This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json) Hash identifier: b9+2LF5nnTG/zkN0a0iiWXPfSXaJskPuNWX2r8DOT7M= Subject key identifier: F9:2B:87:64:A7:A9:2C:6A:75:7A:00:FA:FF:4F:77:48:E3:26:0B:1E Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Certificate serial: 019B19BB26E2629A27DDC77D75A9A7A70A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft Manifest number: 06F6 Signing time: Sat 13 Dec 2025 22:00:54 +0000 Manifest this update: Sat 13 Dec 2025 22:00:54 +0000 Manifest next update: Sun 14 Dec 2025 22:00:54 +0000 Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=) 2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: ZZuhWM/5Vg4ydGgrDXlrnHZFny5igLubfKxV+XCAFhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:26:e2:62:9a:27:dd:c7:7d:75:a9:a7:a7:0a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Validity Not Before: Dec 13 22:00:54 2025 GMT Not After : Dec 14 22:00:54 2025 GMT Subject: CN=f92b8764a7a92c6a757a00faff4f7748e3260b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:5e:e2:bd:d9:09:d7:7d:1d:c5:41:06:33: d8:a4:12:c3:a1:a9:20:06:6a:cd:25:83:46:ba:d1: cc:58:63:67:f2:21:ed:59:05:8a:f4:82:8c:27:83: c2:da:db:eb:09:8a:27:4d:71:0b:e2:c5:0c:8c:f6: ff:39:7c:14:f3:38:ba:99:c1:af:7d:7a:60:d2:46: 2c:fc:d9:6a:10:a3:3e:76:0f:07:e8:50:7f:3d:b8: 59:08:b0:f0:0e:ff:34:79:61:48:8d:75:b5:57:e2: 9c:1b:e1:c2:8a:32:55:b8:b8:f6:ac:09:64:95:13: 16:cf:77:44:ed:c2:af:da:91:19:a7:08:2f:87:14: 75:a4:81:a0:b3:93:72:ca:a2:f2:1e:5c:d1:f1:d1: 26:c1:58:0b:2e:db:47:4a:3e:63:5e:b8:6f:f5:fc: 79:8f:e4:2c:f3:4e:1f:7f:94:82:f6:27:56:67:8d: a9:90:99:d7:30:3b:b6:1b:f2:2a:c1:6f:de:e2:b8: 17:b9:43:a6:40:00:9d:50:7a:bc:08:f6:33:33:fa: 90:f9:b4:d0:1f:11:c8:62:3f:6a:4f:3b:12:08:d0: 28:fc:78:44:b0:c5:3e:03:bc:fb:64:67:2d:e2:c9: cb:18:ea:08:21:21:ae:cf:69:ec:dc:cc:a7:8f:1b: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2B:87:64:A7:A9:2C:6A:75:7A:00:FA:FF:4F:77:48:E3:26:0B:1E X509v3 Authority Key Identifier: keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:07:8a:f1:94:aa:20:45:81:6a:d9:23:57:0b:a1:ed:78:6e: 36:2e:94:20:b4:10:33:97:53:8d:b1:c9:04:00:5d:61:f4:a3: f6:cd:64:6b:3c:9b:4a:5f:fb:26:ca:06:f5:ef:8e:9e:7f:9f: 42:8c:98:b4:83:1d:04:ca:24:69:68:fb:8a:d4:72:39:65:2f: 72:0c:f4:94:97:d8:e1:51:e1:ce:9f:52:57:fc:e2:9b:63:67: f1:72:ff:b5:8b:c7:39:7c:b5:6e:06:dd:d7:53:62:e7:56:bc: 71:36:5d:c6:ce:6e:e9:db:4c:f1:9b:b2:63:bf:ff:75:ff:5f: 24:56:fd:fe:ff:66:36:35:23:16:f4:a8:6c:7f:4f:75:13:0d: 6f:ab:0f:71:b3:4e:ae:a0:b1:ce:84:29:69:50:de:57:28:44: 54:f2:24:bd:5f:db:2e:81:2e:d8:7f:46:dd:64:ae:08:d9:81: c8:02:ed:d7:71:1b:b0:9d:bc:8f:42:76:3d:ea:ae:c6:32:d3: 8d:be:8e:6b:8d:db:10:c3:98:1a:bf:e9:58:a9:ef:33:6b:06: 30:ec:e9:c1:97:b9:29:1f:60:f8:c6:9b:42:d5:18:17:e1:c8: 27:ba:ea:7a:f1:48:26:81:3a:e3:e3:54:8c:39:3a:a7:1e:41: 5f:3d:7b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuybiYpon3cd9damnpwojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw YzE5M2YwHhcNMjUxMjEzMjIwMDU0WhcNMjUxMjE0MjIwMDU0WjAzMTEwLwYDVQQD EyhmOTJiODc2NGE3YTkyYzZhNzU3YTAwZmFmZjRmNzc0OGUzMjYwYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y9e4r3ZCdd9HcVBBjPYpBLDoakg BmrNJYNGutHMWGNn8iHtWQWK9IKMJ4PC2tvrCYonTXEL4sUMjPb/OXwU8zi6mcGv fXpg0kYs/NlqEKM+dg8H6FB/PbhZCLDwDv80eWFIjXW1V+KcG+HCijJVuLj2rAlk lRMWz3dE7cKv2pEZpwgvhxR1pIGgs5NyyqLyHlzR8dEmwVgLLttHSj5jXrhv9fx5 j+Qs804ff5SC9idWZ42pkJnXMDu2G/IqwW/e4rgXuUOmQACdUHq8CPYzM/qQ+bTQ HxHIYj9qTzsSCNAo/HhEsMU+A7z7ZGct4snLGOoIISGuz2ns3MynjxvHPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkrh2SnqSxqdXoA+v9Pd0jjJgseMB8GA1UdIwQY MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5 LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgeK8ZSq IEWBatkjVwuh7XhuNi6UILQQM5dTjbHJBABdYfSj9s1kazybSl/7JsoG9e+Onn+f QoyYtIMdBMokaWj7itRyOWUvcgz0lJfY4VHhzp9SV/zim2Nn8XL/tYvHOXy1bgbd 11Ni51a8cTZdxs5u6dtM8ZuyY7//df9fJFb9/v9mNjUjFvSobH9PdRMNb6sPcbNO rqCxzoQpaVDeVyhEVPIkvV/bLoEu2H9G3WSuCNmByALt13EbsJ28j0J2PequxjLT jb6Oa43bEMOYGr/pWKnvM2sGMOzpwZe5KR9g+MabQtUYF+HIJ7rqevFIJoE64+NU jDk6px5BXz17UQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:44 2025 by rpki-client