This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft File: _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json) Hash identifier: wnHhqHWL8cCeryF1mimES3KFyG683kIJaMa3k9YhASA= Subject key identifier: 42:4B:08:81:D2:9C:76:ED:63:25:B6:4E:C5:3F:0A:5B:BB:A1:45:70 Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Certificate serial: 019B32D749406C60611542F6FC57BB805D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft Manifest number: 0A80 Signing time: Thu 18 Dec 2025 19:02:08 +0000 Manifest this update: Thu 18 Dec 2025 19:02:08 +0000 Manifest next update: Fri 19 Dec 2025 19:02:08 +0000 Files and hashes: 1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=) 2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: syBh0UlO9ymV4EcG0kuMmar+G4CMV8xdigj8YkSWRNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:49:40:6c:60:61:15:42:f6:fc:57:bb:80:5d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b Validity Not Before: Dec 18 19:02:08 2025 GMT Not After : Dec 19 19:02:08 2025 GMT Subject: CN=424b0881d29c76ed6325b64ec53f0a5bbba14570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:40:72:60:d4:c0:ad:36:a8:19:1f:57:f7: 91:f8:54:4f:ec:b0:8a:60:f4:3b:8f:4a:64:d4:f0: 46:31:43:c8:14:a7:dd:b0:6f:37:af:89:a3:b4:50: da:3b:2b:cb:40:01:c4:d1:19:8e:90:96:ca:06:bd: 70:21:e7:66:76:6b:76:fb:1a:6e:0b:ff:05:88:e1: 70:9e:0e:8e:16:dc:a1:e0:81:df:18:a7:ba:e7:3a: e4:04:9c:4c:78:90:05:4b:e0:08:f0:5b:44:c1:c0: 50:70:7e:82:fc:bc:12:cf:97:2b:e4:17:57:ed:1a: 42:3e:58:62:69:f6:73:c2:ad:2c:0a:af:59:02:52: 9c:62:0d:47:a3:ca:47:fc:78:cf:f4:ba:f6:de:30: ec:5b:81:21:ed:bb:31:1b:19:be:c3:11:0f:2b:bc: b9:d9:fe:30:d2:32:a6:bf:76:04:46:ab:1c:2a:3d: 0b:66:36:10:24:6d:10:7e:2d:06:d6:35:19:c0:5a: ad:6c:7a:46:5b:bb:98:90:e9:2d:78:e6:73:a8:e9: fb:5d:49:2d:7b:0a:a2:09:a3:5d:9a:ef:7d:ef:6c: 5a:06:17:5e:03:ab:2a:91:4f:61:55:b0:0f:06:55: 29:7e:c5:ff:e4:03:e1:86:bb:e4:9b:fd:ad:0e:b3: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:08:81:D2:9C:76:ED:63:25:B6:4E:C5:3F:0A:5B:BB:A1:45:70 X509v3 Authority Key Identifier: keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f8:1d:d1:29:68:7b:23:9b:7e:61:56:48:15:49:4b:ef:80: cc:f6:c1:ac:a6:28:b7:85:46:1c:82:b0:ee:be:50:3d:be:f3: 1a:d6:50:fa:89:8b:a7:ad:e9:c6:10:35:7a:cd:83:89:21:54: be:47:d9:d3:ca:db:d6:65:2c:a5:4b:b4:98:6e:db:0c:13:34: 31:78:e6:aa:a6:e2:9c:32:a5:39:c7:b3:ab:65:2c:a3:f3:ae: 8a:04:ea:54:5f:da:4c:33:0f:a9:ff:b4:f7:9e:5e:b2:ee:e9: 9c:15:47:a4:a2:a8:fd:c1:a0:90:5e:77:a5:bd:1f:76:1f:31: 7a:c9:08:f4:18:e2:4f:e0:2b:73:f6:4a:c7:eb:c4:c2:d5:02: c4:6d:87:82:65:d9:46:ec:df:91:bc:f8:50:29:af:ac:a1:f2: 3e:23:8c:91:57:6f:f1:1e:b8:a4:16:1f:c5:4e:a1:d0:28:10: 68:26:3a:9a:62:81:69:1f:fd:3e:46:0b:64:34:c6:41:e9:a2: 73:0a:65:e6:06:fe:5d:b1:41:8e:39:b7:77:68:7a:00:df:bf: 93:e8:f0:73:50:d5:59:fc:b0:5e:5d:b0:94:81:9b:34:f6:7d: 03:d6:28:0c:d8:08:7e:31:70:b0:f0:38:df:5b:14:ac:11:81: a2:38:d6:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10lAbGBhFUL2/Fe7gF11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjdmZDU3MTBhZTVhNDczZTE1OGRjM2ZkNmM4ZjE3ZWZh M2U1NWIwHhcNMjUxMjE4MTkwMjA4WhcNMjUxMjE5MTkwMjA4WjAzMTEwLwYDVQQD Eyg0MjRiMDg4MWQyOWM3NmVkNjMyNWI2NGVjNTNmMGE1YmJiYTE0NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1AcmDUwK02qBkfV/eR+FRP7LCK YPQ7j0pk1PBGMUPIFKfdsG83r4mjtFDaOyvLQAHE0RmOkJbKBr1wIedmdmt2+xpu C/8FiOFwng6OFtyh4IHfGKe65zrkBJxMeJAFS+AI8FtEwcBQcH6C/LwSz5cr5BdX 7RpCPlhiafZzwq0sCq9ZAlKcYg1Ho8pH/HjP9Lr23jDsW4Eh7bsxGxm+wxEPK7y5 2f4w0jKmv3YERqscKj0LZjYQJG0Qfi0G1jUZwFqtbHpGW7uYkOkteOZzqOn7XUkt ewqiCaNdmu9972xaBhdeA6sqkU9hVbAPBlUpfsX/5APhhrvkm/2tDrM/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJLCIHSnHbtYyW2TsU/Clu7oUVwMB8GA1UdIwQY MBaAFP73/VcQrlpHPhWNw/1sjxfvo+VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODIt NDUzZDM3YjQ5MjFjLzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hYzUxYjItYWQxNi00NTI5LThmODItNDUzZDM3YjQ5MjFj LzEvX3ZmOVZ4Q3VXa2MtRlkzRF9XeVBGLS1qNVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPgd0Slo eyObfmFWSBVJS++AzPbBrKYot4VGHIKw7r5QPb7zGtZQ+omLp63pxhA1es2DiSFU vkfZ08rb1mUspUu0mG7bDBM0MXjmqqbinDKlOcezq2Uso/OuigTqVF/aTDMPqf+0 955esu7pnBVHpKKo/cGgkF53pb0fdh8xeskI9BjiT+Arc/ZKx+vEwtUCxG2HgmXZ Ruzfkbz4UCmvrKHyPiOMkVdv8R64pBYfxU6h0CgQaCY6mmKBaR/9PkYLZDTGQemi cwpl5gb+XbFBjjm3d2h6AN+/k+jwc1DVWfywXl2wlIGbNPZ9A9YoDNgIfjFwsPA4 31sUrBGBojjWKg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:42 2025 by rpki-client