This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json) Hash identifier: 7CWRNF5AS4ONXWI7T4yhoXUIzfYy1f5qvR1qoUU+DZk= Subject key identifier: 67:03:02:DD:EB:3E:0E:C7:00:BD:5A:62:D7:3E:93:3E:C5:82:F5:83 Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03 Certificate serial: 019AF12EF343B18D1105304C553D72A20702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=) 2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=) 3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: G/QxckGj5x8qIGdk80QGOnYYiZ6qH3j+THFU6r/Z6sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f3:43:b1:8d:11:05:30:4c:55:3d:72:a2:07:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03 Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=670302ddeb3e0ec700bd5a62d73e933ec582f583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:2e:5c:95:24:7f:81:b0:b6:b0:b2:6b:f6: da:2c:5c:f0:17:91:f4:0a:f7:7f:95:a9:aa:2f:0f: cc:b8:81:87:6a:88:90:31:7f:10:af:c6:7c:e2:83: 50:bd:91:1c:35:ed:bd:8a:f1:51:60:ef:ce:8a:72: 5e:93:a7:3d:7e:3b:7b:97:84:c2:6a:c9:87:a8:8a: ed:8e:a6:b1:11:5d:b9:cf:73:9d:09:13:df:51:a4: 55:5e:44:db:0a:0a:8e:35:83:2d:a3:44:a2:d4:b5: c5:4f:79:9d:12:15:df:c8:1d:0d:e6:6e:74:7e:11: 09:88:1b:ae:70:7d:a9:1e:19:a2:fa:18:cb:f3:cb: e8:38:e8:af:af:26:16:4c:93:e1:2c:a6:cb:58:37: 8e:d3:32:2a:8b:eb:b2:d5:96:36:75:b3:d1:8e:1b: 54:8a:de:96:87:50:0b:8b:03:64:64:a6:5a:df:d9: 38:72:43:04:40:da:f7:84:35:58:51:6e:49:21:d1: 69:4d:e6:2e:cb:42:78:c3:cb:4a:4b:3c:a7:1d:db: 57:68:5c:42:3c:5a:7b:93:70:25:83:d8:17:74:16: a1:67:12:e0:49:8c:ac:a3:aa:96:3a:11:4d:3c:56: 27:6b:89:3c:4b:80:ad:a7:67:08:10:94:0a:d1:16: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:02:DD:EB:3E:0E:C7:00:BD:5A:62:D7:3E:93:3E:C5:82:F5:83 X509v3 Authority Key Identifier: keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:ca:d5:ab:b4:47:4c:25:f2:b2:17:07:e9:1f:bc:4f:bc: db:37:1d:d9:7f:78:39:39:a1:d2:e0:0a:05:76:70:41:ff:a8: bb:0e:f8:7b:fd:c3:12:f8:f4:ff:d5:69:e7:65:b3:74:c4:af: a9:15:dc:f7:72:0b:8c:1b:fe:0a:1a:71:00:3c:81:c9:51:3e: 96:33:e9:c1:3e:b8:35:eb:2e:44:28:d7:ae:5e:da:c1:b1:e8: e5:34:de:a9:8c:26:70:9d:58:3c:0d:42:e8:e1:00:28:97:76: 6d:78:db:28:57:66:b0:6d:4c:f5:87:ed:d9:38:ae:14:ef:9f: 25:2f:e1:d3:b3:3c:c3:0a:2e:93:38:46:02:04:56:20:ad:6a: 64:fb:f0:c3:bf:ed:e1:c2:6c:cb:b5:d3:fd:f3:3b:c6:5c:7e: c5:1b:75:c5:b8:4d:87:a5:9a:99:dc:64:1a:80:aa:80:0f:5e: aa:7e:5d:2c:15:a0:88:ef:55:01:51:a8:4f:24:5d:cb:12:0c: bf:fb:3a:10:65:8d:1c:a1:de:ca:3f:89:83:be:f7:a4:dd:23: b6:9e:01:c1:a3:a6:0a:5d:bc:89:f7:e6:e2:91:ce:1b:1e:3a: c8:33:fb:d8:74:75:f7:4f:63:97:60:4e:e9:55:d6:aa:4a:35: 17:93:ca:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvNDsY0RBTBMVT1yogcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWE4ODdlNzY1M2EyZGU0NGYxMzE2M2UxODcwMzczMjZh MjlhMDMwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD Eyg2NzAzMDJkZGViM2UwZWM3MDBiZDVhNjJkNzNlOTMzZWM1ODJmNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSkuXJUkf4GwtrCya/baLFzwF5H0 Cvd/lamqLw/MuIGHaoiQMX8Qr8Z84oNQvZEcNe29ivFRYO/OinJek6c9fjt7l4TC asmHqIrtjqaxEV25z3OdCRPfUaRVXkTbCgqONYMto0Si1LXFT3mdEhXfyB0N5m50 fhEJiBuucH2pHhmi+hjL88voOOivryYWTJPhLKbLWDeO0zIqi+uy1ZY2dbPRjhtU it6Wh1ALiwNkZKZa39k4ckMEQNr3hDVYUW5JIdFpTeYuy0J4w8tKSzynHdtXaFxC PFp7k3Alg9gXdBahZxLgSYyso6qWOhFNPFYna4k8S4Ctp2cIEJQK0RbK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcDAt3rPg7HAL1aYtc+kz7FgvWDMB8GA1UdIwQY MBaAFL4aiH52U6LeRPExY+GHA3MmopoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYt ODZjNTQxY2E5ZDcxLzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYtODZjNTQxY2E5ZDcx LzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAjK1au0 R0wl8rIXB+kfvE+82zcd2X94OTmh0uAKBXZwQf+ouw74e/3DEvj0/9Vp52WzdMSv qRXc93ILjBv+ChpxADyByVE+ljPpwT64NesuRCjXrl7awbHo5TTeqYwmcJ1YPA1C 6OEAKJd2bXjbKFdmsG1M9Yft2TiuFO+fJS/h07M8wwoukzhGAgRWIK1qZPvww7/t 4cJsy7XT/fM7xlx+xRt1xbhNh6WamdxkGoCqgA9eqn5dLBWgiO9VAVGoTyRdyxIM v/s6EGWNHKHeyj+Jg773pN0jtp4BwaOmCl28iffm4pHOGx46yDP72HR1909jl2BO 6VXWqko1F5PKiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:29 2025 by rpki-client