This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json) Hash identifier: gnMPmBAFGHbDTZk8anq5eMuIf4TQmENM5XssngRDnCQ= Subject key identifier: EB:3C:92:0B:91:A6:A5:73:09:2F:96:E2:53:70:04:F7:6B:A2:0E:10 Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Certificate serial: 019B50E0F6BC0B8287D15CBB9B4315D9E66C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft Manifest number: 14D8 Signing time: Wed 24 Dec 2025 15:01:18 +0000 Manifest this update: Wed 24 Dec 2025 15:01:18 +0000 Manifest next update: Thu 25 Dec 2025 15:01:18 +0000 Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=) 2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: yK5P8kNEtVwyX1/unDo7ywLhXg68wyudP70gVRzTVTI=) 3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:f6:bc:0b:82:87:d1:5c:bb:9b:43:15:d9:e6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Validity Not Before: Dec 24 15:01:18 2025 GMT Not After : Dec 25 15:01:18 2025 GMT Subject: CN=eb3c920b91a6a573092f96e2537004f76ba20e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:95:48:19:6b:1e:fb:39:67:8e:84:b1:eb: af:56:08:f9:a4:87:c6:47:52:f2:af:bc:68:5e:9b: c6:be:52:05:a1:29:bd:f0:5a:dc:cd:81:37:6a:dd: 47:21:cf:9f:a4:ca:ff:a0:a9:fb:34:de:5e:f9:8f: 86:cf:64:dd:f2:b0:6b:18:3d:6d:19:64:50:72:5a: 6e:90:35:21:26:cd:97:1c:ea:5e:e1:b3:3c:a1:dc: c2:77:58:52:c6:3a:ba:a0:4e:11:e9:7d:7d:ce:6f: 7b:7d:17:33:a8:60:52:67:fe:86:b4:cf:6f:10:46: c7:44:2a:42:49:83:f0:73:07:94:ea:eb:06:b9:49: df:55:76:81:d2:eb:76:9f:c7:14:5b:c9:86:d5:9f: ae:ad:d8:90:37:ac:bc:8b:c2:ac:f9:88:d7:65:6f: 0a:d7:ab:c1:0f:16:b0:c0:09:b9:9d:25:cf:4a:c1: 4b:fc:17:15:89:9c:b8:c7:10:41:19:41:b3:cf:d6: d9:ed:b0:32:06:41:26:0a:b9:98:d5:db:22:0c:6e: e1:13:04:80:10:8d:5f:6b:e7:57:f2:1b:b3:fd:42: 12:a4:3c:34:51:99:e8:af:38:92:af:8e:33:99:24: 3b:0a:ac:0d:1a:de:4f:4f:ce:89:50:8c:7a:be:cb: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:92:0B:91:A6:A5:73:09:2F:96:E2:53:70:04:F7:6B:A2:0E:10 X509v3 Authority Key Identifier: keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b9:f3:d8:c7:b3:09:1a:6c:98:28:ce:d7:43:b9:d1:1f:74: ad:c9:6c:6e:b6:b1:02:46:18:06:5f:09:91:5c:19:82:96:ea: 09:e9:57:fb:60:31:38:51:7c:c2:9b:2c:b6:20:26:28:38:06: b5:da:6a:31:bf:1c:41:ee:e3:b9:01:b7:b1:1c:2c:98:8c:27: 82:a8:43:6b:5b:1e:28:5e:0e:af:62:23:0b:24:69:89:71:75: 63:7d:91:4f:43:9e:b5:76:34:b7:dc:41:e8:80:65:0a:86:8b: 4f:e4:43:da:b9:30:5d:f7:de:c6:e8:ed:72:dc:7e:75:1b:f4: 4a:0b:6b:44:64:d7:ce:ab:33:c5:1b:04:86:fb:1f:fd:b5:63: 52:65:dc:fd:34:02:6d:9d:db:93:3d:68:a1:97:2a:1f:3c:7a: bb:aa:fe:07:10:f6:bb:b1:bc:c3:ce:ed:e4:58:ad:68:28:e5: 87:2a:f0:33:38:38:c2:17:00:dd:81:75:34:7f:ed:c1:dd:fd: 64:33:12:e4:34:c7:37:16:72:fa:b9:a9:ca:a7:98:7b:e8:29: 20:e2:bf:49:b3:49:a9:23:16:64:b4:32:d0:de:dc:63:f0:82: 32:8d:a1:c4:43:a0:3f:9e:20:c4:5e:17:23:b1:da:b4:f7:7e: 03:07:c6:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Pa8C4KH0Vy7m0MV2eZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3 ZDI3Y2QwHhcNMjUxMjI0MTUwMTE4WhcNMjUxMjI1MTUwMTE4WjAzMTEwLwYDVQQD EyhlYjNjOTIwYjkxYTZhNTczMDkyZjk2ZTI1MzcwMDRmNzZiYTIwZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq2VSBlrHvs5Z46EseuvVgj5pIfG R1Lyr7xoXpvGvlIFoSm98FrczYE3at1HIc+fpMr/oKn7NN5e+Y+Gz2Td8rBrGD1t GWRQclpukDUhJs2XHOpe4bM8odzCd1hSxjq6oE4R6X19zm97fRczqGBSZ/6GtM9v EEbHRCpCSYPwcweU6usGuUnfVXaB0ut2n8cUW8mG1Z+urdiQN6y8i8Ks+YjXZW8K 16vBDxawwAm5nSXPSsFL/BcViZy4xxBBGUGzz9bZ7bAyBkEmCrmY1dsiDG7hEwSA EI1fa+dX8huz/UISpDw0UZnorziSr44zmSQ7CqwNGt5PT86JUIx6vsvwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs8kguRpqVzCS+W4lNwBPdrog4QMB8GA1UdIwQY MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrnz2Mez CRpsmCjO10O50R90rclsbraxAkYYBl8JkVwZgpbqCelX+2AxOFF8wpsstiAmKDgG tdpqMb8cQe7juQG3sRwsmIwngqhDa1seKF4Or2IjCyRpiXF1Y32RT0OetXY0t9xB 6IBlCoaLT+RD2rkwXffexujtctx+dRv0SgtrRGTXzqszxRsEhvsf/bVjUmXc/TQC bZ3bkz1ooZcqHzx6u6r+BxD2u7G8w87t5FitaCjlhyrwMzg4whcA3YF1NH/twd39 ZDMS5DTHNxZy+rmpyqeYe+gpIOK/SbNJqSMWZLQy0N7cY/CCMo2hxEOgP54gxF4X I7HatPd+AwfGWg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:02:48 2025 by rpki-client