This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft File: VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json) Hash identifier: 0v834Ex+Q8Mmw37RiXvKP+6M4vX5uPr65pQosIBxrnQ= Subject key identifier: F3:D3:9E:55:70:94:ED:93:C7:8D:74:F0:22:D2:ED:4A:EF:7C:67:84 Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3 Certificate serial: 019B34FB650753B9047B463AF67B3F546DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 05:00:49 +0000 Manifest this update: Fri 19 Dec 2025 05:00:49 +0000 Manifest next update: Sat 20 Dec 2025 05:00:49 +0000 Files and hashes: 1: 5OnBt5fL5MuAuloyjNrpzjDMT3s.roa (hash: QZQ6W42PCK11onI84QRhAfS8bmyYPGgKmV0EzNnafkg=) 2: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: XZ/5kjAUWuAY+U+ubBFnpXnGXMkfFRQqkag732D6Dj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:65:07:53:b9:04:7b:46:3a:f6:7b:3f:54:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3 Validity Not Before: Dec 19 05:00:49 2025 GMT Not After : Dec 20 05:00:49 2025 GMT Subject: CN=f3d39e557094ed93c78d74f022d2ed4aef7c6784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:9b:fe:a6:97:e3:fc:a9:4d:50:2e:f0:69: 81:a5:b0:7b:0e:25:f5:ec:a9:ef:38:7d:aa:bc:5a: d2:cb:54:85:50:e4:d4:08:84:d8:ef:e7:86:0b:43: e2:7d:63:55:6f:ae:f7:87:57:19:f8:3e:06:5c:01: 09:92:c3:5f:a8:f9:00:14:40:1d:e2:5a:9d:80:13: 09:0a:bb:7d:2f:55:62:ef:50:e8:2d:43:af:9c:60: 11:9d:dc:59:50:40:2d:f8:a2:90:b7:1c:7a:8f:15: bd:c5:a5:5e:28:99:b7:f5:24:d3:48:7d:95:fc:d3: e1:b6:46:ca:69:fd:b8:c3:91:25:6b:c8:87:6e:5a: c8:a2:19:c7:ac:b5:d0:29:89:d8:75:42:2c:c0:ea: 1e:2e:f9:71:9c:e1:2f:64:e5:41:2f:2e:a9:29:ef: 76:3e:ae:c1:2d:10:e4:7d:8e:3b:a0:ad:49:1a:18: 20:b5:f8:b8:8b:f9:50:41:3f:32:d1:0b:52:fd:56: f3:23:ed:39:55:cb:ee:3f:23:a2:70:2d:62:87:20: de:50:c2:f6:82:2d:6e:a3:dc:10:b5:5e:86:6a:2a: 32:f7:b8:23:c0:56:43:f9:b7:b1:56:ee:d9:0a:ab: 52:a2:5e:c8:7e:b9:5f:a5:c9:0b:ef:28:90:80:ea: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:9E:55:70:94:ED:93:C7:8D:74:F0:22:D2:ED:4A:EF:7C:67:84 X509v3 Authority Key Identifier: keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:38:1c:a9:5d:85:49:32:7f:78:e9:a7:f2:aa:53:24:03:91: 54:25:d4:cb:b1:87:e0:a6:aa:fe:06:41:3f:9b:21:28:ba:d9: 31:b6:e6:47:b0:5c:f6:d0:b0:07:80:87:f4:d7:70:7d:9d:61: 2b:a1:f4:21:9a:5e:cb:21:b9:ce:81:73:ec:35:71:68:4e:60: 4e:be:e7:62:b8:79:e5:5f:6e:52:32:90:41:59:cb:d5:c7:65: 50:5d:0c:ff:46:65:d5:8e:f7:44:bb:63:51:43:d0:cc:a4:f0: 63:b7:68:80:08:3a:4e:21:6c:c9:37:fa:8c:df:52:32:d5:04: 4c:bd:0b:fb:25:29:ba:01:82:af:45:8b:42:7c:0c:5c:09:7d: 56:27:be:f9:b2:6f:c3:23:6a:41:7f:2d:90:51:9c:97:48:53: 72:8c:f8:f6:64:90:9d:85:1b:05:10:17:a2:c4:a0:00:e1:4d: 0d:e5:7b:4b:d7:27:28:dd:77:7f:7f:f5:32:85:31:1c:03:a9: 6b:9c:e2:da:b5:6d:75:79:10:f1:9e:97:bd:a8:37:1e:22:d1: 29:67:a2:fd:57:58:ca:2b:13:8c:bf:18:1d:98:67:49:43:d9: 8c:6f:f4:40:6c:1c:82:6c:9b:21:c0:1a:82:a6:19:2f:74:87: b1:fc:4f:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2UHU7kEe0Y69ns/VG3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDgzNGRhODYwMGM5NmM1ZmRlOTEyNzhmNTIwZTZjMGQy NmZmZjMwHhcNMjUxMjE5MDUwMDQ5WhcNMjUxMjIwMDUwMDQ5WjAzMTEwLwYDVQQD EyhmM2QzOWU1NTcwOTRlZDkzYzc4ZDc0ZjAyMmQyZWQ0YWVmN2M2Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUmb/qaX4/ypTVAu8GmBpbB7DiX1 7KnvOH2qvFrSy1SFUOTUCITY7+eGC0PifWNVb673h1cZ+D4GXAEJksNfqPkAFEAd 4lqdgBMJCrt9L1Vi71DoLUOvnGARndxZUEAt+KKQtxx6jxW9xaVeKJm39STTSH2V /NPhtkbKaf24w5Ela8iHblrIohnHrLXQKYnYdUIswOoeLvlxnOEvZOVBLy6pKe92 Pq7BLRDkfY47oK1JGhggtfi4i/lQQT8y0QtS/VbzI+05VcvuPyOicC1ihyDeUML2 gi1uo9wQtV6Gaioy97gjwFZD+bexVu7ZCqtSol7IfrlfpckL7yiQgOpQhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPTnlVwlO2Tx4108CLS7UrvfGeEMB8GA1UdIwQY MBaAFFVINNqGAMlsX96RJ49SDmwNJv/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVnMDJvWUF5V3hmM3BFbmoxSU9iQTBtX19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jOGFhNGUtZGQwMS00YTFhLThjYzAt ZWRmNDA5ZmVkZmNhLzEvVlVnMDJvWUF5V3hmM3BFbmoxSU9iQTBtX19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jOGFhNGUtZGQwMS00YTFhLThjYzAtZWRmNDA5ZmVkZmNh LzEvVlVnMDJvWUF5V3hmM3BFbmoxSU9iQTBtX19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDgcqV2F STJ/eOmn8qpTJAORVCXUy7GH4Kaq/gZBP5shKLrZMbbmR7Bc9tCwB4CH9NdwfZ1h K6H0IZpeyyG5zoFz7DVxaE5gTr7nYrh55V9uUjKQQVnL1cdlUF0M/0Zl1Y73RLtj UUPQzKTwY7dogAg6TiFsyTf6jN9SMtUETL0L+yUpugGCr0WLQnwMXAl9Vie++bJv wyNqQX8tkFGcl0hTcoz49mSQnYUbBRAXosSgAOFNDeV7S9cnKN13f3/1MoUxHAOp a5zi2rVtdXkQ8Z6Xvag3HiLRKWei/VdYyisTjL8YHZhnSUPZjG/0QGwcgmybIcAa gqYZL3SHsfxPrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:07 2025 by rpki-client