This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft File: vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft (raw, json) Hash identifier: U7PRRPUEIQLq3897W6MSr4M2FFYzHswUTXNJAj8MMtM= Subject key identifier: 5D:64:CD:9E:1C:27:3B:31:08:B0:68:83:4F:FB:B6:35:C3:EF:7B:46 Authority key identifier: BE:55:39:AF:E9:25:DB:80:B4:15:EF:B1:4C:63:1B:2D:82:C8:CE:DD Certificate issuer: /CN=be5539afe925db80b415efb14c631b2d82c8cedd Certificate serial: 019B337B5ADEFFABD842AB3D14EC6D9FE5C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlU5r-kl24C0Fe-xTGMbLYLIzt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft Manifest number: 0360 Signing time: Thu 18 Dec 2025 22:01:20 +0000 Manifest this update: Thu 18 Dec 2025 22:01:20 +0000 Manifest next update: Fri 19 Dec 2025 22:01:20 +0000 Files and hashes: 1: vlU5r-kl24C0Fe-xTGMbLYLIzt0.crl (hash: xg6SAKcjS8T/TggC1cjYJIz9unInTuu9pDzQ01/uAtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft rsync://rpki.ripe.net/repository/DEFAULT/vlU5r-kl24C0Fe-xTGMbLYLIzt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:5a:de:ff:ab:d8:42:ab:3d:14:ec:6d:9f:e5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be5539afe925db80b415efb14c631b2d82c8cedd Validity Not Before: Dec 18 22:01:20 2025 GMT Not After : Dec 19 22:01:20 2025 GMT Subject: CN=5d64cd9e1c273b3108b068834ffbb635c3ef7b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:b9:db:fc:25:51:e5:00:81:f7:f2:8d:63: 2f:a1:28:f1:c0:7e:d1:af:b0:14:45:69:af:0b:5e: f5:1b:6a:de:26:ca:ee:3e:35:01:4f:e7:2d:06:55: d5:dc:0d:59:33:e1:4c:52:2f:bc:af:10:25:82:e9: 64:fe:6b:29:6e:3a:b9:83:6b:8a:ca:e2:ac:44:88: 04:68:2e:35:31:23:88:56:e6:66:54:f4:d5:2b:10: ce:bd:bb:2c:fb:98:cf:12:ae:6a:8d:60:e3:04:52: 04:38:80:b4:a2:88:83:ec:3f:ca:81:76:91:02:78: f0:31:3a:6b:2f:ec:ec:0a:05:93:5a:e8:b6:8f:3d: 4f:67:47:3b:71:8e:33:4d:83:ab:5d:3c:9c:b9:f5: ed:23:58:10:4d:4a:92:3f:03:97:13:52:c2:63:ec: e7:68:db:54:7d:d7:37:fc:8a:0e:52:04:b8:8c:6b: 3a:ab:f2:66:5f:36:0e:69:eb:42:10:22:9d:f8:e1: c5:cc:5b:3b:d1:60:ab:fa:48:d3:44:26:cb:b6:e0: 80:d5:02:ca:4e:c7:f9:68:43:e0:5f:8d:bf:08:94: 4a:66:ae:05:ac:e9:f7:40:b9:75:1a:51:26:57:d9: 19:8b:44:25:11:9c:e1:aa:03:70:62:d3:a4:0b:06: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:CD:9E:1C:27:3B:31:08:B0:68:83:4F:FB:B6:35:C3:EF:7B:46 X509v3 Authority Key Identifier: keyid:BE:55:39:AF:E9:25:DB:80:B4:15:EF:B1:4C:63:1B:2D:82:C8:CE:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlU5r-kl24C0Fe-xTGMbLYLIzt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/733dae-0021-44e5-92e5-2500f4efab69/1/vlU5r-kl24C0Fe-xTGMbLYLIzt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:da:71:13:31:7a:16:4a:b0:e6:90:f8:49:50:7d:22:46:14: 52:b2:73:c9:2b:84:74:e6:a4:e4:73:95:cd:bf:14:4e:a7:54: 44:88:bd:15:52:87:07:94:58:da:49:9a:e9:48:4d:4b:2c:78: 42:67:af:1d:29:74:f7:e6:39:03:3f:84:32:ae:fd:50:f7:0a: 27:21:17:19:e2:84:e5:32:bc:28:78:f8:b2:d1:7d:4b:fb:f6: be:e4:fd:4a:73:46:8c:e8:77:d7:6c:33:f4:5e:e8:fe:99:e7: c7:b7:09:d6:af:48:3c:55:ec:09:70:56:30:9c:26:c0:4b:0e: 6b:4b:9b:a5:f6:20:12:79:3f:54:da:d9:40:ef:c7:a6:35:96: 41:99:a2:87:11:30:f6:92:39:cb:dd:7b:03:e0:f9:11:28:a4: 12:a9:d2:d8:83:98:65:50:aa:e5:ce:80:c7:cb:89:8c:f8:dc: c5:f5:42:ea:4e:93:f0:5f:b0:31:87:b0:a6:8a:74:1b:07:67: 09:4b:7b:75:cd:9a:a4:14:12:06:48:4e:44:c0:90:4a:23:f8: 84:1c:c3:e4:e4:83:74:e4:21:15:be:bc:d3:0a:02:3b:a6:b0: 9a:d2:70:85:ff:62:66:1f:a9:93:af:45:ed:70:06:c8:f9:6a: 7a:7b:8d:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1re/6vYQqs9FOxtn+XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUzOWFmZTkyNWRiODBiNDE1ZWZiMTRjNjMxYjJkODJj OGNlZGQwHhcNMjUxMjE4MjIwMTIwWhcNMjUxMjE5MjIwMTIwWjAzMTEwLwYDVQQD Eyg1ZDY0Y2Q5ZTFjMjczYjMxMDhiMDY4ODM0ZmZiYjYzNWMzZWY3YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ky52/wlUeUAgffyjWMvoSjxwH7R r7AURWmvC171G2reJsruPjUBT+ctBlXV3A1ZM+FMUi+8rxAlgulk/mspbjq5g2uK yuKsRIgEaC41MSOIVuZmVPTVKxDOvbss+5jPEq5qjWDjBFIEOIC0ooiD7D/KgXaR AnjwMTprL+zsCgWTWui2jz1PZ0c7cY4zTYOrXTycufXtI1gQTUqSPwOXE1LCY+zn aNtUfdc3/IoOUgS4jGs6q/JmXzYOaetCECKd+OHFzFs70WCr+kjTRCbLtuCA1QLK Tsf5aEPgX42/CJRKZq4FrOn3QLl1GlEmV9kZi0QlEZzhqgNwYtOkCwbYvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1kzZ4cJzsxCLBog0/7tjXD73tGMB8GA1UdIwQY MBaAFL5VOa/pJduAtBXvsUxjGy2CyM7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVNXIta2wyNEMwRmUteFRHTWJMWUxJenQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MzNkYWUtMDAyMS00NGU1LTkyZTUt MjUwMGY0ZWZhYjY5LzEvdmxVNXIta2wyNEMwRmUteFRHTWJMWUxJenQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MzNkYWUtMDAyMS00NGU1LTkyZTUtMjUwMGY0ZWZhYjY5 LzEvdmxVNXIta2wyNEMwRmUteFRHTWJMWUxJenQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtpxEzF6 Fkqw5pD4SVB9IkYUUrJzySuEdOak5HOVzb8UTqdURIi9FVKHB5RY2kma6UhNSyx4 QmevHSl09+Y5Az+EMq79UPcKJyEXGeKE5TK8KHj4stF9S/v2vuT9SnNGjOh312wz 9F7o/pnnx7cJ1q9IPFXsCXBWMJwmwEsOa0ubpfYgEnk/VNrZQO/HpjWWQZmihxEw 9pI5y917A+D5ESikEqnS2IOYZVCq5c6Ax8uJjPjcxfVC6k6T8F+wMYewpop0Gwdn CUt7dc2apBQSBkhORMCQSiP4hBzD5OSDdOQhFb680woCO6awmtJwhf9iZh+pk69F 7XAGyPlqenuN+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:52 2025 by rpki-client