This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: KwwafEtSzD8/cj4tKTL38GE7qnNgz61gNqW2SyiWTPg= Subject key identifier: F0:81:5F:5F:53:82:71:1B:DC:16:32:98:0F:DC:D0:7E:27:57:65:A5 Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019B1A600598863D7C0D2CF4E0B07786EB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 0370 Signing time: Sun 14 Dec 2025 01:00:58 +0000 Manifest this update: Sun 14 Dec 2025 01:00:58 +0000 Manifest next update: Mon 15 Dec 2025 01:00:58 +0000 Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: 6Tk+UuPLRwce//mCqRxITGCNpnH9um8zlV/w++a5B/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:05:98:86:3d:7c:0d:2c:f4:e0:b0:77:86:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Dec 14 01:00:58 2025 GMT Not After : Dec 15 01:00:58 2025 GMT Subject: CN=f0815f5f5382711bdc1632980fdcd07e275765a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:72:b9:21:4c:3f:1c:b4:74:89:af:09:a7: 63:e6:8b:79:69:24:d5:02:2c:85:2b:55:80:8a:76: e6:8c:82:8d:a5:1d:02:58:b5:9a:cb:05:03:7b:58: 07:7a:bb:df:92:87:d2:cd:e9:ba:d7:e6:bb:80:f4: da:b9:6a:f0:06:39:3b:99:d8:46:7f:13:ff:80:b3: 6c:e5:c3:de:c2:95:03:7c:2e:0b:93:e4:9d:f3:5e: 5f:a9:ac:8b:20:9b:7e:ea:75:1b:e6:ac:29:0f:5e: a1:33:93:86:8f:18:74:19:f6:a3:ad:48:5a:c1:72: e1:c0:70:ca:94:07:d5:fe:12:01:79:ce:c8:0f:e5: 9a:af:cd:97:8f:4d:6c:cf:65:0d:fe:06:a8:1b:c4: cd:b8:e7:85:25:15:5f:dc:a5:aa:57:82:81:84:2e: ca:54:d2:57:80:59:21:5e:ca:40:6c:1c:c9:f2:f5: 68:cf:0d:c2:40:5f:f9:f8:b5:77:df:04:d9:26:da: 40:2e:2f:57:fc:e5:61:5a:11:d1:03:36:76:b1:83: 93:64:1c:72:ef:f8:f2:18:87:65:24:b1:77:90:7e: 33:3f:54:e8:bb:a7:82:64:d9:3a:29:f1:64:7d:09: d3:7b:93:02:a7:3f:30:9d:97:76:08:32:52:49:01: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:5F:5F:53:82:71:1B:DC:16:32:98:0F:DC:D0:7E:27:57:65:A5 X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:d8:d3:6e:e6:a8:ad:37:ed:54:e3:79:a4:43:4a:44:6f: 0a:e8:5a:94:d4:87:d5:8c:b4:7f:3b:e9:0b:77:e5:79:cd:cb: 0d:65:94:3f:73:64:94:8d:28:cb:5e:35:39:bf:d1:c8:b7:95: 2c:e8:00:f1:54:f2:52:6c:81:a4:7e:b6:bb:e8:cc:ee:3a:72: b4:d5:5f:ec:85:fb:45:02:30:1c:07:76:ba:a7:1f:0e:b1:9f: 8f:35:63:84:68:f3:f9:fe:b8:39:89:a2:ed:92:1a:cb:b8:b5: b6:b8:fa:dc:15:75:27:db:37:22:0e:24:8c:57:53:b7:ac:a5: ca:94:f0:35:3f:f2:5c:a5:a1:5b:80:77:5d:c4:83:a4:07:ba: 06:77:f4:ed:6c:f7:a7:78:9d:e2:4c:a4:14:ea:ae:cd:87:20: e1:2f:c4:b8:03:14:20:61:9b:8e:b5:94:e5:1e:aa:85:c3:f7: da:28:17:20:36:ce:91:2e:7f:be:e9:90:4f:7a:4e:84:a6:5d: 54:2e:e4:ff:63:ee:31:a3:6e:ad:37:d7:6c:05:85:24:ee:a5: 35:d9:53:2c:ee:1f:3d:1c:a4:1c:64:33:a4:43:f5:83:dd:72: 14:2a:d8:c7:be:ff:d8:ca:2c:b2:d2:4b:41:2f:2e:b2:39:86: 85:e5:03:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYAWYhj18DSz04LB3hus+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjUxMjE0MDEwMDU4WhcNMjUxMjE1MDEwMDU4WjAzMTEwLwYDVQQD EyhmMDgxNWY1ZjUzODI3MTFiZGMxNjMyOTgwZmRjZDA3ZTI3NTc2NWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXNyuSFMPxy0dImvCadj5ot5aSTV AiyFK1WAinbmjIKNpR0CWLWaywUDe1gHervfkofSzem61+a7gPTauWrwBjk7mdhG fxP/gLNs5cPewpUDfC4Lk+Sd815fqayLIJt+6nUb5qwpD16hM5OGjxh0GfajrUha wXLhwHDKlAfV/hIBec7ID+War82Xj01sz2UN/gaoG8TNuOeFJRVf3KWqV4KBhC7K VNJXgFkhXspAbBzJ8vVozw3CQF/5+LV33wTZJtpALi9X/OVhWhHRAzZ2sYOTZBxy 7/jyGIdlJLF3kH4zP1Tou6eCZNk6KfFkfQnTe5MCpz8wnZd2CDJSSQHIQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCBX19TgnEb3BYymA/c0H4nV2WlMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLXY027m qK037VTjeaRDSkRvCuhalNSH1Yy0fzvpC3flec3LDWWUP3NklI0oy141Ob/RyLeV LOgA8VTyUmyBpH62u+jM7jpytNVf7IX7RQIwHAd2uqcfDrGfjzVjhGjz+f64OYmi 7ZIay7i1trj63BV1J9s3Ig4kjFdTt6ylypTwNT/yXKWhW4B3XcSDpAe6Bnf07Wz3 p3id4kykFOquzYcg4S/EuAMUIGGbjrWU5R6qhcP32igXIDbOkS5/vumQT3pOhKZd VC7k/2PuMaNurTfXbAWFJO6lNdlTLO4fPRykHGQzpEP1g91yFCrYx77/2MosstJL QS8usjmGheUDLA== -----END CERTIFICATE-----Generated at Sun Dec 14 05:13:44 2025 by rpki-client