This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json) Hash identifier: YP2mQdKSiyrJCQ9mOnidSioMPUFX8fVIhaTiByF5I8o= Subject key identifier: FF:49:9C:B6:2D:53:DE:5C:04:0F:C4:56:D1:36:99:2D:95:87:E7:76 Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019AAC826F0F047A98F77E8D111996E7FE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft Manifest number: 173F Signing time: Sat 22 Nov 2025 17:00:20 +0000 Manifest this update: Sat 22 Nov 2025 17:00:20 +0000 Manifest next update: Sun 23 Nov 2025 17:00:20 +0000 Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=) 2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=) 3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=) 4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: qtek8dv6pOOAxGOMrcC0IyueZ6NLVh49li9vrcJJhso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:6f:0f:04:7a:98:f7:7e:8d:11:19:96:e7:fe:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Nov 22 17:00:20 2025 GMT Not After : Nov 23 17:00:20 2025 GMT Subject: CN=ff499cb62d53de5c040fc456d136992d9587e776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:7f:1a:95:22:b5:7b:3c:23:a8:40:8f:06: 12:b9:55:7b:a8:7f:c9:7e:50:4f:c8:4b:c9:21:97: db:8b:1e:35:1e:52:cf:88:3f:17:4b:95:92:f0:06: 41:19:28:7f:6a:fe:0f:6b:f4:c4:6e:af:5a:f3:24: 18:59:cf:d7:3c:2b:1d:25:6c:3f:28:e1:d3:53:d6: 94:e6:4f:c2:0b:fa:5a:7b:3b:89:ea:64:37:33:98: 3b:c4:02:e3:28:61:06:2d:f5:fa:62:b9:68:eb:b3: d5:3f:79:4c:a4:b8:27:5c:22:fb:d8:44:81:e7:61: 60:76:50:13:41:34:06:f0:5f:08:a8:ac:78:43:e8: 0f:13:da:bb:d3:85:e3:6d:7b:60:34:97:9c:5a:52: 0f:d2:8e:94:d5:43:20:00:24:1b:38:9d:db:d5:52: f6:04:01:e2:f2:98:b6:87:fb:82:e9:73:dd:ee:94: b7:48:ea:d8:10:d0:a9:e7:37:9c:0f:15:2b:d4:08: a1:14:ad:d2:6e:ba:35:cd:c5:77:92:f6:82:63:90: 04:c3:d5:ac:62:8a:ef:43:50:42:48:74:e7:d5:bb: 78:ae:d5:59:d4:5c:23:1b:d1:7a:7d:5e:6e:8e:17: e2:92:81:44:92:75:7b:eb:03:25:e2:73:18:f2:bd: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:9C:B6:2D:53:DE:5C:04:0F:C4:56:D1:36:99:2D:95:87:E7:76 X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:a2:9a:fc:79:8d:32:ae:22:a4:88:d3:d3:5b:59:ca:c9:55: 08:b3:58:fd:7e:b5:83:2b:a6:34:a3:7d:e2:72:bd:81:bd:bf: 22:61:79:47:92:75:7b:ae:95:a3:4c:a8:b2:3a:65:31:ef:02: c0:7a:c7:50:f2:d1:02:15:f0:c8:20:ec:8d:06:4d:08:0c:63: 61:51:bf:b6:60:29:e1:df:54:8c:8b:78:ca:60:ac:44:db:48: 25:84:75:8c:e4:c3:79:9f:c8:3f:74:f6:a2:fd:07:7d:65:94: a3:66:97:b7:0b:63:cc:f0:98:40:8f:e9:15:42:55:79:82:0d: ec:62:81:c2:88:40:8d:38:18:b9:a9:7c:a7:4a:f5:f8:c9:a6: 49:ec:10:4a:bb:1f:ef:b0:13:e2:4c:f4:46:ff:14:64:ad:cd: f8:74:e7:3f:64:7b:5f:06:63:b7:ea:1d:c4:02:30:c1:b7:80: d7:24:73:7e:8c:5f:68:fc:ee:a4:1f:3d:5c:a4:fc:9f:cb:23: 06:e7:79:fc:0b:94:f7:6a:f0:f3:b9:54:bd:36:30:de:26:8f: cb:89:98:0b:c3:e0:0f:be:21:82:4f:e9:35:aa:5b:3a:51:12: 0d:40:86:05:05:0a:5c:7f:64:6a:97:e7:23:f6:1f:90:2d:21: ef:d9:da:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgm8PBHqY936NERmW5/5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjUxMTIyMTcwMDIwWhcNMjUxMTIzMTcwMDIwWjAzMTEwLwYDVQQD EyhmZjQ5OWNiNjJkNTNkZTVjMDQwZmM0NTZkMTM2OTkyZDk1ODdlNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25N/GpUitXs8I6hAjwYSuVV7qH/J flBPyEvJIZfbix41HlLPiD8XS5WS8AZBGSh/av4Pa/TEbq9a8yQYWc/XPCsdJWw/ KOHTU9aU5k/CC/paezuJ6mQ3M5g7xALjKGEGLfX6Yrlo67PVP3lMpLgnXCL72ESB 52FgdlATQTQG8F8IqKx4Q+gPE9q704XjbXtgNJecWlIP0o6U1UMgACQbOJ3b1VL2 BAHi8pi2h/uC6XPd7pS3SOrYENCp5zecDxUr1AihFK3Sbro1zcV3kvaCY5AEw9Ws YorvQ1BCSHTn1bt4rtVZ1FwjG9F6fV5ujhfikoFEknV76wMl4nMY8r0eSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9JnLYtU95cBA/EVtE2mS2Vh+d2MB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16Ka/HmN Mq4ipIjT01tZyslVCLNY/X61gyumNKN94nK9gb2/ImF5R5J1e66Vo0yosjplMe8C wHrHUPLRAhXwyCDsjQZNCAxjYVG/tmAp4d9UjIt4ymCsRNtIJYR1jOTDeZ/IP3T2 ov0HfWWUo2aXtwtjzPCYQI/pFUJVeYIN7GKBwohAjTgYual8p0r1+MmmSewQSrsf 77AT4kz0Rv8UZK3N+HTnP2R7XwZjt+odxAIwwbeA1yRzfoxfaPzupB89XKT8n8sj Bud5/AuU92rw87lUvTYw3iaPy4mYC8PgD74hgk/pNapbOlESDUCGBQUKXH9kapfn I/YfkC0h79naGA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:03 2025 by rpki-client