This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft File: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json) Hash identifier: wp/T5Ym+YCpEeejMn7CfmFJHWCuXDBFWTNLXAgcc47o= Subject key identifier: C6:0F:D2:25:4D:74:E3:34:6B:67:1D:D9:46:03:3F:65:DE:07:C2:34 Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019B31FABBB15C28C15E2323790D62ED7C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 15:01:14 +0000 Manifest this update: Thu 18 Dec 2025 15:01:14 +0000 Manifest next update: Fri 19 Dec 2025 15:01:14 +0000 Files and hashes: 1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=) 2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=) 3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=) 4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: TqG9kaQW0iPuB1qLGqIBQHimgFRvfH+1Ajedpl7W91s=) 5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:bb:b1:5c:28:c1:5e:23:23:79:0d:62:ed:7c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Dec 18 15:01:14 2025 GMT Not After : Dec 19 15:01:14 2025 GMT Subject: CN=c60fd2254d74e3346b671dd946033f65de07c234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:1f:5a:21:b0:1e:a6:43:e2:c8:0e:10:fa: 33:c8:ad:97:78:5d:ba:68:3c:3b:2f:3d:f7:c2:3f: 97:c7:42:a4:ee:6f:2e:57:41:5a:9e:ac:1e:d9:55: 61:01:74:2f:b5:7c:db:84:65:f7:c7:0f:8e:ef:4a: ce:21:5e:50:8b:b7:6a:0d:79:d2:18:37:56:b0:9f: 1e:9f:a7:d8:28:10:ae:e1:d9:67:99:64:a4:8c:40: 18:f3:b8:f2:02:d7:22:21:ad:f7:3a:f9:48:79:ac: a9:ad:fc:9f:b5:98:13:1d:53:21:42:9a:4e:dd:a6: 76:e0:2e:30:04:3c:03:08:36:67:48:58:d8:03:3c: 89:6e:6d:bd:ec:4e:20:85:7a:7a:09:e1:d5:e0:d9: 09:cf:8c:01:02:b7:fa:b7:b8:0a:91:05:fc:a4:9b: 9b:fc:c8:e8:76:07:28:56:07:ed:00:93:2c:c7:9f: bf:fa:30:39:22:89:ac:e3:1b:86:8d:1a:cf:a0:37: c8:59:fe:99:bf:b4:53:50:54:85:16:99:77:6d:82: 36:06:9c:4f:4c:e1:5f:93:5d:56:49:7f:bb:93:04: 9d:36:df:68:c4:57:8b:d6:ec:79:9b:28:bc:21:9e: 6d:24:15:cb:ba:8b:53:1d:23:f8:86:76:1c:03:ba: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:D2:25:4D:74:E3:34:6B:67:1D:D9:46:03:3F:65:DE:07:C2:34 X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b6:b2:17:8f:98:e3:e4:0f:5e:2e:cd:c6:54:bb:26:5e:b0: 1d:45:d7:3c:01:15:bd:4f:c8:ec:fd:ae:7d:85:5c:fb:04:40: d3:4a:e9:aa:d3:cb:fe:0a:b6:84:1c:41:19:b5:7f:3c:cc:38: b9:ef:c5:7e:e3:e5:ad:68:a5:ef:82:39:d0:9c:57:65:56:82: 35:e5:b3:f1:c9:f0:e2:51:d9:0c:48:60:0a:58:cd:62:4d:74: 26:b0:e7:3a:72:fd:dd:50:05:aa:35:79:0a:84:45:98:0e:28: 8d:55:04:08:66:fa:4a:31:97:9a:b1:ca:b3:d3:ca:41:75:5f: c3:67:1d:dc:a0:b1:37:c0:74:4b:81:8d:25:d2:74:73:e8:c7: 71:e9:df:24:55:fc:d8:02:5a:97:c7:72:ba:4a:44:bc:e3:a5: b8:91:6a:ef:4f:4e:ef:a6:ed:10:cb:20:b3:f9:a4:0f:88:7e: 92:8a:ab:5e:e2:ef:e8:81:e2:25:71:11:55:4e:db:5b:89:92: fa:40:5f:5d:15:84:ac:de:3b:29:60:3e:48:0f:19:21:20:74: 10:57:f5:f8:49:75:08:51:1d:51:7f:ed:ac:86:c7:cd:b2:70: fc:6d:d0:f3:79:56:39:d1:d7:cb:7c:88:95:e4:f8:52:d4:2d: 19:51:74:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+ruxXCjBXiMjeQ1i7XwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjUxMjE4MTUwMTE0WhcNMjUxMjE5MTUwMTE0WjAzMTEwLwYDVQQD EyhjNjBmZDIyNTRkNzRlMzM0NmI2NzFkZDk0NjAzM2Y2NWRlMDdjMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hQfWiGwHqZD4sgOEPozyK2XeF26 aDw7Lz33wj+Xx0Kk7m8uV0Fanqwe2VVhAXQvtXzbhGX3xw+O70rOIV5Qi7dqDXnS GDdWsJ8en6fYKBCu4dlnmWSkjEAY87jyAtciIa33OvlIeayprfyftZgTHVMhQppO 3aZ24C4wBDwDCDZnSFjYAzyJbm297E4ghXp6CeHV4NkJz4wBArf6t7gKkQX8pJub /MjodgcoVgftAJMsx5+/+jA5Ioms4xuGjRrPoDfIWf6Zv7RTUFSFFpl3bYI2BpxP TOFfk11WSX+7kwSdNt9oxFeL1ux5myi8IZ5tJBXLuotTHSP4hnYcA7r1HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYP0iVNdOM0a2cd2UYDP2XeB8I0MB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7ayF4+Y 4+QPXi7NxlS7Jl6wHUXXPAEVvU/I7P2ufYVc+wRA00rpqtPL/gq2hBxBGbV/PMw4 ue/FfuPlrWil74I50JxXZVaCNeWz8cnw4lHZDEhgCljNYk10JrDnOnL93VAFqjV5 CoRFmA4ojVUECGb6SjGXmrHKs9PKQXVfw2cd3KCxN8B0S4GNJdJ0c+jHcenfJFX8 2AJal8dyukpEvOOluJFq709O76btEMsgs/mkD4h+koqrXuLv6IHiJXERVU7bW4mS +kBfXRWErN47KWA+SA8ZISB0EFf1+El1CFEdUX/trIbHzbJw/G3Q83lWOdHXy3yI leT4UtQtGVF0+A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:39:06 2025 by rpki-client