This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json) Hash identifier: p/ry+KXzSh8A4gDtPswV32WgYbhrbLxMgcJRY8Ra3zA= Subject key identifier: 75:2A:40:68:63:7C:B2:44:6F:64:A7:A3:AD:5A:AB:B9:2F:43:C7:C3 Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Certificate serial: 019B3CB4B9901C86464317B65199DF151B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft Manifest number: EB Signing time: Sat 20 Dec 2025 17:00:35 +0000 Manifest this update: Sat 20 Dec 2025 17:00:35 +0000 Manifest next update: Sun 21 Dec 2025 17:00:35 +0000 Files and hashes: 1: Lg4eCFYIYf5ZVutlcdxYXCP2T1k.roa (hash: /UYXd+Jxi7mk5U3i4C8s/Xff/x03jpYmnvrS9R7HXwg=) 2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: TCPbUZhCI5yu4BHPmzq4jD3HBplaCNhGeYqQSKtjvYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b9:90:1c:86:46:43:17:b6:51:99:df:15:1b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Validity Not Before: Dec 20 17:00:35 2025 GMT Not After : Dec 21 17:00:35 2025 GMT Subject: CN=752a4068637cb2446f64a7a3ad5aabb92f43c7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:0f:40:26:08:03:0c:2f:a9:12:36:55:53: 77:31:b6:8e:6d:83:d7:5c:92:30:ea:34:de:93:d1: 1d:40:d2:4a:e1:83:23:9d:f2:88:fc:0f:22:02:9e: 4c:9b:7a:e0:ca:18:12:80:b3:59:59:26:21:96:80: 82:6b:37:ba:e7:64:b3:4f:76:c7:4d:80:11:06:57: ef:e9:41:32:e1:0f:e7:c6:a4:3d:ad:f6:39:76:b2: 35:c3:5c:a5:05:69:ca:e8:99:2d:b9:5f:62:00:f5: d4:d6:38:c0:5f:bb:12:1c:03:e4:b1:e1:b2:47:1f: 9e:94:90:85:ae:fd:fb:63:56:0b:87:da:fb:13:90: bf:1e:f5:8e:fb:51:7e:54:de:06:3c:36:d3:58:86: e1:8c:08:cc:dd:3f:16:8b:c0:9a:20:65:56:ed:4b: 0a:5c:48:1e:14:5a:04:a8:a5:8d:6d:40:9a:02:aa: 58:49:9a:c5:29:21:e9:9a:8f:51:28:d7:d9:95:fb: 22:bb:4c:b8:55:eb:04:8c:50:e6:45:6d:7f:eb:35: 18:54:82:15:70:05:fc:0f:f3:58:a2:ad:13:da:ea: fb:e7:c1:82:dd:a5:ce:0b:cd:f7:61:d2:90:48:7d: a3:11:36:1a:9f:12:f8:68:4f:60:d4:d1:7b:df:c9: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2A:40:68:63:7C:B2:44:6F:64:A7:A3:AD:5A:AB:B9:2F:43:C7:C3 X509v3 Authority Key Identifier: keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:62:c7:84:34:6d:95:77:5f:4b:73:43:d8:3f:e5:c9:b0: d9:5b:08:55:b8:cb:c5:30:57:0b:f5:b2:1c:a8:24:8e:80:4f: 1e:6c:2f:77:e6:66:d4:e2:0f:a0:88:37:27:cb:fc:bd:01:cc: c4:02:66:f9:a2:4d:1e:75:39:00:1a:fc:89:45:8d:4f:41:7a: 24:4f:3b:7f:af:06:32:e9:a9:d6:b2:10:19:84:05:a6:35:c9: df:ca:ed:eb:74:f5:45:8b:e8:15:b7:c0:66:79:c2:1f:fd:fb: 85:2f:ac:7f:23:c9:72:f2:d3:f5:6b:66:65:08:5b:48:4e:04: 2c:77:c6:80:1a:64:55:7c:e2:6a:a7:bb:dc:58:02:72:1c:d2: 24:5c:20:c2:35:35:3a:13:27:1c:6d:ef:50:16:21:48:82:08: 1b:d5:c5:f4:89:02:3c:f8:26:2d:5b:85:80:1b:2d:0e:3d:b5: e3:cf:04:eb:5a:ed:99:2c:82:ad:41:7c:c3:00:4c:37:26:94: a1:06:27:0e:53:0c:5f:1c:a8:f2:cc:bf:37:10:e9:4f:ba:7a: 6f:ac:44:dc:fa:cb:ec:f9:cd:bb:c4:84:f1:67:bd:3b:81:ae: 7e:76:9e:5b:e1:08:9f:1a:e4:05:70:30:0b:26:3f:28:07:a6: e9:77:8b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLmQHIZGQxe2UZnfFRstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz MGU2NjUwHhcNMjUxMjIwMTcwMDM1WhcNMjUxMjIxMTcwMDM1WjAzMTEwLwYDVQQD Eyg3NTJhNDA2ODYzN2NiMjQ0NmY2NGE3YTNhZDVhYWJiOTJmNDNjN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtkPQCYIAwwvqRI2VVN3MbaObYPX XJIw6jTek9EdQNJK4YMjnfKI/A8iAp5Mm3rgyhgSgLNZWSYhloCCaze652SzT3bH TYARBlfv6UEy4Q/nxqQ9rfY5drI1w1ylBWnK6JktuV9iAPXU1jjAX7sSHAPkseGy Rx+elJCFrv37Y1YLh9r7E5C/HvWO+1F+VN4GPDbTWIbhjAjM3T8Wi8CaIGVW7UsK XEgeFFoEqKWNbUCaAqpYSZrFKSHpmo9RKNfZlfsiu0y4VesEjFDmRW1/6zUYVIIV cAX8D/NYoq0T2ur758GC3aXOC833YdKQSH2jETYanxL4aE9g1NF738mLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUqQGhjfLJEb2Sno61aq7kvQ8fDMB8GA1UdIwQY MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNtix4Q0 bZV3X0tzQ9g/5cmw2VsIVbjLxTBXC/WyHKgkjoBPHmwvd+Zm1OIPoIg3J8v8vQHM xAJm+aJNHnU5ABr8iUWNT0F6JE87f68GMump1rIQGYQFpjXJ38rt63T1RYvoFbfA ZnnCH/37hS+sfyPJcvLT9WtmZQhbSE4ELHfGgBpkVXziaqe73FgCchzSJFwgwjU1 OhMnHG3vUBYhSIIIG9XF9IkCPPgmLVuFgBstDj21488E61rtmSyCrUF8wwBMNyaU oQYnDlMMXxyo8sy/NxDpT7p6b6xE3PrL7PnNu8SE8We9O4GufnaeW+EInxrkBXAw CyY/KAem6XeLWg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:06:06 2025 by rpki-client