This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft File: 42VCB-VH03l4NBTyIg1KLXRGWHA.mft (raw, json) Hash identifier: 2ZMTun4Dmp64R3zfO4lDijLbo+l0R1r7VfaJyMJc6II= Subject key identifier: B5:4B:41:46:48:CF:82:CD:30:5D:47:CC:4B:36:20:CF:7C:1C:DA:18 Authority key identifier: E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70 Certificate issuer: /CN=e3654207e547d379783414f2220d4a2d74465870 Certificate serial: 019B3343E77A1A3ACA3410248E8F1AFC05EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft Manifest number: 1641 Signing time: Thu 18 Dec 2025 21:00:46 +0000 Manifest this update: Thu 18 Dec 2025 21:00:46 +0000 Manifest next update: Fri 19 Dec 2025 21:00:46 +0000 Files and hashes: 1: 42VCB-VH03l4NBTyIg1KLXRGWHA.crl (hash: kyO/kcMZKBe9R7Z0jnHuuSrDXRHVbSDXr09uEMJ/TF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:e7:7a:1a:3a:ca:34:10:24:8e:8f:1a:fc:05:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3654207e547d379783414f2220d4a2d74465870 Validity Not Before: Dec 18 21:00:46 2025 GMT Not After : Dec 19 21:00:46 2025 GMT Subject: CN=b54b414648cf82cd305d47cc4b3620cf7c1cda18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:65:9c:41:77:db:25:0d:7d:89:68:7a:1e: 32:c9:39:f1:41:da:51:20:58:11:7f:cc:48:f2:17: d4:c3:1e:03:71:4f:31:b9:01:e1:dc:5b:27:33:b5: 70:14:02:8a:c3:9c:2f:6a:bb:91:a8:93:41:f1:26: 7f:a7:67:23:90:fc:3b:1f:d8:96:d4:72:e3:55:d7: ef:aa:28:29:d1:e0:9a:88:4a:ca:b2:85:33:f3:78: a2:46:b8:0e:ee:41:0e:6d:e6:3f:09:6b:e3:7c:ae: 7d:bc:ef:4c:0f:32:e8:52:7b:6e:fc:e7:65:cb:8d: 3d:92:ab:70:13:6a:9f:29:a8:1b:4c:4d:2c:d9:52: f5:39:e7:02:92:8e:25:47:7a:f0:bf:b1:75:02:a7: 5f:27:2a:b0:c7:80:17:8a:8d:ce:0b:fb:e1:4d:16: 3b:cd:9d:47:93:e5:e7:e3:dc:f2:b5:19:db:32:bf: c0:e0:a0:2f:72:a3:a1:26:e6:36:1e:86:3c:29:61: 79:41:65:39:36:a8:67:5c:a2:12:ec:3c:04:7e:dc: c0:56:86:66:f9:9e:fd:b0:1a:bc:5f:1e:2c:a5:78: 7b:01:8c:f6:fe:75:71:1a:17:26:a9:86:9e:b0:dc: 6f:35:41:22:29:6c:24:18:bb:fe:c5:dc:95:d7:2a: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:41:46:48:CF:82:CD:30:5D:47:CC:4B:36:20:CF:7C:1C:DA:18 X509v3 Authority Key Identifier: keyid:E3:65:42:07:E5:47:D3:79:78:34:14:F2:22:0D:4A:2D:74:46:58:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42VCB-VH03l4NBTyIg1KLXRGWHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/429d2d-18b9-41c2-b200-c64159559e26/1/42VCB-VH03l4NBTyIg1KLXRGWHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:1f:c6:87:d0:b4:5d:c1:74:4a:52:83:60:9b:55:56:47: 87:b4:87:41:15:85:1c:e0:d1:b3:2e:4c:21:32:b2:e5:df:b8: 81:68:1f:e2:e8:7e:06:db:1a:91:82:3d:78:77:b8:e2:7b:9f: 09:e3:78:1f:bf:f3:d6:fc:a3:cc:e8:3c:79:e6:04:73:69:8f: 1d:3d:f4:2e:0f:51:6a:df:2d:bc:ab:15:18:26:ea:e0:50:98: c8:3c:6b:05:2f:0d:af:d5:f7:8f:74:b2:f0:37:69:2d:4f:56: 46:1e:d5:2c:c9:c7:4e:11:d8:7a:5b:c5:6d:44:6f:09:d7:7f: 04:4c:f2:fb:cc:ca:13:dd:60:c5:ea:22:05:66:b3:0a:64:49: e3:b7:f4:b0:9b:bb:c0:7d:a2:4d:ce:d1:c2:51:61:b7:6a:79: 67:4b:32:ba:5f:de:6d:58:0e:31:92:72:0a:26:5d:af:24:1f: 9e:b5:0f:07:b1:23:36:9d:8e:19:c9:56:a1:af:f3:9b:37:70: 5b:96:d7:46:87:25:ff:78:0f:10:f5:cb:ec:68:3d:ee:e4:44: e0:a0:ee:e5:8f:fd:ca:d4:aa:24:fd:00:90:4b:13:36:62:4e: 5c:d2:2a:1e:80:f0:dc:98:45:3e:70:9c:52:52:0c:a5:b5:40: 55:2f:f7:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+d6GjrKNBAkjo8a/AXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjU0MjA3ZTU0N2QzNzk3ODM0MTRmMjIyMGQ0YTJkNzQ0 NjU4NzAwHhcNMjUxMjE4MjEwMDQ2WhcNMjUxMjE5MjEwMDQ2WjAzMTEwLwYDVQQD EyhiNTRiNDE0NjQ4Y2Y4MmNkMzA1ZDQ3Y2M0YjM2MjBjZjdjMWNkYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIdlnEF32yUNfYloeh4yyTnxQdpR IFgRf8xI8hfUwx4DcU8xuQHh3FsnM7VwFAKKw5wvaruRqJNB8SZ/p2cjkPw7H9iW 1HLjVdfvqigp0eCaiErKsoUz83iiRrgO7kEObeY/CWvjfK59vO9MDzLoUntu/Odl y409kqtwE2qfKagbTE0s2VL1OecCko4lR3rwv7F1AqdfJyqwx4AXio3OC/vhTRY7 zZ1Hk+Xn49zytRnbMr/A4KAvcqOhJuY2HoY8KWF5QWU5NqhnXKIS7DwEftzAVoZm +Z79sBq8Xx4spXh7AYz2/nVxGhcmqYaesNxvNUEiKWwkGLv+xdyV1yr1zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVLQUZIz4LNMF1HzEs2IM98HNoYMB8GA1UdIwQY MBaAFONlQgflR9N5eDQU8iINSi10RlhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAt YzY0MTU5NTU5ZTI2LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80MjlkMmQtMThiOS00MWMyLWIyMDAtYzY0MTU5NTU5ZTI2 LzEvNDJWQ0ItVkgwM2w0TkJUeUlnMUtMWFJHV0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLAfxofQ tF3BdEpSg2CbVVZHh7SHQRWFHODRsy5MITKy5d+4gWgf4uh+BtsakYI9eHe44nuf CeN4H7/z1vyjzOg8eeYEc2mPHT30Lg9Rat8tvKsVGCbq4FCYyDxrBS8Nr9X3j3Sy 8DdpLU9WRh7VLMnHThHYelvFbURvCdd/BEzy+8zKE91gxeoiBWazCmRJ47f0sJu7 wH2iTc7RwlFht2p5Z0syul/ebVgOMZJyCiZdryQfnrUPB7EjNp2OGclWoa/zmzdw W5bXRocl/3gPEPXL7Gg97uRE4KDu5Y/9ytSqJP0AkEsTNmJOXNIqHoDw3JhFPnCc UlIMpbVAVS/3EA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:10:26 2025 by rpki-client