This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json) Hash identifier: aEXochjbn2VmhqHXBXSN7oZiWnAWtpW7A/B6766oFkA= Subject key identifier: 79:8B:5B:C2:A0:74:5B:9E:EF:F5:76:DE:8C:D0:EA:1F:9A:81:D6:48 Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Certificate serial: 019B3E6DA6D2CF370A4546293C932CAE787E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft Manifest number: 0FC9 Signing time: Sun 21 Dec 2025 01:02:11 +0000 Manifest this update: Sun 21 Dec 2025 01:02:11 +0000 Manifest next update: Mon 22 Dec 2025 01:02:11 +0000 Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=) 2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: alu/Nr9KVOjAACl6vXn+npRy9Z4AjPHx81pHL8XAVVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a6:d2:cf:37:0a:45:46:29:3c:93:2c:ae:78:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Validity Not Before: Dec 21 01:02:11 2025 GMT Not After : Dec 22 01:02:11 2025 GMT Subject: CN=798b5bc2a0745b9eeff576de8cd0ea1f9a81d648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:e7:c5:df:b3:a5:ff:6c:cf:62:3a:a2:15: ad:46:30:f7:3f:ce:d5:4d:4e:5a:04:91:44:18:0d: bb:e6:32:c9:0a:ad:07:c6:fd:f4:e3:a4:0f:17:f9: 77:5c:0b:f7:b8:b4:8c:86:ee:b4:44:80:45:5b:5f: bc:d4:41:9f:8b:83:1a:b9:40:c2:4e:9b:28:28:27: 69:0e:1c:85:eb:14:25:90:fc:5c:0c:8c:d0:9c:1c: bf:93:c8:52:5d:98:15:1e:87:46:72:02:1d:45:61: 42:bf:d2:4d:ed:58:ac:30:47:8a:35:51:2f:a3:93: b7:09:30:09:ee:0b:0f:c3:91:7e:4a:47:7e:b3:b3: 10:12:3e:64:87:45:78:3a:50:57:87:07:93:70:f8: 08:eb:fc:d8:97:52:00:99:2a:ff:9c:7b:f6:19:96: f6:95:94:06:1a:92:fe:6a:c4:0a:f0:b0:aa:75:0d: 2c:43:66:c7:56:b1:ef:8b:42:fe:8c:7b:91:69:8c: ef:55:b4:07:40:cd:a4:ba:5f:ea:74:7b:da:73:b5: 02:44:2d:05:ac:4f:74:84:eb:27:fa:45:3c:08:54: dc:6d:2c:e3:9b:de:92:1f:af:11:b6:cb:10:f7:82: 97:eb:27:81:5d:5f:c2:52:3c:39:bd:24:0a:8f:7d: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:5B:C2:A0:74:5B:9E:EF:F5:76:DE:8C:D0:EA:1F:9A:81:D6:48 X509v3 Authority Key Identifier: keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:16:9e:f5:83:61:f7:39:54:f4:63:e0:1c:75:8e:25:d9:2a: 2a:73:49:c9:f1:79:24:6d:1d:c0:9f:37:c8:2a:2b:92:28:a3: ba:1c:9a:e4:e1:36:44:63:ca:f7:a2:07:70:29:c0:7a:c8:0f: 2e:46:01:19:34:8c:02:61:4c:d3:53:59:08:50:4d:66:98:8c: 27:c9:1e:ba:59:0f:90:ea:af:95:78:df:e9:2b:bf:42:91:93: 74:07:a5:42:7d:e3:7d:12:85:f2:8b:ee:6d:69:73:73:26:cb: bf:d7:33:98:59:65:10:4a:b4:28:de:51:74:83:a7:e6:9d:b0: e8:91:4f:4d:6f:78:6d:a9:a4:95:5f:d8:c3:d1:88:24:e7:d0: 31:39:82:7c:0e:95:ca:2b:dc:d0:82:b5:5c:e4:91:0e:67:99: fd:c1:9f:44:06:66:36:da:e9:8e:f7:20:48:12:df:c6:f8:07: 0b:bb:3e:c8:91:dd:64:03:83:e7:c4:82:37:6d:8e:a9:61:68: c6:8f:de:75:4c:12:d5:2a:9a:80:9e:ff:58:48:d5:90:dc:a5: 22:ef:e5:d7:28:20:5a:19:fd:d9:b4:ff:96:d2:95:30:63:1a: 1b:ab:69:1e:e5:78:12:55:63:ab:8c:fa:92:84:b5:ad:32:94: 8e:97:58:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+babSzzcKRUYpPJMsrnh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4 NWFiNjQwHhcNMjUxMjIxMDEwMjExWhcNMjUxMjIyMDEwMjExWjAzMTEwLwYDVQQD Eyg3OThiNWJjMmEwNzQ1YjllZWZmNTc2ZGU4Y2QwZWExZjlhODFkNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Hnxd+zpf9sz2I6ohWtRjD3P87V TU5aBJFEGA275jLJCq0Hxv3046QPF/l3XAv3uLSMhu60RIBFW1+81EGfi4MauUDC TpsoKCdpDhyF6xQlkPxcDIzQnBy/k8hSXZgVHodGcgIdRWFCv9JN7VisMEeKNVEv o5O3CTAJ7gsPw5F+Skd+s7MQEj5kh0V4OlBXhweTcPgI6/zYl1IAmSr/nHv2GZb2 lZQGGpL+asQK8LCqdQ0sQ2bHVrHvi0L+jHuRaYzvVbQHQM2kul/qdHvac7UCRC0F rE90hOsn+kU8CFTcbSzjm96SH68RtssQ94KX6yeBXV/CUjw5vSQKj311lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmLW8KgdFue7/V23ozQ6h+agdZIMB8GA1UdIwQY MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt MzE3NmYwOTk5ZGRhLzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxae9YNh 9zlU9GPgHHWOJdkqKnNJyfF5JG0dwJ83yCorkiijuhya5OE2RGPK96IHcCnAesgP LkYBGTSMAmFM01NZCFBNZpiMJ8keulkPkOqvlXjf6Su/QpGTdAelQn3jfRKF8ovu bWlzcybLv9czmFllEEq0KN5RdIOn5p2w6JFPTW94bamklV/Yw9GIJOfQMTmCfA6V yivc0IK1XOSRDmeZ/cGfRAZmNtrpjvcgSBLfxvgHC7s+yJHdZAOD58SCN22OqWFo xo/edUwS1SqagJ7/WEjVkNylIu/l1yggWhn92bT/ltKVMGMaG6tpHuV4ElVjq4z6 koS1rTKUjpdYyw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:50 2025 by rpki-client