This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json) Hash identifier: P9yAehMODHus7J+RAb8gwb05B6cwg5ooUZrZCGpNORQ= Subject key identifier: 3A:C0:34:70:E6:29:5B:1A:C1:A6:43:85:70:FD:FB:B4:B4:07:95:F4 Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Certificate serial: 019B3AFD6A2FFA1ED1B30AF1F09EC23DD407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 09:00:44 +0000 Manifest this update: Sat 20 Dec 2025 09:00:44 +0000 Manifest next update: Sun 21 Dec 2025 09:00:44 +0000 Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=) 2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: Cejy+eGwMYsDH6+wPBX1Gcp20l0LVZTJeMAulpvUSBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:6a:2f:fa:1e:d1:b3:0a:f1:f0:9e:c2:3d:d4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Validity Not Before: Dec 20 09:00:44 2025 GMT Not After : Dec 21 09:00:44 2025 GMT Subject: CN=3ac03470e6295b1ac1a6438570fdfbb4b40795f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:81:58:f8:72:71:c6:76:29:6c:0a:da:0c: ca:ef:8e:d3:e1:c0:20:d4:e1:01:d7:fd:8e:b5:ef: 3d:cf:b3:5a:e7:23:0a:cb:e6:6d:e7:6b:87:f2:c0: 43:be:6b:32:0e:db:c1:35:d3:73:70:41:7c:35:11: 38:da:67:d0:82:54:51:c3:a9:61:4e:d5:32:7a:96: d2:2c:40:b0:43:7c:5c:5e:b5:b5:81:a5:ba:1c:d8: cf:ff:30:93:8f:a6:57:12:29:87:60:b0:b6:49:10: ab:58:a4:58:52:77:6b:7b:2e:b5:0f:b8:d9:93:e9: 14:88:0e:8c:60:9e:ce:e1:80:bd:23:0d:19:5d:c9: 33:aa:f6:44:cb:64:24:b2:a8:3a:ea:8d:18:a4:b3: 10:90:a2:74:ea:db:0a:6f:16:65:73:f6:f5:ce:91: cc:26:30:c1:c9:f8:0d:a5:38:ad:f5:ae:87:b8:2b: 98:15:17:c4:f2:17:1d:3e:b2:a6:15:ad:da:b5:78: a4:53:bd:81:db:b0:b4:5c:7b:36:cf:fd:c6:0e:e9: 99:90:e8:95:1e:82:ce:f6:89:63:f3:a3:cd:99:a3: 97:12:02:44:8a:12:1c:5a:d6:3b:01:7c:84:89:24: 24:72:d2:23:a2:0c:bf:8e:c9:3c:47:4b:9d:de:85: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C0:34:70:E6:29:5B:1A:C1:A6:43:85:70:FD:FB:B4:B4:07:95:F4 X509v3 Authority Key Identifier: keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d2:5f:1b:c7:83:74:6a:a9:6f:da:19:48:c2:b8:e8:7d:8a: e0:fd:63:80:0e:0c:70:6b:a4:25:c9:06:9a:8f:be:52:5b:47: 13:6f:81:fd:02:4a:62:c6:00:e6:d4:d4:55:e3:fd:a8:0a:bd: 2d:dc:77:b3:d1:bd:97:34:9e:64:5c:ef:db:b1:61:82:55:30: 29:e0:eb:37:81:43:a1:5c:c0:40:71:5c:c2:88:9c:c0:36:73: 12:e7:3b:39:eb:27:65:84:d5:2f:c5:ba:4b:33:6b:eb:8c:dc: 8c:b9:a0:d2:03:6e:63:1b:b9:31:f0:86:7f:51:1b:22:c5:80: 66:d5:1b:a7:e5:76:10:0f:e2:a7:c1:92:1f:ac:46:6b:69:01: 29:06:1d:7e:08:dd:eb:46:5f:c6:93:1a:4e:23:98:28:4b:ce: cd:d1:4a:e0:8c:47:91:43:61:cd:94:4d:67:05:f1:2a:6d:6e: d2:b7:62:da:f6:1c:a8:01:5d:f7:c9:8a:91:e4:0f:19:50:a7: 62:5c:e5:f4:1a:76:a0:f8:2a:7d:30:a7:e1:9b:59:e0:5c:52: f4:c4:39:2e:92:2e:ff:15:5e:b7:01:58:34:91:e9:8c:a2:73: 85:ad:a4:c7:b0:22:54:e4:7c:7d:d3:60:90:ba:b1:5a:0d:8d: 96:0a:a4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Wov+h7Rswrx8J7CPdQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm OGIyNDQwHhcNMjUxMjIwMDkwMDQ0WhcNMjUxMjIxMDkwMDQ0WjAzMTEwLwYDVQQD EygzYWMwMzQ3MGU2Mjk1YjFhYzFhNjQzODU3MGZkZmJiNGI0MDc5NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptSBWPhyccZ2KWwK2gzK747T4cAg 1OEB1/2Ote89z7Na5yMKy+Zt52uH8sBDvmsyDtvBNdNzcEF8NRE42mfQglRRw6lh TtUyepbSLECwQ3xcXrW1gaW6HNjP/zCTj6ZXEimHYLC2SRCrWKRYUndrey61D7jZ k+kUiA6MYJ7O4YC9Iw0ZXckzqvZEy2Qksqg66o0YpLMQkKJ06tsKbxZlc/b1zpHM JjDByfgNpTit9a6HuCuYFRfE8hcdPrKmFa3atXikU72B27C0XHs2z/3GDumZkOiV HoLO9olj86PNmaOXEgJEihIcWtY7AXyEiSQkctIjogy/jsk8R0ud3oXQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrANHDmKVsawaZDhXD9+7S0B5X0MB8GA1UdIwQY MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2 LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9JfG8eD dGqpb9oZSMK46H2K4P1jgA4McGukJckGmo++UltHE2+B/QJKYsYA5tTUVeP9qAq9 Ldx3s9G9lzSeZFzv27FhglUwKeDrN4FDoVzAQHFcwoicwDZzEuc7OesnZYTVL8W6 SzNr64zcjLmg0gNuYxu5MfCGf1EbIsWAZtUbp+V2EA/ip8GSH6xGa2kBKQYdfgjd 60ZfxpMaTiOYKEvOzdFK4IxHkUNhzZRNZwXxKm1u0rdi2vYcqAFd98mKkeQPGVCn Ylzl9Bp2oPgqfTCn4ZtZ4FxS9MQ5LpIu/xVetwFYNJHpjKJzha2kx7AiVOR8fdNg kLqxWg2Nlgqkdg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:41 2025 by rpki-client