This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json) Hash identifier: LCij7YPYL0hUe36e8UHEiFnq0xT0OsenvTeLmgO1frk= Subject key identifier: A6:62:1A:ED:43:96:42:3B:B8:66:D5:3F:00:10:81:74:39:38:78:72 Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e Certificate serial: 019AF38922EAB656B1A0909410E394C2455A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=) 2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: Imr3xMrLTANpO6R+WaTAViwGCN6gan0xa4AFIWdMum8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:22:ea:b6:56:b1:a0:90:94:10:e3:94:c2:45:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=a6621aed4396423bb866d53f0010817439387872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:37:18:e0:92:2b:b0:1c:d7:5d:4f:7f:cf: 6d:00:ac:4c:ea:43:f8:64:ea:45:b8:1f:30:51:23: 9e:61:fb:ea:dc:f4:7b:f4:c5:0a:a7:5c:bb:7a:53: a7:97:cd:07:e6:13:2b:ca:96:cf:84:be:47:66:ef: 37:06:cc:28:76:8a:0a:19:63:f6:3b:1e:0a:0f:f9: b8:49:9e:f0:a2:65:a8:25:b3:91:23:0d:4e:f4:cb: 9d:66:9b:01:29:92:68:f4:6c:77:55:f0:6f:a5:aa: 2e:8b:b7:92:7f:6e:9b:78:02:bd:9c:b5:cc:40:03: 1e:27:eb:59:ac:2c:4f:22:24:30:e0:8f:56:66:93: 42:bf:7f:d9:72:89:a9:0d:12:29:a0:63:7c:d9:ec: 2e:3c:c1:8f:56:7f:49:bc:d5:73:cc:7a:24:d1:6c: 1b:c9:39:76:cb:f4:f2:3b:19:a5:54:63:16:24:f3: 1a:67:e7:61:66:0f:f0:f6:55:4f:f1:20:39:de:bb: 47:d1:26:8d:74:37:dd:94:f3:f9:03:dd:a0:ac:1e: 5a:fb:47:13:b6:f2:2d:e3:c0:00:d2:25:ec:e0:69: e9:ab:1d:c8:a6:57:8c:0b:aa:95:71:0f:49:5f:d9: f8:db:97:88:b0:92:07:11:f3:b8:db:0e:e7:95:2e: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:1A:ED:43:96:42:3B:B8:66:D5:3F:00:10:81:74:39:38:78:72 X509v3 Authority Key Identifier: keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:90:32:c0:e1:53:f9:97:a1:9e:09:00:82:2c:3a:c7:f9:fc: 39:de:49:f3:f2:08:de:90:01:87:cf:34:f4:71:c5:ad:1e:f2: 4b:dc:ea:56:cf:76:ec:ca:12:e2:0e:31:40:26:2f:35:9e:42: e2:bc:1c:ba:60:a6:81:9d:88:2a:f4:45:c7:10:11:bd:c0:31: c1:00:ed:52:71:c0:85:da:1f:56:62:89:b2:88:fe:39:a3:e9: cf:82:2f:c0:f5:c0:64:64:50:cb:01:41:5c:96:25:af:22:de: 07:a4:d7:24:7d:c4:ad:3a:de:b4:f1:a0:90:ac:2d:a4:fe:75: 7b:54:f7:3a:7f:d2:97:92:f1:a9:90:aa:1f:53:19:44:67:52: f7:0b:82:c4:b3:27:d4:06:7a:b3:87:36:34:c9:20:cb:97:ae: 5d:b8:30:36:11:61:46:45:db:54:2c:52:86:db:1d:4b:bc:31: 3b:e1:82:b2:00:cd:5e:5a:56:a4:ca:aa:6d:01:f0:14:fe:1a: 25:9e:ca:1d:ee:49:37:a6:af:8d:3b:38:ab:d3:06:ac:f2:b2: b8:e5:4f:c9:13:d6:b3:78:ce:b2:f9:12:ac:24:60:5f:d4:ab: 9a:80:f5:8c:81:33:6a:5d:b5:7b:5b:23:c5:1e:5c:01:65:43: fc:b7:7a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSLqtlaxoJCUEOOUwkVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTNkMjY1MzUxYjY1ZjIzOWYyOTk3ZGUxZThhODA2Nzc5 MzNhNWUwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD EyhhNjYyMWFlZDQzOTY0MjNiYjg2NmQ1M2YwMDEwODE3NDM5Mzg3ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+43GOCSK7Ac111Pf89tAKxM6kP4 ZOpFuB8wUSOeYfvq3PR79MUKp1y7elOnl80H5hMrypbPhL5HZu83BswodooKGWP2 Ox4KD/m4SZ7womWoJbORIw1O9MudZpsBKZJo9Gx3VfBvpaoui7eSf26beAK9nLXM QAMeJ+tZrCxPIiQw4I9WZpNCv3/ZcompDRIpoGN82ewuPMGPVn9JvNVzzHok0Wwb yTl2y/TyOxmlVGMWJPMaZ+dhZg/w9lVP8SA53rtH0SaNdDfdlPP5A92grB5a+0cT tvIt48AA0iXs4Gnpqx3IpleMC6qVcQ9JX9n425eIsJIHEfO42w7nlS608wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZiGu1DlkI7uGbVPwAQgXQ5OHhyMB8GA1UdIwQY MBaAFL6j0mU1G2XyOfKZfeHoqAZ3kzpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMt ZjUzYzVjMTc1NmQ3LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMtZjUzYzVjMTc1NmQ3 LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZAywOFT +ZehngkAgiw6x/n8Od5J8/II3pABh8809HHFrR7yS9zqVs927MoS4g4xQCYvNZ5C 4rwcumCmgZ2IKvRFxxARvcAxwQDtUnHAhdofVmKJsoj+OaPpz4IvwPXAZGRQywFB XJYlryLeB6TXJH3ErTretPGgkKwtpP51e1T3On/Sl5LxqZCqH1MZRGdS9wuCxLMn 1AZ6s4c2NMkgy5euXbgwNhFhRkXbVCxShtsdS7wxO+GCsgDNXlpWpMqqbQHwFP4a JZ7KHe5JN6avjTs4q9MGrPKyuOVPyRPWs3jOsvkSrCRgX9SrmoD1jIEzal21e1sj xR5cAWVD/Ld6ig== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:31 2025 by rpki-client