:76:5d:50:f8:60:53:ec:69:ca:3c:6c:5e:a7:47: 1d:4e:cf:11:d0:74:37:44:82:e2:cb:74:0c:63:b7: 90:51:2e:3f:ea:c7:27:ff:9a:13:38:47:f1:ba:31: d4:08:19:52:83:70:41:e9:91:a5:f1:c6:ce:c7:82: fb:20:66:ce:58:cd:e7:3a:cb:bb:dd:66:ec:fa:78: 3a:94:04:38:0a:49:8e:7d:d7:09:b6:4c:a3:4a:a9: cb:3f:79:56:7f:85:f0:2d:97:8e:22:40:4f:92:91: 7d:2c:a1:83:e6:58:31:66:ca:81:d1:14:7e:c9:f3: 7c:bd:d2:61:e0:b8:13:25:13:ed:68:d7:7c:a8:10: 33:3f:b7:91:05:e5:c3:fc:32:88:56:79:5c:98:07: b1:17:6b:5b:79:b8:14:79:4a:ea:1c:3a:4b:16:0f: 8b:9f:3b:1c:57:cb:1a:2d:9c:c5:c3:57:88:44:84: 95:db:29:bf:9b:a6:b5:3c:58:9b:2b:83:89:64:6e: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:A7:FD:9E:2E:7E:0E:F5:65:F8:19:80:1C:D7:A5:DE:EB:F0:65 X509v3 Authority Key Identifier: keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:66:58:19:f7:c1:31:71:60:81:a3:a9:ec:8d:fb:d7:67:16: 16:91:1d:2e:24:7c:53:31:1d:9d:c6:f2:9a:d4:ad:6d:07:87: b5:6b:16:f9:cc:fb:da:fe:df:a4:3f:7f:6e:8d:14:07:27:b3: ef:4d:d2:df:b2:f6:4b:be:ed:c2:c6:51:50:8e:50:52:25:14: 37:3c:3b:32:a0:00:77:ee:86:50:95:f6:d3:92:ef:0a:c7:3f: cc:15:46:00:fb:c2:2b:92:61:71:13:18:82:12:27:d5:d6:91: 22:90:94:c6:b1:a1:bd:bf:fb:51:78:fe:ee:76:11:20:8a:a8: 06:bb:be:96:50:87:f1:68:c7:e1:11:33:a7:a3:32:30:85:4f: fc:75:ab:e5:9e:43:b5:d7:bf:75:cb:4f:b3:02:90:7f:36:cd: e3:a0:24:dc:1d:f5:b1:9b:0f:89:c3:0a:86:13:40:42:c7:b9: c6:e3:50:42:43:5f:62:72:53:75:26:41:47:6e:77:f0:f5:e7: 6f:84:ee:8f:e0:2e:47:42:b1:f6:1e:b7:c5:5c:18:fa:b0:21: 10:5b:c1:a0:6c:40:bc:80:a3:3e:9b:7d:0f:3d:04:91:01:9e: f7:82:91:d4:e9:30:6d:d1:01:09:7a:0a:7a:e0:8d:71:5b:00: 38:a2:3e:c9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtCgGC57EZJkkV8dO6XjBL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjcwNjZkYTA5YTU2MjI0MjYwZTQ2ZWEyNmRjOWNiMWRi YThlMzcwHhcNMjUxMjIxMjAwMTA4WhcNMjUxMjIyMjAwMTA4WjAzMTEwLwYDVQQD Eyg1YWJmYTdmZDllMmU3ZTBlZjU2NWY4MTk4MDFjZDdhNWRlZWJmMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoB0t5e0xw7Vr95DcoQmiAyKFAao oPvECYziD6D/SwNQzELK+3Htztzvo2fAAoVlWjaICx7FAiu+wLc7dl1Q+GBT7GnK PGxep0cdTs8R0HQ3RILiy3QMY7eQUS4/6scn/5oTOEfxujHUCBlSg3BB6ZGl8cbO x4L7IGbOWM3nOsu73Wbs+ng6lAQ4CkmOfdcJtkyjSqnLP3lWf4XwLZeOIkBPkpF9 LKGD5lgxZsqB0RR+yfN8vdJh4LgTJRPtaNd8qBAzP7eRBeXD/DKIVnlcmAexF2tb ebgUeUrqHDpLFg+LnzscV8saLZzFw1eIRISV2ym/m6a1PFibK4OJZG7InQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFq/p/2eLn4O9WX4GYAc16Xe6/BlMB8GA1UdIwQY MBaAFPr3Bm2gmlYiQmDkbqJtycsduo43MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12Y0diYUNhVmlKQ1lPUnVvbTNKeXgyNmpqYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNmRiYzJmLTBmMGItNGEyZi1iMTQ5 LWI3NTk4MzEyMjQ1NS8xLzEtdmNHYmFDYVZpSkNZT1J1b20zSnl4MjZqamMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2EzLzZkYmMyZi0wZjBiLTRhMmYtYjE0OS1iNzU5ODMxMjI0 NTUvMS8xLXZjR2JhQ2FWaUpDWU9SdW9tM0p5eDI2ampjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWZY GffBMXFggaOp7I3712cWFpEdLiR8UzEdncbymtStbQeHtWsW+cz72v7fpD9/bo0U Byez703S37L2S77twsZRUI5QUiUUNzw7MqAAd+6GUJX205LvCsc/zBVGAPvCK5Jh cRMYghIn1daRIpCUxrGhvb/7UXj+7nYRIIqoBru+llCH8WjH4REzp6MyMIVP/HWr 5Z5Dtde/dctPswKQfzbN46Ak3B31sZsPicMKhhNAQse5xuNQQkNfYnJTdSZBR253 8PXnb4Tuj+AuR0Kx9h63xVwY+rAhEFvBoGxAvICjPpt9Dz0EkQGe94KR1OkwbdEB CXoKeuCNcVsAOKI+yQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:08 2025 by rpki-client