This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json) Hash identifier: DeuaYVngIWuyi38XB6PbHp5XhfIzX84il44ddv3K+Ho= Subject key identifier: FC:69:68:A3:A0:1B:F6:D3:84:9E:C9:FC:3C:5B:B0:D4:1E:07:FE:36 Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019B38A2F9AE1AE31A01AEE59BF6B52A651D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft Manifest number: 1566 Signing time: Fri 19 Dec 2025 22:02:43 +0000 Manifest this update: Fri 19 Dec 2025 22:02:43 +0000 Manifest next update: Sat 20 Dec 2025 22:02:43 +0000 Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=) 2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=) 3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=) 4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: XTr9/ErJkFG20fgYfm5SV6QeM9yTs52ETkMwjIcp69E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:f9:ae:1a:e3:1a:01:ae:e5:9b:f6:b5:2a:65:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Dec 19 22:02:43 2025 GMT Not After : Dec 20 22:02:43 2025 GMT Subject: CN=fc6968a3a01bf6d3849ec9fc3c5bb0d41e07fe36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:cb:13:c2:47:ed:d7:9b:b5:5c:ed:a4:f5: 73:90:55:ef:a4:40:3c:ad:f6:9c:c9:97:5a:6c:56: 10:5f:9f:0a:28:35:68:9e:8d:ed:4f:0c:b7:e8:31: ab:e6:2c:c6:08:64:f7:d8:cb:ee:93:a7:43:e1:8e: e5:af:e9:17:43:ea:69:78:7f:6b:7a:7d:01:68:9e: ad:86:8b:14:a3:91:f6:9d:ac:d4:c7:36:71:37:22: be:15:53:5b:c5:8d:16:08:6f:bf:41:22:da:db:a2: 0e:b4:a6:ae:de:55:26:1e:bc:41:30:17:54:35:de: 09:c2:6f:2a:48:8b:6d:e4:c9:af:ad:bf:70:09:da: fc:ff:44:db:20:4b:d8:4a:7d:bc:51:63:2d:cc:92: ea:f7:9b:9c:8a:be:ac:d5:0b:d8:06:fd:18:1f:98: 40:7a:32:29:53:22:77:e8:fe:7e:3b:31:58:bf:8d: e7:94:27:03:85:3e:e9:1e:42:d4:14:92:28:19:2a: bd:57:30:49:ba:ca:12:b5:48:f6:de:39:41:16:9e: 01:04:9f:c5:95:b0:72:1c:17:27:ee:2f:fc:b5:72: 03:21:1b:38:29:af:8c:c4:ea:b6:43:36:f6:63:36: 43:7c:14:a6:79:04:49:0b:8c:28:d1:ea:69:64:83: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:69:68:A3:A0:1B:F6:D3:84:9E:C9:FC:3C:5B:B0:D4:1E:07:FE:36 X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:39:bc:ad:33:8c:b4:3d:c5:46:0e:43:ba:65:ed:3e:1c:b0: 52:d2:00:ef:bf:26:c1:ac:99:c5:2c:33:be:51:4c:cc:bb:f7: f7:1c:b9:6e:fe:49:94:d2:c7:ff:28:2b:e8:50:4b:f7:fa:f7: b2:81:26:d2:46:01:5a:5d:d8:1e:3a:4a:c1:52:9d:45:0b:66: 84:aa:0e:b0:48:80:e4:34:42:c7:4b:85:68:36:b1:03:62:d9: c4:21:82:66:95:e0:3e:23:08:9c:ba:c6:62:a8:2e:8e:38:f6: 17:72:88:b3:7d:c7:56:f8:4b:27:cc:2c:e5:9b:f2:9d:91:e2: 5d:5d:01:52:cf:3d:6d:5e:50:1b:5b:5b:0a:20:19:51:10:c9: 8f:a5:25:af:eb:18:70:b7:6f:93:57:9c:df:3d:55:4d:68:52: a0:27:98:0c:2b:04:a1:83:70:3a:53:25:29:9c:d1:44:42:16: 15:42:57:30:e0:b9:2a:ff:0a:18:c1:3d:ba:b7:89:33:d5:04: 64:ca:5f:dd:3b:cc:ff:e9:38:f3:4f:4b:d4:6f:cf:81:34:4d: dd:e6:e3:5c:85:15:7d:f9:77:09:7c:4e:8e:c8:5d:bf:f1:64: ae:2f:7a:5c:c6:c0:b3:cc:3f:db:1f:6c:fe:76:7c:e7:ce:99: 0d:d3:1c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ovmuGuMaAa7lm/a1KmUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjUxMjE5MjIwMjQzWhcNMjUxMjIwMjIwMjQzWjAzMTEwLwYDVQQD EyhmYzY5NjhhM2EwMWJmNmQzODQ5ZWM5ZmMzYzViYjBkNDFlMDdmZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHXLE8JH7debtVztpPVzkFXvpEA8 rfacyZdabFYQX58KKDVono3tTwy36DGr5izGCGT32Mvuk6dD4Y7lr+kXQ+ppeH9r en0BaJ6thosUo5H2nazUxzZxNyK+FVNbxY0WCG+/QSLa26IOtKau3lUmHrxBMBdU Nd4Jwm8qSItt5Mmvrb9wCdr8/0TbIEvYSn28UWMtzJLq95ucir6s1QvYBv0YH5hA ejIpUyJ36P5+OzFYv43nlCcDhT7pHkLUFJIoGSq9VzBJusoStUj23jlBFp4BBJ/F lbByHBcn7i/8tXIDIRs4Ka+MxOq2Qzb2YzZDfBSmeQRJC4wo0eppZINGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxpaKOgG/bThJ7J/DxbsNQeB/42MB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjm8rTOM tD3FRg5DumXtPhywUtIA778mwayZxSwzvlFMzLv39xy5bv5JlNLH/ygr6FBL9/r3 soEm0kYBWl3YHjpKwVKdRQtmhKoOsEiA5DRCx0uFaDaxA2LZxCGCZpXgPiMInLrG Yqgujjj2F3KIs33HVvhLJ8ws5ZvynZHiXV0BUs89bV5QG1tbCiAZURDJj6Ulr+sY cLdvk1ec3z1VTWhSoCeYDCsEoYNwOlMlKZzRREIWFUJXMOC5Kv8KGME9ureJM9UE ZMpf3TvM/+k4809L1G/PgTRN3ebjXIUVffl3CXxOjshdv/Fkri96XMbAs8w/2x9s /nZ8586ZDdMcXg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:20:20 2025 by rpki-client