This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: eAod0ze37uXZNr3w4SDNCXH3/5SA5Ax+FHJ8hZr9s+s= Subject key identifier: 00:7C:72:8A:15:CE:15:FF:4B:81:7B:8D:9A:20:BE:22:8E:62:4C:FD Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019AF50A103B7575BE995F058B221D3CB17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 061B Signing time: Sat 06 Dec 2025 19:01:08 +0000 Manifest this update: Sat 06 Dec 2025 19:01:08 +0000 Manifest next update: Sun 07 Dec 2025 19:01:08 +0000 Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: QWCjFa85e5q5po7YlT3Gnprtd30dSfiO2wvgPqunOeo=) 2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:10:3b:75:75:be:99:5f:05:8b:22:1d:3c:b1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Dec 6 19:01:08 2025 GMT Not After : Dec 7 19:01:08 2025 GMT Subject: CN=007c728a15ce15ff4b817b8d9a20be228e624cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:a4:26:20:96:f6:0e:f4:5d:f1:99:60:ec: 01:f2:60:3e:e9:bf:04:ee:5c:87:55:ed:69:ee:b8: 8a:1f:a5:e8:0e:0c:07:18:72:de:78:35:33:4e:27: 7c:ec:af:3f:d6:80:9a:49:0e:7a:60:c8:9a:c2:ab: 3f:5b:73:63:4b:e8:ee:2a:ff:a6:ab:67:b5:fe:bb: ea:3d:89:5b:92:6a:c5:4d:90:28:67:15:65:91:1d: 4e:2e:71:af:99:a2:23:b0:55:ad:50:7e:37:7b:3b: 21:da:d5:14:de:42:cb:de:bc:15:a2:b3:06:83:18: 8e:be:78:94:e7:ad:b6:36:d0:e9:d6:36:ea:c6:26: 3d:1e:50:99:52:21:5d:9e:e6:34:e2:83:50:b5:06: 26:e1:a3:c0:84:17:25:e9:4f:fd:e8:b1:12:90:16: 54:47:0e:09:89:12:6f:36:9d:24:ba:7a:c0:28:88: a6:26:92:8a:9c:08:d3:b7:98:44:5c:c2:1d:a4:c2: 5d:db:40:7d:81:df:b1:69:ed:23:b0:50:7e:a8:c1: a2:a8:5e:06:aa:98:66:b1:c5:61:ab:2f:5c:2b:01: 9d:c2:1a:e6:03:ff:1f:85:ac:a5:5f:ff:87:d1:b3: dd:36:2a:e7:9a:9b:ef:50:7e:29:34:d4:43:95:d7: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:72:8A:15:CE:15:FF:4B:81:7B:8D:9A:20:BE:22:8E:62:4C:FD X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:00:9c:d9:6c:d7:46:0f:e0:06:eb:3b:dc:8a:52:96:1d:2f: 40:b2:b7:1c:f0:0a:d0:72:e4:18:a5:99:46:fa:e5:ca:96:87: 0c:41:df:ef:6e:7e:02:aa:5b:4f:ca:24:d2:d4:8a:33:a9:49: 32:5d:13:00:27:ea:d1:c7:b5:60:04:e6:4e:99:03:c4:ce:dc: 90:87:86:15:ed:3d:43:51:35:2a:cb:d9:e5:a3:db:46:93:3d: 94:29:0c:0b:6b:9d:89:e2:df:6d:7d:fe:98:2e:e4:e6:89:12: 0f:ac:6d:25:66:0d:08:2e:a4:cf:a5:25:0b:a1:9a:84:30:e8: 7f:47:57:98:4d:c5:a0:ed:0f:6b:c5:ec:49:13:17:5d:81:ca: 91:a9:77:3f:6b:f7:66:15:e7:38:22:a6:7d:3f:5d:5d:7a:81: de:c3:99:d1:9b:a2:f0:52:db:60:9a:3d:fa:94:31:2b:cc:76: 7f:33:77:b6:ab:5e:0b:6a:26:f0:45:53:d6:65:5d:e0:44:a7: ea:a5:1e:71:08:ad:ef:3b:b0:31:3f:99:0d:7b:c1:76:4b:7b: 3a:3f:28:1a:4e:f8:f5:cf:10:b3:91:41:90:e6:0f:3b:12:c6: 07:00:29:6f:a4:71:a7:61:b4:b2:c4:0b:6f:23:f2:fd:55:ad: 64:1c:03:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChA7dXW+mV8FiyIdPLF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjUxMjA2MTkwMTA4WhcNMjUxMjA3MTkwMTA4WjAzMTEwLwYDVQQD EygwMDdjNzI4YTE1Y2UxNWZmNGI4MTdiOGQ5YTIwYmUyMjhlNjI0Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHukJiCW9g70XfGZYOwB8mA+6b8E 7lyHVe1p7riKH6XoDgwHGHLeeDUzTid87K8/1oCaSQ56YMiawqs/W3NjS+juKv+m q2e1/rvqPYlbkmrFTZAoZxVlkR1OLnGvmaIjsFWtUH43ezsh2tUU3kLL3rwVorMG gxiOvniU5622NtDp1jbqxiY9HlCZUiFdnuY04oNQtQYm4aPAhBcl6U/96LESkBZU Rw4JiRJvNp0kunrAKIimJpKKnAjTt5hEXMIdpMJd20B9gd+xae0jsFB+qMGiqF4G qphmscVhqy9cKwGdwhrmA/8fhaylX/+H0bPdNirnmpvvUH4pNNRDldeOWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB8cooVzhX/S4F7jZogviKOYkz9MB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHACc2WzX Rg/gBus73IpSlh0vQLK3HPAK0HLkGKWZRvrlypaHDEHf725+AqpbT8ok0tSKM6lJ Ml0TACfq0ce1YATmTpkDxM7ckIeGFe09Q1E1KsvZ5aPbRpM9lCkMC2udieLfbX3+ mC7k5okSD6xtJWYNCC6kz6UlC6GahDDof0dXmE3FoO0Pa8XsSRMXXYHKkal3P2v3 ZhXnOCKmfT9dXXqB3sOZ0Zui8FLbYJo9+pQxK8x2fzN3tqteC2om8EVT1mVd4ESn 6qUecQit7zuwMT+ZDXvBdkt7Oj8oGk749c8Qs5FBkOYPOxLGBwApb6Rxp2G0ssQL byPy/VWtZBwD9A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:32 2025 by rpki-client