This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: gFZioQTeSet/b35eIb35G+5aa3t8fyu94+fwqdd8IEo= Subject key identifier: 31:9D:DB:C7:84:B4:DC:1C:EA:68:4B:95:E1:D7:A1:51:E6:71:1A:E1 Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019B4815B0008E380D6F6533A715A407033B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 0646 Signing time: Mon 22 Dec 2025 22:02:19 +0000 Manifest this update: Mon 22 Dec 2025 22:02:19 +0000 Manifest next update: Tue 23 Dec 2025 22:02:19 +0000 Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: +mJwbQM+qsKvQDM2z+EBfHyZa5nTGJEnjru41Gfwn0Y=) 2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:b0:00:8e:38:0d:6f:65:33:a7:15:a4:07:03:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Dec 22 22:02:19 2025 GMT Not After : Dec 23 22:02:19 2025 GMT Subject: CN=319ddbc784b4dc1cea684b95e1d7a151e6711ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:39:20:4e:b2:c5:56:9c:aa:e3:94:d4:b6: 3f:45:1f:9e:c4:66:9a:f3:e7:f9:37:c9:7e:ab:10: 3d:fb:66:b2:67:37:93:34:20:ed:d8:bb:cc:5c:15: e6:7e:38:a3:23:75:b8:24:f0:af:04:bf:26:25:c5: 7e:35:7d:14:04:46:be:52:a8:ce:51:6e:57:69:e7: 9c:8a:bc:13:47:04:0f:20:e5:18:37:eb:95:01:43: 4c:77:32:8e:7c:6c:b7:3b:7a:5e:e3:1c:cf:36:d8: 78:66:98:0c:15:77:3a:c6:eb:19:48:39:8d:ca:9e: c4:2a:74:9a:20:b9:18:f6:cd:77:fa:1e:94:f9:8e: 1f:ba:a5:ad:2d:5e:5b:06:a0:53:75:7d:83:2c:c0: 85:0a:66:2f:e7:47:08:c0:99:fb:a5:f7:35:95:58: 24:83:e4:ce:98:65:f8:e9:c5:dc:27:38:b4:4b:b9: e6:3b:74:6b:be:09:89:f8:79:5c:a1:e1:5f:db:08: d8:c7:9f:d8:6d:d9:84:f7:26:63:ac:9e:38:cd:b0: cc:9b:6a:a2:f4:de:71:d6:7b:1f:40:0a:74:d1:38: c1:b0:1f:f6:13:dd:1f:c4:63:fd:26:40:a1:ba:36: f4:72:ad:42:1a:ba:3a:99:1d:9c:a2:7c:b2:f2:ba: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9D:DB:C7:84:B4:DC:1C:EA:68:4B:95:E1:D7:A1:51:E6:71:1A:E1 X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cb:7f:f1:84:7a:58:9a:93:a1:ad:62:b8:5b:f7:b7:4c:b9: b6:96:5a:d5:e9:8f:80:42:dd:29:5f:c6:f5:a5:eb:da:98:24: da:cd:a9:10:e3:e1:8c:1b:3a:33:b8:7f:38:4c:ac:08:08:bc: da:7a:0b:6b:b2:0a:db:98:cd:1b:75:f7:db:f9:83:a6:2f:f6: cb:d3:00:01:14:48:fa:b6:77:b7:dd:55:30:b3:a4:15:a3:84: 40:d8:bd:47:f5:34:50:d6:69:a3:05:e6:92:a7:d7:eb:e6:4d: 25:08:fc:72:f9:9a:57:16:37:d3:19:c3:fd:48:99:51:9b:ec: 66:7b:27:0a:02:06:ad:7f:d9:f7:b7:31:63:9f:92:3d:e5:c6: c0:bd:81:98:f1:fc:b8:19:02:5f:72:05:ac:ab:a7:d9:59:10: 9d:9c:e6:b8:fe:f6:df:20:27:80:d8:ac:36:22:52:49:d5:9d: 34:70:4c:cc:02:3c:00:fe:bf:03:47:45:d4:e6:4f:ae:ea:31: 74:83:ad:c5:09:0d:f5:89:b6:67:ce:f7:0f:d6:8a:d4:c7:dc: fa:aa:2f:34:4c:e2:29:b8:01:83:0a:cf:3b:e6:d9:fd:23:48: 24:ce:fd:e9:a2:62:4b:14:1e:f7:6d:88:f4:74:3b:b5:b3:25: 48:71:76:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbAAjjgNb2UzpxWkBwM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjUxMjIyMjIwMjE5WhcNMjUxMjIzMjIwMjE5WjAzMTEwLwYDVQQD EygzMTlkZGJjNzg0YjRkYzFjZWE2ODRiOTVlMWQ3YTE1MWU2NzExYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSs5IE6yxVacquOU1LY/RR+exGaa 8+f5N8l+qxA9+2ayZzeTNCDt2LvMXBXmfjijI3W4JPCvBL8mJcV+NX0UBEa+UqjO UW5XaeecirwTRwQPIOUYN+uVAUNMdzKOfGy3O3pe4xzPNth4ZpgMFXc6xusZSDmN yp7EKnSaILkY9s13+h6U+Y4fuqWtLV5bBqBTdX2DLMCFCmYv50cIwJn7pfc1lVgk g+TOmGX46cXcJzi0S7nmO3RrvgmJ+HlcoeFf2wjYx5/YbdmE9yZjrJ44zbDMm2qi 9N5x1nsfQAp00TjBsB/2E90fxGP9JkChujb0cq1CGro6mR2conyy8rrrJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGd28eEtNwc6mhLleHXoVHmcRrhMB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMt/8YR6 WJqToa1iuFv3t0y5tpZa1emPgELdKV/G9aXr2pgk2s2pEOPhjBs6M7h/OEysCAi8 2noLa7IK25jNG3X32/mDpi/2y9MAARRI+rZ3t91VMLOkFaOEQNi9R/U0UNZpowXm kqfX6+ZNJQj8cvmaVxY30xnD/UiZUZvsZnsnCgIGrX/Z97cxY5+SPeXGwL2BmPH8 uBkCX3IFrKun2VkQnZzmuP723yAngNisNiJSSdWdNHBMzAI8AP6/A0dF1OZPruox dIOtxQkN9Ym2Z873D9aK1Mfc+qovNEziKbgBgwrPO+bZ/SNIJM796aJiSxQe922I 9HQ7tbMlSHF2zA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:47:57 2025 by rpki-client