This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: BVlFzdjdx/koFZbUHtkEi0MMObNFLkNj0sWK+g41OK8= Subject key identifier: 47:FE:20:C3:14:1A:DE:76:18:6D:F9:95:66:21:DB:E2:BE:03:D2:CB Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B3CB537E4B573217D7268BF1A59121370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 17A6 Signing time: Sat 20 Dec 2025 17:01:07 +0000 Manifest this update: Sat 20 Dec 2025 17:01:07 +0000 Manifest next update: Sun 21 Dec 2025 17:01:07 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7j_ch2cw442vemOdRIma11J6gJw.roa (hash: Erq8kxzKAC0Tg/CUgTpWDzbQlg/Dbixo8FzbYGdYTlQ=) 3: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 4: 8lbXgpG9f5Z_Hvq4s1hYkuX3AVI.roa (hash: bPhNihBfa09eCO+dgLREm/kYsuM471Qzs/mEmVKGQwc=) 5: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 6: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 7: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: r+xp9/ommtQ6N9fGtN0FnbGIAJ4HOL6UD0tZ1nyxEqQ=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:37:e4:b5:73:21:7d:72:68:bf:1a:59:12:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Dec 20 17:01:07 2025 GMT Not After : Dec 21 17:01:07 2025 GMT Subject: CN=47fe20c3141ade76186df9956621dbe2be03d2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:11:ba:ad:d3:c0:ee:f8:f9:b7:1a:52:fd: 23:1b:db:31:80:2f:56:16:f1:1e:d6:19:5b:64:69: 79:c6:71:f9:92:3c:89:d9:ea:7e:5f:dc:db:9a:45: 80:1e:d6:03:32:93:4a:97:b1:70:ac:33:8c:38:61: 6c:69:31:a5:3c:ed:d8:15:a6:4e:98:dd:60:8e:4b: cc:ef:e0:bb:e1:fa:07:6f:32:db:4f:52:20:4e:49: 94:6c:39:bf:c1:15:d3:6c:c3:aa:e2:b9:72:ed:cc: d7:58:68:f6:b9:52:8a:8e:d3:09:bb:e2:9d:2c:62: 7f:51:2a:1e:1a:4f:33:ff:56:e5:53:c6:22:de:fe: 55:b4:6f:ce:62:f7:66:c5:34:66:c6:33:11:31:1f: 4d:01:62:49:27:62:01:d2:e6:74:68:83:a2:cd:09: 84:d8:ee:90:a0:8f:a2:55:05:44:8d:35:a1:af:48: 9b:ef:10:bc:c7:13:bd:09:cf:41:c6:bd:8e:3b:d1: cd:46:99:5b:e3:ea:96:50:e0:bf:c1:90:28:9b:56: d0:a0:f9:fb:3f:67:f1:da:6c:cd:8e:39:fd:d2:2f: a5:1d:c4:fd:04:1c:12:f5:68:f3:17:d4:0c:55:d0: 1d:60:18:b8:54:36:2c:37:84:b7:a9:5e:c7:f1:52: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FE:20:C3:14:1A:DE:76:18:6D:F9:95:66:21:DB:E2:BE:03:D2:CB X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:57:73:54:42:b2:f7:d6:f7:17:70:6d:c9:d9:fb:21:ab: 29:56:bc:69:4a:3d:fa:7d:02:ce:45:70:5c:74:06:2d:1a:8b: bd:b0:06:9f:56:ad:42:8e:dc:c1:0c:da:f4:35:22:86:36:20: 57:6d:39:e3:cf:e2:35:86:bc:81:ee:05:f6:8f:e2:52:c6:c0: 41:c5:40:a9:f3:7e:e1:f0:d1:26:c2:bf:55:4d:b1:37:ff:19: e4:91:10:71:89:72:24:88:a7:4c:d1:0d:dd:9f:17:ab:1d:50: 4f:70:bf:e9:85:85:11:b2:ab:ae:45:64:6a:01:42:af:e9:82: b8:25:f9:1d:dd:4e:91:23:bb:34:e8:f1:c6:10:5e:c7:0d:15: 8f:30:53:19:0d:c4:80:42:2a:15:ff:8a:0f:34:a2:50:54:a4: ea:e2:be:f6:39:34:f3:9e:a5:1f:72:d8:60:11:9e:dc:60:60: 23:d3:c2:5a:5b:9e:92:93:a1:58:48:09:ca:a9:a0:21:9d:e2: 33:2f:3f:a1:e1:e6:24:d1:46:e5:43:50:c2:ab:e5:0a:a3:ee: 0e:00:47:96:b7:e3:08:57:10:10:d1:a0:43:57:40:5e:6f:3d: 45:9a:a6:ee:1e:ce:b8:6c:b9:9d:3d:32:76:fd:cc:e3:56:65: e6:fa:85:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTfktXMhfXJovxpZEhNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUxMjIwMTcwMTA3WhcNMjUxMjIxMTcwMTA3WjAzMTEwLwYDVQQD Eyg0N2ZlMjBjMzE0MWFkZTc2MTg2ZGY5OTU2NjIxZGJlMmJlMDNkMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w8Ruq3TwO74+bcaUv0jG9sxgC9W FvEe1hlbZGl5xnH5kjyJ2ep+X9zbmkWAHtYDMpNKl7FwrDOMOGFsaTGlPO3YFaZO mN1gjkvM7+C74foHbzLbT1IgTkmUbDm/wRXTbMOq4rly7czXWGj2uVKKjtMJu+Kd LGJ/USoeGk8z/1blU8Yi3v5VtG/OYvdmxTRmxjMRMR9NAWJJJ2IB0uZ0aIOizQmE 2O6QoI+iVQVEjTWhr0ib7xC8xxO9Cc9Bxr2OO9HNRplb4+qWUOC/wZAom1bQoPn7 P2fx2mzNjjn90i+lHcT9BBwS9WjzF9QMVdAdYBi4VDYsN4S3qV7H8VIWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf+IMMUGt52GG35lWYh2+K+A9LLMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuNXc1RC svfW9xdwbcnZ+yGrKVa8aUo9+n0CzkVwXHQGLRqLvbAGn1atQo7cwQza9DUihjYg V20548/iNYa8ge4F9o/iUsbAQcVAqfN+4fDRJsK/VU2xN/8Z5JEQcYlyJIinTNEN 3Z8Xqx1QT3C/6YWFEbKrrkVkagFCr+mCuCX5Hd1OkSO7NOjxxhBexw0VjzBTGQ3E gEIqFf+KDzSiUFSk6uK+9jk0856lH3LYYBGe3GBgI9PCWluekpOhWEgJyqmgIZ3i My8/oeHmJNFG5UNQwqvlCqPuDgBHlrfjCFcQENGgQ1dAXm89RZqm7h7OuGy5nT0y dv3M41Zl5vqFLA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:29 2025 by rpki-client