This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json) Hash identifier: 1GgweECaLmEIroOkzIyE2At7f4gW7lkXsoTmV7vOWq4= Subject key identifier: 26:C0:5E:9B:7B:B8:1C:AA:D8:DF:4B:93:DD:A7:42:EC:AA:AE:08:3C Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Certificate serial: 019B59ACBE128DC0747D7844F1BBCC7626D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft Manifest number: FA Signing time: Fri 26 Dec 2025 08:00:51 +0000 Manifest this update: Fri 26 Dec 2025 08:00:51 +0000 Manifest next update: Sat 27 Dec 2025 08:00:51 +0000 Files and hashes: 1: Lg4eCFYIYf5ZVutlcdxYXCP2T1k.roa (hash: /UYXd+Jxi7mk5U3i4C8s/Xff/x03jpYmnvrS9R7HXwg=) 2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: jMUBv7zQw3wUnH5Kx6IvYJz8odfBzr0+Hm/gHbYeMe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:be:12:8d:c0:74:7d:78:44:f1:bb:cc:76:26:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665 Validity Not Before: Dec 26 08:00:51 2025 GMT Not After : Dec 27 08:00:51 2025 GMT Subject: CN=26c05e9b7bb81caad8df4b93dda742ecaaae083c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:2c:5d:e5:31:5f:c1:ec:6d:a6:af:2f:50: 8f:fc:10:26:67:38:45:a5:1c:70:c5:85:b9:84:de: 87:2d:c6:b7:63:d8:fe:92:97:0c:14:69:df:a8:ec: 1c:e0:48:ec:a0:e2:dd:44:73:ee:70:16:9e:02:f2: 39:3e:24:b4:ef:55:17:c9:cb:00:5c:ce:92:cb:a4: 8c:da:5e:c1:66:e5:18:5b:b7:aa:a6:4e:9f:4c:5e: bc:a1:e5:f1:17:9e:bd:bb:8e:ba:67:13:c8:57:82: 8b:ac:b4:d4:d1:fc:4b:42:96:42:ed:41:cf:ee:0c: 29:ae:b3:e3:e4:ea:74:6e:1f:58:58:78:0a:85:26: b0:11:48:c3:c2:31:e0:04:5f:5e:ad:70:98:61:5d: 06:c0:d6:7e:49:f8:ab:7b:86:cd:6b:9d:bd:5e:9d: 69:b6:77:4c:87:cb:e1:60:4c:e3:ad:7f:c4:94:3b: ae:84:9e:d2:65:95:ca:10:69:f2:11:f2:10:5d:da: e7:12:cd:b6:40:4f:33:26:3f:be:a8:b0:5a:7a:71: 57:fb:45:cd:78:46:55:66:39:f7:6b:33:74:0d:27: 7d:d1:a4:99:b0:fe:e7:da:2c:5f:1b:83:08:b6:a3: 03:15:ee:32:a3:a4:57:9c:95:27:e9:b8:cd:95:62: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C0:5E:9B:7B:B8:1C:AA:D8:DF:4B:93:DD:A7:42:EC:AA:AE:08:3C X509v3 Authority Key Identifier: keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4d:ef:31:1e:16:e4:51:ed:af:57:2d:8a:fb:d4:1c:57:d9: a8:37:d9:0d:09:c6:69:31:d9:4d:6f:d9:65:dd:8d:ae:05:88: 75:6c:62:d6:f0:d7:ba:4b:e7:2e:14:21:41:f8:da:60:1a:42: 81:87:76:16:a2:9e:e9:b7:45:a9:1b:c2:10:44:e1:7e:d5:fb: 3e:6c:62:65:ed:f1:63:62:6c:d7:e2:ce:76:a2:06:98:02:3a: 8a:28:13:d8:a7:50:3f:84:ce:34:ba:ef:4f:5f:da:d9:94:4b: 5f:39:c3:21:ae:12:61:d1:02:56:71:19:48:19:27:51:f3:d0: 56:50:ca:55:98:5b:8f:55:f4:1a:94:c9:e9:88:d5:83:85:39: 4f:b8:e2:03:7a:2e:02:3e:6b:12:2e:59:f4:cd:c7:a5:d3:95: b9:65:7b:43:4f:e5:e2:a8:46:65:35:0d:61:d9:86:73:84:a0: 21:a0:6e:eb:7b:2f:2d:c1:12:28:0a:ff:19:6b:b6:00:d0:f5: b5:76:4e:83:cb:a5:7b:c9:9d:c9:8d:f1:fb:81:91:ee:8b:4a: ef:d1:fa:92:23:67:4b:9d:cd:ca:49:89:a7:9f:ad:9f:00:56: d9:6e:f9:3c:ab:43:ab:c2:d5:2d:32:94:11:d8:9e:91:c2:bc: 6c:d6:c3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrL4SjcB0fXhE8bvMdibXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmRjMjRlZmRiOTYxNGRjOTNlOTc3NzRjZTg5YzFjOTcz MGU2NjUwHhcNMjUxMjI2MDgwMDUxWhcNMjUxMjI3MDgwMDUxWjAzMTEwLwYDVQQD EygyNmMwNWU5YjdiYjgxY2FhZDhkZjRiOTNkZGE3NDJlY2FhYWUwODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UYsXeUxX8HsbaavL1CP/BAmZzhF pRxwxYW5hN6HLca3Y9j+kpcMFGnfqOwc4EjsoOLdRHPucBaeAvI5PiS071UXycsA XM6Sy6SM2l7BZuUYW7eqpk6fTF68oeXxF569u466ZxPIV4KLrLTU0fxLQpZC7UHP 7gwprrPj5Op0bh9YWHgKhSawEUjDwjHgBF9erXCYYV0GwNZ+Sfire4bNa529Xp1p tndMh8vhYEzjrX/ElDuuhJ7SZZXKEGnyEfIQXdrnEs22QE8zJj++qLBaenFX+0XN eEZVZjn3azN0DSd90aSZsP7n2ixfG4MItqMDFe4yo6RXnJUn6bjNlWJuQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbAXpt7uByq2N9Lk92nQuyqrgg8MB8GA1UdIwQY MBaAFL39wk79uWFNyT6Xd0zonByXMOZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1Zjct NGYzYTUzNDNhMDRmLzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85Nzg1NDctZTEwMS00ZjRhLTk1ZjctNGYzYTUzNDNhMDRm LzEvdmYzQ1R2MjVZVTNKUHBkM1RPaWNISmN3NW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHU3vMR4W 5FHtr1ctivvUHFfZqDfZDQnGaTHZTW/ZZd2NrgWIdWxi1vDXukvnLhQhQfjaYBpC gYd2FqKe6bdFqRvCEEThftX7PmxiZe3xY2Js1+LOdqIGmAI6iigT2KdQP4TONLrv T1/a2ZRLXznDIa4SYdECVnEZSBknUfPQVlDKVZhbj1X0GpTJ6YjVg4U5T7jiA3ou Aj5rEi5Z9M3HpdOVuWV7Q0/l4qhGZTUNYdmGc4SgIaBu63svLcESKAr/GWu2AND1 tXZOg8ule8mdyY3x+4GR7otK79H6kiNnS53NykmJp5+tnwBW2W75PKtDq8LVLTKU EdiekcK8bNbDZA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:01 2025 by rpki-client