This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json) Hash identifier: EWntAG2sv2SfnPdpCA69ojTIn3/9MI0Ns3Tvsr/IEjg= Subject key identifier: FE:F0:12:B4:90:C3:80:0E:45:A8:99:45:5E:86:EB:8D:84:79:7B:28 Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f Certificate serial: 019AF19B20E49B62830B51AD728D6A14419F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft Manifest number: 02E2 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=) 2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: 3WmbOzOmoMTLx/voR/Ra1u27CRRGc1QeLu0XJ5/+Uvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:20:e4:9b:62:83:0b:51:ad:72:8d:6a:14:41:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=fef012b490c3800e45a899455e86eb8d84797b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:92:f2:8b:7e:b1:c5:3f:75:2f:d6:87:20: 03:7d:e2:8a:96:56:03:56:2d:3d:af:df:32:37:6f: 97:6d:f2:4e:79:df:3a:85:be:d8:57:3a:6a:09:ab: e5:84:35:4b:46:ee:60:8d:f3:65:22:6f:b0:90:2c: f2:51:66:2f:d4:e5:28:9b:61:25:1f:d8:60:b8:71: 75:42:69:7e:b6:8e:65:7a:bb:b4:48:e8:a7:c0:ab: 78:cb:6a:8b:07:bb:a0:6d:2e:62:68:ab:7a:8e:d3: 79:89:3d:cc:34:80:d0:b7:de:35:1d:99:7b:96:23: f3:48:c1:04:33:0b:43:f1:bc:c6:c4:bf:fe:89:2b: 4a:9d:bc:42:e4:af:34:f0:72:ca:cf:9e:49:42:77: 3a:31:6a:b0:5b:51:a4:80:29:7e:b6:ec:24:4f:55: cc:eb:d8:69:5f:64:cb:d0:d5:ce:03:8d:4c:0a:4f: 08:f8:8b:ae:6c:9d:32:3e:cd:43:73:df:44:ec:cd: cd:45:dc:1d:cb:28:f4:6e:af:ef:9f:39:66:8f:96: ba:de:6f:41:7d:6e:f6:75:0d:03:82:55:76:e4:7d: b9:d5:8d:4a:2a:8b:92:83:f8:16:66:50:ed:ef:47: 7d:8f:89:9f:f0:17:33:c4:df:c1:be:76:aa:90:97: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F0:12:B4:90:C3:80:0E:45:A8:99:45:5E:86:EB:8D:84:79:7B:28 X509v3 Authority Key Identifier: keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:97:eb:82:8b:a4:b1:64:2c:4b:ef:32:1c:0c:ec:53:ce:75: 3c:a4:f7:05:44:25:f4:70:ea:85:84:89:59:22:4d:96:bb:ea: 6a:02:0e:04:4a:40:1e:b8:68:82:39:6f:25:e4:37:6b:11:f2: 93:36:0a:e5:b1:46:5a:56:61:ef:cd:a2:eb:e7:9e:be:6f:b6: 48:9f:f0:e7:c0:b4:02:3a:b1:08:04:93:72:00:2d:80:56:21: 02:2b:63:87:44:02:ae:ec:7b:39:d5:f6:07:47:a1:de:5a:f2: 34:99:5c:2a:6c:32:3c:cd:9f:73:13:c4:2b:5a:b9:f4:83:c6: 6f:c0:3e:98:5d:0d:96:77:ca:61:7d:d4:43:46:1c:d9:4d:52: d2:e1:c7:d0:b4:fb:bc:e6:43:fb:47:70:fa:48:04:f9:a7:0f: 7f:51:13:39:98:f5:c9:e2:65:b5:79:58:21:83:29:e3:53:c9: 8b:3c:47:56:ed:eb:20:6f:3e:e0:02:6d:fc:97:d6:cd:25:68: b3:4b:da:4d:04:47:e0:a8:b1:27:03:26:2c:a8:cd:d7:84:d8: cd:40:a2:9f:9a:9b:f9:a6:94:ca:97:4a:98:e3:d1:6d:42:a1: 1e:45:8b:c2:5b:ec:fb:11:2b:16:b7:3a:fe:fd:c6:33:68:99: 07:dd:a6:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyDkm2KDC1Gtco1qFEGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjUzZTg5MzA0MzRjNzJhNTgwN2EwNTUwODJiOTg1OTli MjcwN2YwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EyhmZWYwMTJiNDkwYzM4MDBlNDVhODk5NDU1ZTg2ZWI4ZDg0Nzk3YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1keS8ot+scU/dS/WhyADfeKKllYD Vi09r98yN2+XbfJOed86hb7YVzpqCavlhDVLRu5gjfNlIm+wkCzyUWYv1OUom2El H9hguHF1Qml+to5leru0SOinwKt4y2qLB7ugbS5iaKt6jtN5iT3MNIDQt941HZl7 liPzSMEEMwtD8bzGxL/+iStKnbxC5K808HLKz55JQnc6MWqwW1GkgCl+tuwkT1XM 69hpX2TL0NXOA41MCk8I+IuubJ0yPs1Dc99E7M3NRdwdyyj0bq/vnzlmj5a63m9B fW72dQ0DglV25H251Y1KKouSg/gWZlDt70d9j4mf8BczxN/BvnaqkJeg0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7wErSQw4AORaiZRV6G642EeXsoMB8GA1UdIwQY MBaAFFW1PokwQ0xypYB6BVCCuYWZsnB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEt OTQ1NDA3YTAxN2IyLzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEtOTQ1NDA3YTAxN2Iy LzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpfrgouk sWQsS+8yHAzsU851PKT3BUQl9HDqhYSJWSJNlrvqagIOBEpAHrhogjlvJeQ3axHy kzYK5bFGWlZh782i6+eevm+2SJ/w58C0AjqxCASTcgAtgFYhAitjh0QCrux7OdX2 B0eh3lryNJlcKmwyPM2fcxPEK1q59IPGb8A+mF0NlnfKYX3UQ0Yc2U1S0uHH0LT7 vOZD+0dw+kgE+acPf1ETOZj1yeJltXlYIYMp41PJizxHVu3rIG8+4AJt/JfWzSVo s0vaTQRH4KixJwMmLKjN14TYzUCin5qb+aaUypdKmOPRbUKhHkWLwlvs+xErFrc6 /v3GM2iZB92msw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:10 2025 by rpki-client