This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: aP+p9cy32LT4WOTxuqcr5QnBciO2cotJyB1Jn88pjLo= Subject key identifier: D4:77:F6:6F:78:2F:A1:E4:F7:DD:70:6A:B2:D0:7A:0B:E2:BC:75:F1 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019B0FDBF9A2F0E59987A8655EF9CA803708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 177F Signing time: Fri 12 Dec 2025 00:00:32 +0000 Manifest this update: Fri 12 Dec 2025 00:00:32 +0000 Manifest next update: Sat 13 Dec 2025 00:00:32 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: 0+fmoV1z/HdjnhDm8RxJjW28benA4Vtk66WboSX2TCM=) 8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:db:f9:a2:f0:e5:99:87:a8:65:5e:f9:ca:80:37:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Dec 12 00:00:32 2025 GMT Not After : Dec 13 00:00:32 2025 GMT Subject: CN=d477f66f782fa1e4f7dd706ab2d07a0be2bc75f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:73:e7:01:d7:3d:20:d5:1d:eb:f8:67:78: 41:ce:dd:58:fe:76:e7:68:c3:17:3b:a2:be:b5:f3: 67:ee:66:44:7c:5f:96:e2:82:81:57:55:1e:d4:f4: c0:60:f6:f5:59:49:89:9a:f4:cd:18:fa:e7:a0:a4: ff:26:5e:37:ac:93:dc:46:f9:bc:75:d9:19:98:e4: 6d:dc:40:3d:83:25:4a:eb:d7:f0:b8:dc:88:3f:98: 14:17:66:46:57:d6:e1:98:6f:4a:3c:b2:77:c3:d3: 3f:2c:5a:8d:74:91:a4:28:2a:08:57:c7:5c:72:35: 50:97:5c:92:07:32:98:dd:16:75:43:01:23:4f:ab: dd:47:92:05:3e:e4:27:d3:3d:ea:9c:8c:cc:72:04: 3d:cb:0d:ed:fe:5f:07:de:47:99:d2:68:a9:d6:94: d3:b8:a0:1e:fa:16:af:52:96:0c:cf:ea:f1:6b:44: 86:ce:d6:bc:4e:67:9e:56:12:d8:f6:da:86:d6:f2: 9e:70:a3:3d:79:51:da:81:bc:2e:cf:07:0d:d7:ad: 0b:28:4b:0f:09:ce:10:f8:f1:ea:a4:5a:b2:62:d6: f8:7a:96:86:05:73:56:3d:00:47:b4:d2:24:de:75: 97:b1:61:7d:63:9d:ba:ff:98:c6:ac:7b:5b:66:77: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:77:F6:6F:78:2F:A1:E4:F7:DD:70:6A:B2:D0:7A:0B:E2:BC:75:F1 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1d:26:7a:43:1b:b7:74:14:95:9e:ec:3d:97:3f:97:4c:8c: da:10:f0:f1:aa:2d:d4:97:20:3e:eb:0d:ba:87:03:2a:ba:6f: bb:a9:01:e0:eb:ce:c3:6f:7d:75:f4:32:df:b9:fe:6b:68:23: c2:bb:fc:18:c1:70:2d:2e:32:dc:43:ef:6a:8d:a7:ba:a6:bb: a6:8d:1b:b5:86:26:be:f7:87:a0:42:96:fc:03:a1:c1:04:44: b9:20:15:b1:53:75:98:e8:79:ab:1a:3d:30:d6:ac:c9:c2:17: 1b:cd:f6:8f:f4:73:53:60:d4:1d:58:49:f4:f3:60:9f:a9:61: 43:a3:4b:a2:1d:42:35:a5:a5:c6:04:cb:04:7d:e0:66:7d:e8: 58:89:71:46:d0:32:73:c4:ed:7e:28:a1:74:eb:c9:b3:d4:54: a7:03:b4:3a:fc:bc:50:6a:28:92:5a:6a:d0:58:1e:d8:51:fa: 80:2f:b8:6f:9a:52:bd:de:2f:85:ea:74:db:6d:65:a9:90:25: ca:f5:b7:e7:1e:7c:21:b9:3a:73:08:e9:bf:d1:1a:b8:cb:b5: 0f:92:04:31:02:d1:e3:98:ca:81:06:cd:99:76:c6:e3:f6:a8: 5d:df:75:40:6c:7d:83:7c:fa:82:ad:f1:f8:a4:05:8e:80:69: 54:4c:0a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP2/mi8OWZh6hlXvnKgDcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUxMjEyMDAwMDMyWhcNMjUxMjEzMDAwMDMyWjAzMTEwLwYDVQQD EyhkNDc3ZjY2Zjc4MmZhMWU0ZjdkZDcwNmFiMmQwN2EwYmUyYmM3NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZz5wHXPSDVHev4Z3hBzt1Y/nbn aMMXO6K+tfNn7mZEfF+W4oKBV1Ue1PTAYPb1WUmJmvTNGPrnoKT/Jl43rJPcRvm8 ddkZmORt3EA9gyVK69fwuNyIP5gUF2ZGV9bhmG9KPLJ3w9M/LFqNdJGkKCoIV8dc cjVQl1ySBzKY3RZ1QwEjT6vdR5IFPuQn0z3qnIzMcgQ9yw3t/l8H3keZ0mip1pTT uKAe+havUpYMz+rxa0SGzta8TmeeVhLY9tqG1vKecKM9eVHagbwuzwcN160LKEsP Cc4Q+PHqpFqyYtb4epaGBXNWPQBHtNIk3nWXsWF9Y526/5jGrHtbZndZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR39m94L6Hk991warLQegvivHXxMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR0mekMb t3QUlZ7sPZc/l0yM2hDw8aot1JcgPusNuocDKrpvu6kB4OvOw299dfQy37n+a2gj wrv8GMFwLS4y3EPvao2nuqa7po0btYYmvveHoEKW/AOhwQREuSAVsVN1mOh5qxo9 MNasycIXG832j/RzU2DUHVhJ9PNgn6lhQ6NLoh1CNaWlxgTLBH3gZn3oWIlxRtAy c8TtfiihdOvJs9RUpwO0Ovy8UGooklpq0Fge2FH6gC+4b5pSvd4vhep0221lqZAl yvW35x58Ibk6cwjpv9EauMu1D5IEMQLR45jKgQbNmXbG4/aoXd91QGx9g3z6gq3x +KQFjoBpVEwK1A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:44 2025 by rpki-client