This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json) Hash identifier: qqMwsDjIKNrbfzGKyTsr8r0f57T+DALLZYWGDcUjkk4= Subject key identifier: F4:BE:11:F2:99:BA:F3:4A:4E:57:13:57:97:3B:90:4B:46:E2:6F:51 Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8 Certificate serial: 019B3C0FF05B8AABDFCFD60F14325DD1FD25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 14:00:35 +0000 Manifest this update: Sat 20 Dec 2025 14:00:35 +0000 Manifest next update: Sun 21 Dec 2025 14:00:35 +0000 Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=) 2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: V+m1diZT+HHGId0bjIWVjEqAAxprp69xhKsFfX5bUc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f0:5b:8a:ab:df:cf:d6:0f:14:32:5d:d1:fd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8 Validity Not Before: Dec 20 14:00:35 2025 GMT Not After : Dec 21 14:00:35 2025 GMT Subject: CN=f4be11f299baf34a4e571357973b904b46e26f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:60:ef:92:05:90:6a:43:04:26:a8:ad:16: 0e:5f:ae:3d:54:f1:0a:69:74:4b:8f:ba:8d:b2:18: 94:48:98:f3:32:43:bd:d7:b7:d2:ae:22:7c:ff:3d: 9a:dd:1e:2d:4e:65:d3:49:bd:6c:8f:5b:b6:d5:05: 7c:8d:c4:f7:92:1c:00:40:0d:0c:28:7c:24:55:cf: 9d:23:ad:d2:d2:ca:43:67:17:ef:af:7a:ea:28:e6: 30:37:0d:24:1a:89:d4:56:a4:53:41:78:ec:e2:ce: 3b:82:fc:12:7f:b7:1e:21:90:d7:04:cc:39:f8:5c: f6:c8:6d:3f:a5:a4:f1:19:7a:84:9f:c3:56:82:c6: a7:3d:ad:dc:ec:3e:1d:aa:0d:40:8d:03:4a:0f:a0: 5b:c2:c3:68:ab:ae:b8:47:01:ef:c3:c1:de:5c:72: 29:98:6e:8a:37:7d:f3:e5:29:c0:20:cb:1f:29:15: cf:d2:a1:cf:6f:61:68:10:35:61:97:ac:2f:65:a5: a8:fd:76:e2:c2:ff:09:49:32:51:60:d3:94:c4:33: 61:d6:34:9f:0b:12:4c:c2:28:75:1e:f0:88:ba:b1: 1a:15:5d:58:fe:a2:64:0c:14:07:21:78:de:5f:cb: 70:23:55:77:51:b9:0b:f1:e0:ac:81:48:8a:9d:50: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BE:11:F2:99:BA:F3:4A:4E:57:13:57:97:3B:90:4B:46:E2:6F:51 X509v3 Authority Key Identifier: keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:9a:0f:15:ac:8e:2d:0d:5f:c2:e5:95:e4:7f:41:07:1d: 06:89:aa:7c:43:17:f0:f6:63:25:dc:34:12:db:a8:ad:6a:03: 4f:3a:ae:1b:a1:56:e9:5b:a4:a9:df:97:40:5e:8d:fd:c3:24: fc:98:36:c2:c4:12:91:fe:71:7d:4c:1f:ca:58:19:fe:17:b9: 60:bd:c0:f2:67:b1:28:8b:e4:cd:3d:b7:f0:f8:1e:2f:e6:ec: 2c:85:43:ab:8b:2b:3d:0a:a9:42:10:c6:5f:aa:47:aa:f8:2f: 92:61:75:5f:e5:7f:98:4a:81:26:4e:90:cb:00:ee:69:bd:01: ee:3f:6d:85:f9:a8:7b:42:e9:31:1c:ff:84:6d:5f:72:4b:be: 26:65:b4:d3:fa:2e:9a:c5:73:92:47:92:c9:68:d6:c9:c0:83: 16:89:89:5f:81:69:62:de:51:b0:55:9b:d9:9f:7a:37:aa:7c: 57:cc:9d:eb:b7:b7:6c:d0:7a:f1:c1:33:df:79:54:b2:61:2c: d0:8a:9d:9b:12:80:ea:52:96:04:5b:a0:71:3f:3c:0c:45:b7: 7d:f9:e4:f0:3f:b1:22:36:f4:a4:0a:e9:23:99:8e:98:79:f7: f6:15:56:99:82:e1:3c:ca:af:83:6a:60:e5:55:3f:90:1e:e7: 92:89:c2:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/Bbiqvfz9YPFDJd0f0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz YTUzZjgwHhcNMjUxMjIwMTQwMDM1WhcNMjUxMjIxMTQwMDM1WjAzMTEwLwYDVQQD EyhmNGJlMTFmMjk5YmFmMzRhNGU1NzEzNTc5NzNiOTA0YjQ2ZTI2ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXpg75IFkGpDBCaorRYOX649VPEK aXRLj7qNshiUSJjzMkO917fSriJ8/z2a3R4tTmXTSb1sj1u21QV8jcT3khwAQA0M KHwkVc+dI63S0spDZxfvr3rqKOYwNw0kGonUVqRTQXjs4s47gvwSf7ceIZDXBMw5 +Fz2yG0/paTxGXqEn8NWgsanPa3c7D4dqg1AjQNKD6BbwsNoq664RwHvw8HeXHIp mG6KN33z5SnAIMsfKRXP0qHPb2FoEDVhl6wvZaWo/Xbiwv8JSTJRYNOUxDNh1jSf CxJMwih1HvCIurEaFV1Y/qJkDBQHIXjeX8twI1V3UbkL8eCsgUiKnVADKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS+EfKZuvNKTlcTV5c7kEtG4m9RMB8GA1UdIwQY MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUiaDxWs ji0NX8LlleR/QQcdBomqfEMX8PZjJdw0EtuorWoDTzquG6FW6Vukqd+XQF6N/cMk /Jg2wsQSkf5xfUwfylgZ/he5YL3A8mexKIvkzT238PgeL+bsLIVDq4srPQqpQhDG X6pHqvgvkmF1X+V/mEqBJk6QywDuab0B7j9thfmoe0LpMRz/hG1fcku+JmW00/ou msVzkkeSyWjWycCDFomJX4FpYt5RsFWb2Z96N6p8V8yd67e3bNB68cEz33lUsmEs 0IqdmxKA6lKWBFugcT88DEW3ffnk8D+xIjb0pArpI5mOmHn39hVWmYLhPMqvg2pg 5VU/kB7nkonCig== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:57 2025 by rpki-client