This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json) Hash identifier: EFWiR14qVC1o4jDj0cX0g8idyHAn6eGiamuQw0Uzx6I= Subject key identifier: 3B:62:DD:3B:FA:92:D8:DD:D3:0E:BF:E2:2E:53:A4:99:61:E5:34:24 Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Certificate serial: 019B3F7F25750A76F7E90586109B3079A53F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft Manifest number: 14CF Signing time: Sun 21 Dec 2025 06:00:55 +0000 Manifest this update: Sun 21 Dec 2025 06:00:55 +0000 Manifest next update: Mon 22 Dec 2025 06:00:55 +0000 Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=) 2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: jPCui2eGaS+hNR67k+n4RdliKJYl0ZqF6ehW2u0qvW4=) 3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:25:75:0a:76:f7:e9:05:86:10:9b:30:79:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Validity Not Before: Dec 21 06:00:55 2025 GMT Not After : Dec 22 06:00:55 2025 GMT Subject: CN=3b62dd3bfa92d8ddd30ebfe22e53a49961e53424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:4d:0e:4c:9d:ca:35:bf:b4:d3:66:53:f2: 2f:3e:07:9b:64:a9:20:22:1d:49:10:34:57:3c:a1: 5d:52:74:2a:bf:44:4a:f1:3f:c5:1a:ab:9f:04:9f: b9:ab:72:f7:9c:00:a0:44:72:f2:02:c0:fe:f3:e1: 3a:2d:40:13:ef:6e:67:9d:5c:09:2a:ac:cd:ae:34: fa:0e:09:08:d5:04:8a:41:8b:c3:cd:40:fc:4e:9d: 2c:ff:e4:36:2a:cb:70:c4:8c:76:83:2d:34:4a:52: ac:c0:66:28:b0:ff:9c:37:02:93:5f:e3:ad:7e:86: b1:5e:91:95:aa:a9:58:e5:4f:52:3e:e1:52:52:20: 16:ef:2c:b3:0b:9a:7d:58:f7:c6:22:26:6f:ff:7f: 79:88:7a:05:08:f9:fa:e0:24:00:7b:1e:c3:49:21: 92:65:d1:da:67:1c:40:77:e3:8f:bd:aa:3d:99:31: 50:b3:57:8d:c1:66:54:e4:bf:54:88:e5:1a:1f:e7: ab:4f:58:3a:08:01:eb:e8:97:37:7d:d7:75:f3:f1: ac:78:82:e6:32:fe:06:46:a4:69:43:c2:ab:4d:d3: fd:0f:0b:2a:e1:9b:de:b8:7c:19:45:a9:e9:b5:d3: dd:b2:e2:cb:ae:4c:a7:83:99:50:82:05:2a:30:e9: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:DD:3B:FA:92:D8:DD:D3:0E:BF:E2:2E:53:A4:99:61:E5:34:24 X509v3 Authority Key Identifier: keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:db:5b:0b:d0:5d:39:57:77:7b:2e:9e:fb:49:8b:57:d3: 6b:4c:2b:16:13:e1:8e:2f:b4:76:17:a7:6a:a5:c4:5a:a1:35: 4f:81:b2:5e:96:e9:24:db:e2:3a:1c:09:98:bb:44:08:66:28: e5:99:0b:1b:79:32:08:de:4e:d9:b5:c1:39:8a:d8:e9:f6:9d: 7c:ef:50:b9:08:f6:d2:63:95:38:c7:8d:30:c3:65:dc:4d:98: 72:e2:76:e1:25:4b:7c:52:25:d6:f1:d4:67:73:0e:55:fc:0f: c0:0c:46:9a:e1:eb:2c:9b:4a:c6:13:e9:07:55:ee:40:05:c3: 5d:06:02:13:98:31:e5:1d:c9:f6:21:71:e6:ce:23:d1:29:5d: 14:17:60:35:33:af:a3:f2:a4:dd:0b:ae:e0:c4:79:d6:6d:41: fd:cd:38:02:4a:5e:de:33:23:2f:4e:06:fb:17:89:d5:56:8b: 53:4b:89:4c:07:a9:44:6a:86:b4:aa:31:24:e5:da:39:70:a4: 2d:53:e8:f6:d8:50:fc:f1:d5:d1:04:67:76:8b:b3:4d:0a:71: fd:7e:9b:b5:e1:1e:08:bb:a7:d6:4c:d4:6a:55:ed:b1:b8:92: 7b:b9:8f:3f:9a:4c:f5:fa:11:52:60:9d:11:7f:f2:45:60:06: ff:12:9f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyV1Cnb36QWGEJsweaU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3 ZDI3Y2QwHhcNMjUxMjIxMDYwMDU1WhcNMjUxMjIyMDYwMDU1WjAzMTEwLwYDVQQD EygzYjYyZGQzYmZhOTJkOGRkZDMwZWJmZTIyZTUzYTQ5OTYxZTUzNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr5NDkydyjW/tNNmU/IvPgebZKkg Ih1JEDRXPKFdUnQqv0RK8T/FGqufBJ+5q3L3nACgRHLyAsD+8+E6LUAT725nnVwJ KqzNrjT6DgkI1QSKQYvDzUD8Tp0s/+Q2KstwxIx2gy00SlKswGYosP+cNwKTX+Ot foaxXpGVqqlY5U9SPuFSUiAW7yyzC5p9WPfGIiZv/395iHoFCPn64CQAex7DSSGS ZdHaZxxAd+OPvao9mTFQs1eNwWZU5L9UiOUaH+erT1g6CAHr6Jc3fdd18/GseILm Mv4GRqRpQ8KrTdP9Dwsq4ZveuHwZRanptdPdsuLLrkyng5lQggUqMOl2lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDti3Tv6ktjd0w6/4i5TpJlh5TQkMB8GA1UdIwQY MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTLbWwvQ XTlXd3sunvtJi1fTa0wrFhPhji+0dhenaqXEWqE1T4GyXpbpJNviOhwJmLtECGYo 5ZkLG3kyCN5O2bXBOYrY6fadfO9QuQj20mOVOMeNMMNl3E2YcuJ24SVLfFIl1vHU Z3MOVfwPwAxGmuHrLJtKxhPpB1XuQAXDXQYCE5gx5R3J9iFx5s4j0SldFBdgNTOv o/Kk3Quu4MR51m1B/c04Akpe3jMjL04G+xeJ1VaLU0uJTAepRGqGtKoxJOXaOXCk LVPo9thQ/PHV0QRndouzTQpx/X6bteEeCLun1kzUalXtsbiSe7mPP5pM9foRUmCd EX/yRWAG/xKf1g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:03 2025 by rpki-client