This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json) Hash identifier: o5Dan/IVIBo+G1GThb9D9FpECbHMOV0rCzSnd1H8Ypg= Subject key identifier: 43:AF:2D:A8:7D:BC:B0:80:0B:12:5B:82:38:D1:BB:16:D1:A6:83:E8 Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58 Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58 Certificate serial: 019AF20934950F0AB87D6A57037BB9F7B694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: WG88S38/aBSCYIbq1lKmLU7eTXa7ygFf89zqYosfOqs=) 2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:34:95:0f:0a:b8:7d:6a:57:03:7b:b9:f7:b6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=43af2da87dbcb0800b125b8238d1bb16d1a683e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:11:ec:c5:3f:b3:ea:9a:6f:0f:0d:83:95: 9d:93:1d:05:7a:61:5b:fa:e2:1b:5e:cb:54:1b:f4: 69:e4:5e:cc:68:aa:26:95:25:d9:35:3d:f7:8d:16: 86:ac:81:7f:ff:6c:44:67:07:f1:22:18:88:23:3d: e7:ce:3a:43:4f:c2:2a:f3:c4:d6:b3:e7:52:52:58: 02:d0:6d:cc:25:38:1b:c8:ee:7b:c7:dc:07:03:22: 2b:cb:da:38:62:f8:82:f0:8c:fb:bb:c1:41:c9:62: 04:a0:2c:19:e8:3c:de:b5:22:6c:0d:51:9c:c1:0c: 2a:b7:a0:0a:b6:e2:97:20:94:fa:b6:c8:c9:0b:9a: 68:38:34:5f:7b:9c:f5:33:f8:e2:54:49:ab:ea:eb: 06:a4:06:7f:cb:42:15:6d:d0:20:0b:71:d8:7f:4e: d9:ac:ac:8a:99:95:53:91:1c:3b:d1:a8:24:05:46: 05:f6:5d:8c:73:e9:36:be:10:d7:bb:5f:2f:ae:d4: b4:c3:63:96:3c:0f:e9:c0:62:4b:d9:2e:93:d8:91: 6d:39:27:80:4d:97:9d:f4:01:71:52:09:f2:60:80: 93:7e:86:e3:72:87:35:1b:70:4d:3e:41:04:df:78: 95:be:01:e9:e1:18:15:8d:d2:90:ac:95:3b:37:7c: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:2D:A8:7D:BC:B0:80:0B:12:5B:82:38:D1:BB:16:D1:A6:83:E8 X509v3 Authority Key Identifier: keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2b:4d:e5:07:ef:ee:8f:5a:ed:77:83:8a:c9:4a:e7:ab:0e: 2c:8c:fd:62:c7:7c:9e:07:48:c2:cb:f7:d4:71:7b:39:a1:a6: 1f:82:69:23:74:c0:d8:bd:aa:e4:b5:b1:ab:d6:92:d3:e4:1a: 81:32:49:c2:bd:e5:20:47:bf:87:5c:82:77:7d:d0:57:92:50: bd:d8:93:8d:94:4a:f3:74:ae:fc:75:09:a2:b3:82:4c:4b:5c: 2a:0d:29:a6:fd:4a:4b:96:45:71:ce:33:24:8f:3e:29:8a:2e: fc:66:f8:8a:d8:d3:a2:42:b8:40:ec:dc:86:37:a4:89:be:b2: d0:93:fd:b5:89:e9:bf:2c:52:58:53:59:5e:b1:99:c7:1b:26: 37:78:88:14:56:79:ab:64:d5:c7:eb:90:f4:5c:75:f3:0a:af: d8:bb:17:77:85:44:95:0b:c6:2d:96:e5:c9:90:fc:3a:ce:7a: 1c:99:36:68:0e:f3:0f:52:e2:35:c1:87:87:b1:a0:34:55:eb: d7:04:b9:b5:1f:1a:07:c6:c1:aa:b9:fd:ab:0f:d3:fc:4a:37: be:f6:74:40:d3:78:9a:d3:6d:cc:05:41:b8:ef:92:71:40:bc: d1:e0:0c:a9:1e:42:2c:bb:17:9c:5c:8d:ac:9f:44:c1:00:10: 50:3a:8a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTSVDwq4fWpXA3u597aUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNzUwNTJiNTAyNTZiYTU2MjkwNGU2ZjEzNDM1MGQzZTc1 ZGVkNTgwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg0M2FmMmRhODdkYmNiMDgwMGIxMjViODIzOGQxYmIxNmQxYTY4M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDAR7MU/s+qabw8Ng5Wdkx0FemFb +uIbXstUG/Rp5F7MaKomlSXZNT33jRaGrIF//2xEZwfxIhiIIz3nzjpDT8Iq88TW s+dSUlgC0G3MJTgbyO57x9wHAyIry9o4YviC8Iz7u8FByWIEoCwZ6DzetSJsDVGc wQwqt6AKtuKXIJT6tsjJC5poODRfe5z1M/jiVEmr6usGpAZ/y0IVbdAgC3HYf07Z rKyKmZVTkRw70agkBUYF9l2Mc+k2vhDXu18vrtS0w2OWPA/pwGJL2S6T2JFtOSeA TZed9AFxUgnyYICTfobjcoc1G3BNPkEE33iVvgHp4RgVjdKQrJU7N3w9cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOvLah9vLCACxJbgjjRuxbRpoPoMB8GA1UdIwQY MBaAFLx1BStQJWulYpBObxNDUNPnXe1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQt ZWExM2ViNzk3ZThjLzEvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZmU4MmYtZTZjZi00YTYyLTg3ZGQtZWExM2ViNzk3ZThj LzEvdkhVRksxQWxhNlZpa0U1dkUwTlEwLWRkN1ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCtN5Qfv 7o9a7XeDislK56sOLIz9Ysd8ngdIwsv31HF7OaGmH4JpI3TA2L2q5LWxq9aS0+Qa gTJJwr3lIEe/h1yCd33QV5JQvdiTjZRK83Su/HUJorOCTEtcKg0ppv1KS5ZFcc4z JI8+KYou/Gb4itjTokK4QOzchjekib6y0JP9tYnpvyxSWFNZXrGZxxsmN3iIFFZ5 q2TVx+uQ9Fx18wqv2LsXd4VElQvGLZblyZD8Os56HJk2aA7zD1LiNcGHh7GgNFXr 1wS5tR8aB8bBqrn9qw/T/Eo3vvZ0QNN4mtNtzAVBuO+ScUC80eAMqR5CLLsXnFyN rJ9EwQAQUDqKVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:32 2025 by rpki-client