This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json) Hash identifier: YMzT72DOXANblQg1Mv6VTc97ys+XdSjjKvHwnHdOCsA= Subject key identifier: D1:93:2A:1C:98:3D:B6:0F:A0:31:13:10:0E:B6:7F:12:06:95:FD:1B Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18 Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718 Certificate serial: 019AF12EAF4859A2CC375DD27C8D97DDEB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft Manifest number: 073F Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=) 2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: wjLAKfgiNcaKlz+x4s5x+ESmycrj/v7tkC9ZePqxFW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:af:48:59:a2:cc:37:5d:d2:7c:8d:97:dd:eb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=d1932a1c983db60fa03113100eb67f120695fd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:79:e1:03:b7:54:12:97:64:d5:59:af:99:13: 3e:62:d9:58:ad:ea:8d:07:94:2f:95:f1:80:f0:1c: 79:5f:73:42:d2:1b:22:27:cf:36:98:a3:1d:c1:e1: 19:13:d4:ae:05:a9:a0:e1:eb:f3:61:78:f8:5a:31: f0:b3:d5:e6:be:67:da:bd:99:f2:6f:25:61:bd:f5: 9e:2d:75:dc:e7:e5:24:41:45:00:98:0a:2d:2b:ce: 92:51:8f:b5:f4:ea:1f:a2:38:50:00:d9:73:bc:ed: 53:9e:0e:88:7b:ce:77:99:be:43:9d:16:41:e0:9f: c6:a9:bd:84:36:ad:53:ff:c5:74:e0:bc:e9:18:8d: 61:b9:2d:51:06:78:b4:0c:75:eb:4b:1c:b0:65:22: 92:43:da:26:83:cc:a9:5c:c8:82:b5:42:58:d9:c2: 40:de:21:68:33:46:3d:08:2f:8a:98:36:78:d9:44: f0:04:2a:4c:85:28:b4:24:9d:fe:91:be:58:7d:54: 28:0a:03:bf:3b:cb:36:ed:09:63:55:87:a4:d1:f6: 26:2e:7b:c9:fd:fb:5c:ef:ac:d5:f4:cf:a0:8a:e8: c1:7c:1f:cc:b1:d5:f3:45:75:9f:6a:e6:a1:07:e9: 4b:26:b3:96:d9:69:e6:a4:b9:e4:44:15:ee:7e:15: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:2A:1C:98:3D:B6:0F:A0:31:13:10:0E:B6:7F:12:06:95:FD:1B X509v3 Authority Key Identifier: keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:f3:75:11:42:67:bd:62:0a:23:d8:7a:ef:e5:a5:5d:79: fe:49:7d:db:c0:74:9d:60:b0:df:56:5f:90:ce:72:f8:b1:33: 1d:87:0b:f2:9a:a7:95:83:63:bb:ee:7d:32:f2:27:90:f9:67: 3d:3c:6c:86:9f:e9:6b:92:2c:1b:fc:06:48:c8:6e:c1:48:ea: c3:9b:26:cd:4a:dd:be:19:a7:48:c8:15:04:b3:ee:14:82:cb: 94:33:1d:97:e6:92:83:55:b9:74:c6:4e:87:ca:24:48:96:ea: 86:b0:02:6e:25:a0:ba:82:d4:1a:51:af:9e:d6:5c:33:41:0a: 3b:78:fc:93:29:00:db:0d:88:d2:a5:6a:7e:30:dc:52:e4:60: 95:49:3c:e9:75:37:70:13:f6:57:f3:f7:ad:fb:9f:9e:6a:dd: a9:b2:1e:72:0d:88:50:33:9b:5b:6a:6c:5c:3d:6f:1e:26:f2: f4:01:27:01:31:c2:63:93:e1:12:ae:d6:33:74:ed:57:c6:9d: 01:85:e2:6d:1d:84:3b:83:5c:ed:08:f4:3c:3c:2c:46:a9:e0: 84:b9:82:04:3a:e9:20:72:e5:7d:38:25:e2:1e:3f:21:5e:ee: dd:67:62:93:93:2f:b7:0e:c7:47:e6:2e:26:4d:62:22:ec:b9: 11:a7:dc:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq9IWaLMN13SfI2X3etdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTAyZjczNTA5YmRlMzVkOTVkMTg1MTgwM2UxZjAwODI5 ZWI3MTgwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EyhkMTkzMmExYzk4M2RiNjBmYTAzMTEzMTAwZWI2N2YxMjA2OTVmZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XnhA7dUEpdk1VmvmRM+YtlYreqN B5QvlfGA8Bx5X3NC0hsiJ882mKMdweEZE9SuBamg4evzYXj4WjHws9XmvmfavZny byVhvfWeLXXc5+UkQUUAmAotK86SUY+19OofojhQANlzvO1Tng6Ie853mb5DnRZB 4J/Gqb2ENq1T/8V04LzpGI1huS1RBni0DHXrSxywZSKSQ9omg8ypXMiCtUJY2cJA 3iFoM0Y9CC+KmDZ42UTwBCpMhSi0JJ3+kb5YfVQoCgO/O8s27QljVYek0fYmLnvJ /ftc76zV9M+giujBfB/MsdXzRXWfauahB+lLJrOW2WnmpLnkRBXufhXGUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGTKhyYPbYPoDETEA62fxIGlf0bMB8GA1UdIwQY MBaAFFbgL3NQm9412V0YUYA+HwCCnrcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgt ZmM5NThlOGQ0OGMyLzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgtZmM5NThlOGQ0OGMy LzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1jzdRFC Z71iCiPYeu/lpV15/kl928B0nWCw31ZfkM5y+LEzHYcL8pqnlYNju+59MvInkPln PTxshp/pa5IsG/wGSMhuwUjqw5smzUrdvhmnSMgVBLPuFILLlDMdl+aSg1W5dMZO h8okSJbqhrACbiWguoLUGlGvntZcM0EKO3j8kykA2w2I0qVqfjDcUuRglUk86XU3 cBP2V/P3rfufnmrdqbIecg2IUDObW2psXD1vHiby9AEnATHCY5PhEq7WM3TtV8ad AYXibR2EO4Nc7Qj0PDwsRqnghLmCBDrpIHLlfTgl4h4/IV7u3Wdik5Mvtw7HR+Yu Jk1iIuy5EafcDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:08 2025 by rpki-client