This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json) Hash identifier: MWvhH6S/1SBQ6NBRuunnxJlrL7Yd8C/oR524MgSD+DQ= Subject key identifier: C6:DD:BF:58:F6:15:FD:B9:80:23:A4:E2:0E:31:98:DB:3A:CB:4E:25 Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Certificate serial: 019B44DD1C1E02AC508F0843B71F55E74E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 07:01:39 +0000 Manifest this update: Mon 22 Dec 2025 07:01:39 +0000 Manifest next update: Tue 23 Dec 2025 07:01:39 +0000 Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=) 2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=) 3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=) 4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: yU7HZoGkOPNY9JyT/2hSaa23wA6Bz5JmPEqWfZIExjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:1c:1e:02:ac:50:8f:08:43:b7:1f:55:e7:4e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Validity Not Before: Dec 22 07:01:39 2025 GMT Not After : Dec 23 07:01:39 2025 GMT Subject: CN=c6ddbf58f615fdb98023a4e20e3198db3acb4e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:8f:56:32:2b:d5:d6:a8:b8:c3:80:e3:de: 40:d0:73:e8:82:ad:a7:7d:ae:5a:f0:f4:f7:89:3c: 3c:ca:45:d6:81:33:d7:99:3c:72:f2:37:a8:ca:ac: 7f:bd:ff:7c:06:a3:43:8b:cd:62:d9:58:68:6d:54: d2:7b:f2:57:0e:42:04:3b:b9:3f:56:8c:cd:04:1d: 16:8c:c9:34:10:6d:2e:f2:cc:57:ee:3e:68:18:92: dd:22:2e:36:00:21:aa:99:60:92:0d:a0:b3:2d:49: cb:d7:04:47:1d:28:21:be:59:80:2e:98:7c:c2:85: cf:80:73:d0:d1:75:38:ae:8e:cb:c3:9d:c2:b3:e1: f1:ce:ef:f4:8b:fc:b3:61:db:a4:66:db:3b:18:74: cd:a5:cb:21:54:3e:89:2d:df:e4:67:c7:b7:29:f8: c7:e8:f1:03:1e:8c:b5:f9:d3:d4:a0:b7:3c:ef:79: f1:06:1c:99:aa:6c:e2:97:d8:35:00:85:1b:6e:ea: 15:71:91:5a:7b:11:95:67:35:e1:3f:bd:b8:d4:03: c3:61:eb:0f:e5:d4:8c:0a:7f:18:b6:e2:9f:dd:fe: 17:99:c0:3d:34:b2:8e:e4:6e:c5:4c:6d:4f:52:86: bd:c0:d0:26:33:70:b8:a9:66:70:3f:59:21:98:06: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:BF:58:F6:15:FD:B9:80:23:A4:E2:0E:31:98:DB:3A:CB:4E:25 X509v3 Authority Key Identifier: keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1d:86:88:15:ea:43:37:24:03:ae:60:ce:e2:95:54:06:7f: c2:be:c7:b7:3b:41:3e:dd:88:a3:6f:23:21:e8:58:13:2d:9f: 34:91:92:73:13:29:0b:bd:1c:1d:b8:d5:62:e0:91:8d:69:6a: 47:12:93:f9:a3:86:84:c4:e1:a5:96:4e:35:eb:63:76:84:89: a3:8d:34:44:ea:e3:c3:81:52:1f:9c:e1:9a:a4:4b:89:48:0b: 3d:08:c4:0d:46:b2:ed:0d:2b:9f:95:b7:48:97:f9:cd:8e:0c: e1:a9:3f:b7:4d:b3:4d:9f:ba:5c:d4:3f:06:1e:a6:a9:b7:13: 11:d8:d6:bc:d0:82:20:2b:41:57:90:4d:29:90:4a:6d:ef:23: 5d:50:90:c9:34:2d:dd:de:c6:9c:b9:1c:54:49:81:f3:a8:ab: e7:56:13:17:74:f9:d8:75:bb:2b:b2:e6:28:f7:75:74:87:53: 78:f0:0b:07:38:3b:28:55:99:8e:85:7d:42:ff:82:e5:78:72: 25:a8:1b:3d:d8:c1:5c:f6:45:5a:b8:06:ca:ff:5c:76:eb:02: a5:4f:61:61:ca:ab:0a:f7:d1:80:c6:55:3e:e7:71:75:9a:9a: a4:3c:51:68:02:07:7a:5a:29:02:42:39:4f:db:52:78:89:f6: 95:dc:b8:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3RweAqxQjwhDtx9V5047MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw YTZmZDkwHhcNMjUxMjIyMDcwMTM5WhcNMjUxMjIzMDcwMTM5WjAzMTEwLwYDVQQD EyhjNmRkYmY1OGY2MTVmZGI5ODAyM2E0ZTIwZTMxOThkYjNhY2I0ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk+PVjIr1daouMOA495A0HPogq2n fa5a8PT3iTw8ykXWgTPXmTxy8jeoyqx/vf98BqNDi81i2VhobVTSe/JXDkIEO7k/ VozNBB0WjMk0EG0u8sxX7j5oGJLdIi42ACGqmWCSDaCzLUnL1wRHHSghvlmALph8 woXPgHPQ0XU4ro7Lw53Cs+Hxzu/0i/yzYdukZts7GHTNpcshVD6JLd/kZ8e3KfjH 6PEDHoy1+dPUoLc873nxBhyZqmzil9g1AIUbbuoVcZFaexGVZzXhP7241APDYesP 5dSMCn8YtuKf3f4XmcA9NLKO5G7FTG1PUoa9wNAmM3C4qWZwP1khmAZNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbdv1j2Ff25gCOk4g4xmNs6y04lMB8GA1UdIwQY MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx2GiBXq QzckA65gzuKVVAZ/wr7HtztBPt2Io28jIehYEy2fNJGScxMpC70cHbjVYuCRjWlq RxKT+aOGhMThpZZONetjdoSJo400ROrjw4FSH5zhmqRLiUgLPQjEDUay7Q0rn5W3 SJf5zY4M4ak/t02zTZ+6XNQ/Bh6mqbcTEdjWvNCCICtBV5BNKZBKbe8jXVCQyTQt 3d7GnLkcVEmB86ir51YTF3T52HW7K7LmKPd1dIdTePALBzg7KFWZjoV9Qv+C5Xhy JagbPdjBXPZFWrgGyv9cdusCpU9hYcqrCvfRgMZVPudxdZqapDxRaAIHelopAkI5 T9tSeIn2ldy4hA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:34:05 2025 by rpki-client