This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json) Hash identifier: +LfMjpMlUTkD+uLv36JO7Qty15SUBCgJrZgRmDgTflU= Subject key identifier: 83:36:AA:96:DB:D8:78:52:BC:67:00:3C:DE:07:65:2B:44:73:75:AC Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Certificate serial: 019AF61CC5F4A58A9D386D7F11DFD3BC9F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft Manifest number: 14A9 Signing time: Sun 07 Dec 2025 00:01:12 +0000 Manifest this update: Sun 07 Dec 2025 00:01:12 +0000 Manifest next update: Mon 08 Dec 2025 00:01:12 +0000 Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=) 2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: /2DNaGoar8RKxHlMXyyoISmE+V9hODbtX5p+XK5m0VI=) 3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:c5:f4:a5:8a:9d:38:6d:7f:11:df:d3:bc:9f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Validity Not Before: Dec 7 00:01:12 2025 GMT Not After : Dec 8 00:01:12 2025 GMT Subject: CN=8336aa96dbd87852bc67003cde07652b447375ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:9f:a3:f4:d3:f8:4f:e9:48:3c:74:de:88: 64:ee:da:17:81:cc:31:1c:04:47:f8:f2:79:74:9b: 98:b0:1f:d4:9d:c5:d4:ff:09:00:50:19:ab:f4:02: 62:8b:93:88:a3:39:ac:4f:90:46:60:73:72:24:89: d9:f7:74:4a:13:e1:90:18:4d:14:43:57:7d:8d:b8: de:b5:b8:e8:d9:63:e6:6f:3f:9d:4f:0e:f7:2e:4b: 43:c6:25:31:a3:07:4f:70:c5:6f:34:87:61:5b:e5: 36:34:66:bf:b4:fa:7e:e5:20:41:38:0b:75:cf:00: 16:3e:11:03:cd:6a:e9:a4:22:cd:07:48:ae:79:77: 0f:7a:8f:03:ec:32:da:23:49:51:e6:25:37:18:49: 06:3b:6c:16:27:b6:5f:8c:9a:11:36:d6:ee:e4:ad: 1e:31:a6:2b:08:2d:cd:92:42:eb:8e:e9:3f:33:16: 81:2d:4d:70:0f:70:8f:c8:da:62:45:3e:3d:4d:e4: 04:7c:a2:28:62:3e:fa:f8:48:25:de:dd:ae:04:90: 23:0d:6b:19:8d:99:37:37:04:3e:4b:d5:55:b8:49: 33:a7:90:7c:4d:6c:c8:3e:a6:64:56:fb:15:8e:59: 1f:f7:da:6c:21:36:bb:8b:aa:7b:91:64:e8:57:e3: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:AA:96:DB:D8:78:52:BC:67:00:3C:DE:07:65:2B:44:73:75:AC X509v3 Authority Key Identifier: keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6d:be:70:1b:9b:43:03:b2:31:21:87:57:e6:5d:cb:74:2a: b0:88:4d:d8:cc:cf:f5:e7:23:47:2b:88:96:bb:a4:36:8e:5e: c5:20:e7:f2:47:94:f0:f4:d7:27:20:e3:c4:e5:99:ca:28:ea: 45:da:1e:fe:57:95:c5:1e:38:19:28:2c:6f:25:64:32:57:cf: cb:9a:ec:84:18:3d:d8:8d:86:3d:be:bf:06:2e:19:95:5f:bd: 8c:7c:19:62:fd:7d:6f:16:3a:ee:df:97:34:4e:b6:6a:c1:07: cc:85:66:a7:7d:c9:30:e9:d8:ea:e4:ad:ff:81:df:52:18:ca: 21:2a:2a:d4:0a:c4:35:88:ee:96:d7:f7:8d:ef:cd:34:e3:13: c5:fe:f2:3d:dc:2b:c2:e4:84:d1:3f:f6:4f:48:4e:3f:c2:58: 35:b7:46:3c:60:ec:59:75:01:eb:46:8a:30:cc:99:25:a1:82: 33:61:d1:c8:ab:7b:38:0c:5e:d8:ee:b4:35:5c:15:b1:2a:3a: 07:11:1f:7d:26:5c:31:33:79:a5:f4:6d:c4:1a:36:02:51:66: 18:b5:06:e9:ed:82:9f:cf:81:fa:8b:99:ce:36:d0:96:fc:6a: f0:4e:0b:63:ce:1f:13:30:78:f7:30:c1:32:f1:dc:a2:0d:08: f3:42:9c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HMX0pYqdOG1/Ed/TvJ+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3 ZDI3Y2QwHhcNMjUxMjA3MDAwMTEyWhcNMjUxMjA4MDAwMTEyWjAzMTEwLwYDVQQD Eyg4MzM2YWE5NmRiZDg3ODUyYmM2NzAwM2NkZTA3NjUyYjQ0NzM3NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdOfo/TT+E/pSDx03ohk7toXgcwx HARH+PJ5dJuYsB/UncXU/wkAUBmr9AJii5OIozmsT5BGYHNyJInZ93RKE+GQGE0U Q1d9jbjetbjo2WPmbz+dTw73LktDxiUxowdPcMVvNIdhW+U2NGa/tPp+5SBBOAt1 zwAWPhEDzWrppCLNB0iueXcPeo8D7DLaI0lR5iU3GEkGO2wWJ7ZfjJoRNtbu5K0e MaYrCC3NkkLrjuk/MxaBLU1wD3CPyNpiRT49TeQEfKIoYj76+Egl3t2uBJAjDWsZ jZk3NwQ+S9VVuEkzp5B8TWzIPqZkVvsVjlkf99psITa7i6p7kWToV+N2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM2qpbb2HhSvGcAPN4HZStEc3WsMB8GA1UdIwQY MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADG2+cBub QwOyMSGHV+Zdy3QqsIhN2MzP9ecjRyuIlrukNo5exSDn8keU8PTXJyDjxOWZyijq Rdoe/leVxR44GSgsbyVkMlfPy5rshBg92I2GPb6/Bi4ZlV+9jHwZYv19bxY67t+X NE62asEHzIVmp33JMOnY6uSt/4HfUhjKISoq1ArENYjultf3je/NNOMTxf7yPdwr wuSE0T/2T0hOP8JYNbdGPGDsWXUB60aKMMyZJaGCM2HRyKt7OAxe2O60NVwVsSo6 BxEffSZcMTN5pfRtxBo2AlFmGLUG6e2Cn8+B+ouZzjbQlvxq8E4LY84fEzB49zDB MvHcog0I80KcXg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:01 2025 by rpki-client