This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json) Hash identifier: LLrwSEhCswnllPgNFVgAdU4js9e568Ct0gyKF283S/U= Subject key identifier: 0B:B8:92:C9:3E:14:88:54:D4:BF:AD:70:CE:53:9A:1D:42:DB:00:C7 Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Certificate serial: 019B4D040541FD3054F3A0B2539A4EE0D52C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft Manifest number: 0D96 Signing time: Tue 23 Dec 2025 21:01:07 +0000 Manifest this update: Tue 23 Dec 2025 21:01:07 +0000 Manifest next update: Wed 24 Dec 2025 21:01:07 +0000 Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=) 2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: eaJsf2K3TiqKLQFdB8LNVxkvs9h6KHcBk10S3pOFGLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:05:41:fd:30:54:f3:a0:b2:53:9a:4e:e0:d5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Validity Not Before: Dec 23 21:01:07 2025 GMT Not After : Dec 24 21:01:07 2025 GMT Subject: CN=0bb892c93e148854d4bfad70ce539a1d42db00c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3b:b1:1d:ab:40:aa:ce:24:ee:6a:97:e9:b0: 87:a2:0a:48:f4:da:6f:a2:cb:5b:e1:e1:37:40:b6: 0e:63:84:49:11:b2:32:96:dc:ab:5a:18:68:23:62: 55:9a:93:0c:38:d8:bf:a0:f0:82:f5:96:76:cf:c5: af:3c:f2:d7:c5:b1:5c:30:eb:6e:e8:54:ce:2a:8b: 06:c6:e3:b6:63:22:45:26:3c:3a:a0:17:e2:2a:54: 60:05:c4:ca:11:bf:62:ef:75:c3:a5:0d:13:87:d6: ee:06:68:12:c3:58:01:05:85:2f:fb:88:ba:cb:b2: 8f:38:cf:11:5a:38:fd:13:6c:68:ba:5d:63:80:ce: ba:a2:02:4b:30:b1:d6:d9:4b:a3:a4:a6:c1:a6:c8: 9a:fd:a9:8a:34:00:bc:4b:23:c3:b0:d2:87:3e:17: 90:5a:d5:5b:7c:36:a5:0b:cc:22:19:df:ad:eb:fa: fb:94:4a:04:94:a2:9b:14:42:a7:83:a5:91:24:b9: ab:08:57:2a:f6:86:86:6c:f0:22:c2:02:e3:6c:89: 59:35:62:bf:7c:24:21:fc:e9:8a:b8:a9:85:d3:0a: 92:b4:4f:0e:74:cc:60:f6:99:e5:f9:76:55:28:7a: 24:42:f2:b8:30:2d:d3:88:19:f3:69:29:ba:e8:3b: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B8:92:C9:3E:14:88:54:D4:BF:AD:70:CE:53:9A:1D:42:DB:00:C7 X509v3 Authority Key Identifier: keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:50:be:2b:04:4c:5b:b1:24:25:c1:36:7b:d5:12:3b:ac:42: 81:29:63:44:55:51:86:ba:12:be:ee:45:d6:fb:ff:c9:a5:b4: e8:fa:04:23:5d:f3:74:e2:a7:b7:62:6a:0e:31:84:7c:9b:e4: 34:d5:e2:d9:d3:20:44:34:d5:82:c6:76:d3:12:1f:8f:5d:9c: ad:8d:38:e1:5f:57:64:d9:d0:83:79:e6:13:34:a7:f4:15:eb: c0:89:7c:ab:33:36:3c:cc:02:7c:2f:11:1e:aa:48:c3:cf:a1: 81:21:56:dc:3c:a4:63:3b:0d:24:78:c0:3b:6a:01:57:00:bd: c3:46:cd:1c:bd:62:9e:85:cb:41:d7:67:af:07:0a:85:ab:68: 73:6c:0d:e6:dc:12:2c:ce:e3:d9:90:52:38:cf:63:ab:0d:e0: 1e:11:12:85:57:41:89:02:7a:fb:a9:44:9c:00:2c:8d:3e:64: 19:44:2c:2d:e4:ae:ee:13:24:6b:2d:e0:c6:47:7b:0a:c3:92: c7:53:38:7f:e6:fd:bb:e4:5e:b7:fd:f9:7a:ad:8f:c6:78:db: e3:9d:f2:58:73:eb:69:04:ed:83:0b:29:ca:bc:44:81:c5:87: e2:71:2c:24:e3:9e:1b:5a:08:13:35:f4:3d:9e:a8:06:b4:ad: 3c:43:86:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBAVB/TBU86CyU5pO4NUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2 ZDAxNTQwHhcNMjUxMjIzMjEwMTA3WhcNMjUxMjI0MjEwMTA3WjAzMTEwLwYDVQQD EygwYmI4OTJjOTNlMTQ4ODU0ZDRiZmFkNzBjZTUzOWExZDQyZGIwMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zuxHatAqs4k7mqX6bCHogpI9Npv ostb4eE3QLYOY4RJEbIyltyrWhhoI2JVmpMMONi/oPCC9ZZ2z8WvPPLXxbFcMOtu 6FTOKosGxuO2YyJFJjw6oBfiKlRgBcTKEb9i73XDpQ0Th9buBmgSw1gBBYUv+4i6 y7KPOM8RWjj9E2xoul1jgM66ogJLMLHW2UujpKbBpsia/amKNAC8SyPDsNKHPheQ WtVbfDalC8wiGd+t6/r7lEoElKKbFEKng6WRJLmrCFcq9oaGbPAiwgLjbIlZNWK/ fCQh/OmKuKmF0wqStE8OdMxg9pnl+XZVKHokQvK4MC3TiBnzaSm66DuRgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu4ksk+FIhU1L+tcM5Tmh1C2wDHMB8GA1UdIwQY MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt OWJlODY5YTljNjBjLzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1C+KwRM W7EkJcE2e9USO6xCgSljRFVRhroSvu5F1vv/yaW06PoEI13zdOKnt2JqDjGEfJvk NNXi2dMgRDTVgsZ20xIfj12crY044V9XZNnQg3nmEzSn9BXrwIl8qzM2PMwCfC8R HqpIw8+hgSFW3DykYzsNJHjAO2oBVwC9w0bNHL1inoXLQddnrwcKhatoc2wN5twS LM7j2ZBSOM9jqw3gHhEShVdBiQJ6+6lEnAAsjT5kGUQsLeSu7hMkay3gxkd7CsOS x1M4f+b9u+Ret/35eq2Pxnjb453yWHPraQTtgwspyrxEgcWH4nEsJOOeG1oIEzX0 PZ6oBrStPEOG4g== -----END CERTIFICATE-----Generated at Wed Dec 24 04:44:57 2025 by rpki-client