This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json) Hash identifier: a3nyxJsOaXNspoKrF/cTs6HTaR+lytLlFSbw/77K+Ng= Subject key identifier: 0F:4C:BC:AB:75:8C:09:79:9D:3F:C7:F2:CA:86:F3:84:66:9B:FC:71 Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239 Certificate serial: 019AF31B60CAE15BB938FFAF7DE3CE8BDC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft Manifest number: 0C48 Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=) 2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: c9MaCS4Rhj4fEcxh6IpUJ1e8+tTW7x7OOrTkcSrgl5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:60:ca:e1:5b:b9:38:ff:af:7d:e3:ce:8b:dc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239 Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=0f4cbcab758c09799d3fc7f2ca86f384669bfc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:a9:d5:19:3d:a0:6f:8e:0e:ec:04:d5:79: b6:ec:61:b6:14:e0:2e:b1:c4:5f:20:a9:d5:ed:a6: a0:ab:bc:f8:99:84:eb:5f:e5:fb:fc:be:f7:95:fc: d6:16:4a:f9:38:07:a5:b1:40:4c:82:9e:34:ec:e0: ad:c1:ef:6b:6e:55:05:10:55:81:0e:d4:62:e1:e8: 56:17:32:bc:30:cd:50:f7:9c:bc:33:99:b6:d7:0a: 4d:00:50:3d:48:6a:bd:98:1f:69:e3:c7:d5:6b:91: 90:d8:52:da:5b:47:c3:dc:db:d1:16:4b:5a:75:f7: a7:02:0d:5d:91:6b:f2:71:ed:3e:1b:72:ae:c9:2a: 23:56:be:ee:b3:74:be:c4:36:e7:e0:59:1c:b8:21: 0f:40:f6:d4:4d:ba:72:b6:1e:6c:e0:24:54:6a:45: cb:39:60:b4:45:d1:90:52:d5:7a:05:5c:90:53:34: 82:e5:5f:2f:58:0d:24:09:b3:9e:a9:25:fa:b4:23: 17:55:85:45:0a:70:7e:0d:69:23:6d:ce:d2:e4:60: 25:2c:3d:68:04:01:de:4f:74:6b:08:db:5a:7f:47: 2e:79:96:29:1d:58:d1:79:64:8e:1d:d4:64:48:31: 81:70:40:1b:f9:e7:8b:02:d7:98:af:fb:e6:f8:68: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:BC:AB:75:8C:09:79:9D:3F:C7:F2:CA:86:F3:84:66:9B:FC:71 X509v3 Authority Key Identifier: keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:a9:45:54:78:44:39:87:eb:4a:12:7a:ad:7d:4c:59:33: 1c:3f:c5:c3:08:ae:97:a0:9e:2b:c1:5e:f3:93:d0:8c:53:a4: 08:e1:56:0c:1e:5d:a1:f5:7b:02:cb:c5:0a:1a:a3:3b:19:ea: e4:0b:e0:2a:df:c1:98:a9:69:b3:fe:d4:c8:d1:00:d1:ef:ed: 50:78:31:ee:bf:e8:af:bb:dc:7d:ca:8d:8f:33:a2:8f:42:0c: 25:51:91:7c:1d:99:fe:08:47:df:bb:f9:28:ef:aa:23:5a:48: 2d:d9:8e:0a:86:84:05:e6:21:74:c3:e2:06:7c:4b:27:82:89: a2:b2:23:d4:31:0b:91:ee:5f:06:08:c0:d3:3f:dd:8e:d5:38: b1:2c:b4:22:c2:d9:c9:02:a0:8c:0f:2c:51:1a:26:2b:5e:a5: 8b:9a:ef:fd:07:f3:67:c0:f8:29:53:7f:66:63:9d:8e:f9:2d: 7d:c9:8f:9d:96:39:4e:64:5d:b3:44:30:bf:8c:0f:94:74:31: c0:7a:30:20:de:c9:43:9b:8e:db:9e:e9:52:f2:77:75:f3:bb: 2c:97:2a:b6:48:6a:e0:89:f5:55:22:dd:60:85:b2:ae:26:6f: dc:6e:0b:78:8b:42:01:fb:fc:1e:ac:4b:aa:18:76:f4:31:2a: b7:72:55:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2DK4Vu5OP+vfePOi9xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy ZDQyMzkwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD EygwZjRjYmNhYjc1OGMwOTc5OWQzZmM3ZjJjYTg2ZjM4NDY2OWJmYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkKp1Rk9oG+ODuwE1Xm27GG2FOAu scRfIKnV7aagq7z4mYTrX+X7/L73lfzWFkr5OAelsUBMgp407OCtwe9rblUFEFWB DtRi4ehWFzK8MM1Q95y8M5m21wpNAFA9SGq9mB9p48fVa5GQ2FLaW0fD3NvRFkta dfenAg1dkWvyce0+G3KuySojVr7us3S+xDbn4FkcuCEPQPbUTbpyth5s4CRUakXL OWC0RdGQUtV6BVyQUzSC5V8vWA0kCbOeqSX6tCMXVYVFCnB+DWkjbc7S5GAlLD1o BAHeT3RrCNtaf0cueZYpHVjReWSOHdRkSDGBcEAb+eeLAteYr/vm+GigDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9MvKt1jAl5nT/H8sqG84Rmm/xxMB8GA1UdIwQY MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt ZDBiOWRjM2FjYTIzLzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl92pRVR4 RDmH60oSeq19TFkzHD/Fwwiul6CeK8Fe85PQjFOkCOFWDB5dofV7AsvFChqjOxnq 5AvgKt/BmKlps/7UyNEA0e/tUHgx7r/or7vcfcqNjzOij0IMJVGRfB2Z/ghH37v5 KO+qI1pILdmOCoaEBeYhdMPiBnxLJ4KJorIj1DELke5fBgjA0z/djtU4sSy0IsLZ yQKgjA8sURomK16li5rv/QfzZ8D4KVN/ZmOdjvktfcmPnZY5TmRds0Qwv4wPlHQx wHowIN7JQ5uO257pUvJ3dfO7LJcqtkhq4In1VSLdYIWyriZv3G4LeItCAfv8HqxL qhh29DEqt3JVXw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:23 2025 by rpki-client