This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: dNtgtCWSwIiSBqKes5O4nJTLCwDmZx4xaMrmIWd3ZHo= Subject key identifier: 2D:4B:02:86:68:1C:60:42:71:9F:B8:4D:55:67:0A:19:2E:A8:1B:9C Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019B047D680B98CAAC4EC13FEF7881956BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 0623 Signing time: Tue 09 Dec 2025 19:01:25 +0000 Manifest this update: Tue 09 Dec 2025 19:01:25 +0000 Manifest next update: Wed 10 Dec 2025 19:01:25 +0000 Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: cAfRzrNWpdmYAFOuJ8ZsgMenOkSKYc/50+Dc2B234/4=) 2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7d:68:0b:98:ca:ac:4e:c1:3f:ef:78:81:95:6b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Dec 9 19:01:25 2025 GMT Not After : Dec 10 19:01:25 2025 GMT Subject: CN=2d4b0286681c6042719fb84d55670a192ea81b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:15:61:f9:f8:02:38:12:96:28:6e:25:09: ef:0d:ec:97:b8:04:c8:08:78:43:b1:e5:18:41:c2: 8e:96:f0:c9:30:56:5e:35:ba:ea:d9:70:fe:f1:ba: 52:b9:05:67:79:9d:48:f4:8f:b8:83:0e:d7:47:4c: d4:b5:2c:e6:49:8f:a8:4b:e0:5e:f6:b3:bc:fe:4f: 0e:60:0a:74:46:b5:ec:e5:9a:ba:46:a9:1c:42:24: 20:7b:de:13:81:b0:2e:82:e2:ef:11:cc:13:38:c0: f7:27:43:5f:cf:b6:3e:c7:3c:80:f1:20:4c:67:6b: 2a:a2:92:be:a7:80:2e:08:19:8f:57:f6:17:9d:2f: f5:a3:08:24:b5:de:6c:8c:cc:e5:23:78:76:df:89: 20:cd:db:a5:57:f2:76:5b:ef:cc:b4:5f:ba:cd:6d: 07:a8:73:88:1d:ca:40:99:d3:a2:71:34:ef:8a:47: f6:ed:9b:bc:cd:a7:20:9b:a3:bd:87:2f:e5:e0:e8: ef:5f:48:6d:0d:d4:ab:4e:2b:69:48:69:72:f7:b5: 68:38:02:d8:78:1a:63:5e:bb:50:ee:1d:1c:54:5a: e0:d7:25:14:d4:4e:f8:24:05:61:e7:d7:42:88:fe: fe:56:eb:ea:cd:81:8e:84:95:71:50:6e:fb:74:f6: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:02:86:68:1C:60:42:71:9F:B8:4D:55:67:0A:19:2E:A8:1B:9C X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:90:12:5d:d4:aa:df:94:5f:4b:96:14:72:f8:34:8e:67:7a: fe:9b:4f:f3:b0:30:34:2e:83:66:a7:a2:e7:b9:d7:0e:1c:10: 00:04:23:4b:1f:2e:51:3f:77:df:26:c5:5d:b9:79:1b:10:ca: f4:14:66:92:37:16:49:34:60:b7:7f:da:f1:34:af:b7:f8:a8: 52:09:7c:f2:02:67:08:a1:b0:56:f5:e6:a9:4b:34:d0:58:ed: 3f:9c:1c:20:d1:89:08:c1:0c:ec:a3:50:ec:9f:bf:b8:18:77: 11:b5:ac:b1:c1:78:67:27:e9:40:c9:7b:28:45:81:3a:bf:21: bc:87:6e:36:70:34:5d:2f:04:be:99:be:49:5c:7f:e9:8b:c1: 90:d2:87:e1:ff:f1:f6:cb:74:cb:80:b0:c5:cd:8f:11:f4:74: 72:ab:e5:2f:3e:de:31:43:cc:a9:1e:70:4a:f5:a1:0c:0c:2f: 73:8e:b3:2e:66:a1:89:75:10:ef:67:cc:32:5d:df:a2:1b:42: 19:0f:02:3a:e7:8a:c4:58:59:66:29:77:3e:da:f4:07:d1:f5: 51:43:58:6c:26:2b:b8:86:e0:a6:ab:88:35:10:04:44:10:88: c4:cb:fc:a2:fb:95:5c:53:22:f1:63:6c:d8:df:eb:fd:c3:ae: 98:b4:70:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfWgLmMqsTsE/73iBlWvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjUxMjA5MTkwMTI1WhcNMjUxMjEwMTkwMTI1WjAzMTEwLwYDVQQD EygyZDRiMDI4NjY4MWM2MDQyNzE5ZmI4NGQ1NTY3MGExOTJlYTgxYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiIVYfn4AjgSlihuJQnvDeyXuATI CHhDseUYQcKOlvDJMFZeNbrq2XD+8bpSuQVneZ1I9I+4gw7XR0zUtSzmSY+oS+Be 9rO8/k8OYAp0RrXs5Zq6RqkcQiQge94TgbAuguLvEcwTOMD3J0Nfz7Y+xzyA8SBM Z2sqopK+p4AuCBmPV/YXnS/1owgktd5sjMzlI3h234kgzdulV/J2W+/MtF+6zW0H qHOIHcpAmdOicTTvikf27Zu8zacgm6O9hy/l4OjvX0htDdSrTitpSGly97VoOALY eBpjXrtQ7h0cVFrg1yUU1E74JAVh59dCiP7+VuvqzYGOhJVxUG77dPYOBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1LAoZoHGBCcZ+4TVVnChkuqBucMB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJASXdSq 35RfS5YUcvg0jmd6/ptP87AwNC6DZqei57nXDhwQAAQjSx8uUT933ybFXbl5GxDK 9BRmkjcWSTRgt3/a8TSvt/ioUgl88gJnCKGwVvXmqUs00FjtP5wcINGJCMEM7KNQ 7J+/uBh3EbWsscF4ZyfpQMl7KEWBOr8hvIduNnA0XS8Evpm+SVx/6YvBkNKH4f/x 9st0y4Cwxc2PEfR0cqvlLz7eMUPMqR5wSvWhDAwvc46zLmahiXUQ72fMMl3fohtC GQ8COueKxFhZZil3Ptr0B9H1UUNYbCYruIbgpquINRAERBCIxMv8ovuVXFMi8WNs 2N/r/cOumLRwmA== -----END CERTIFICATE-----Generated at Wed Dec 10 05:07:04 2025 by rpki-client