This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft File: vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json) Hash identifier: a7xrsqzJyhfy5zfSzc9OPlz6rXGrZVrB36wCj8Folzs= Subject key identifier: 5D:BE:A6:8D:BE:5D:D5:9E:E0:63:4B:2B:2A:8E:61:D2:E6:20:62:01 Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Certificate serial: 019B25F68A7E01784EAD47043908489FEE55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 07:01:12 +0000 Manifest this update: Tue 16 Dec 2025 07:01:12 +0000 Manifest next update: Wed 17 Dec 2025 07:01:12 +0000 Files and hashes: 1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=) 2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=) 3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=) 4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=) 5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: gP7HaSTWhsHMf6e5BquT4Z/R26kAK/gjDIinhrIoNkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:8a:7e:01:78:4e:ad:47:04:39:08:48:9f:ee:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Validity Not Before: Dec 16 07:01:12 2025 GMT Not After : Dec 17 07:01:12 2025 GMT Subject: CN=5dbea68dbe5dd59ee0634b2b2a8e61d2e6206201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:3b:4a:f0:c6:f4:ab:3d:69:3e:2d:4f:36: fc:af:3c:be:6d:db:55:e3:0c:6b:75:06:8d:aa:4f: 4d:41:1e:27:69:d7:83:70:26:e2:f9:b3:e4:b0:20: a5:ae:8b:1a:48:49:c8:41:95:c6:9b:47:78:e0:08: 9d:34:8f:4e:d2:53:ef:c4:23:01:e3:a0:56:f5:85: 38:7c:14:fd:6c:74:81:90:37:24:2f:69:2b:aa:f6: e8:a8:b9:4b:9b:35:8a:2c:27:d5:9a:e6:e6:75:e3: 5f:95:10:2e:1b:81:43:97:56:d8:5d:06:9c:2f:b6: 80:58:75:c4:4f:1c:c9:c4:15:31:e7:2c:0f:fb:fc: c9:f7:d7:32:79:c4:68:fb:eb:89:f5:8c:7d:40:77: a1:78:2d:7e:49:39:95:a5:46:a9:6d:6c:81:4a:1c: 1d:46:a0:16:29:91:35:40:d2:17:39:05:22:e6:1f: 1c:32:ab:8f:f0:30:f5:9f:5d:fe:db:83:68:3a:f0: d9:a8:82:6b:f5:cb:6e:c9:36:ae:dc:e6:f8:b8:68: 6e:fd:2a:af:14:6f:36:96:71:fb:e4:02:35:c5:4f: fa:aa:c7:01:d0:c7:05:93:60:4e:58:b5:2e:fe:b0: b5:f5:93:1d:ab:0c:b8:e5:a3:69:81:fb:9a:a6:64: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BE:A6:8D:BE:5D:D5:9E:E0:63:4B:2B:2A:8E:61:D2:E6:20:62:01 X509v3 Authority Key Identifier: keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:3d:04:01:d4:17:97:cd:75:ff:9c:6c:86:35:47:93:71: 07:b5:bd:c0:12:bb:54:93:14:1d:9e:0f:0a:2f:da:f5:98:c0: 66:85:10:4e:92:b1:b8:4e:92:fd:49:30:98:1d:d0:0f:81:67: 9c:85:8a:f1:3f:6a:a5:85:bf:48:37:01:74:2c:ba:f0:f6:09: 07:68:60:2f:21:32:eb:0a:d5:89:bc:76:fa:bc:6c:ac:35:45: c8:9c:84:19:29:1f:e7:42:aa:82:8d:72:d4:d2:74:d9:9b:c8: 2b:f9:79:da:32:e0:6b:24:51:2b:d3:a3:22:8e:09:ac:0b:73: 79:d5:09:30:32:7f:dc:78:d1:3e:bb:8d:5e:31:5a:6b:e5:e7: 75:2c:3c:bd:68:04:be:b2:8b:f2:ef:e9:f3:26:25:df:af:6d: 75:74:af:4e:ee:7e:d5:36:e1:a0:37:a0:ae:9c:e1:3a:1e:c3: 56:26:34:bf:8f:7f:22:b6:f0:cf:15:64:a4:aa:7f:a4:88:30: 9d:84:c9:3b:c4:7e:bb:82:21:1a:cd:50:a9:8d:c4:5b:77:6d: fd:87:a1:78:04:0e:ae:ca:7b:75:ac:93:23:51:01:3b:37:4c: a1:66:e7:7c:8a:20:79:92:f4:47:1c:91:66:f2:54:17:38:70: ef:ed:25:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9op+AXhOrUcEOQhIn+5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky ZmM5OWEwHhcNMjUxMjE2MDcwMTEyWhcNMjUxMjE3MDcwMTEyWjAzMTEwLwYDVQQD Eyg1ZGJlYTY4ZGJlNWRkNTllZTA2MzRiMmIyYThlNjFkMmU2MjA2MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoQ7SvDG9Ks9aT4tTzb8rzy+bdtV 4wxrdQaNqk9NQR4nadeDcCbi+bPksCClrosaSEnIQZXGm0d44AidNI9O0lPvxCMB 46BW9YU4fBT9bHSBkDckL2krqvboqLlLmzWKLCfVmubmdeNflRAuG4FDl1bYXQac L7aAWHXETxzJxBUx5ywP+/zJ99cyecRo++uJ9Yx9QHeheC1+STmVpUapbWyBShwd RqAWKZE1QNIXOQUi5h8cMquP8DD1n13+24NoOvDZqIJr9ctuyTau3Ob4uGhu/Sqv FG82lnH75AI1xU/6qscB0McFk2BOWLUu/rC19ZMdqwy45aNpgfuapmT8kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2+po2+XdWe4GNLKyqOYdLmIGIBMB8GA1UdIwQY MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt YWU3NzQ2ZjA5NjMwLzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJs9BAHU F5fNdf+cbIY1R5NxB7W9wBK7VJMUHZ4PCi/a9ZjAZoUQTpKxuE6S/UkwmB3QD4Fn nIWK8T9qpYW/SDcBdCy68PYJB2hgLyEy6wrVibx2+rxsrDVFyJyEGSkf50Kqgo1y 1NJ02ZvIK/l52jLgayRRK9OjIo4JrAtzedUJMDJ/3HjRPruNXjFaa+XndSw8vWgE vrKL8u/p8yYl369tdXSvTu5+1TbhoDegrpzhOh7DViY0v49/IrbwzxVkpKp/pIgw nYTJO8R+u4IhGs1QqY3EW3dt/YeheAQOrsp7dayTI1EBOzdMoWbnfIogeZL0RxyR ZvJUFzhw7+0lYg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:29:06 2025 by rpki-client