This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json) Hash identifier: TwFUKWOIo34WPPDGm2WqYWScOZFnHFnag48vnj5Tmm0= Subject key identifier: 8A:5D:ED:C4:46:D5:97:EF:3C:78:43:81:AD:BE:65:E1:35:5B:CD:78 Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985 Certificate serial: 019B755B0572FE5B357B427FD4EAA609D8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft Manifest number: 03C0 Signing time: Wed 31 Dec 2025 17:00:57 +0000 Manifest this update: Wed 31 Dec 2025 17:00:57 +0000 Manifest next update: Thu 01 Jan 2026 17:00:57 +0000 Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=) 2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: FWZiX6dP7oVtd3Vv6HTLYf7/TQq5mrdi+OgO6IKdEbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5b:05:72:fe:5b:35:7b:42:7f:d4:ea:a6:09:d8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beef138c62b8174c6a808306eda57e92805de985 Validity Not Before: Dec 31 17:00:57 2025 GMT Not After : Jan 1 17:00:57 2026 GMT Subject: CN=8a5dedc446d597ef3c784381adbe65e1355bcd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:ad:86:15:bd:11:19:5d:5f:78:b0:4c:eb: 60:f3:85:71:6f:55:97:76:9a:62:dc:3e:08:17:5b: 14:5f:e2:fb:b1:a5:60:f7:8b:44:7f:16:fb:f1:1d: da:dd:bb:80:ec:c2:8c:41:33:b6:d0:42:58:52:8e: 5b:e1:cd:b0:67:cd:5f:49:27:0e:43:8c:c6:76:3a: 17:bd:03:be:30:19:cd:f3:ad:65:9f:2a:41:e3:91: 52:d7:61:bf:3c:7e:f3:df:11:d2:fa:1c:f4:f8:3b: ff:ed:3f:62:71:27:7d:06:7d:86:d4:46:5e:93:8a: 77:df:5b:1f:a5:87:13:d1:90:c1:35:2e:e1:fb:df: cd:47:bf:c4:8e:09:bc:d4:be:a3:17:e3:44:24:8f: c3:b8:6e:3e:54:35:22:71:b7:05:ae:21:5b:73:e7: fb:8c:fd:e6:2b:85:68:51:9a:b4:b2:6e:e6:80:3e: 3e:60:62:56:05:bc:ac:35:fd:0a:5d:35:ff:47:00: 47:c2:6e:9b:be:3a:15:21:84:be:c4:a4:8f:f2:e3: 63:25:54:13:5a:9e:21:92:74:d7:4b:07:73:8e:e5: 7c:ac:f6:40:94:6c:01:4a:65:f8:e0:2b:ca:57:41: 22:67:c0:4f:42:1d:77:35:da:aa:8a:6d:39:f0:a5: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:ED:C4:46:D5:97:EF:3C:78:43:81:AD:BE:65:E1:35:5B:CD:78 X509v3 Authority Key Identifier: keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:44:80:98:ec:18:aa:12:fa:14:23:45:68:45:c4:26:36: 21:ea:38:46:8f:46:32:5f:45:af:a1:6e:c1:58:43:94:00:44: 97:f8:a1:8a:85:e3:d0:37:c0:c8:6c:bb:a6:95:c3:ef:e0:05: 3d:6d:cf:ad:19:1f:53:5d:1a:26:0e:c5:f6:3c:be:d6:4f:e6: 24:ba:fb:47:0e:a3:ec:46:d1:1a:1a:7d:eb:29:04:d3:f7:df: d2:4b:de:ff:40:8a:c8:9e:50:7e:79:81:ab:fd:a9:65:18:f0: 4a:46:21:e3:64:cf:52:7c:5f:5b:4e:77:fa:5d:0c:24:c2:19: 47:07:b3:78:66:37:83:31:bd:35:b3:f5:c2:79:3a:c3:d7:17: 10:77:8c:f6:ca:89:bc:89:78:b6:dc:8e:2e:ec:ae:b7:58:49: e5:35:ad:77:c7:f1:6e:91:31:26:89:48:47:30:9b:0b:b0:c3: ae:0a:96:62:40:64:a4:db:46:6d:8c:1c:26:69:41:86:c0:44: f1:ac:34:6d:17:32:e5:bf:86:05:f0:d9:b8:39:3b:1f:8e:80: ad:49:7c:d8:33:90:19:0f:00:2b:d3:44:af:16:c5:b5:a7:a9: 17:ed:b2:f7:dc:81:74:b8:fa:73:38:89:89:13:b4:b8:0e:db: 71:d6:ae:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WwVy/ls1e0J/1OqmCdjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1 ZGU5ODUwHhcNMjUxMjMxMTcwMDU3WhcNMjYwMTAxMTcwMDU3WjAzMTEwLwYDVQQD Eyg4YTVkZWRjNDQ2ZDU5N2VmM2M3ODQzODFhZGJlNjVlMTM1NWJjZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S2thhW9ERldX3iwTOtg84Vxb1WX dppi3D4IF1sUX+L7saVg94tEfxb78R3a3buA7MKMQTO20EJYUo5b4c2wZ81fSScO Q4zGdjoXvQO+MBnN861lnypB45FS12G/PH7z3xHS+hz0+Dv/7T9icSd9Bn2G1EZe k4p331sfpYcT0ZDBNS7h+9/NR7/Ejgm81L6jF+NEJI/DuG4+VDUicbcFriFbc+f7 jP3mK4VoUZq0sm7mgD4+YGJWBbysNf0KXTX/RwBHwm6bvjoVIYS+xKSP8uNjJVQT Wp4hknTXSwdzjuV8rPZAlGwBSmX44CvKV0EiZ8BPQh13Ndqqim058KX0HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpd7cRG1ZfvPHhDga2+ZeE1W814MB8GA1UdIwQY MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt NTcyNzAwODJmZTBiLzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF9EgJjs GKoS+hQjRWhFxCY2Ieo4Ro9GMl9Fr6FuwVhDlABEl/ihioXj0DfAyGy7ppXD7+AF PW3PrRkfU10aJg7F9jy+1k/mJLr7Rw6j7EbRGhp96ykE0/ff0kve/0CKyJ5QfnmB q/2pZRjwSkYh42TPUnxfW053+l0MJMIZRwezeGY3gzG9NbP1wnk6w9cXEHeM9sqJ vIl4ttyOLuyut1hJ5TWtd8fxbpExJolIRzCbC7DDrgqWYkBkpNtGbYwcJmlBhsBE 8aw0bRcy5b+GBfDZuDk7H46ArUl82DOQGQ8AK9NErxbFtaepF+2y99yBdLj6cziJ iRO0uA7bcdauNw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:33:13 2025 by rpki-client