This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json) Hash identifier: PKQ1mF1sOG1ru3I2b2W0/gINwu3kwPpPkGePMi6Canw= Subject key identifier: 98:67:3F:81:F9:AA:ED:FE:76:AC:8D:1C:28:8E:47:54:9D:28:AB:8A Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985 Certificate serial: 019B3B6BAB0177FA03734183A64BF82DA6F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft Manifest number: 03A2 Signing time: Sat 20 Dec 2025 11:01:10 +0000 Manifest this update: Sat 20 Dec 2025 11:01:10 +0000 Manifest next update: Sun 21 Dec 2025 11:01:10 +0000 Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=) 2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: scMZNRvbt4Aipl1zF1V1Me6xpCb/GsB+8Yj4J/QbVaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ab:01:77:fa:03:73:41:83:a6:4b:f8:2d:a6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beef138c62b8174c6a808306eda57e92805de985 Validity Not Before: Dec 20 11:01:10 2025 GMT Not After : Dec 21 11:01:10 2025 GMT Subject: CN=98673f81f9aaedfe76ac8d1c288e47549d28ab8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:7e:95:2a:f7:d5:b5:df:d2:a8:ad:bb:8f: 3a:3c:ad:96:b8:fd:d3:73:eb:51:6e:e3:34:f6:c3: 14:ce:9b:ca:14:a0:6f:5d:f4:ba:0e:08:98:0b:cc: 54:5a:73:64:52:87:26:6a:7e:ef:56:76:6f:67:be: 17:80:a6:fa:89:78:e1:be:2f:b7:ee:8f:6c:6d:92: 90:e7:33:dc:13:27:0f:31:cb:42:35:47:56:87:0b: 4d:cb:5c:21:83:92:60:05:a5:e8:1f:8a:c4:fd:d4: 8b:fb:68:9b:da:b0:ce:4d:e7:22:c3:9d:6c:17:c5: b5:9a:db:a8:52:bf:38:13:e1:3e:f2:8c:7b:3f:67: 5a:f0:fa:81:53:66:26:1f:4a:ee:0c:c3:77:1c:dc: b5:47:f8:59:48:27:12:81:33:50:5d:fd:e8:54:55: a5:38:2b:86:16:ce:cb:ff:02:bd:27:10:52:4d:04: 8a:c0:a4:2c:5e:df:e0:fd:08:48:13:0d:4a:85:05: 36:66:77:ee:ac:25:87:03:72:c7:7c:aa:f7:e1:5c: be:7a:cf:de:58:18:ac:e8:41:d8:e4:8e:eb:23:7b: 63:de:1d:4c:7e:f4:73:b3:32:ff:35:04:7e:68:f2: ab:fc:77:e7:12:0f:85:f7:f6:72:f3:2d:2c:16:26: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:3F:81:F9:AA:ED:FE:76:AC:8D:1C:28:8E:47:54:9D:28:AB:8A X509v3 Authority Key Identifier: keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:2b:bf:7b:de:17:4b:0d:08:67:2d:28:da:35:2d:70:69: c0:5f:6a:be:df:79:41:d6:d1:ac:20:3d:8d:94:16:ea:7e:65: fb:e7:e3:1e:34:88:f4:29:dd:aa:9e:1a:52:00:b3:7e:52:92: 2d:88:6d:72:18:36:75:2b:e7:57:22:2e:59:5e:13:b9:7f:f4: a6:f7:a1:22:8e:23:fb:97:c5:71:d8:4b:ae:02:f5:45:12:50: 78:44:1c:54:94:1d:20:f1:3d:d6:88:e4:d1:a1:ea:45:25:86: 42:8e:18:93:17:3e:6c:83:b9:21:06:03:18:a5:14:b3:cb:92: c6:93:9a:f5:b8:96:c2:bc:4b:f4:70:31:26:6f:84:8f:68:8d: 5b:e1:c8:b5:4c:f8:87:dd:1d:76:d8:96:5f:1f:a7:71:b6:7b: 3b:2f:f7:d4:37:b7:92:74:61:5b:a6:36:49:9e:30:c6:77:e7: 5f:d2:c2:62:1f:21:d4:d7:c3:b2:43:38:51:1d:86:5e:d1:e3: 5a:7a:c1:50:e7:bd:0e:29:9b:d3:0e:04:47:43:ee:15:00:73: 8f:65:06:72:e3:cb:29:4a:bc:6d:9c:19:26:99:8c:75:12:d1: 51:7f:45:cf:e3:01:82:31:a1:7b:5f:36:f0:17:28:c4:e0:e8: 1b:f5:75:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6sBd/oDc0GDpkv4Lab0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1 ZGU5ODUwHhcNMjUxMjIwMTEwMTEwWhcNMjUxMjIxMTEwMTEwWjAzMTEwLwYDVQQD Eyg5ODY3M2Y4MWY5YWFlZGZlNzZhYzhkMWMyODhlNDc1NDlkMjhhYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoR+lSr31bXf0qitu486PK2WuP3T c+tRbuM09sMUzpvKFKBvXfS6DgiYC8xUWnNkUocman7vVnZvZ74XgKb6iXjhvi+3 7o9sbZKQ5zPcEycPMctCNUdWhwtNy1whg5JgBaXoH4rE/dSL+2ib2rDOTeciw51s F8W1mtuoUr84E+E+8ox7P2da8PqBU2YmH0ruDMN3HNy1R/hZSCcSgTNQXf3oVFWl OCuGFs7L/wK9JxBSTQSKwKQsXt/g/QhIEw1KhQU2ZnfurCWHA3LHfKr34Vy+es/e WBis6EHY5I7rI3tj3h1MfvRzszL/NQR+aPKr/HfnEg+F9/Zy8y0sFia4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhnP4H5qu3+dqyNHCiOR1SdKKuKMB8GA1UdIwQY MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt NTcyNzAwODJmZTBiLzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexcrv3ve F0sNCGctKNo1LXBpwF9qvt95QdbRrCA9jZQW6n5l++fjHjSI9Cndqp4aUgCzflKS LYhtchg2dSvnVyIuWV4TuX/0pvehIo4j+5fFcdhLrgL1RRJQeEQcVJQdIPE91ojk 0aHqRSWGQo4Ykxc+bIO5IQYDGKUUs8uSxpOa9biWwrxL9HAxJm+Ej2iNW+HItUz4 h90ddtiWXx+ncbZ7Oy/31De3knRhW6Y2SZ4wxnfnX9LCYh8h1NfDskM4UR2GXtHj WnrBUOe9Dimb0w4ER0PuFQBzj2UGcuPLKUq8bZwZJpmMdRLRUX9Fz+MBgjGhe182 8BcoxODoG/V15g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:58:49 2025 by rpki-client