This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json) Hash identifier: fDvtRYwmViMJu1bOmsWWlV27subW0VBSeuHCLaZ2vKo= Subject key identifier: 90:24:E8:BB:96:38:19:78:F5:FE:B4:28:18:AD:49:5D:A8:09:45:BE Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Certificate serial: 019B0DC716F57ED9617CD91238822B80D0DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft Manifest number: 1643 Signing time: Thu 11 Dec 2025 14:18:29 +0000 Manifest this update: Thu 11 Dec 2025 14:18:29 +0000 Manifest next update: Fri 12 Dec 2025 14:18:29 +0000 Files and hashes: 1: qizHV5ds9FkmtPQu75JjrdJO6gk.roa (hash: m490BFBSfrWwvOvCR2s32/mpUXfGBA9g3Lznx0nRmuU=) 2: vV8jeJHTrweSuxWcjvx4-T2pQGw.roa (hash: U2ooj3VDbRcurrAC4dG9tMVM2bVk3w29if3egslFpS0=) 3: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: AiU1dFE0a7/PUPkeieX8K6fGmUZgMjInGjy/1Smk62E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:c7:16:f5:7e:d9:61:7c:d9:12:38:82:2b:80:d0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Validity Not Before: Dec 11 14:18:29 2025 GMT Not After : Dec 12 14:18:29 2025 GMT Subject: CN=9024e8bb96381978f5feb42818ad495da80945be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:9b:f8:73:3d:6e:39:d1:14:04:db:97:e9: ed:9b:f3:bf:7b:20:70:b7:82:a5:b1:2c:ae:40:1f: ec:f4:66:9a:1b:5f:2b:da:70:bd:4e:f6:9c:48:65: 55:1f:88:61:eb:39:67:f1:af:21:b3:4e:ba:03:01: 0b:30:58:a1:a5:4d:29:d2:a1:11:28:f8:f9:cf:15: 5a:29:3b:d1:09:24:43:21:be:1d:16:7e:6f:6b:02: 18:dc:95:10:5f:a4:05:7e:d4:13:7a:c9:6e:72:23: f9:58:da:9a:da:23:2f:0b:0f:cc:56:8d:96:3f:a5: be:4e:cc:03:cb:3d:e8:d4:22:73:aa:1c:f4:61:91: 15:0b:3f:60:2f:78:40:87:d4:24:79:f3:b7:4f:d8: 5f:36:f3:a8:42:8a:7c:cf:e8:53:ac:42:bb:f2:bb: 48:1c:3b:df:ff:1f:15:3b:5d:f2:ea:d4:39:d7:1f: 30:a5:8a:78:ca:02:45:6b:a1:ca:13:bd:54:f6:27: 45:ec:bb:96:b9:f9:ca:f0:0c:2f:5b:9c:16:0b:83: 3f:9b:8d:24:50:37:f7:73:49:57:74:f8:b9:63:c1: 57:ee:c0:52:67:a1:18:94:63:bb:e9:bb:7c:cb:02: 3e:84:09:9f:c9:f9:ab:0d:db:99:1f:3b:65:6e:b4: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:24:E8:BB:96:38:19:78:F5:FE:B4:28:18:AD:49:5D:A8:09:45:BE X509v3 Authority Key Identifier: keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:92:d4:da:0e:79:bb:d6:68:cf:f5:59:d0:b0:f2:e4:1f:7a: 6a:90:3e:3b:ac:f0:63:a9:30:32:28:95:7b:ff:71:a2:67:96: 85:e1:fe:1c:6b:89:b6:d3:60:75:d6:ac:c7:c1:86:d2:c8:2f: 58:2c:65:ef:36:3f:cc:43:2d:c6:f3:2e:77:56:a8:7b:73:72: 4b:e0:47:2d:17:d7:80:d7:55:4f:5b:fe:6e:4a:fb:03:42:4b: 9b:6d:76:40:32:e5:19:5a:4d:3b:06:5b:d8:ac:9f:b5:97:03: 86:d6:fb:0d:34:b0:78:5d:cc:4e:ac:31:3b:26:39:df:b0:af: b5:f4:37:c8:f5:72:d7:28:f0:ea:ae:72:9c:6a:99:77:bb:64: 38:50:ae:e1:4f:c9:b1:d1:0d:12:93:95:e4:20:96:00:a8:ad: d5:a3:41:c4:b1:d0:4b:d8:9a:94:a8:6b:a7:6b:d8:f9:e3:a1: 56:53:82:41:1e:3c:40:e9:38:3b:7e:6d:63:55:19:e2:95:d2: 90:b1:67:31:97:82:26:a6:b2:2f:8f:43:b3:4f:22:b1:21:e4: 4d:3b:6c:4f:48:48:af:16:cf:c3:dd:14:7d:2a:ff:22:8e:0a: 88:ad:51:26:f3:b5:1b:21:7c:82:5c:cf:a3:e9:09:1f:0a:57: 99:4e:da:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNxxb1ftlhfNkSOIIrgNDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5 NjhhYjAwHhcNMjUxMjExMTQxODI5WhcNMjUxMjEyMTQxODI5WjAzMTEwLwYDVQQD Eyg5MDI0ZThiYjk2MzgxOTc4ZjVmZWI0MjgxOGFkNDk1ZGE4MDk0NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqb+HM9bjnRFATbl+ntm/O/eyBw t4KlsSyuQB/s9GaaG18r2nC9TvacSGVVH4hh6zln8a8hs066AwELMFihpU0p0qER KPj5zxVaKTvRCSRDIb4dFn5vawIY3JUQX6QFftQTesluciP5WNqa2iMvCw/MVo2W P6W+TswDyz3o1CJzqhz0YZEVCz9gL3hAh9QkefO3T9hfNvOoQop8z+hTrEK78rtI HDvf/x8VO13y6tQ51x8wpYp4ygJFa6HKE71U9idF7LuWufnK8AwvW5wWC4M/m40k UDf3c0lXdPi5Y8FX7sBSZ6EYlGO76bt8ywI+hAmfyfmrDduZHztlbrSKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAk6LuWOBl49f60KBitSV2oCUW+MB8GA1UdIwQY MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt ZjlhMzNmZjAxMWNiLzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpLU2g55 u9Zoz/VZ0LDy5B96apA+O6zwY6kwMiiVe/9xomeWheH+HGuJttNgddasx8GG0sgv WCxl7zY/zEMtxvMud1aoe3NyS+BHLRfXgNdVT1v+bkr7A0JLm212QDLlGVpNOwZb 2KyftZcDhtb7DTSweF3MTqwxOyY537CvtfQ3yPVy1yjw6q5ynGqZd7tkOFCu4U/J sdENEpOV5CCWAKit1aNBxLHQS9ialKhrp2vY+eOhVlOCQR48QOk4O35tY1UZ4pXS kLFnMZeCJqayL49Ds08isSHkTTtsT0hIrxbPw90UfSr/Io4KiK1RJvO1GyF8glzP o+kJHwpXmU7aXg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:20:02 2025 by rpki-client