This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft File: VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json) Hash identifier: iwvdorUIVFK+t0JdV+ZyB0ndsaO5xB73m+rFzC1CPgA= Subject key identifier: 57:78:2C:ED:78:A8:AE:2A:44:E6:37:E0:41:C1:94:BB:CD:38:93:8F Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F Certificate issuer: /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f Certificate serial: 019B4FCF62E00F5EE850F216C0B0737B3466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft Manifest number: 04B2 Signing time: Wed 24 Dec 2025 10:02:29 +0000 Manifest this update: Wed 24 Dec 2025 10:02:29 +0000 Manifest next update: Thu 25 Dec 2025 10:02:29 +0000 Files and hashes: 1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: TBCltwVNvgTxgMA9DKLJXyMTiAov0MpA/IMQDt62iK8=) 2: b9YEmpfPninMk0asKBNPcoiyaVU.roa (hash: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:62:e0:0f:5e:e8:50:f2:16:c0:b0:73:7b:34:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f Validity Not Before: Dec 24 10:02:29 2025 GMT Not After : Dec 25 10:02:29 2025 GMT Subject: CN=57782ced78a8ae2a44e637e041c194bbcd38938f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:ca:ff:85:60:1e:54:7f:42:b4:f4:a8:29: f8:82:c3:97:65:c9:3f:f3:e5:c0:15:d3:2e:af:88: 01:1a:e8:6a:f3:44:e8:61:0d:df:28:72:72:07:71: e0:94:0f:bb:02:61:fc:5d:c2:8b:06:72:67:dd:ee: 01:84:4d:0a:c0:e1:b6:ee:fc:a6:df:cf:f7:56:9a: 59:48:47:44:67:f2:79:35:3d:73:71:3a:85:ef:89: 95:ea:ab:7c:91:f0:df:3b:c4:bd:b8:06:f3:f6:4b: af:51:d5:98:bb:59:2f:07:40:0e:f1:3c:2b:b8:be: 80:cd:84:8e:73:f0:8a:d3:86:e2:e9:1a:f5:57:83: a2:e0:09:7b:4d:10:6b:94:b0:76:7c:02:48:52:13: 5c:2b:d0:d8:6c:6c:f5:ea:56:4d:e4:4a:85:86:26: 6e:b2:a6:9d:de:71:03:13:8d:d9:40:42:e4:6f:2f: 52:f4:ba:c4:d4:dc:56:d0:5a:01:b0:da:56:89:6b: 19:84:5b:70:11:15:57:7b:5c:c8:ee:18:41:91:c2: dc:86:bf:19:f2:b6:51:ca:f9:e7:59:c4:6a:ec:c4: 0d:d7:9c:42:8c:9c:76:fd:a6:53:f0:70:0d:1d:c7: 9a:72:9b:91:83:94:91:8b:06:ad:f1:c4:44:7a:fd: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:78:2C:ED:78:A8:AE:2A:44:E6:37:E0:41:C1:94:BB:CD:38:93:8F X509v3 Authority Key Identifier: keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:60:4c:3c:40:53:2f:ff:35:57:9f:75:de:cc:65:31:c7:83: 5d:f3:17:8f:4d:94:67:a3:d7:d9:e2:d4:e5:56:b9:63:ac:bc: b2:81:23:7a:a6:16:55:5f:64:4b:c9:9a:eb:f0:99:a6:69:48: 0a:4c:dc:2c:5e:3a:d8:5f:7e:1b:bf:ef:d8:7d:a1:da:55:0d: 23:93:44:08:c5:f0:a3:07:bc:bf:d9:66:9d:bc:02:7f:06:93: a3:3c:f6:87:a7:9e:44:42:0e:37:4b:04:c4:9a:d2:1c:5c:07: b9:29:8c:ba:47:87:fe:4e:79:ce:fd:9d:0a:11:ae:c2:21:82: a8:d1:03:80:2a:a1:ef:b9:45:1b:8b:da:0e:05:bb:6a:44:c4: 38:ef:91:f8:b3:a6:91:79:03:bd:89:7b:fd:fd:dd:7a:4c:ec: da:32:c3:da:2b:be:b5:62:e8:7e:cb:59:e1:3e:24:ee:f3:48: 41:ab:2d:4f:c4:dc:49:fe:a0:55:b7:da:c8:2d:bb:3b:33:78: 7e:29:c3:ff:f7:1d:3b:ef:0f:dd:62:90:6b:41:66:db:26:87: 41:d3:f9:cf:f8:50:c2:8b:b6:de:5a:a8:d2:16:6a:94:3c:4c: e5:06:23:9b:2e:56:8c:13:9e:07:2d:67:d4:63:48:90:dc:e2: e4:85:3b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz2LgD17oUPIWwLBzezRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4 ZTBmNmYwHhcNMjUxMjI0MTAwMjI5WhcNMjUxMjI1MTAwMjI5WjAzMTEwLwYDVQQD Eyg1Nzc4MmNlZDc4YThhZTJhNDRlNjM3ZTA0MWMxOTRiYmNkMzg5MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaPK/4VgHlR/QrT0qCn4gsOXZck/ 8+XAFdMur4gBGuhq80ToYQ3fKHJyB3HglA+7AmH8XcKLBnJn3e4BhE0KwOG27vym 38/3VppZSEdEZ/J5NT1zcTqF74mV6qt8kfDfO8S9uAbz9kuvUdWYu1kvB0AO8Twr uL6AzYSOc/CK04bi6Rr1V4Oi4Al7TRBrlLB2fAJIUhNcK9DYbGz16lZN5EqFhiZu sqad3nEDE43ZQELkby9S9LrE1NxW0FoBsNpWiWsZhFtwERVXe1zI7hhBkcLchr8Z 8rZRyvnnWcRq7MQN15xCjJx2/aZT8HANHceacpuRg5SRiwat8cREev3ZRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd4LO14qK4qROY34EHBlLvNOJOPMB8GA1UdIwQY MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt ZTBjMmJkZmQ2NTg1LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1 LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGBMPEBT L/81V5913sxlMceDXfMXj02UZ6PX2eLU5Va5Y6y8soEjeqYWVV9kS8ma6/CZpmlI CkzcLF462F9+G7/v2H2h2lUNI5NECMXwowe8v9lmnbwCfwaTozz2h6eeREION0sE xJrSHFwHuSmMukeH/k55zv2dChGuwiGCqNEDgCqh77lFG4vaDgW7akTEOO+R+LOm kXkDvYl7/f3dekzs2jLD2iu+tWLofstZ4T4k7vNIQastT8TcSf6gVbfayC27OzN4 finD//cdO+8P3WKQa0Fm2yaHQdP5z/hQwou23lqo0hZqlDxM5QYjmy5WjBOeBy1n 1GNIkNzi5IU7ag== -----END CERTIFICATE-----Generated at Wed Dec 24 16:37:26 2025 by rpki-client