This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: X9pIoA3QHFHWVWNpEeXOdzfPhLulPKR29/N2QmXuNdU= Subject key identifier: 82:F7:F2:A8:E3:9A:65:46:1B:16:63:74:29:95:19:26:D4:77:CE:5A Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019AF6FA0D5988D8EB959290ECB488F2F7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 061C Signing time: Sun 07 Dec 2025 04:02:53 +0000 Manifest this update: Sun 07 Dec 2025 04:02:53 +0000 Manifest next update: Mon 08 Dec 2025 04:02:53 +0000 Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: FDkiOI5i5dfzlsBU0DeMU/+bckj6MV8qM+1fsIchegE=) 2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:fa:0d:59:88:d8:eb:95:92:90:ec:b4:88:f2:f7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Dec 7 04:02:53 2025 GMT Not After : Dec 8 04:02:53 2025 GMT Subject: CN=82f7f2a8e39a65461b16637429951926d477ce5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:94:02:ce:64:29:93:74:c2:35:bd:25:b8: c8:87:d1:c8:cc:e3:97:36:84:d8:c6:d0:b6:95:2a: a1:34:0d:77:ab:c6:56:51:2a:b2:f0:8d:a4:76:17: 89:2f:80:07:ae:e0:b3:3d:b0:01:19:50:0f:93:27: c1:46:5d:89:4e:fc:e1:39:52:15:5a:81:c4:c7:92: 88:8a:69:5d:26:86:69:67:67:27:72:68:06:cc:0a: d5:54:93:b8:9c:68:34:12:e8:6a:d2:19:74:18:22: e8:c5:35:18:02:64:64:5d:8d:89:eb:c6:de:12:71: 1e:9c:1b:6e:78:e8:e0:86:49:d4:c9:f4:a9:35:de: d6:56:92:1a:25:24:6e:d3:6f:b7:2a:cb:db:5c:a7: 91:53:54:ac:2d:3e:69:45:13:83:1c:9c:35:15:3f: 66:94:65:a6:cb:23:e5:46:52:d1:17:80:f4:01:4b: 45:e8:e9:78:86:19:16:21:3e:26:47:5c:33:67:60: ed:0a:3a:29:04:b6:3b:c9:22:c5:3c:92:f5:25:87: f3:20:58:ea:95:b8:27:17:dc:bb:fa:44:ac:90:a5: a4:3e:76:0d:0c:06:e8:a2:c1:6e:97:ac:a0:d6:f5: 86:f9:a8:8e:9e:bc:c4:82:29:7d:06:40:99:b6:8c: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:F2:A8:E3:9A:65:46:1B:16:63:74:29:95:19:26:D4:77:CE:5A X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ae:28:6c:65:83:5f:a9:30:12:eb:dc:fb:b4:22:8a:4c:5f: 9a:82:5e:0e:92:60:b8:e4:15:af:b1:e5:42:69:10:24:6c:a9: 20:f7:8e:2c:fc:d5:76:36:f6:bb:44:be:29:df:00:16:18:30: 63:58:a1:14:08:e5:66:51:cc:26:14:14:11:47:ef:c0:19:55: 69:ad:36:a8:04:e6:73:c7:9f:89:22:ed:aa:49:4a:ef:7f:bd: 9d:a3:67:f3:6d:2d:84:ff:1c:57:86:6a:c7:ec:d2:80:02:b9: 92:76:8c:fa:53:d8:68:a0:e9:ac:3c:52:ec:26:e3:72:91:22: 63:89:e2:e6:2e:d5:b6:77:44:39:78:ee:e0:02:6b:a3:be:a4: 50:3e:45:da:a2:a8:f9:71:e7:fe:1d:be:d3:6d:e5:93:b1:87: f9:aa:f8:43:44:34:1c:50:32:ae:18:cb:2c:74:5e:30:96:77: 00:a1:20:d3:38:6c:4a:a1:38:67:4e:fd:69:d1:22:92:9f:cf: c2:9f:3f:1c:e8:83:90:a4:3e:66:ba:02:7c:86:24:f3:77:74: a2:ef:32:2b:7b:bb:0c:4c:24:e2:0b:1c:63:d1:fe:a2:52:8c: f1:31:be:df:0d:a7:7e:d0:0c:c5:4c:aa:3e:fd:44:2c:0e:c1: 8b:f0:53:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+g1ZiNjrlZKQ7LSI8vf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjUxMjA3MDQwMjUzWhcNMjUxMjA4MDQwMjUzWjAzMTEwLwYDVQQD Eyg4MmY3ZjJhOGUzOWE2NTQ2MWIxNjYzNzQyOTk1MTkyNmQ0NzdjZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwiUAs5kKZN0wjW9JbjIh9HIzOOX NoTYxtC2lSqhNA13q8ZWUSqy8I2kdheJL4AHruCzPbABGVAPkyfBRl2JTvzhOVIV WoHEx5KIimldJoZpZ2cncmgGzArVVJO4nGg0Euhq0hl0GCLoxTUYAmRkXY2J68be EnEenBtueOjghknUyfSpNd7WVpIaJSRu02+3KsvbXKeRU1SsLT5pRRODHJw1FT9m lGWmyyPlRlLRF4D0AUtF6Ol4hhkWIT4mR1wzZ2DtCjopBLY7ySLFPJL1JYfzIFjq lbgnF9y7+kSskKWkPnYNDAboosFul6yg1vWG+aiOnrzEgil9BkCZtozZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL38qjjmmVGGxZjdCmVGSbUd85aMB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq4obGWD X6kwEuvc+7QiikxfmoJeDpJguOQVr7HlQmkQJGypIPeOLPzVdjb2u0S+Kd8AFhgw Y1ihFAjlZlHMJhQUEUfvwBlVaa02qATmc8efiSLtqklK73+9naNn820thP8cV4Zq x+zSgAK5knaM+lPYaKDprDxS7CbjcpEiY4ni5i7VtndEOXju4AJro76kUD5F2qKo +XHn/h2+023lk7GH+ar4Q0Q0HFAyrhjLLHReMJZ3AKEg0zhsSqE4Z079adEikp/P wp8/HOiDkKQ+ZroCfIYk83d0ou8yK3u7DEwk4gscY9H+olKM8TG+3w2nftAMxUyq Pv1ELA7Bi/BT9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 07:14:53 2025 by rpki-client