This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft File: vlSo6uJa4PaLNFLEaF2UOefRxf0.mft (raw, json) Hash identifier: ARL2by0nWgna1Bj+sQduGdssTAyDjLaH18XjW37QrQY= Subject key identifier: 35:C9:E3:FF:A4:0E:3D:39:1A:0C:EE:1E:BF:88:FD:6B:FB:D7:E9:0D Authority key identifier: BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD Certificate issuer: /CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd Certificate serial: 019AF0F5D5A224003B665E662724934BF63D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft Manifest number: 47 Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: akY5-4-g2obAzmTP9gII_aizPf4.roa (hash: KzVeM7VQFmS8KaLIcAh5ltjwswioSvZ+o5zTBX1hlx0=) 2: vlSo6uJa4PaLNFLEaF2UOefRxf0.crl (hash: xU7J6qyEis4eYo09CIWImV/sjKBi/8kDRquwdRhG6Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d5:a2:24:00:3b:66:5e:66:27:24:93:4b:f6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=35c9e3ffa40e3d391a0cee1ebf88fd6bfbd7e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:93:9a:66:bd:f4:66:01:fa:d2:a9:85:d4: 7a:9b:61:56:62:55:65:28:69:12:79:02:87:67:9a: f5:2d:28:8b:c9:e2:51:0c:33:85:d1:34:72:72:78: dd:4d:81:01:9c:06:e5:d4:bf:b0:0d:2a:8e:20:44: b9:cb:2f:a4:de:0f:98:df:b4:25:76:2e:d1:6b:01: be:b8:2c:60:4e:20:da:69:e7:80:dd:3a:56:e9:48: e5:28:0e:a4:27:33:ad:22:4f:db:a5:f0:c4:eb:71: 31:c3:49:ea:0f:d1:8e:d9:79:e4:76:d5:26:5e:83: 33:dc:50:02:37:09:f8:ff:00:0c:b4:b6:f5:86:dd: 2c:63:1c:8a:b5:3b:82:e7:61:90:e1:6e:59:bb:6b: 3d:d7:9c:44:5f:9d:af:5a:71:00:57:55:d5:f9:6a: 32:51:54:ab:af:8f:3b:25:57:82:50:34:7b:d1:42: 91:b6:6e:b9:41:52:2e:18:14:23:7b:6f:7b:41:c4: a1:b9:da:21:e2:53:76:f4:20:34:8f:88:54:0e:45: 8d:72:37:37:43:a4:c5:ce:a6:65:ee:63:fb:39:8a: 2a:e5:48:df:89:6c:74:ac:ff:f7:0e:d9:3c:5b:06: 87:73:72:3f:20:74:ec:b5:ba:61:a3:97:38:bb:5a: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:E3:FF:A4:0E:3D:39:1A:0C:EE:1E:BF:88:FD:6B:FB:D7:E9:0D X509v3 Authority Key Identifier: keyid:BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:20:14:52:99:07:bb:31:61:09:4f:e8:77:18:92:68:33: 19:68:ad:21:48:f0:a0:e5:5a:74:e6:aa:9d:6d:05:55:04:d6: 1c:09:43:6b:fe:c2:35:1e:2e:d1:17:7b:1e:b9:52:9b:1d:7a: 83:73:0c:9f:6e:ab:96:dc:fa:15:67:7b:2d:dd:8f:20:5f:6c: 16:c1:f2:09:50:96:50:ba:ae:8c:5c:d8:60:1e:74:6a:c8:8e: c4:c5:79:6e:78:92:50:49:1f:74:5b:60:6e:dd:7f:fe:2f:aa: fc:bd:75:b5:7e:a9:73:c5:dd:f1:79:78:8e:8a:11:ca:97:00: 99:e9:f1:8c:69:79:7f:94:b4:de:91:8f:0e:d4:9b:b6:33:9c: 75:dc:78:33:b5:68:97:52:d6:f8:46:66:f7:04:82:da:58:e3: a4:8f:41:14:15:d0:a8:3b:7a:ec:3b:df:44:91:d5:31:5b:88: 96:bc:fd:36:87:30:c0:6d:d4:39:1c:b4:df:a6:fd:4b:ac:ea: 06:3e:b1:cd:bc:b6:2c:4c:12:b0:ef:6d:7b:36:83:a4:4d:4b: 61:89:52:6c:61:d1:fa:8b:43:f9:bd:17:56:05:6c:4d:b9:18: b0:7c:c9:fd:ed:14:a1:d9:ee:d6:8b:ed:7e:d4:79:ad:47:3e: 7a:99:47:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dWiJAA7Zl5mJySTS/Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTRhOGVhZTI1YWUwZjY4YjM0NTJjNDY4NWQ5NDM5ZTdk MWM1ZmQwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EygzNWM5ZTNmZmE0MGUzZDM5MWEwY2VlMWViZjg4ZmQ2YmZiZDdlOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskWTmma99GYB+tKphdR6m2FWYlVl KGkSeQKHZ5r1LSiLyeJRDDOF0TRycnjdTYEBnAbl1L+wDSqOIES5yy+k3g+Y37Ql di7RawG+uCxgTiDaaeeA3TpW6UjlKA6kJzOtIk/bpfDE63Exw0nqD9GO2XnkdtUm XoMz3FACNwn4/wAMtLb1ht0sYxyKtTuC52GQ4W5Zu2s915xEX52vWnEAV1XV+Woy UVSrr487JVeCUDR70UKRtm65QVIuGBQje297QcShudoh4lN29CA0j4hUDkWNcjc3 Q6TFzqZl7mP7OYoq5UjfiWx0rP/3Dtk8WwaHc3I/IHTstbpho5c4u1qq6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXJ4/+kDj05GgzuHr+I/Wv71+kNMB8GA1UdIwQY MBaAFL5UqOriWuD2izRSxGhdlDnn0cX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYt MTJiZjkwZTNkZTQ3LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYtMTJiZjkwZTNkZTQ3 LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmkgFFKZ B7sxYQlP6HcYkmgzGWitIUjwoOVadOaqnW0FVQTWHAlDa/7CNR4u0Rd7HrlSmx16 g3MMn26rltz6FWd7Ld2PIF9sFsHyCVCWULqujFzYYB50asiOxMV5bniSUEkfdFtg bt1//i+q/L11tX6pc8Xd8Xl4jooRypcAmenxjGl5f5S03pGPDtSbtjOcddx4M7Vo l1LW+EZm9wSC2ljjpI9BFBXQqDt67DvfRJHVMVuIlrz9NocwwG3UORy036b9S6zq Bj6xzby2LEwSsO9tezaDpE1LYYlSbGHR+otD+b0XVgVsTbkYsHzJ/e0Uodnu1ovt ftR5rUc+eplH5A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:20 2025 by rpki-client