This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json) Hash identifier: Tlm5CSEc4yR0N5kqKJGgaWW2UkeEGIqokbZwkPuP2yk= Subject key identifier: 3A:38:4E:55:E1:FF:CA:CC:C4:02:D0:D0:17:DA:A3:A2:25:48:BC:82 Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937 Certificate serial: 019B3D5A1B956726BD0059A2267368EF8820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:01:14 +0000 Manifest this update: Sat 20 Dec 2025 20:01:14 +0000 Manifest next update: Sun 21 Dec 2025 20:01:14 +0000 Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=) 2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: 2ZJHTHgBWbU0NCViWcBzmu1i379hFt7YwwjfQPNwd2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1b:95:67:26:bd:00:59:a2:26:73:68:ef:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937 Validity Not Before: Dec 20 20:01:14 2025 GMT Not After : Dec 21 20:01:14 2025 GMT Subject: CN=3a384e55e1ffcaccc402d0d017daa3a22548bc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:44:65:bb:e1:c0:18:77:5c:8a:79:e6:30: 97:e3:2f:a0:75:93:86:10:08:1c:e6:34:4a:8c:e4: 55:52:3d:8f:fb:28:53:d1:78:da:25:ea:8e:a3:50: 66:f2:7b:2d:d0:ed:01:0e:3d:aa:96:c5:14:f9:60: bc:ea:ef:98:ce:5b:7f:3c:1d:ff:44:98:0c:6a:9e: ce:39:a9:2f:d0:a8:24:97:77:d1:42:04:09:c0:00: 69:47:6a:97:b9:48:40:dc:bb:62:24:90:32:88:c5: 69:1a:56:28:7a:10:4e:51:33:f4:f8:46:6c:7d:d8: ab:62:4e:e0:d5:7d:f6:17:24:42:46:16:31:05:04: 30:e6:12:33:46:b1:21:ff:4f:be:b8:f4:41:64:01: 2a:fd:8a:b8:cf:a4:52:d5:58:66:fb:92:95:7f:d1: d6:22:4c:92:40:8a:0a:6f:1f:82:78:85:cc:7d:8a: e6:50:27:8d:31:6c:67:73:c5:09:33:ed:f7:be:27: 1b:61:e6:0d:02:66:b6:a3:61:5f:8d:2d:21:bf:51: 55:47:c9:38:9c:0d:e0:e0:11:31:c5:7d:4c:b5:26: e3:d4:62:af:cc:1e:05:df:27:93:e3:0e:b8:ae:a4: 7e:1f:e3:3d:1d:b2:11:95:7c:5d:60:13:f1:3d:46: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:4E:55:E1:FF:CA:CC:C4:02:D0:D0:17:DA:A3:A2:25:48:BC:82 X509v3 Authority Key Identifier: keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:ae:7f:64:c3:a4:15:b1:49:8f:d3:05:6b:88:cf:d7:fb: 28:d6:1e:57:82:55:3f:cf:03:0f:7a:ac:cd:86:f4:f3:3b:0e: 02:8b:9f:fc:ff:39:50:d6:48:30:75:09:99:9d:f5:60:dc:31: 96:93:fe:d5:c6:13:97:1b:ed:1b:14:10:90:22:45:93:14:24: 26:03:6b:b3:50:dd:b7:cc:1b:1a:2d:0a:7a:28:1c:bc:82:39: 5a:04:d6:5c:c4:2e:2d:10:67:fa:22:83:cb:0f:0c:bb:d8:18: ef:88:63:b4:da:10:ae:ce:5c:23:e9:ca:2d:86:f7:c1:82:fa: 54:e2:11:23:30:42:22:9d:4b:f0:dc:53:4a:9a:cd:12:f1:32: 93:20:07:ee:db:c4:8d:ea:d5:8c:c8:3c:f9:e1:6c:44:c8:68: 18:ce:1c:61:85:f3:2c:06:33:d6:94:40:b6:24:7f:87:10:c1: 0b:31:ad:a4:95:bc:be:6c:e8:f3:b8:89:75:6e:ef:f8:e1:88: dd:2b:20:67:15:81:c4:ba:b7:a4:96:f6:61:ea:bb:04:d8:12: 99:48:df:f3:91:a3:4b:a8:23:18:0d:7b:40:c7:bf:f2:d8:08: f3:cc:4c:e9:db:8e:e4:56:d8:f2:8c:3c:7b:45:f5:8d:b7:91: 1c:de:33:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhuVZya9AFmiJnNo74ggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy ODg5MzcwHhcNMjUxMjIwMjAwMTE0WhcNMjUxMjIxMjAwMTE0WjAzMTEwLwYDVQQD EygzYTM4NGU1NWUxZmZjYWNjYzQwMmQwZDAxN2RhYTNhMjI1NDhiYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DFEZbvhwBh3XIp55jCX4y+gdZOG EAgc5jRKjORVUj2P+yhT0XjaJeqOo1Bm8nst0O0BDj2qlsUU+WC86u+Yzlt/PB3/ RJgMap7OOakv0Kgkl3fRQgQJwABpR2qXuUhA3LtiJJAyiMVpGlYoehBOUTP0+EZs fdirYk7g1X32FyRCRhYxBQQw5hIzRrEh/0++uPRBZAEq/Yq4z6RS1Vhm+5KVf9HW IkySQIoKbx+CeIXMfYrmUCeNMWxnc8UJM+33vicbYeYNAma2o2FfjS0hv1FVR8k4 nA3g4BExxX1MtSbj1GKvzB4F3yeT4w64rqR+H+M9HbIRlXxdYBPxPUZJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo4TlXh/8rMxALQ0Bfao6IlSLyCMB8GA1UdIwQY MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt ZTJhOTIwNWE5ZDJhLzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHWuf2TD pBWxSY/TBWuIz9f7KNYeV4JVP88DD3qszYb08zsOAouf/P85UNZIMHUJmZ31YNwx lpP+1cYTlxvtGxQQkCJFkxQkJgNrs1Ddt8wbGi0KeigcvII5WgTWXMQuLRBn+iKD yw8Mu9gY74hjtNoQrs5cI+nKLYb3wYL6VOIRIzBCIp1L8NxTSprNEvEykyAH7tvE jerVjMg8+eFsRMhoGM4cYYXzLAYz1pRAtiR/hxDBCzGtpJW8vmzo87iJdW7v+OGI 3SsgZxWBxLq3pJb2Yeq7BNgSmUjf85GjS6gjGA17QMe/8tgI88xM6duO5FbY8ow8 e0X1jbeRHN4zWA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:11 2025 by rpki-client