This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json) Hash identifier: 9I6FFT16vHZR59MlOvMXBwHP6PUQAqNGQJ5sMwjvF6A= Subject key identifier: BF:B6:8D:A4:53:37:A2:1E:41:8D:08:AD:7F:E5:51:75:33:FC:E2:7F Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Certificate serial: 019AF8AF53CB436068105FEBC57BAB4EBA0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft Manifest number: 04AB Signing time: Sun 07 Dec 2025 12:00:30 +0000 Manifest this update: Sun 07 Dec 2025 12:00:30 +0000 Manifest next update: Mon 08 Dec 2025 12:00:30 +0000 Files and hashes: 1: V1Wl9oxl7r8nt_pqx0M-wgiurRQ.roa (hash: sSJ8RxEhRyTMuAByoaK6L4W5k8CwLIPUs3kMD8DH4rM=) 2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: 5xRMqNW0sx7C0z7hCWjxRjihJdAns+NYLqJSso0heSo=) 3: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:af:53:cb:43:60:68:10:5f:eb:c5:7b:ab:4e:ba:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Validity Not Before: Dec 7 12:00:30 2025 GMT Not After : Dec 8 12:00:30 2025 GMT Subject: CN=bfb68da45337a21e418d08ad7fe5517533fce27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:b8:2c:82:a9:3e:17:82:10:e2:24:ea:e0: f1:89:b1:b7:f2:68:33:36:bc:36:63:4f:a2:bf:15: df:58:ea:16:da:16:f5:0e:af:2d:28:fa:76:58:dc: df:d3:ea:50:1f:8f:e1:0a:d7:19:07:91:f0:8d:9d: 27:15:90:3d:39:94:e5:50:4b:99:db:a9:27:1f:60: 95:b6:e3:ff:0e:69:34:6c:8f:9f:ac:71:98:25:1e: 94:72:03:96:83:70:bc:26:7c:f7:87:0b:27:c5:db: 95:00:d3:17:d6:13:15:c1:26:a1:1f:8c:85:1a:8a: 43:e6:e3:cf:f2:d7:62:de:b7:62:5c:aa:da:96:32: 9a:5f:55:19:e8:9e:45:94:7d:db:14:e1:ea:b1:bf: 46:6b:c8:c2:5d:e5:36:94:e8:6d:ab:10:38:ba:67: a5:f1:f8:1d:d8:ea:fd:39:17:1f:1e:ff:02:db:48: a8:9e:cf:b9:2c:d9:1d:42:e0:49:ca:66:7b:65:50: aa:78:8f:6d:8f:fe:e1:31:8d:f6:cb:a5:44:d1:a6: 69:fa:a6:02:41:f6:6f:cc:09:74:4b:92:70:dc:c5: fe:70:16:f5:6c:f3:3b:a5:51:e1:cf:16:1e:05:d5: ba:48:57:66:b6:01:a6:51:15:c6:63:1c:ad:a9:47: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:8D:A4:53:37:A2:1E:41:8D:08:AD:7F:E5:51:75:33:FC:E2:7F X509v3 Authority Key Identifier: keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:0d:7a:48:2e:b2:06:8d:08:d2:80:6a:30:d8:3f:9c:4c: e5:64:4c:f8:0d:d2:a7:1d:a8:e7:37:07:8d:33:97:5a:1a:46: 03:87:92:4f:f2:c1:5b:22:74:01:8d:53:41:54:06:99:b2:b1: 97:1f:76:d4:31:08:c4:8c:5d:c1:d1:fb:a5:f9:97:d3:44:c4: 59:c0:4c:62:c5:28:71:08:e7:19:44:a8:89:0f:8d:87:3d:31: 2a:37:a3:6f:61:0a:3c:22:c7:97:ef:4b:d5:e7:62:0d:bd:d2: 52:0c:35:b7:27:e7:58:b9:72:e4:13:05:17:db:5f:cf:42:95: a4:57:08:5e:49:25:a3:a5:df:ef:15:9e:95:3e:1a:25:a8:ce: 81:a0:49:d5:b0:3f:1d:7d:3a:50:b0:10:41:b4:ee:b5:fd:3e: 7f:d3:42:e5:e0:ab:a7:34:6e:c4:21:e0:10:3e:91:dc:f7:f3: 3f:38:14:1b:31:1a:fe:0d:74:c3:40:f5:3e:7d:07:ea:64:b7: 87:4f:9c:4a:3e:73:f8:cc:a7:fb:81:ef:a5:00:25:e2:e9:03: e2:1f:9f:3e:9b:bf:74:05:25:67:fa:9c:60:bf:7b:8f:d6:e3: 3b:f3:6d:a0:22:1d:fd:38:62:80:ea:2b:e3:c9:64:4c:5a:55: 42:fb:57:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4r1PLQ2BoEF/rxXurTroPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw MTVmMzAwHhcNMjUxMjA3MTIwMDMwWhcNMjUxMjA4MTIwMDMwWjAzMTEwLwYDVQQD EyhiZmI2OGRhNDUzMzdhMjFlNDE4ZDA4YWQ3ZmU1NTE3NTMzZmNlMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OW4LIKpPheCEOIk6uDxibG38mgz Nrw2Y0+ivxXfWOoW2hb1Dq8tKPp2WNzf0+pQH4/hCtcZB5HwjZ0nFZA9OZTlUEuZ 26knH2CVtuP/Dmk0bI+frHGYJR6UcgOWg3C8Jnz3hwsnxduVANMX1hMVwSahH4yF GopD5uPP8tdi3rdiXKraljKaX1UZ6J5FlH3bFOHqsb9Ga8jCXeU2lOhtqxA4umel 8fgd2Or9ORcfHv8C20ions+5LNkdQuBJymZ7ZVCqeI9tj/7hMY32y6VE0aZp+qYC QfZvzAl0S5Jw3MX+cBb1bPM7pVHhzxYeBdW6SFdmtgGmURXGYxytqUc2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+2jaRTN6IeQY0IrX/lUXUz/OJ/MB8GA1UdIwQY MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et ZTNlMDRiZDRmMjQyLzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJENekgu sgaNCNKAajDYP5xM5WRM+A3Spx2o5zcHjTOXWhpGA4eST/LBWyJ0AY1TQVQGmbKx lx921DEIxIxdwdH7pfmX00TEWcBMYsUocQjnGUSoiQ+Nhz0xKjejb2EKPCLHl+9L 1ediDb3SUgw1tyfnWLly5BMFF9tfz0KVpFcIXkklo6Xf7xWelT4aJajOgaBJ1bA/ HX06ULAQQbTutf0+f9NC5eCrpzRuxCHgED6R3PfzPzgUGzEa/g10w0D1Pn0H6mS3 h0+cSj5z+Myn+4HvpQAl4ukD4h+fPpu/dAUlZ/qcYL97j9bjO/NtoCId/ThigOor 48lkTFpVQvtXjg== -----END CERTIFICATE-----Generated at Sun Dec 7 21:03:52 2025 by rpki-client