This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft File: Vu9y3nfRt-K0RwW2y85jlCHam-8.mft (raw, json) Hash identifier: X1SkYudCVA0f/vdcSF4YYMWRdy0O6wUI56ISxxhgfzA= Subject key identifier: DA:DE:36:A9:68:E6:36:1F:8E:50:A5:BA:E0:02:36:C2:5F:82:5E:67 Authority key identifier: 56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF Certificate issuer: /CN=56ef72de77d1b7e2b44705b6cbce639421da9bef Certificate serial: 019B6B457894D00C1E8B97799B70F8ACEA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft Manifest number: 05E2 Signing time: Mon 29 Dec 2025 18:01:13 +0000 Manifest this update: Mon 29 Dec 2025 18:01:13 +0000 Manifest next update: Tue 30 Dec 2025 18:01:13 +0000 Files and hashes: 1: Vu9y3nfRt-K0RwW2y85jlCHam-8.crl (hash: wGNTkeR2JPuQnQPHeFcFX2HO5cjDxCYVTPwr2qveeL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:78:94:d0:0c:1e:8b:97:79:9b:70:f8:ac:ea:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56ef72de77d1b7e2b44705b6cbce639421da9bef Validity Not Before: Dec 29 18:01:13 2025 GMT Not After : Dec 30 18:01:13 2025 GMT Subject: CN=dade36a968e6361f8e50a5bae00236c25f825e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:53:e4:7a:48:4e:b1:d6:23:40:9f:9b:e3: 38:88:d8:ad:ce:f3:f7:74:4f:eb:c6:03:54:9c:af: 54:58:67:39:ca:1a:45:62:59:c0:49:57:34:87:2f: e1:4f:9a:0d:5a:ea:ce:44:7d:90:0b:a7:4e:94:a7: ff:dd:d1:e4:53:af:ce:a5:90:38:1d:74:b4:29:7d: 29:f9:de:38:c8:c5:48:da:ee:02:7b:2e:21:3e:60: dd:75:37:ff:14:ca:f2:79:bf:ee:77:ef:12:a9:49: b3:42:05:52:90:a5:09:5a:d2:11:30:8a:56:82:77: 38:40:2f:e2:c2:6b:dd:75:bd:80:40:b1:80:4e:e7: 7b:08:68:48:84:65:41:f1:e5:da:19:29:8a:fb:51: 66:2e:42:9d:e7:78:fc:8d:5e:53:82:fd:02:66:5f: f9:4f:8f:58:73:88:68:b4:5e:58:30:15:71:35:83: 73:d5:4f:48:7f:50:24:a3:fa:f7:54:b7:4b:8d:b5: ab:30:8f:fb:34:4b:ec:ae:d4:d6:2c:d3:fc:4f:37: bf:55:54:3c:dd:fb:72:f0:8c:87:6a:e4:c4:7d:f5: 23:49:d0:82:7d:cb:04:23:dd:81:c3:6c:74:66:f9: e8:8e:38:fc:c6:b3:0b:72:58:a6:d7:3f:66:d7:69: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:36:A9:68:E6:36:1F:8E:50:A5:BA:E0:02:36:C2:5F:82:5E:67 X509v3 Authority Key Identifier: keyid:56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:95:ef:4c:cc:30:a4:4b:b6:16:a6:7c:87:6d:c2:a6:ed:0e: cc:86:63:39:90:90:f4:5c:1e:98:ee:da:10:63:3d:82:50:33: 20:de:b4:81:c5:0d:b6:69:5b:21:cd:78:77:dd:1f:cd:b3:26: 4d:fd:79:d9:8e:54:3f:aa:ec:cb:ec:f9:7b:46:ac:eb:26:84: b5:4b:3c:df:41:85:98:20:ef:41:30:47:47:f4:88:50:ba:9e: 7e:1f:c3:66:96:d8:ce:52:d3:ce:65:2e:d3:3f:79:07:58:bb: bd:a1:31:a9:3b:cf:b3:ea:7e:8f:fd:83:6c:41:48:af:cb:eb: 8d:9e:d4:49:06:bd:5b:68:97:42:2a:de:e4:f1:b1:eb:1f:06: e5:ea:a5:5b:b6:98:9d:52:a9:32:68:d7:09:8d:e8:dc:dd:d0: 03:6d:45:33:66:cb:4b:de:0b:20:7f:c4:c6:c9:4e:88:f8:2e: ef:a8:9f:b1:b5:39:93:1d:8b:c7:31:2a:41:dd:a1:e6:0a:1c: 8f:fc:70:2d:30:d3:6e:d6:25:df:da:5b:96:72:da:2a:60:67: b1:3f:44:4c:f9:60:8e:97:75:1f:1e:c2:cd:9b:46:ac:50:88: ae:58:09:12:25:8f:0a:9d:5b:b1:f5:26:c0:a2:f7:e3:a3:eb: b5:b6:41:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRXiU0Awei5d5m3D4rOpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZWY3MmRlNzdkMWI3ZTJiNDQ3MDViNmNiY2U2Mzk0MjFk YTliZWYwHhcNMjUxMjI5MTgwMTEzWhcNMjUxMjMwMTgwMTEzWjAzMTEwLwYDVQQD EyhkYWRlMzZhOTY4ZTYzNjFmOGU1MGE1YmFlMDAyMzZjMjVmODI1ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2hT5HpITrHWI0Cfm+M4iNitzvP3 dE/rxgNUnK9UWGc5yhpFYlnASVc0hy/hT5oNWurORH2QC6dOlKf/3dHkU6/OpZA4 HXS0KX0p+d44yMVI2u4Cey4hPmDddTf/FMryeb/ud+8SqUmzQgVSkKUJWtIRMIpW gnc4QC/iwmvddb2AQLGATud7CGhIhGVB8eXaGSmK+1FmLkKd53j8jV5Tgv0CZl/5 T49Yc4hotF5YMBVxNYNz1U9If1Ako/r3VLdLjbWrMI/7NEvsrtTWLNP8Tze/VVQ8 3fty8IyHauTEffUjSdCCfcsEI92Bw2x0Zvnojjj8xrMLclim1z9m12l6OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNreNqlo5jYfjlCluuACNsJfgl5nMB8GA1UdIwQY MBaAFFbvct530bfitEcFtsvOY5Qh2pvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnU5eTNuZlJ0LUswUndXMnk4NWpsQ0hhbS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MWZkZDUtYzI5ZC00ZDM4LThlZjkt NGY2NTZmMjlhNTFiLzEvVnU5eTNuZlJ0LUswUndXMnk4NWpsQ0hhbS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83MWZkZDUtYzI5ZC00ZDM4LThlZjktNGY2NTZmMjlhNTFi LzEvVnU5eTNuZlJ0LUswUndXMnk4NWpsQ0hhbS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpXvTMww pEu2FqZ8h23Cpu0OzIZjOZCQ9FwemO7aEGM9glAzIN60gcUNtmlbIc14d90fzbMm Tf152Y5UP6rsy+z5e0as6yaEtUs830GFmCDvQTBHR/SIULqefh/DZpbYzlLTzmUu 0z95B1i7vaExqTvPs+p+j/2DbEFIr8vrjZ7USQa9W2iXQire5PGx6x8G5eqlW7aY nVKpMmjXCY3o3N3QA21FM2bLS94LIH/ExslOiPgu76ifsbU5kx2LxzEqQd2h5goc j/xwLTDTbtYl39pblnLaKmBnsT9ETPlgjpd1Hx7CzZtGrFCIrlgJEiWPCp1bsfUm wKL346PrtbZBVQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:47:17 2025 by rpki-client