This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: YxLljrUNI4aPFhx8OjOZ38hV2kb88SxyMAOW48sAKnk= Subject key identifier: F8:B0:F9:43:53:4B:3C:C7:80:AA:A2:28:3B:26:46:6C:31:92:8F:CE Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019B6EB4213ED801197FFCB767936EB05888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 065A Signing time: Tue 30 Dec 2025 10:00:57 +0000 Manifest this update: Tue 30 Dec 2025 10:00:57 +0000 Manifest next update: Wed 31 Dec 2025 10:00:57 +0000 Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: hbH74xmqdrDIxC6dSWN0b4zMzMEszw2ZZJYhUjS0KeM=) 2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:21:3e:d8:01:19:7f:fc:b7:67:93:6e:b0:58:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Dec 30 10:00:57 2025 GMT Not After : Dec 31 10:00:57 2025 GMT Subject: CN=f8b0f943534b3cc780aaa2283b26466c31928fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:5b:0a:df:2f:be:96:24:d1:f5:e0:0d:f2: fd:6f:4c:9d:89:19:7c:bb:89:6d:3e:55:61:05:4a: fd:c8:1f:42:09:f5:9d:39:da:54:01:40:16:e0:b2: c9:76:64:b7:5d:4b:9a:4d:10:77:33:bf:b4:80:a6: 39:b2:94:70:ac:f3:b5:9f:4c:b4:17:6b:06:bb:29: 1c:ab:9a:45:5b:c1:a7:ad:4f:c9:e9:59:4a:db:cf: 9b:dc:4d:85:ec:f2:d9:96:70:53:ab:0a:6c:be:31: 42:4a:fc:78:ff:f2:de:36:f0:bf:da:69:cc:02:04: 85:b5:5f:45:92:4b:37:35:42:4f:4e:9b:2f:d7:46: 30:05:9f:33:b6:19:1e:0e:11:8d:cd:6e:07:c1:34: 3c:e4:a2:fa:b4:3b:b6:57:f3:ec:3f:16:b6:89:2f: fa:43:fa:e1:ac:0d:67:88:f9:96:84:b2:6b:d0:82: ed:91:60:b4:9f:7a:9c:c3:0f:1c:7b:88:c8:a9:c9: f2:a8:5d:88:df:e0:0d:62:e8:e1:50:94:d3:72:c5: 81:1a:f3:8b:57:66:7f:6b:75:32:d4:48:1e:0b:0a: e4:44:71:9f:58:99:95:6e:ec:43:0b:a9:f9:15:ea: ff:b5:1a:74:7b:0b:e4:87:e9:f4:e6:18:5e:ec:f3: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B0:F9:43:53:4B:3C:C7:80:AA:A2:28:3B:26:46:6C:31:92:8F:CE X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:17:20:53:9c:38:dd:62:63:89:74:5b:f8:61:0b:43:9f: ac:9d:a0:9f:06:57:7c:4d:87:01:9a:a0:7c:bd:de:33:c6:77: 31:c4:b1:c6:78:25:19:f7:e7:25:3c:20:61:07:de:db:f1:a9: af:f5:49:c8:82:c4:2e:c0:83:38:98:7e:af:a7:0e:46:68:50: da:88:4d:b1:3e:bf:de:4d:f1:6d:de:aa:cd:a5:c7:fc:21:74: 3b:3b:33:c0:82:ca:6e:24:e3:0b:36:67:f9:2a:e4:d9:e5:dc: 71:ea:5a:ba:c0:81:5a:85:b5:78:77:64:95:9e:80:4f:50:aa: 02:c1:e5:2c:1d:86:dd:85:e5:5d:bc:7e:ff:bd:ac:9c:32:14: 68:0f:20:d4:78:77:76:0e:ea:8e:6a:25:dc:4e:2d:8b:4a:b7: 79:bd:4d:bc:5d:ff:b1:39:df:06:b8:3d:24:e4:0f:04:0d:f5: b2:a5:10:ef:b8:2a:86:6d:3b:7e:1b:31:6c:08:4d:58:49:32: 1a:d2:a0:40:e4:9d:3b:da:ce:ad:cc:13:a3:50:bc:b5:3d:e5: 23:3a:dd:c3:bd:8d:55:ce:f1:90:43:0d:35:11:ac:2e:80:63: 9e:3a:ad:a5:49:45:81:d7:2a:6a:07:7e:d5:7a:0e:2d:60:4f: dc:7c:40:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutCE+2AEZf/y3Z5NusFiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjUxMjMwMTAwMDU3WhcNMjUxMjMxMTAwMDU3WjAzMTEwLwYDVQQD EyhmOGIwZjk0MzUzNGIzY2M3ODBhYWEyMjgzYjI2NDY2YzMxOTI4ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoRbCt8vvpYk0fXgDfL9b0ydiRl8 u4ltPlVhBUr9yB9CCfWdOdpUAUAW4LLJdmS3XUuaTRB3M7+0gKY5spRwrPO1n0y0 F2sGuykcq5pFW8GnrU/J6VlK28+b3E2F7PLZlnBTqwpsvjFCSvx4//LeNvC/2mnM AgSFtV9Fkks3NUJPTpsv10YwBZ8zthkeDhGNzW4HwTQ85KL6tDu2V/PsPxa2iS/6 Q/rhrA1niPmWhLJr0ILtkWC0n3qcww8ce4jIqcnyqF2I3+ANYujhUJTTcsWBGvOL V2Z/a3Uy1EgeCwrkRHGfWJmVbuxDC6n5Fer/tRp0ewvkh+n05hhe7PMSjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiw+UNTSzzHgKqiKDsmRmwxko/OMB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtQXIFOc ON1iY4l0W/hhC0OfrJ2gnwZXfE2HAZqgfL3eM8Z3McSxxnglGffnJTwgYQfe2/Gp r/VJyILELsCDOJh+r6cORmhQ2ohNsT6/3k3xbd6qzaXH/CF0OzszwILKbiTjCzZn +Srk2eXccepausCBWoW1eHdklZ6AT1CqAsHlLB2G3YXlXbx+/72snDIUaA8g1Hh3 dg7qjmol3E4ti0q3eb1NvF3/sTnfBrg9JOQPBA31sqUQ77gqhm07fhsxbAhNWEky GtKgQOSdO9rOrcwTo1C8tT3lIzrdw72NVc7xkEMNNRGsLoBjnjqtpUlFgdcqagd+ 1XoOLWBP3HxATw== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:47 2025 by rpki-client