This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json) Hash identifier: EFdtAt2ZkqVgTkwicaZDVQtNKikdv7jKxbr65YdMmdE= Subject key identifier: C6:FD:4A:E2:8C:A7:D8:9F:50:0D:6C:73:02:5E:FC:69:BD:44:BB:EE Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019AF3F75F23C0CD595C1420D7E2AD44C7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=) 2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: VgwEFWUhTzrm7Bn2at4ZiaLrQ9c2hET6VZOmQjBGypI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5f:23:c0:cd:59:5c:14:20:d7:e2:ad:44:c7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=c6fd4ae28ca7d89f500d6c73025efc69bd44bbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:6b:0c:12:7d:6e:59:12:3b:54:43:b5:64: c0:49:6c:96:75:c0:4d:b6:33:f4:44:60:62:61:ce: 1c:1e:63:c3:7f:14:d3:6f:da:40:40:d5:14:e3:3b: 93:20:47:22:5b:07:08:4a:96:0a:da:82:02:35:6a: b3:51:11:80:fb:88:f0:5a:d5:9b:fe:8f:bd:25:b4: b9:31:c2:55:84:fa:31:e7:1e:51:d6:0b:f0:4f:71: 44:5c:e2:8f:73:15:6f:58:20:f3:e4:a3:cb:bc:78: d5:8e:1f:e2:e3:a3:bc:ae:88:c5:3f:a3:09:97:56: 0a:cb:d6:38:94:e0:99:95:67:96:30:3d:f0:fd:8a: ee:4f:bb:63:e1:d3:6c:4b:7b:a9:a5:d0:73:59:a3: d9:fe:32:b8:6c:58:35:92:6f:85:96:3c:74:18:52: 8c:98:ca:0d:d6:89:b3:b7:35:de:49:23:00:de:b9: ed:44:4f:67:b8:7e:2f:7d:e0:9a:56:ea:5f:ae:c4: f0:9c:cd:8a:76:6f:da:d5:e6:01:33:2b:db:b3:11: 59:fd:ea:0b:10:71:a1:fa:f1:15:45:1f:16:ba:1f: f6:77:08:bf:a7:72:02:59:9d:a6:66:17:11:ce:7c: 13:3e:42:22:f0:a9:6b:89:99:58:9e:99:2a:fc:c4: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FD:4A:E2:8C:A7:D8:9F:50:0D:6C:73:02:5E:FC:69:BD:44:BB:EE X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:13:b1:df:dd:f5:20:af:95:42:3c:57:df:eb:85:a1:91:0c: e8:e1:29:44:47:81:82:ff:c9:8b:11:e9:01:1c:e8:05:60:5a: 82:ba:f8:78:f6:2a:9b:53:6d:b7:57:2a:23:dc:d7:3d:79:a8: e6:dd:a3:98:46:45:28:cf:86:b4:51:ae:75:b6:ee:3f:8d:d5: b0:eb:e8:98:ef:0c:8a:9e:5b:d6:4e:66:28:a1:d9:b4:e3:56: d1:f3:e9:01:62:07:3f:9c:a8:d5:c4:0c:71:18:d5:c5:21:88: 2a:cc:ba:42:d7:99:f7:34:72:76:6b:fe:45:2b:57:16:f8:d1: e5:4c:cd:70:fd:1c:7a:cc:03:88:a6:bb:d8:5a:66:23:61:c3: 37:a7:99:72:46:18:f8:eb:e6:52:34:93:c0:d7:2c:d0:23:16: 6f:0a:c8:61:9f:15:b6:b4:e8:74:1a:28:2e:eb:5f:53:06:8f: e4:b7:44:26:6c:dd:02:35:5d:2b:91:ad:50:90:6e:57:9d:5d: 47:72:20:a2:83:1b:d8:2b:75:5a:6b:a9:5b:01:94:f7:8b:87: c7:9d:97:99:9f:25:1c:6d:55:ed:fb:01:fe:1e:ee:e4:a7:7e: 21:83:fc:0e:db:d7:6f:df:2d:c3:87:82:35:4a:d1:91:0a:d2: 5f:d4:86:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz918jwM1ZXBQg1+KtRMerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD EyhjNmZkNGFlMjhjYTdkODlmNTAwZDZjNzMwMjVlZmM2OWJkNDRiYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvphrDBJ9blkSO1RDtWTASWyWdcBN tjP0RGBiYc4cHmPDfxTTb9pAQNUU4zuTIEciWwcISpYK2oICNWqzURGA+4jwWtWb /o+9JbS5McJVhPox5x5R1gvwT3FEXOKPcxVvWCDz5KPLvHjVjh/i46O8rojFP6MJ l1YKy9Y4lOCZlWeWMD3w/YruT7tj4dNsS3uppdBzWaPZ/jK4bFg1km+Fljx0GFKM mMoN1omztzXeSSMA3rntRE9nuH4vfeCaVupfrsTwnM2Kdm/a1eYBMyvbsxFZ/eoL EHGh+vEVRR8Wuh/2dwi/p3ICWZ2mZhcRznwTPkIi8KlriZlYnpkq/MRecwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb9SuKMp9ifUA1scwJe/Gm9RLvuMB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABOx3931 IK+VQjxX3+uFoZEM6OEpREeBgv/JixHpARzoBWBagrr4ePYqm1Ntt1cqI9zXPXmo 5t2jmEZFKM+GtFGudbbuP43VsOvomO8Mip5b1k5mKKHZtONW0fPpAWIHP5yo1cQM cRjVxSGIKsy6QteZ9zRydmv+RStXFvjR5UzNcP0ceswDiKa72FpmI2HDN6eZckYY +OvmUjSTwNcs0CMWbwrIYZ8VtrTodBooLutfUwaP5LdEJmzdAjVdK5GtUJBuV51d R3IgooMb2Ct1WmupWwGU94uHx52XmZ8lHG1V7fsB/h7u5Kd+IYP8DtvXb98tw4eC NUrRkQrSX9SGKw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:32 2025 by rpki-client