This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json) Hash identifier: 4vd8rkXuz1SksHGWsIV0hxN5SX02+jNVNvK2IOsJM5g= Subject key identifier: D2:BE:B2:D7:EB:97:24:84:11:2E:24:D5:AA:37:CD:F2:6A:22:1F:C1 Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0 Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0 Certificate serial: 019AF1D18F089D6EE06366A1968BB092EA5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=) 2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: /Vg2Nzs9XtEi5gYMrJnUqqVaceylTtCBIjLppqViWyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8f:08:9d:6e:e0:63:66:a1:96:8b:b0:92:ea:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=d2beb2d7eb972484112e24d5aa37cdf26a221fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:8e:d1:97:46:4c:ee:7d:25:fb:a1:d4:cc: 6d:14:de:19:8b:91:3a:53:e8:34:21:73:33:20:17: 31:60:95:45:f3:cf:18:94:7d:64:94:e6:00:be:54: b1:34:64:73:8f:0c:cc:74:15:ce:f6:37:6e:7a:3b: a5:2b:75:e4:3a:d6:dd:0f:40:e1:00:cc:ba:03:4d: c4:9f:fe:a5:c4:94:2c:ab:c3:0f:71:0d:e1:06:19: 0c:3d:2b:12:b1:09:02:1e:1d:ee:7c:ec:21:fb:2c: 56:40:dc:f2:a8:21:68:d3:12:94:83:b8:db:5a:93: 0d:8b:2b:d4:f6:6b:39:10:b1:2d:8f:d8:9a:d7:0c: 7e:ef:5c:4c:24:b7:ec:95:a1:83:d0:fb:94:96:b3: 43:42:25:46:17:32:79:63:08:53:5d:e8:12:9f:a2: 27:12:26:de:95:80:d3:95:d5:af:b1:eb:7c:40:e0: 9d:38:4f:3c:49:1b:36:2d:96:ee:f1:37:76:d8:ab: 87:b7:4c:f6:e6:32:c5:a2:87:4e:5f:f9:c5:d6:90: a8:41:aa:d6:43:5b:31:db:6d:d2:dd:a2:ef:99:f1: fc:a9:91:d0:4d:b0:54:73:a1:57:64:aa:66:b4:0f: 1a:4a:3e:f5:d3:dd:e7:29:93:c8:2b:46:5e:3f:bc: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:B2:D7:EB:97:24:84:11:2E:24:D5:AA:37:CD:F2:6A:22:1F:C1 X509v3 Authority Key Identifier: keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0b:fc:81:de:a4:8f:91:3c:88:b0:82:fa:66:27:15:67:65: 4a:09:65:45:c3:d0:94:d8:ec:dc:09:31:5f:e9:ea:27:7d:ef: f0:cc:4a:4b:30:72:da:e6:b5:3b:6a:6f:d7:ed:de:00:1d:20: e8:e2:86:7d:f2:09:47:7d:f1:91:5b:91:43:e0:08:da:d1:fc: 76:0e:32:ba:3e:c5:d0:48:36:67:48:ab:a9:33:5f:39:dc:d9: 5b:15:5d:05:e1:b7:b9:8c:1e:e3:9b:ee:93:1f:40:9d:2e:f2: 98:7c:83:e1:f4:65:16:43:12:ad:aa:07:1e:bc:02:d6:45:56: 74:fe:b3:aa:4f:ae:c8:ed:6a:28:bf:5c:be:d2:4e:b4:d7:8c: 42:0c:92:54:c6:fe:ab:9c:ff:33:bd:57:b6:ac:14:1a:03:47: fa:3b:b8:80:01:0d:12:bf:5b:81:3f:1e:73:4a:ae:97:48:a5: d0:0c:0f:ce:e3:5e:b3:61:15:c3:e5:0a:e1:01:a8:f9:65:94: 2d:0e:30:c4:b2:24:95:2c:4c:18:77:23:31:69:8d:59:a7:51: be:20:ca:a7:4e:42:56:99:d6:fe:64:2f:1f:d4:12:0b:6b:69: e2:e0:72:4a:83:5d:ab:73:8a:04:30:e0:16:e5:19:27:ce:e1: 2e:a4:51:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y8InW7gY2ahlouwkupaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm YmEyYjAwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EyhkMmJlYjJkN2ViOTcyNDg0MTEyZTI0ZDVhYTM3Y2RmMjZhMjIxZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeO0ZdGTO59Jfuh1MxtFN4Zi5E6 U+g0IXMzIBcxYJVF888YlH1klOYAvlSxNGRzjwzMdBXO9jduejulK3XkOtbdD0Dh AMy6A03En/6lxJQsq8MPcQ3hBhkMPSsSsQkCHh3ufOwh+yxWQNzyqCFo0xKUg7jb WpMNiyvU9ms5ELEtj9ia1wx+71xMJLfslaGD0PuUlrNDQiVGFzJ5YwhTXegSn6In EibelYDTldWvset8QOCdOE88SRs2LZbu8Td22KuHt0z25jLFoodOX/nF1pCoQarW Q1sx223S3aLvmfH8qZHQTbBUc6FXZKpmtA8aSj71093nKZPIK0ZeP7zjyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK+stfrlySEES4k1ao3zfJqIh/BMB8GA1UdIwQY MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt YWM0NTQ5OTc3OTAxLzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAv8gd6k j5E8iLCC+mYnFWdlSgllRcPQlNjs3AkxX+nqJ33v8MxKSzBy2ua1O2pv1+3eAB0g 6OKGffIJR33xkVuRQ+AI2tH8dg4yuj7F0Eg2Z0irqTNfOdzZWxVdBeG3uYwe45vu kx9AnS7ymHyD4fRlFkMSraoHHrwC1kVWdP6zqk+uyO1qKL9cvtJOtNeMQgySVMb+ q5z/M71XtqwUGgNH+ju4gAENEr9bgT8ec0qul0il0AwPzuNes2EVw+UK4QGo+WWU LQ4wxLIklSxMGHcjMWmNWadRviDKp05CVpnW/mQvH9QSC2tp4uBySoNdq3OKBDDg FuUZJ87hLqRR5g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:38 2025 by rpki-client