This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json) Hash identifier: b9QKscMcIqfTj1pzmCxcYKtJUy6pycO6SpfWsTokJcg= Subject key identifier: 1F:2D:1C:83:60:53:04:DF:77:4C:DD:B0:AA:EC:AE:4F:9D:1F:9B:ED Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f Certificate serial: 019B334431D7EB21F156274CB1918C207469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft Manifest number: 0304 Signing time: Thu 18 Dec 2025 21:01:05 +0000 Manifest this update: Thu 18 Dec 2025 21:01:05 +0000 Manifest next update: Fri 19 Dec 2025 21:01:05 +0000 Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=) 2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: RXeZPjd9V+mpguCWDt0cXL0JahWqpXrCdxClfjGGNF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:31:d7:eb:21:f1:56:27:4c:b1:91:8c:20:74:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f Validity Not Before: Dec 18 21:01:05 2025 GMT Not After : Dec 19 21:01:05 2025 GMT Subject: CN=1f2d1c83605304df774cddb0aaecae4f9d1f9bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:3f:99:ca:2d:fc:7e:65:29:46:1d:36:db: 58:62:76:93:89:82:d9:50:6a:07:80:82:cf:e8:03: 36:fa:9d:29:6d:b7:6e:16:87:eb:ba:77:6a:55:f3: de:5f:e0:47:49:e4:ec:bb:91:6c:05:4a:cd:98:7d: f8:e3:5d:2f:da:90:9b:c1:7e:4a:e6:d6:a9:1b:9b: 28:c8:cf:e2:41:e5:3c:9e:3a:9d:4e:90:6c:c5:b9: ca:1e:e6:2d:03:48:54:83:0e:8e:a4:cb:16:d0:56: 86:86:59:83:ab:26:b8:c7:2d:de:36:df:9c:a7:5c: 31:5a:d7:7b:b8:b9:8a:ef:40:3f:a0:af:92:50:4d: 97:e5:ae:5a:25:fb:c4:23:6a:ca:0b:f5:c1:dd:20: 22:92:c2:29:f5:02:50:a3:21:f1:c9:14:91:86:62: 20:fb:17:e9:c8:8e:aa:6c:81:5e:04:b2:cd:e9:2b: 07:62:ed:f7:60:82:eb:4e:c8:b7:f5:70:97:a5:a1: f8:84:1a:01:78:72:05:06:c2:99:76:c5:1c:81:67: ed:06:ca:9e:9a:38:69:f8:3f:d6:ee:a8:ab:c9:bd: cb:eb:25:3b:39:f1:01:68:a0:dc:da:e8:99:10:4b: c0:a8:f0:14:84:d1:34:fd:a7:7d:23:d2:01:20:1e: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2D:1C:83:60:53:04:DF:77:4C:DD:B0:AA:EC:AE:4F:9D:1F:9B:ED X509v3 Authority Key Identifier: keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:72:11:86:66:5a:97:e9:49:a8:50:d1:95:69:06:e7:33:5b: 19:e1:3e:b5:4a:8b:34:65:4c:c1:30:c5:6f:26:1a:a1:20:9d: 9d:c1:85:a2:a5:1a:ec:a4:e2:03:0f:d0:c0:3f:63:eb:f4:1b: d0:f7:b6:7a:ab:6b:a0:d8:53:53:e1:d1:02:86:45:0d:7a:28: f7:bd:af:ec:b3:07:82:74:a7:54:1e:2a:7a:ef:41:14:b5:af: 5d:99:e6:17:e0:a6:cc:de:0f:b0:f1:f3:fc:2b:85:3a:90:dd: 6b:0a:49:b5:ab:d3:70:30:b1:d8:5f:ae:1e:fb:9b:f8:d8:2b: 57:e0:08:66:ef:fd:48:3a:2c:7b:f2:3e:51:ca:55:a6:63:b6: 24:5b:36:ee:f2:08:90:27:97:46:11:ae:f9:37:8d:16:f1:6f: a4:31:8c:96:ff:d1:d6:3b:32:6a:05:75:e0:24:88:c5:b3:9d: d8:ff:74:1f:64:91:e2:7c:41:56:84:be:80:d7:a6:15:aa:e0: b7:de:18:14:90:20:c3:57:82:95:3e:4b:14:9a:4f:66:db:60: 34:f2:7f:54:9e:3d:b8:10:6e:8c:68:b9:74:c3:58:68:0e:5f: 9d:47:89:93:55:dc:fd:f4:a9:ad:f3:63:87:48:fc:5a:8b:64: a8:62:74:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRDHX6yHxVidMsZGMIHRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjUzZTg5MzA0MzRjNzJhNTgwN2EwNTUwODJiOTg1OTli MjcwN2YwHhcNMjUxMjE4MjEwMTA1WhcNMjUxMjE5MjEwMTA1WjAzMTEwLwYDVQQD EygxZjJkMWM4MzYwNTMwNGRmNzc0Y2RkYjBhYWVjYWU0ZjlkMWY5YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8I/mcot/H5lKUYdNttYYnaTiYLZ UGoHgILP6AM2+p0pbbduFofrundqVfPeX+BHSeTsu5FsBUrNmH34410v2pCbwX5K 5tapG5soyM/iQeU8njqdTpBsxbnKHuYtA0hUgw6OpMsW0FaGhlmDqya4xy3eNt+c p1wxWtd7uLmK70A/oK+SUE2X5a5aJfvEI2rKC/XB3SAiksIp9QJQoyHxyRSRhmIg +xfpyI6qbIFeBLLN6SsHYu33YILrTsi39XCXpaH4hBoBeHIFBsKZdsUcgWftBsqe mjhp+D/W7qiryb3L6yU7OfEBaKDc2uiZEEvAqPAUhNE0/ad9I9IBIB4sAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8tHINgUwTfd0zdsKrsrk+dH5vtMB8GA1UdIwQY MBaAFFW1PokwQ0xypYB6BVCCuYWZsnB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEt OTQ1NDA3YTAxN2IyLzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEtOTQ1NDA3YTAxN2Iy LzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3IRhmZa l+lJqFDRlWkG5zNbGeE+tUqLNGVMwTDFbyYaoSCdncGFoqUa7KTiAw/QwD9j6/Qb 0Pe2eqtroNhTU+HRAoZFDXoo972v7LMHgnSnVB4qeu9BFLWvXZnmF+CmzN4PsPHz /CuFOpDdawpJtavTcDCx2F+uHvub+NgrV+AIZu/9SDose/I+UcpVpmO2JFs27vII kCeXRhGu+TeNFvFvpDGMlv/R1jsyagV14CSIxbOd2P90H2SR4nxBVoS+gNemFarg t94YFJAgw1eClT5LFJpPZttgNPJ/VJ49uBBujGi5dMNYaA5fnUeJk1Xc/fSprfNj h0j8WotkqGJ0OQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:51 2025 by rpki-client