This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json) Hash identifier: sZBpFGN+EGlmanfNVms85AeVuDcJoo5PU+g7bhxHO/U= Subject key identifier: E1:4C:D0:75:F6:EB:55:97:19:E5:C6:26:88:45:72:29:AD:F2:E3:CD Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Certificate serial: 019B3B351D2B1D22E6044350A8C2B7841EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 10:01:35 +0000 Manifest this update: Sat 20 Dec 2025 10:01:35 +0000 Manifest next update: Sun 21 Dec 2025 10:01:35 +0000 Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=) 2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=) 3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=) 4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: /Qm9mEPt7mafp9Q3SPDVrqg9XlHoGhrmqXTEUK1x70A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:1d:2b:1d:22:e6:04:43:50:a8:c2:b7:84:1e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9 Validity Not Before: Dec 20 10:01:35 2025 GMT Not After : Dec 21 10:01:35 2025 GMT Subject: CN=e14cd075f6eb559719e5c62688457229adf2e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:7e:a2:04:c0:0a:51:3b:00:a4:9d:16:18: 93:13:68:9a:34:20:78:a8:e2:1a:da:23:7c:2e:3f: 05:25:76:8d:f2:27:46:e5:8c:6c:c2:a7:c0:71:8c: db:f4:2c:f8:94:f3:70:8c:c8:ec:26:59:08:7c:aa: 3a:c9:b1:f5:68:b3:e7:6f:82:64:b4:c8:78:a9:58: d6:98:8f:ab:f8:46:b7:af:83:4a:06:df:93:ba:d7: b5:8c:6e:77:5d:2f:b9:ee:24:62:25:e4:9d:8e:c6: 52:b7:2f:8b:76:99:39:e4:a5:dd:3d:8e:6d:9a:68: db:e6:40:aa:79:40:88:d4:28:d3:a4:a2:77:8b:32: f1:de:29:d5:8b:54:90:bd:ea:f0:3c:4e:47:4d:8c: fb:62:ed:72:b2:c5:dd:b1:8f:6f:f5:85:c3:16:4a: 80:73:a8:76:67:84:35:b9:17:16:b1:4a:5b:86:43: 57:4e:7e:05:82:5d:46:e2:01:60:2b:2b:16:5d:c6: 54:a0:5e:35:c9:e3:51:80:68:fc:2b:55:f0:e1:b4: ec:5e:29:0c:e3:5f:4c:a4:21:53:41:37:38:f5:b4: c1:ef:b1:a8:31:96:53:89:b7:de:b9:37:99:c3:66: 31:1a:d8:d1:61:85:27:b2:bf:56:3a:86:88:f7:57: ac:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:D0:75:F6:EB:55:97:19:E5:C6:26:88:45:72:29:AD:F2:E3:CD X509v3 Authority Key Identifier: keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:db:fd:eb:ff:2f:76:19:c4:59:72:94:c2:30:99:6b:f5:0c: cb:da:4d:b4:42:c8:ea:57:33:fd:a1:88:e6:b1:50:25:b0:bd: 1e:5f:12:75:cd:48:f5:1a:32:2c:d2:09:8d:48:24:e0:23:b8: 00:26:5d:c3:1b:9c:58:ff:92:d6:a1:e5:37:05:79:eb:f7:2f: 2e:58:a1:69:38:d8:2f:f1:39:5f:4a:d5:c9:b2:7d:68:e8:82: 1a:25:15:08:23:0d:8b:db:ce:79:84:00:ce:c3:be:85:c0:f3: 7a:45:18:84:45:c8:61:6e:79:cd:2a:38:ee:74:0d:fd:c4:bd: d7:d0:59:c9:f1:8b:da:29:60:a0:e4:e5:8e:ed:60:d0:64:b8: 10:28:a2:74:ca:65:55:da:3c:79:53:0a:c4:45:78:de:05:6d: 84:ea:87:3a:d8:3a:fe:64:98:ea:14:31:03:24:0c:9b:94:ec: 14:f3:73:7c:56:e6:ed:3a:91:7b:27:5f:15:a3:7d:fb:39:5b: 02:63:d0:a6:50:08:6e:32:41:72:6e:b6:29:d7:3a:ef:16:17: 8f:ed:10:7d:e5:1e:37:06:aa:d2:d5:e1:9e:12:4c:2a:d1:c0: ae:31:6b:2c:7a:61:d5:93:94:e2:1a:cd:42:b6:fd:28:4d:6a: 31:48:1e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NR0rHSLmBENQqMK3hB7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw YTZmZDkwHhcNMjUxMjIwMTAwMTM1WhcNMjUxMjIxMTAwMTM1WjAzMTEwLwYDVQQD EyhlMTRjZDA3NWY2ZWI1NTk3MTllNWM2MjY4ODQ1NzIyOWFkZjJlM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQN+ogTAClE7AKSdFhiTE2iaNCB4 qOIa2iN8Lj8FJXaN8idG5YxswqfAcYzb9Cz4lPNwjMjsJlkIfKo6ybH1aLPnb4Jk tMh4qVjWmI+r+Ea3r4NKBt+Tute1jG53XS+57iRiJeSdjsZSty+Ldpk55KXdPY5t mmjb5kCqeUCI1CjTpKJ3izLx3inVi1SQverwPE5HTYz7Yu1yssXdsY9v9YXDFkqA c6h2Z4Q1uRcWsUpbhkNXTn4Fgl1G4gFgKysWXcZUoF41yeNRgGj8K1Xw4bTsXikM 419MpCFTQTc49bTB77GoMZZTibfeuTeZw2YxGtjRYYUnsr9WOoaI91esuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFM0HX261WXGeXGJohFcimt8uPNMB8GA1UdIwQY MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9v96/8v dhnEWXKUwjCZa/UMy9pNtELI6lcz/aGI5rFQJbC9Hl8Sdc1I9RoyLNIJjUgk4CO4 ACZdwxucWP+S1qHlNwV56/cvLlihaTjYL/E5X0rVybJ9aOiCGiUVCCMNi9vOeYQA zsO+hcDzekUYhEXIYW55zSo47nQN/cS919BZyfGL2ilgoOTlju1g0GS4ECiidMpl Vdo8eVMKxEV43gVthOqHOtg6/mSY6hQxAyQMm5TsFPNzfFbm7TqReydfFaN9+zlb AmPQplAIbjJBcm62Kdc67xYXj+0QfeUeNwaq0tXhnhJMKtHArjFrLHph1ZOU4hrN Qrb9KE1qMUgeJw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:02:51 2025 by rpki-client