This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json) Hash identifier: KxqP1epW/AFdJGtbvErmLnhwrhycc4vFfbwwaD1qh+k= Subject key identifier: 4A:01:F9:85:09:66:58:A8:70:67:5B:01:73:79:BB:CF:C1:CD:68:44 Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f Certificate serial: 019B4E4D98F5A8B7A5924AE918BBEBA96C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft Manifest number: 0312 Signing time: Wed 24 Dec 2025 03:01:06 +0000 Manifest this update: Wed 24 Dec 2025 03:01:06 +0000 Manifest next update: Thu 25 Dec 2025 03:01:06 +0000 Files and hashes: 1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=) 2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: OPN1mI90mZG3Kr+KYqtQYjAN2a77jaxhlLl6MXY3FcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:98:f5:a8:b7:a5:92:4a:e9:18:bb:eb:a9:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f Validity Not Before: Dec 24 03:01:06 2025 GMT Not After : Dec 25 03:01:06 2025 GMT Subject: CN=4a01f985096658a870675b017379bbcfc1cd6844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:46:18:e0:b8:ff:5d:69:5c:14:c2:93:0c: 2b:33:7d:43:de:b8:02:4e:c2:5a:9b:d2:5d:59:e9: 01:00:c7:90:38:91:6b:7f:85:89:3e:70:fd:82:88: 3c:de:e9:1f:ba:53:64:14:84:a5:e6:44:0c:9a:97: 5a:a5:05:71:37:5b:43:87:53:46:47:49:20:11:09: 16:a4:57:85:f8:9f:b7:08:30:14:56:20:fe:83:bb: fa:15:c1:d1:e3:3e:2f:8a:c1:62:76:6f:1a:15:1d: db:fd:55:f0:13:a3:fa:ff:7d:aa:94:fe:1a:38:c5: 84:fd:2f:2b:f9:b0:68:c6:c5:36:8e:05:a8:35:25: 85:3e:72:0f:81:ad:e1:e8:55:98:ba:16:f2:5a:4b: a3:47:aa:f0:ce:ba:59:49:97:e1:fc:76:19:ee:29: f2:16:35:e8:f0:8a:56:a5:2e:21:09:4b:41:e4:ea: 13:25:22:07:18:e1:ce:51:c4:f3:c4:a9:cb:64:a0: 41:a9:9c:0b:84:81:e3:b5:8c:35:f6:4c:13:9b:32: e1:0c:19:d9:5d:ef:ec:c5:75:ed:4f:2e:fd:ee:1d: 5c:67:74:1c:f4:61:d4:4e:d9:54:50:a9:88:e5:0e: ec:eb:c5:d4:22:2b:84:b3:3e:dc:1b:f9:6c:3b:f7: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:01:F9:85:09:66:58:A8:70:67:5B:01:73:79:BB:CF:C1:CD:68:44 X509v3 Authority Key Identifier: keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:aa:a7:e3:a7:7b:36:eb:e3:18:4d:57:9e:3f:07:f9:c5:fb: 31:96:61:87:f1:a4:d7:1f:2b:36:ff:86:94:34:0f:1b:45:62: 1c:3a:c6:35:20:61:b6:07:f3:b9:c9:55:10:48:75:66:4b:e4: 88:96:89:dc:b9:c7:60:80:97:90:3f:50:82:78:15:4d:ac:c0: 71:18:d6:d1:19:b9:41:dc:1c:af:ab:ff:34:c3:2e:22:b9:94: ab:69:60:60:39:17:68:02:1c:99:8f:f4:78:3d:ce:58:59:9d: 21:a5:be:8a:49:89:b1:ca:d3:3a:f5:d2:69:23:3f:f4:43:59: 64:65:6c:cc:11:9b:5b:0d:27:77:e5:44:e5:ce:02:f2:8f:11: d9:cc:b8:5b:d2:0d:4c:b1:90:cf:4f:91:e6:93:16:c4:0d:b0: bd:77:76:53:45:e5:9d:d6:2e:71:20:c6:d1:3f:5e:28:39:c8: af:38:e5:0c:3f:7f:1a:53:e0:f0:72:05:89:74:57:cb:bf:97: e7:c6:bb:ee:0d:5f:8c:c5:a7:8c:74:84:50:6a:b8:ae:85:59: 28:12:5d:7f:e2:53:75:10:53:51:f4:c6:22:38:b8:f3:41:64: 95:41:1a:3a:55:61:8b:fa:01:98:4d:08:9b:5c:df:f8:09:52: e9:86:bd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTZj1qLelkkrpGLvrqWyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjUzZTg5MzA0MzRjNzJhNTgwN2EwNTUwODJiOTg1OTli MjcwN2YwHhcNMjUxMjI0MDMwMTA2WhcNMjUxMjI1MDMwMTA2WjAzMTEwLwYDVQQD Eyg0YTAxZjk4NTA5NjY1OGE4NzA2NzViMDE3Mzc5YmJjZmMxY2Q2ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN1GGOC4/11pXBTCkwwrM31D3rgC TsJam9JdWekBAMeQOJFrf4WJPnD9gog83ukfulNkFISl5kQMmpdapQVxN1tDh1NG R0kgEQkWpFeF+J+3CDAUViD+g7v6FcHR4z4visFidm8aFR3b/VXwE6P6/32qlP4a OMWE/S8r+bBoxsU2jgWoNSWFPnIPga3h6FWYuhbyWkujR6rwzrpZSZfh/HYZ7iny FjXo8IpWpS4hCUtB5OoTJSIHGOHOUcTzxKnLZKBBqZwLhIHjtYw19kwTmzLhDBnZ Xe/sxXXtTy797h1cZ3Qc9GHUTtlUUKmI5Q7s68XUIiuEsz7cG/lsO/clRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoB+YUJZliocGdbAXN5u8/BzWhEMB8GA1UdIwQY MBaAFFW1PokwQ0xypYB6BVCCuYWZsnB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEt OTQ1NDA3YTAxN2IyLzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iM2ZkZDctMDg4YS00ZjYyLThjMmEtOTQ1NDA3YTAxN2Iy LzEvVmJVLWlUQkRUSEtsZ0hvRlVJSzVoWm15Y0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKqn46d7 NuvjGE1Xnj8H+cX7MZZhh/Gk1x8rNv+GlDQPG0ViHDrGNSBhtgfzuclVEEh1Zkvk iJaJ3LnHYICXkD9QgngVTazAcRjW0Rm5Qdwcr6v/NMMuIrmUq2lgYDkXaAIcmY/0 eD3OWFmdIaW+ikmJscrTOvXSaSM/9ENZZGVszBGbWw0nd+VE5c4C8o8R2cy4W9IN TLGQz0+R5pMWxA2wvXd2U0XlndYucSDG0T9eKDnIrzjlDD9/GlPg8HIFiXRXy7+X 58a77g1fjMWnjHSEUGq4roVZKBJdf+JTdRBTUfTGIji480FklUEaOlVhi/oBmE0I m1zf+AlS6Ya9dw== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:36 2025 by rpki-client