This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json) Hash identifier: ODrxLi0PqCc8dJigDB6qyBY4Qs87MCoBAsr+3ctKSwY= Subject key identifier: 72:D4:0D:CE:4B:59:7D:B8:E9:A4:44:E2:1B:57:38:C8:E2:7C:C2:04 Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8 Certificate serial: 019AF2AD46E60837ECA55D74A88505D15AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=) 2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: B7CzA16qhwim102R3NaIkzk/hO45tD0bNfq+sW/4RpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:46:e6:08:37:ec:a5:5d:74:a8:85:05:d1:5a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8 Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=72d40dce4b597db8e9a444e21b5738c8e27cc204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:7e:14:6a:d7:87:bd:8c:4e:ea:77:7a:cb: 9c:db:16:01:85:92:de:c3:5d:cf:f6:66:16:d5:0c: e2:2e:e1:08:f3:39:e6:99:b9:48:d9:a4:62:e6:07: e6:32:ee:09:56:51:91:c3:aa:6b:09:88:f2:ff:0c: da:48:29:f9:24:1f:a2:31:23:4a:e7:dc:41:2e:7d: d4:14:0e:25:30:41:f6:b8:85:09:51:6d:78:58:2a: f1:c9:fc:0d:46:dd:8c:55:35:7e:e9:e6:31:fc:45: 3b:8f:1f:c6:de:53:fd:1a:9c:73:7b:83:18:80:d4: 78:ca:f9:df:2f:f8:bc:ec:43:40:e7:0c:cf:f5:c0: 87:89:ea:4b:fd:61:76:77:59:3c:57:60:d3:08:28: 4c:4a:1d:6d:7e:46:55:03:71:48:09:0e:5b:ca:0e: 35:ce:9c:15:8c:49:e9:f5:14:1c:3d:e6:18:20:52: e3:d5:d7:38:78:ee:bc:10:f6:75:57:7b:ad:9d:59: b0:94:aa:cb:85:62:46:81:51:e2:fb:5a:bf:71:6b: 60:51:be:69:41:78:03:4e:50:18:c1:7c:7a:88:9d: cd:30:88:41:e8:50:64:9b:7a:d4:cb:8e:15:0a:91: 22:fa:b6:22:a0:90:75:7b:51:d0:49:ca:c2:04:04: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:0D:CE:4B:59:7D:B8:E9:A4:44:E2:1B:57:38:C8:E2:7C:C2:04 X509v3 Authority Key Identifier: keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:80:cc:6a:9a:72:e2:44:78:8f:e8:26:62:d4:2f:b1:9e:e3: 39:e1:86:0e:df:4e:0c:f0:d7:16:2c:17:12:4e:18:41:96:18: c0:e5:24:17:db:e4:e7:8e:d9:0d:b3:59:8a:94:3d:be:81:77: f6:a6:0d:9b:6e:5a:03:3f:7e:70:65:8d:df:7b:b0:a9:87:d3: 48:35:7e:2b:1b:0d:4c:f5:66:eb:91:df:fd:64:35:3d:95:98: 55:7b:5d:08:79:1a:1f:46:0d:bd:c1:4e:b9:85:1c:45:92:55: 3c:0b:c7:4f:b2:1d:38:be:31:95:39:f3:68:92:bd:d5:8d:fc: d6:f1:46:55:d2:0d:e3:50:09:dc:e0:09:06:6e:68:31:e5:d7: dc:68:90:35:0c:7e:8b:70:1f:58:a9:63:dc:19:4b:a2:6f:04: 45:5c:e2:45:0f:94:3c:3b:f1:e2:58:7a:30:33:1f:27:9f:28: 3b:fc:e0:24:ea:ba:3b:e2:a4:ea:c9:94:38:36:ec:51:54:3c: 3b:72:4b:27:36:29:44:80:fa:e8:26:b3:a5:4a:96:e2:2a:08: 88:2d:8f:01:00:f6:db:6d:8f:b9:c4:8c:11:53:97:6d:cc:25: 48:b1:0e:65:4c:fe:dd:1a:92:06:c3:01:cf:85:ff:9e:06:46: 7b:18:b0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUbmCDfspV10qIUF0VquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz YTUzZjgwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD Eyg3MmQ0MGRjZTRiNTk3ZGI4ZTlhNDQ0ZTIxYjU3MzhjOGUyN2NjMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxh+FGrXh72MTup3esuc2xYBhZLe w13P9mYW1QziLuEI8znmmblI2aRi5gfmMu4JVlGRw6prCYjy/wzaSCn5JB+iMSNK 59xBLn3UFA4lMEH2uIUJUW14WCrxyfwNRt2MVTV+6eYx/EU7jx/G3lP9Gpxze4MY gNR4yvnfL/i87ENA5wzP9cCHiepL/WF2d1k8V2DTCChMSh1tfkZVA3FICQ5byg41 zpwVjEnp9RQcPeYYIFLj1dc4eO68EPZ1V3utnVmwlKrLhWJGgVHi+1q/cWtgUb5p QXgDTlAYwXx6iJ3NMIhB6FBkm3rUy44VCpEi+rYioJB1e1HQScrCBAThvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLUDc5LWX246aRE4htXOMjifMIEMB8GA1UdIwQY MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYDMappy 4kR4j+gmYtQvsZ7jOeGGDt9ODPDXFiwXEk4YQZYYwOUkF9vk547ZDbNZipQ9voF3 9qYNm25aAz9+cGWN33uwqYfTSDV+KxsNTPVm65Hf/WQ1PZWYVXtdCHkaH0YNvcFO uYUcRZJVPAvHT7IdOL4xlTnzaJK91Y381vFGVdIN41AJ3OAJBm5oMeXX3GiQNQx+ i3AfWKlj3BlLom8ERVziRQ+UPDvx4lh6MDMfJ58oO/zgJOq6O+Kk6smUODbsUVQ8 O3JLJzYpRID66CazpUqW4ioIiC2PAQD2222PucSMEVOXbcwlSLEOZUz+3RqSBsMB z4X/ngZGexiwkg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:48 2025 by rpki-client