This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft File: vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json) Hash identifier: VR8w5cPXmhts6IwvTKoXOUFKlC2F2hXnYP+8g/Ge67E= Subject key identifier: 31:51:79:7F:5E:D9:90:09:57:BD:87:F7:6A:45:A4:13:A0:BD:78:AF Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6 Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6 Certificate serial: 019B1D994F17DBDADD1B1AA372D564E047ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft Manifest number: 06B7 Signing time: Sun 14 Dec 2025 16:02:25 +0000 Manifest this update: Sun 14 Dec 2025 16:02:25 +0000 Manifest next update: Mon 15 Dec 2025 16:02:25 +0000 Files and hashes: 1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=) 2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: 2uSqVkrt8qBerc1NjQSGcH3KoyGM1SZeRCFWsm6ZZOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:4f:17:db:da:dd:1b:1a:a3:72:d5:64:e0:47:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6 Validity Not Before: Dec 14 16:02:25 2025 GMT Not After : Dec 15 16:02:25 2025 GMT Subject: CN=3151797f5ed9900957bd87f76a45a413a0bd78af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:eb:55:69:79:ac:10:9c:00:42:cd:bc:48: e7:0b:c5:a6:0d:61:2e:ca:11:58:c9:65:b4:63:72: d6:9c:ee:f6:00:0c:37:05:3c:68:65:9f:de:a6:db: 20:ee:52:26:d3:49:9a:7c:d3:c3:3e:3e:e7:ac:2c: bf:82:e2:72:b5:85:e2:5c:cb:5c:3c:be:8e:1c:c3: 00:2f:8e:c7:8a:f8:98:de:c4:11:61:b9:73:f1:09: ed:be:95:f2:82:14:2b:df:4c:9e:b1:f7:23:79:95: d4:0d:5e:c3:8d:9e:8c:76:83:32:1b:81:13:59:d1: f0:d7:74:39:96:92:c1:06:b4:08:be:e7:93:d2:41: 23:d7:de:e2:fe:22:1e:f7:3d:e1:7b:47:93:5d:57: 89:1d:a4:a5:6a:3b:42:57:d5:4e:39:28:4f:f8:b7: 4f:85:ab:b4:67:bc:29:b2:2a:66:a3:58:d5:75:8a: 7b:74:12:9f:ef:6a:f5:b8:96:e8:4d:8a:e2:ba:b7: 60:4a:04:82:48:22:ec:b3:50:75:95:97:2d:4a:4e: b9:89:63:42:d7:d4:32:f3:95:eb:31:72:04:40:c9: 1e:32:cf:67:18:88:6b:91:09:64:af:0e:df:d2:fe: 53:63:a4:69:d5:8d:fa:92:e8:59:fd:48:2d:bd:ee: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:51:79:7F:5E:D9:90:09:57:BD:87:F7:6A:45:A4:13:A0:BD:78:AF X509v3 Authority Key Identifier: keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ad:27:00:ac:76:97:c1:2c:f2:b8:1d:1c:ed:8b:8b:57:c1: 4b:ee:b9:5a:d4:55:5d:6c:50:9b:d5:93:94:dc:26:70:98:c5: b7:46:e2:e3:83:92:fd:fa:08:c3:7a:b6:c2:dc:ca:fd:bd:5a: cc:b7:4a:0e:5f:91:5d:82:da:5e:da:37:c2:8a:a9:a2:5a:a2: d4:60:0a:bf:13:c2:48:a1:b8:b8:38:49:e1:4a:dc:b3:5b:29: 0e:92:ce:4f:73:81:1b:50:d3:2c:16:4f:2c:49:3a:9d:4a:b9: 99:fa:28:46:c9:99:fd:28:18:98:4e:ca:dc:08:f2:60:c4:92: f0:7a:52:4a:18:8d:23:62:a3:95:c7:ed:8d:c0:87:85:b9:b6: de:4c:0a:cf:1d:c0:d5:11:61:50:39:43:5c:11:9f:6d:9a:59: b5:e0:16:26:a8:a3:94:ad:d4:9e:77:4b:fa:22:f8:fb:62:18: 2e:55:57:fb:a2:0e:1f:89:44:92:78:15:de:64:fa:7b:e2:93: 43:05:14:9b:ec:f7:15:44:68:12:69:71:8e:48:51:94:40:91: 05:66:da:83:94:3a:00:81:f3:b4:f1:9c:4a:dc:e5:1f:10:ce: 32:bb:d7:cc:d2:1d:92:cd:0b:53:25:80:fb:3d:ce:fd:ae:4b: 60:45:f1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmU8X29rdGxqjctVk4EftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjM1ODc2YWYxYzdlZjgyNDExYjQwNGE3MGQ4OGI3OTE2 NTA5ZjYwHhcNMjUxMjE0MTYwMjI1WhcNMjUxMjE1MTYwMjI1WjAzMTEwLwYDVQQD EygzMTUxNzk3ZjVlZDk5MDA5NTdiZDg3Zjc2YTQ1YTQxM2EwYmQ3OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BPrVWl5rBCcAELNvEjnC8WmDWEu yhFYyWW0Y3LWnO72AAw3BTxoZZ/eptsg7lIm00mafNPDPj7nrCy/guJytYXiXMtc PL6OHMMAL47HiviY3sQRYblz8QntvpXyghQr30yesfcjeZXUDV7DjZ6MdoMyG4ET WdHw13Q5lpLBBrQIvueT0kEj197i/iIe9z3he0eTXVeJHaSlajtCV9VOOShP+LdP hau0Z7wpsipmo1jVdYp7dBKf72r1uJboTYriurdgSgSCSCLss1B1lZctSk65iWNC 19Qy85XrMXIEQMkeMs9nGIhrkQlkrw7f0v5TY6Rp1Y36kuhZ/Ugtve5EPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFReX9e2ZAJV72H92pFpBOgvXivMB8GA1UdIwQY MBaAFLxjWHavHH74JBG0BKcNiLeRZQn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUt ZmZhZTIwNzAwZTkzLzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUtZmZhZTIwNzAwZTkz LzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK60nAKx2 l8Es8rgdHO2Li1fBS+65WtRVXWxQm9WTlNwmcJjFt0bi44OS/foIw3q2wtzK/b1a zLdKDl+RXYLaXto3woqpolqi1GAKvxPCSKG4uDhJ4Urcs1spDpLOT3OBG1DTLBZP LEk6nUq5mfooRsmZ/SgYmE7K3AjyYMSS8HpSShiNI2KjlcftjcCHhbm23kwKzx3A 1RFhUDlDXBGfbZpZteAWJqijlK3UnndL+iL4+2IYLlVX+6IOH4lEkngV3mT6e+KT QwUUm+z3FURoEmlxjkhRlECRBWbag5Q6AIHztPGcStzlHxDOMrvXzNIdks0LUyWA +z3O/a5LYEXx+A== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:32 2025 by rpki-client