This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json) Hash identifier: kjFrxLKSsbGzDdTEmVq/dSRNTYaMEJjftoepfphuXs8= Subject key identifier: A9:F1:EE:A9:50:A2:CF:CD:BC:73:FE:50:FF:09:D7:A2:E8:0E:23:C3 Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Certificate serial: 019B0E92B47A57EAF2014659F0B3012E9609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 18:00:54 +0000 Manifest this update: Thu 11 Dec 2025 18:00:54 +0000 Manifest next update: Fri 12 Dec 2025 18:00:54 +0000 Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=) 2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: wq8S0vEnFvyO3YKbbRp87qFXzx1/ajSEt4UHP30YZrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:b4:7a:57:ea:f2:01:46:59:f0:b3:01:2e:96:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244 Validity Not Before: Dec 11 18:00:54 2025 GMT Not After : Dec 12 18:00:54 2025 GMT Subject: CN=a9f1eea950a2cfcdbc73fe50ff09d7a2e80e23c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:21:81:88:14:f1:84:b8:80:f7:24:56:96: be:65:66:fe:d8:0a:85:9d:38:d9:19:78:63:24:a6: 5b:3c:4d:43:99:1e:11:8b:c3:6a:77:ff:a7:3c:d7: 96:23:a9:bc:bd:c9:cc:8d:56:56:c7:d1:94:e0:de: 2e:42:a3:d1:e0:de:6a:bb:c5:80:13:8e:e0:a7:f0: 36:e7:37:41:d7:51:6c:a8:50:a5:b8:ea:02:fe:ee: 25:b6:ff:7f:09:c0:f8:38:d2:ae:73:d6:22:2c:b6: da:6d:6a:71:79:96:89:6b:e1:d6:6c:89:9b:69:89: 02:88:09:81:6a:99:2f:27:5c:8b:99:f4:5f:e8:de: 53:3e:7d:7c:52:20:01:48:98:88:9e:95:f4:01:24: ee:cb:7c:67:82:7d:a7:1f:d3:a2:20:e0:db:82:f1: 54:19:3e:8f:ce:60:07:6c:c3:bf:e4:0b:e5:92:01: 14:06:84:59:62:fa:25:f1:21:e9:d3:94:74:07:dd: dc:f2:b2:0f:85:14:22:8c:b6:ce:8f:a5:65:81:da: 22:bf:90:f5:7e:4e:9d:2b:0a:52:6c:18:8c:ac:7e: d7:a3:d3:2d:b2:ca:8d:a8:c6:0d:4c:ab:99:a0:f5: c0:11:01:45:bb:63:03:37:61:f1:c0:dd:ff:77:57: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F1:EE:A9:50:A2:CF:CD:BC:73:FE:50:FF:09:D7:A2:E8:0E:23:C3 X509v3 Authority Key Identifier: keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:06:f6:13:6b:53:c4:83:3a:dd:d0:59:a2:7b:15:fc:b9:91: fc:5d:51:fe:e5:20:14:5e:d1:5a:8b:67:83:be:c3:33:da:57: 14:e4:31:98:b9:f2:80:e6:f2:72:a4:2f:de:7e:30:e6:4d:70: bf:e6:39:9c:1b:c0:c9:3d:26:f1:11:33:b4:aa:40:74:2d:af: cb:77:21:4b:fd:c5:72:87:59:27:3f:3e:51:bc:79:dc:69:ff: 6b:99:66:84:9d:11:f1:db:dc:8f:42:b2:1e:61:0f:9f:4c:86: 52:4a:ed:d6:fc:78:db:be:b0:09:5a:68:7d:b9:d0:fb:64:ae: aa:fc:5a:e3:5d:1c:bf:66:df:5f:fb:05:08:9c:45:ff:27:81: 61:57:8c:d3:13:3e:08:dc:79:c9:ce:4a:c0:59:1a:fc:fc:db: 38:5f:0b:62:38:b5:6c:1f:e5:05:32:a4:d3:71:7e:89:50:40: 15:dc:8e:4f:d0:39:8f:3b:da:03:4d:dd:4e:bd:62:0a:2a:4e: ff:00:69:e0:12:7d:d0:bb:db:d2:c2:19:3b:ed:84:c4:55:c9: 5c:f4:e9:29:87:7d:7f:47:fe:3c:09:01:a5:7c:45:f0:ce:46: bb:9d:40:2b:86:5a:18:29:9c:18:17:ce:fe:b9:dc:b6:46:48: f5:96:22:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkrR6V+ryAUZZ8LMBLpYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm OGIyNDQwHhcNMjUxMjExMTgwMDU0WhcNMjUxMjEyMTgwMDU0WjAzMTEwLwYDVQQD EyhhOWYxZWVhOTUwYTJjZmNkYmM3M2ZlNTBmZjA5ZDdhMmU4MGUyM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MhgYgU8YS4gPckVpa+ZWb+2AqF nTjZGXhjJKZbPE1DmR4Ri8Nqd/+nPNeWI6m8vcnMjVZWx9GU4N4uQqPR4N5qu8WA E47gp/A25zdB11FsqFCluOoC/u4ltv9/CcD4ONKuc9YiLLbabWpxeZaJa+HWbImb aYkCiAmBapkvJ1yLmfRf6N5TPn18UiABSJiInpX0ASTuy3xngn2nH9OiIODbgvFU GT6PzmAHbMO/5AvlkgEUBoRZYvol8SHp05R0B93c8rIPhRQijLbOj6Vlgdoiv5D1 fk6dKwpSbBiMrH7Xo9MtssqNqMYNTKuZoPXAEQFFu2MDN2HxwN3/d1c//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnx7qlQos/NvHP+UP8J16LoDiPDMB8GA1UdIwQY MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2 LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAb2E2tT xIM63dBZonsV/LmR/F1R/uUgFF7RWotng77DM9pXFOQxmLnygObycqQv3n4w5k1w v+Y5nBvAyT0m8REztKpAdC2vy3chS/3FcodZJz8+Ubx53Gn/a5lmhJ0R8dvcj0Ky HmEPn0yGUkrt1vx4276wCVpofbnQ+2Suqvxa410cv2bfX/sFCJxF/yeBYVeM0xM+ CNx5yc5KwFka/PzbOF8LYji1bB/lBTKk03F+iVBAFdyOT9A5jzvaA03dTr1iCipO /wBp4BJ90Lvb0sIZO+2ExFXJXPTpKYd9f0f+PAkBpXxF8M5Gu51AK4ZaGCmcGBfO /rnctkZI9ZYi3w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:10 2025 by rpki-client