This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft File: vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json) Hash identifier: Azv5GUUnZ7MdvN8GVNLNC0CvFU9XoF0cSYLV8Z0/fvM= Subject key identifier: 5A:F5:2C:1E:B4:74:39:C6:D3:52:53:81:A6:49:7E:BB:7B:9D:AE:72 Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Certificate serial: 019B06D8FE9BCB2DC01375708993F2C6043F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft Manifest number: 0C03 Signing time: Wed 10 Dec 2025 06:00:42 +0000 Manifest this update: Wed 10 Dec 2025 06:00:42 +0000 Manifest next update: Thu 11 Dec 2025 06:00:42 +0000 Files and hashes: 1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=) 2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: 6SFFcSaOQgk0tcrGqXbLwT0XydWiTwDBqQgVsFF7EM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d8:fe:9b:cb:2d:c0:13:75:70:89:93:f2:c6:04:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Validity Not Before: Dec 10 06:00:42 2025 GMT Not After : Dec 11 06:00:42 2025 GMT Subject: CN=5af52c1eb47439c6d3525381a6497ebb7b9dae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:03:34:4f:b2:79:f6:ef:25:f4:96:00:f2: ea:55:66:7a:31:51:9d:72:f2:cb:b7:65:9b:32:81: b9:96:10:a5:fb:04:c9:ee:b6:21:5b:6b:9f:2c:fc: 42:44:86:cf:15:d9:23:1b:8b:d4:34:52:87:cc:c0: 2d:ea:4f:98:45:28:04:ac:d1:42:17:50:9f:87:ee: 17:e9:4e:90:21:d2:41:97:9e:a9:a1:b7:db:4d:1d: 20:7e:18:26:36:86:60:e0:ad:4c:7f:fc:b4:17:39: 6c:e9:7a:53:b6:a6:a0:3e:04:3c:02:1e:65:c5:94: 34:0f:bb:82:cb:89:9d:3c:83:a5:77:7e:95:e3:6b: ac:6b:74:d4:18:d6:0a:79:1b:1a:b7:b3:84:2a:e1: 34:72:f3:68:e6:13:ca:32:cc:2a:cd:47:c7:97:aa: ae:ba:8a:f6:4f:02:cc:e6:1d:a5:12:b6:d9:be:24: 0a:c2:9d:13:d4:36:9e:24:0b:90:08:40:72:cd:cf: 5a:6f:c1:49:40:4e:a1:eb:d8:75:35:e0:ce:81:5f: 99:01:b7:10:f9:9c:5c:26:e6:44:e6:91:73:4f:22: 06:ed:aa:d7:57:3b:38:57:93:1c:89:b9:64:f6:87: 14:33:36:5e:59:7f:48:7b:97:44:ae:12:86:d6:02: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F5:2C:1E:B4:74:39:C6:D3:52:53:81:A6:49:7E:BB:7B:9D:AE:72 X509v3 Authority Key Identifier: keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:c7:35:f8:50:1e:f0:14:ea:10:f4:71:66:fa:9e:1d:cd:00: 41:59:99:72:66:f3:2b:a1:83:c6:af:6b:6b:22:98:bb:90:e6: 2b:d9:56:ad:3d:86:2e:c1:b8:04:85:71:4c:a6:6b:d4:f9:00: 6d:60:56:9f:a1:25:d0:64:cc:bf:8d:3d:f5:db:e8:84:8b:f8: 31:14:89:bc:c6:20:a9:ef:9e:0d:52:be:e0:e2:cc:e9:cd:a3: 40:12:22:b6:2f:31:df:b7:5a:c2:a5:39:0b:65:7e:11:6a:a0: 62:3c:06:04:51:4c:b8:91:4e:16:78:43:ec:71:a8:e5:77:a1: 0f:26:c8:9a:9c:4e:c6:55:aa:a4:bc:cd:e7:b5:67:3b:e1:40: 59:75:d3:66:60:87:35:e2:07:04:3d:07:ae:44:51:6e:33:76: 1c:9e:55:dc:95:c6:a7:56:cf:b2:33:4c:2a:ec:ab:e7:d8:7b: 90:7e:09:78:cd:92:e9:dc:04:64:11:3e:b8:ab:75:7d:0d:ed: 1e:dd:71:7e:e7:73:51:c8:64:4e:50:c1:2f:dd:38:9b:2f:36: d8:79:b7:10:f6:04:44:e1:cd:72:d4:bc:ea:eb:e9:c3:dc:12: ba:a4:e5:56:2b:46:aa:88:aa:28:ca:94:b6:75:15:92:7c:a4: 2e:03:4c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2P6byy3AE3VwiZPyxgQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5 Y2FkNjAwHhcNMjUxMjEwMDYwMDQyWhcNMjUxMjExMDYwMDQyWjAzMTEwLwYDVQQD Eyg1YWY1MmMxZWI0NzQzOWM2ZDM1MjUzODFhNjQ5N2ViYjdiOWRhZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhoDNE+yefbvJfSWAPLqVWZ6MVGd cvLLt2WbMoG5lhCl+wTJ7rYhW2ufLPxCRIbPFdkjG4vUNFKHzMAt6k+YRSgErNFC F1Cfh+4X6U6QIdJBl56pobfbTR0gfhgmNoZg4K1Mf/y0Fzls6XpTtqagPgQ8Ah5l xZQ0D7uCy4mdPIOld36V42usa3TUGNYKeRsat7OEKuE0cvNo5hPKMswqzUfHl6qu uor2TwLM5h2lErbZviQKwp0T1DaeJAuQCEByzc9ab8FJQE6h69h1NeDOgV+ZAbcQ +ZxcJuZE5pFzTyIG7arXVzs4V5Mciblk9ocUMzZeWX9Ie5dErhKG1gIYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr1LB60dDnG01JTgaZJfrt7na5yMB8GA1UdIwQY MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt YjE4ZDllNzFjMTZhLzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA78c1+FAe 8BTqEPRxZvqeHc0AQVmZcmbzK6GDxq9rayKYu5DmK9lWrT2GLsG4BIVxTKZr1PkA bWBWn6El0GTMv4099dvohIv4MRSJvMYgqe+eDVK+4OLM6c2jQBIiti8x37dawqU5 C2V+EWqgYjwGBFFMuJFOFnhD7HGo5XehDybImpxOxlWqpLzN57VnO+FAWXXTZmCH NeIHBD0HrkRRbjN2HJ5V3JXGp1bPsjNMKuyr59h7kH4JeM2S6dwEZBE+uKt1fQ3t Ht1xfudzUchkTlDBL904my822Hm3EPYEROHNctS86uvpw9wSuqTlVitGqoiqKMqU tnUVknykLgNMmg== -----END CERTIFICATE-----Generated at Wed Dec 10 10:10:01 2025 by rpki-client