This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json) Hash identifier: WHCBkN1EpPFqQf1cUNtEEz+bSGx7T8zc6VEAzjO5QNc= Subject key identifier: 9A:AE:F0:0A:69:7A:27:21:2B:CE:84:C7:54:43:D2:CC:66:CE:35:0B Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Certificate serial: 019B0F37BB6DDADE5F4C1BA87F714E979899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft Manifest number: 0D76 Signing time: Thu 11 Dec 2025 21:01:09 +0000 Manifest this update: Thu 11 Dec 2025 21:01:09 +0000 Manifest next update: Fri 12 Dec 2025 21:01:09 +0000 Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=) 2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: loVhd772ZYcxp+LOgwQlUfpmowsd5kp5P7PUtMpckNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:bb:6d:da:de:5f:4c:1b:a8:7f:71:4e:97:98:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154 Validity Not Before: Dec 11 21:01:09 2025 GMT Not After : Dec 12 21:01:09 2025 GMT Subject: CN=9aaef00a697a27212bce84c75443d2cc66ce350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:a0:74:6c:05:1b:4e:c8:19:16:7e:e7:3d: 75:5b:28:e1:74:a6:36:57:ea:4d:42:90:c9:2e:a4: ef:29:3c:87:ed:a5:d0:dd:70:e0:56:f8:28:c0:35: 3a:cd:54:11:45:f0:5c:5c:49:3a:db:2b:09:d1:28: c8:18:51:7b:0e:98:c3:bf:7c:56:5c:1a:74:b8:e9: 4b:a0:35:e1:3b:42:9a:db:01:46:d1:27:57:58:cf: 0c:d3:9e:6d:15:45:df:8a:ec:9e:88:bc:ae:ca:1a: 99:43:5b:0a:1c:ab:c9:54:3a:45:01:35:27:21:d3: ac:9e:83:4d:c9:5c:90:c8:7c:78:04:dd:07:2e:83: 74:8d:06:b8:cc:5d:93:15:9d:f8:1c:66:30:81:17: 25:f4:b3:44:2b:46:0d:45:ff:92:6a:ec:38:96:43: 3e:28:ba:b4:31:35:c7:81:37:a6:e6:26:1b:68:db: 6b:81:34:db:5f:20:72:e9:e8:76:73:ff:46:a4:a2: 82:ee:80:4c:48:fc:72:80:84:f6:43:27:bb:c6:78: 2d:15:a5:24:7f:32:aa:e0:86:14:1d:3a:14:72:53: 58:a5:03:75:a5:5f:f8:d1:5e:31:73:8f:97:45:76: ac:2b:a6:27:45:41:13:8f:65:5d:0d:05:7c:24:20: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AE:F0:0A:69:7A:27:21:2B:CE:84:C7:54:43:D2:CC:66:CE:35:0B X509v3 Authority Key Identifier: keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2f:de:39:88:61:bb:3b:cf:3e:c7:da:d3:33:70:2c:b4:69: fb:40:30:bb:b0:62:54:b6:0c:a6:2c:ac:ee:86:99:e4:29:5c: 1f:f9:5e:c7:3d:66:ba:20:91:32:c1:85:7f:f0:cf:44:29:66: d2:27:3e:94:14:7c:af:96:6c:6c:a2:8e:f5:21:71:8b:1e:9f: c7:5f:d9:6d:18:ec:ac:1c:84:1c:ca:4b:e6:42:fb:04:0f:71: fc:79:b0:87:3c:5f:06:1b:e0:1c:c7:0e:98:68:93:d4:d0:03: ca:e7:c2:23:9f:6a:69:dd:33:8d:68:fc:1a:fc:a4:e0:e0:d6: 2f:c4:05:54:df:ce:1f:29:6f:7a:f8:c8:6b:6d:9d:d1:38:a9: 52:40:79:ea:6f:1c:97:c0:ec:2b:c0:87:c0:de:45:08:1b:78: 13:bc:69:4f:21:16:41:78:ac:93:c4:0f:da:29:da:17:76:5f: 47:39:22:84:2a:d4:dc:f4:f6:8b:70:ca:28:c2:4b:30:03:7a: e1:62:9d:c1:5f:e2:27:af:6e:cc:fb:94:cd:f6:0b:ee:cf:99: 05:3e:85:9a:2b:0f:4b:81:e2:c5:e0:08:ec:d4:ed:e9:a3:05: 2e:38:32:71:b8:87:81:d7:1d:f1:84:b4:9b:4e:ee:ad:69:32: 12:9a:c1:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7tt2t5fTBuof3FOl5iZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTE2ZDM1YjExYzkzODIzM2FjYmFkZjVkN2MyZDViMmM2 ZDAxNTQwHhcNMjUxMjExMjEwMTA5WhcNMjUxMjEyMjEwMTA5WjAzMTEwLwYDVQQD Eyg5YWFlZjAwYTY5N2EyNzIxMmJjZTg0Yzc1NDQzZDJjYzY2Y2UzNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pGgdGwFG07IGRZ+5z11WyjhdKY2 V+pNQpDJLqTvKTyH7aXQ3XDgVvgowDU6zVQRRfBcXEk62ysJ0SjIGFF7DpjDv3xW XBp0uOlLoDXhO0Ka2wFG0SdXWM8M055tFUXfiuyeiLyuyhqZQ1sKHKvJVDpFATUn IdOsnoNNyVyQyHx4BN0HLoN0jQa4zF2TFZ34HGYwgRcl9LNEK0YNRf+Sauw4lkM+ KLq0MTXHgTem5iYbaNtrgTTbXyBy6eh2c/9GpKKC7oBMSPxygIT2Qye7xngtFaUk fzKq4IYUHToUclNYpQN1pV/40V4xc4+XRXasK6YnRUETj2VdDQV8JCA6owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqu8AppeichK86Ex1RD0sxmzjULMB8GA1UdIwQY MBaAFL0RbTWxHJOCM6y63118LVssbQFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUt OWJlODY5YTljNjBjLzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMzljNzQtM2M0My00MjUxLTlhODUtOWJlODY5YTljNjBj LzEvdlJGdE5iRWNrNEl6ckxyZlhYd3RXeXh0QVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuC/eOYhh uzvPPsfa0zNwLLRp+0Awu7BiVLYMpiys7oaZ5ClcH/lexz1muiCRMsGFf/DPRClm 0ic+lBR8r5ZsbKKO9SFxix6fx1/ZbRjsrByEHMpL5kL7BA9x/HmwhzxfBhvgHMcO mGiT1NADyufCI59qad0zjWj8Gvyk4ODWL8QFVN/OHylvevjIa22d0TipUkB56m8c l8DsK8CHwN5FCBt4E7xpTyEWQXisk8QP2inaF3ZfRzkihCrU3PT2i3DKKMJLMAN6 4WKdwV/iJ69uzPuUzfYL7s+ZBT6FmisPS4HixeAI7NTt6aMFLjgycbiHgdcd8YS0 m07urWkyEprB9A== -----END CERTIFICATE-----Generated at Fri Dec 12 03:38:28 2025 by rpki-client