This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json) Hash identifier: axCBPc7X2Mlskvs182bTe8P0l8Od91CbaILlebsucwA= Subject key identifier: 42:B7:2C:A0:E2:8D:4E:52:57:02:7F:B7:DD:86:44:2F:FA:B3:63:3A Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8 Certificate serial: 019B5AF6282921B3249CA07B4798E891C9DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 14:00:40 +0000 Manifest this update: Fri 26 Dec 2025 14:00:40 +0000 Manifest next update: Sat 27 Dec 2025 14:00:40 +0000 Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=) 2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: zfmuc0nPkdThljNuWS0Eu0rnc1QtNN3I0/W6zmu/ANo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:28:29:21:b3:24:9c:a0:7b:47:98:e8:91:c9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8 Validity Not Before: Dec 26 14:00:40 2025 GMT Not After : Dec 27 14:00:40 2025 GMT Subject: CN=42b72ca0e28d4e5257027fb7dd86442ffab3633a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:06:4c:1f:0e:89:ab:6d:4f:a4:3f:55:ef: aa:2d:42:e7:96:9d:cb:7c:53:d7:7d:e7:87:1d:c7: 00:1b:7f:e4:a9:91:45:94:ef:ec:2c:22:87:c7:5d: bf:c8:71:74:f6:c6:b5:68:6f:20:8a:27:6f:04:c4: 38:d1:bb:7a:40:36:9a:ef:6d:6a:95:86:74:52:f2: 6a:6d:e3:2a:ae:e3:eb:c0:48:6b:92:0b:fa:13:34: f6:cb:c9:4f:a0:ee:9a:33:44:a4:91:99:4d:38:c5: 19:f9:c6:38:04:7e:8c:98:f3:3d:ae:69:b8:47:ba: 05:b6:1c:00:54:b6:02:1a:bf:eb:d2:d5:80:90:07: 91:fb:f1:b8:f4:8d:d5:d4:73:17:37:4c:6b:aa:4c: 1c:dc:af:ac:fa:61:d8:78:23:12:7d:71:8b:90:a0: 1f:d4:ca:e1:0f:f1:b4:06:d0:c9:bd:a9:e5:c4:a0: 19:9c:73:da:ca:cd:69:3d:eb:65:87:6e:54:29:09: 3d:74:6d:33:02:40:03:c1:cb:18:3d:0a:47:ea:85: 7a:8a:d9:fb:ed:17:97:7a:3c:eb:6b:15:0b:c8:dd: bb:e2:81:44:72:bb:52:9c:31:22:d2:66:31:34:6b: 64:fa:92:bf:8e:6d:48:ba:0f:bc:e2:50:19:a5:5f: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:2C:A0:E2:8D:4E:52:57:02:7F:B7:DD:86:44:2F:FA:B3:63:3A X509v3 Authority Key Identifier: keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c6:b5:a4:fc:1e:4a:96:22:7f:cb:15:46:6a:2e:7d:36:e7: 3f:a7:89:98:04:15:6c:2e:09:b7:6b:e9:56:1d:44:f4:47:60: bc:1b:41:44:75:2e:57:87:76:c7:2b:ac:d1:e1:03:be:76:eb: ad:9a:f7:fa:2d:7d:4a:71:b0:8c:c7:7d:1d:50:80:f8:0b:ff: d9:7f:15:7c:d3:4d:52:5a:35:c5:cd:4d:7c:ce:20:0d:1e:05: 04:ae:17:e6:a3:73:89:f2:cb:fb:5e:a6:de:79:92:c3:d1:f9: 36:fc:0c:a2:92:bb:8c:10:92:ad:0f:1c:0a:4e:49:4e:ec:cd: e4:a1:74:fd:6b:d6:bf:37:58:15:ef:ca:34:7c:e1:c5:54:49: 92:6b:3c:1a:de:73:fe:fa:9d:4f:59:95:29:9f:78:f8:25:08: fe:7a:1f:1e:17:db:2f:37:52:30:eb:4d:57:cc:d0:36:6c:92: cd:eb:de:8d:d7:da:5c:43:ef:8e:fc:41:9c:4b:94:88:99:f4: a3:c3:9b:fa:78:68:8c:74:81:71:f8:96:16:2c:bd:26:c6:b1: 73:49:ad:d4:fc:84:27:b1:f6:89:c2:34:f4:e8:61:09:a7:a7: 36:bd:63:bb:3c:04:87:3f:db:3a:41:81:58:d7:7f:08:75:44: be:be:08:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9igpIbMknKB7R5jokcnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz YTUzZjgwHhcNMjUxMjI2MTQwMDQwWhcNMjUxMjI3MTQwMDQwWjAzMTEwLwYDVQQD Eyg0MmI3MmNhMGUyOGQ0ZTUyNTcwMjdmYjdkZDg2NDQyZmZhYjM2MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPUGTB8OiattT6Q/Ve+qLULnlp3L fFPXfeeHHccAG3/kqZFFlO/sLCKHx12/yHF09sa1aG8giidvBMQ40bt6QDaa721q lYZ0UvJqbeMqruPrwEhrkgv6EzT2y8lPoO6aM0SkkZlNOMUZ+cY4BH6MmPM9rmm4 R7oFthwAVLYCGr/r0tWAkAeR+/G49I3V1HMXN0xrqkwc3K+s+mHYeCMSfXGLkKAf 1MrhD/G0BtDJvanlxKAZnHPays1pPetlh25UKQk9dG0zAkADwcsYPQpH6oV6itn7 7ReXejzraxULyN274oFEcrtSnDEi0mYxNGtk+pK/jm1Iug+84lAZpV+QvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK3LKDijU5SVwJ/t92GRC/6s2M6MB8GA1UdIwQY MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsa1pPwe SpYif8sVRmoufTbnP6eJmAQVbC4Jt2vpVh1E9EdgvBtBRHUuV4d2xyus0eEDvnbr rZr3+i19SnGwjMd9HVCA+Av/2X8VfNNNUlo1xc1NfM4gDR4FBK4X5qNzifLL+16m 3nmSw9H5NvwMopK7jBCSrQ8cCk5JTuzN5KF0/WvWvzdYFe/KNHzhxVRJkms8Gt5z /vqdT1mVKZ94+CUI/nofHhfbLzdSMOtNV8zQNmySzevejdfaXEPvjvxBnEuUiJn0 o8Ob+nhojHSBcfiWFiy9Jsaxc0mt1PyEJ7H2icI09OhhCaenNr1juzwEhz/bOkGB WNd/CHVEvr4IdQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:26 2025 by rpki-client