This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json) Hash identifier: mykdW+qvi7v5S2S1Ef8Yp9JsLU/vuYp2PLghU4hTYr4= Subject key identifier: 62:AD:A1:29:D2:59:9E:15:43:17:3D:78:17:FF:10:3E:35:4B:47:61 Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18 Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718 Certificate serial: 019B2175C4559250E5E4E99930DC01F3D99A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft Manifest number: 0758 Signing time: Mon 15 Dec 2025 10:02:04 +0000 Manifest this update: Mon 15 Dec 2025 10:02:04 +0000 Manifest next update: Tue 16 Dec 2025 10:02:04 +0000 Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=) 2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: xMs7diYfPmKhCzHlsKwBOfK+OacL4oavVmQS1cacELQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:c4:55:92:50:e5:e4:e9:99:30:dc:01:f3:d9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718 Validity Not Before: Dec 15 10:02:04 2025 GMT Not After : Dec 16 10:02:04 2025 GMT Subject: CN=62ada129d2599e1543173d7817ff103e354b4761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:12:21:fa:17:22:f1:19:9a:c0:49:e9:8f: 88:f5:f1:3a:44:7e:28:b6:5f:8b:23:a7:be:14:02: c4:7e:73:26:0d:44:05:13:67:e9:15:7b:c0:f7:23: f1:bc:bb:93:bd:a5:b1:35:e6:72:f7:af:d1:08:c4: cf:ac:25:99:a8:64:38:7e:36:ab:ec:b0:fc:47:6e: 62:12:1b:75:c8:4b:e4:e0:60:f2:e5:f4:5c:dc:83: 88:c5:8a:ef:ae:72:5a:d9:67:e5:94:d3:2d:f7:2c: 6e:65:5c:24:8c:be:0e:0d:b1:f4:4a:c0:8c:94:da: aa:dd:e8:7c:7b:21:b1:7f:5b:5a:05:86:2b:4f:08: 00:9d:6b:c6:22:d7:6e:20:de:15:13:42:92:4e:47: df:c8:50:e1:79:73:d3:a6:4e:f9:dd:73:90:4c:0d: 11:51:88:e8:00:0b:f6:00:60:1f:d4:e5:ef:9f:6d: 5b:52:3f:d5:94:78:65:fc:23:82:4b:48:3d:88:10: a2:92:22:61:da:92:0c:35:43:2b:ad:58:b4:d6:3b: 40:66:02:c5:fc:b1:2f:0c:50:21:bd:c1:d8:71:e8: 66:95:90:f0:bc:41:12:8f:92:d3:ad:53:71:28:5d: 04:70:25:1f:55:68:fb:ae:d1:f8:e3:26:ed:9e:c8: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AD:A1:29:D2:59:9E:15:43:17:3D:78:17:FF:10:3E:35:4B:47:61 X509v3 Authority Key Identifier: keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ea:bc:b5:f0:a8:35:ff:b8:8d:5f:68:e0:71:e4:1e:ea:d6: ab:51:b4:e8:28:b1:28:5d:d9:b0:c0:01:d0:38:39:6f:c8:11: 9c:cf:8d:0e:d0:f9:af:07:56:40:e7:32:f0:65:37:b5:8c:3e: e6:b7:9e:4e:82:f9:d8:91:22:12:a8:35:80:24:b4:14:68:4f: 22:f6:54:b0:c4:c1:c8:a4:33:c8:f9:fa:24:cf:8b:17:87:fe: 50:f7:7c:92:8d:40:06:75:27:d5:61:25:52:af:da:d9:21:f5: 1f:fb:a1:36:c2:08:5a:7e:ae:0f:02:97:7c:b2:31:d0:cf:fa: e7:14:67:f7:70:af:50:04:24:20:13:5b:21:0b:8d:b7:fb:5b: 43:67:c0:7b:4a:f6:15:c4:cb:54:98:5e:eb:b5:d6:34:bb:76: b1:c0:8c:f6:0d:06:ee:09:95:77:c5:94:34:b1:67:f7:8b:00: 41:52:2b:81:ef:ff:e7:00:82:08:03:b6:2b:24:9a:05:d6:9f: f7:08:25:c2:44:7a:33:15:f8:ed:1c:99:82:ce:29:37:68:6e: 07:d0:10:90:22:85:2b:77:41:67:eb:5d:bf:94:fe:2e:dc:a9: 8a:62:fd:93:60:22:3f:90:67:27:1e:ce:3d:d5:60:29:99:04: 0f:b9:60:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdcRVklDl5OmZMNwB89maMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTAyZjczNTA5YmRlMzVkOTVkMTg1MTgwM2UxZjAwODI5 ZWI3MTgwHhcNMjUxMjE1MTAwMjA0WhcNMjUxMjE2MTAwMjA0WjAzMTEwLwYDVQQD Eyg2MmFkYTEyOWQyNTk5ZTE1NDMxNzNkNzgxN2ZmMTAzZTM1NGI0NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyygSIfoXIvEZmsBJ6Y+I9fE6RH4o tl+LI6e+FALEfnMmDUQFE2fpFXvA9yPxvLuTvaWxNeZy96/RCMTPrCWZqGQ4fjar 7LD8R25iEht1yEvk4GDy5fRc3IOIxYrvrnJa2WfllNMt9yxuZVwkjL4ODbH0SsCM lNqq3eh8eyGxf1taBYYrTwgAnWvGItduIN4VE0KSTkffyFDheXPTpk753XOQTA0R UYjoAAv2AGAf1OXvn21bUj/VlHhl/COCS0g9iBCikiJh2pIMNUMrrVi01jtAZgLF /LEvDFAhvcHYcehmlZDwvEESj5LTrVNxKF0EcCUfVWj7rtH44ybtnshyAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKtoSnSWZ4VQxc9eBf/ED41S0dhMB8GA1UdIwQY MBaAFFbgL3NQm9412V0YUYA+HwCCnrcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgt ZmM5NThlOGQ0OGMyLzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgtZmM5NThlOGQ0OGMy LzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeq8tfCo Nf+4jV9o4HHkHurWq1G06CixKF3ZsMAB0Dg5b8gRnM+NDtD5rwdWQOcy8GU3tYw+ 5reeToL52JEiEqg1gCS0FGhPIvZUsMTByKQzyPn6JM+LF4f+UPd8ko1ABnUn1WEl Uq/a2SH1H/uhNsIIWn6uDwKXfLIx0M/65xRn93CvUAQkIBNbIQuNt/tbQ2fAe0r2 FcTLVJhe67XWNLt2scCM9g0G7gmVd8WUNLFn94sAQVIrge//5wCCCAO2KySaBdaf 9wglwkR6MxX47RyZgs4pN2huB9AQkCKFK3dBZ+tdv5T+LtypimL9k2AiP5BnJx7O PdVgKZkED7lg/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:56 2025 by rpki-client