This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json) Hash identifier: JitewfaylK8DxA0wHdwMUanx7j5vRUfwR6PQPMKwRjk= Subject key identifier: E8:03:27:13:B1:25:77:72:14:F9:18:E9:4D:AA:F4:66:42:C9:C7:2C Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a Certificate serial: 019B22F54B8A4C5A205220C80EDC58979151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 17:00:59 +0000 Manifest this update: Mon 15 Dec 2025 17:00:59 +0000 Manifest next update: Tue 16 Dec 2025 17:00:59 +0000 Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=) 2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: ifLtwgjfBXUY6B2Jt42hcWMNZ/BaVkmZcv7QQSEufpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:4b:8a:4c:5a:20:52:20:c8:0e:dc:58:97:91:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a Validity Not Before: Dec 15 17:00:59 2025 GMT Not After : Dec 16 17:00:59 2025 GMT Subject: CN=e8032713b125777214f918e94daaf46642c9c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:f3:34:b6:e7:87:66:df:5b:f7:53:33:39: f0:a0:15:3a:43:48:3b:72:86:97:fc:af:67:5c:8d: 9f:3f:a5:ef:5c:23:f7:13:61:3f:1f:13:1b:bf:38: 90:46:40:23:be:f4:8a:6d:5b:da:e0:48:14:8b:d0: 90:c7:7d:75:27:aa:74:ed:3a:b7:a1:ca:c8:3d:59: 8b:56:c0:b7:5d:c0:df:6a:b5:ff:c8:83:5f:ee:65: d5:73:c9:1e:47:dd:a9:8f:7e:d4:d9:31:79:85:31: a8:17:ef:2f:49:2e:d5:65:96:e6:70:cb:64:34:a9: 2b:f7:a8:eb:3a:06:c2:6d:56:41:a2:fe:41:dc:a1: b2:39:19:a0:12:89:cf:4f:b8:02:36:14:78:3a:f8: 7c:dd:d2:83:1f:dc:dd:ce:72:69:84:b2:2f:a8:c8: d6:1a:b8:08:ff:ef:25:d3:8a:96:d0:36:2f:68:31: 2a:7a:63:38:6c:cc:4d:57:6c:bb:d0:16:e0:b6:5c: c1:c9:2c:f4:f3:d2:fd:e7:ae:3d:8a:eb:d4:6d:39: 9e:de:3e:d0:27:35:a3:d5:4d:bb:f8:3d:fe:48:95: 8c:6d:d8:8f:b1:c8:ed:54:57:ce:47:2a:3f:87:f6: 7e:81:17:20:54:24:fe:29:b8:da:81:41:56:81:9d: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:27:13:B1:25:77:72:14:F9:18:E9:4D:AA:F4:66:42:C9:C7:2C X509v3 Authority Key Identifier: keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cf:4c:ab:fd:ec:88:b9:84:a8:4c:4e:ca:5a:82:ba:e1:c6: a6:e4:d0:2e:c7:be:7e:75:78:96:bd:57:21:f3:74:8a:0d:cc: 6e:64:34:63:a1:e2:23:68:72:0a:b7:c6:12:a7:0b:16:06:b2: 7f:a0:3e:f7:14:fc:34:03:8c:d8:1d:1c:af:6c:1a:3c:67:9f: 94:0f:fe:3c:ef:58:34:4e:c6:51:87:89:14:31:fb:a6:c8:e3: be:f2:18:c7:5d:a6:2f:9b:81:7e:bc:34:e5:aa:5a:5a:e1:e7: 37:b8:28:50:35:7c:d1:2c:f6:03:09:84:cc:1a:c5:6d:b5:2d: 8c:79:cb:d8:af:aa:20:c2:53:cd:fa:47:85:60:aa:c8:22:d9: 5a:81:68:83:94:fa:91:c3:43:0b:84:17:08:03:11:e5:7d:12: fd:3c:a4:cb:56:7f:02:44:68:54:e0:11:0c:e2:ee:19:80:2d: 67:d6:6e:ae:b2:ec:92:4a:62:b6:08:23:3d:c3:da:05:15:67: e5:be:1a:0a:c5:4e:9b:dc:0f:a7:f2:61:97:bb:d8:dc:aa:48: d9:7b:18:57:3a:47:30:8f:17:92:92:80:4c:c9:fa:a8:c2:5f: 01:84:9f:51:83:fb:f9:af:43:55:42:f9:d7:ff:76:24:26:61: 80:94:4e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9UuKTFogUiDIDtxYl5FRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzNjMzNDZjMTJmODNjNjBkN2I1Y2ZkZWZlY2QzZTdm ZjBlMmEwHhcNMjUxMjE1MTcwMDU5WhcNMjUxMjE2MTcwMDU5WjAzMTEwLwYDVQQD EyhlODAzMjcxM2IxMjU3NzcyMTRmOTE4ZTk0ZGFhZjQ2NjQyYzljNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0nzNLbnh2bfW/dTMznwoBU6Q0g7 coaX/K9nXI2fP6XvXCP3E2E/HxMbvziQRkAjvvSKbVva4EgUi9CQx311J6p07Tq3 ocrIPVmLVsC3XcDfarX/yINf7mXVc8keR92pj37U2TF5hTGoF+8vSS7VZZbmcMtk NKkr96jrOgbCbVZBov5B3KGyORmgEonPT7gCNhR4Ovh83dKDH9zdznJphLIvqMjW GrgI/+8l04qW0DYvaDEqemM4bMxNV2y70BbgtlzBySz089L95649iuvUbTme3j7Q JzWj1U27+D3+SJWMbdiPscjtVFfORyo/h/Z+gRcgVCT+KbjagUFWgZ0HYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgDJxOxJXdyFPkY6U2q9GZCyccsMB8GA1UdIwQY MBaAFL36NjNGwS+Dxg17XP3v7NPn/w4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYt MTcxNjE0NjY0NGU2LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYtMTcxNjE0NjY0NGU2 LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA89Mq/3s iLmEqExOylqCuuHGpuTQLse+fnV4lr1XIfN0ig3MbmQ0Y6HiI2hyCrfGEqcLFgay f6A+9xT8NAOM2B0cr2waPGeflA/+PO9YNE7GUYeJFDH7psjjvvIYx12mL5uBfrw0 5apaWuHnN7goUDV80Sz2AwmEzBrFbbUtjHnL2K+qIMJTzfpHhWCqyCLZWoFog5T6 kcNDC4QXCAMR5X0S/Tyky1Z/AkRoVOARDOLuGYAtZ9ZurrLskkpitggjPcPaBRVn 5b4aCsVOm9wPp/Jhl7vY3KpI2XsYVzpHMI8XkpKATMn6qMJfAYSfUYP7+a9DVUL5 1/92JCZhgJROQQ== -----END CERTIFICATE-----Generated at Mon Dec 15 18:58:58 2025 by rpki-client