This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json) Hash identifier: GHacQEaiRPsbjGm3EtxtxZaguZtA7NQVCcXFnOtjmPg= Subject key identifier: 69:FD:E1:09:FE:3D:79:ED:C1:07:6A:7D:73:53:DF:96:A1:CD:ED:9C Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937 Certificate serial: 019AF3F7A109BBF51B029D6A0014AEBC9F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:01:23 +0000 Manifest this update: Sat 06 Dec 2025 14:01:23 +0000 Manifest next update: Sun 07 Dec 2025 14:01:23 +0000 Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=) 2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: 7Ned/LmTZtqZF9Ylmwn7kHmUnnvX4o7gMSwB04z61o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a1:09:bb:f5:1b:02:9d:6a:00:14:ae:bc:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937 Validity Not Before: Dec 6 14:01:23 2025 GMT Not After : Dec 7 14:01:23 2025 GMT Subject: CN=69fde109fe3d79edc1076a7d7353df96a1cded9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:66:9b:55:ae:49:7f:f2:0d:4c:b2:42:cf: 69:c9:48:2c:9a:c7:8b:40:75:54:78:92:2d:be:df: 32:45:52:53:c8:8c:b2:b7:f2:63:ee:ab:96:7c:d8: e5:aa:6c:e4:4a:7c:ea:f1:ee:df:4b:ad:42:88:30: 5d:3d:e4:d7:e6:62:5c:d1:a9:ad:c4:44:62:ef:70: ea:81:63:7b:b4:7c:0c:b9:47:22:58:eb:a9:dc:01: 27:96:84:f3:82:a9:c1:d4:c0:b4:57:1b:03:68:de: 6b:8f:bc:f0:65:4d:e1:22:e0:70:27:76:b3:35:e1: 42:28:c6:bc:15:b6:95:ff:13:5a:91:dc:74:06:a4: fb:f9:cc:90:0e:2c:2a:45:da:2c:80:a7:36:50:71: 66:cf:f7:61:66:d1:c0:94:23:9b:85:6d:68:c0:4f: e5:77:9f:a1:94:02:93:83:74:61:7a:c5:ac:71:27: cf:9a:14:08:0a:04:4b:58:04:28:58:cb:3a:07:b7: a1:a4:80:1b:20:f6:7c:02:12:65:92:82:68:72:1c: 56:85:99:1f:a0:88:7c:60:89:06:38:9b:4e:69:8d: e7:86:03:ea:a6:e2:79:67:3a:1d:b9:bc:dd:36:d7: 71:40:36:3a:3c:78:46:e6:de:f9:f1:1d:e5:5c:fc: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:E1:09:FE:3D:79:ED:C1:07:6A:7D:73:53:DF:96:A1:CD:ED:9C X509v3 Authority Key Identifier: keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5f:db:0f:e2:12:86:8f:e7:99:48:fe:51:db:0e:9d:f7:2b: f6:0d:7c:e6:a4:f9:b3:5f:5d:52:4c:22:9d:cc:6f:bf:48:c8: 3b:77:53:41:b4:60:41:44:44:5a:ec:60:9c:f0:e6:d2:57:c3: f3:f3:78:37:85:b1:8c:72:02:23:31:a7:a9:fd:d9:f6:a4:5e: 90:d1:ee:c8:2f:17:84:be:ac:a8:03:db:05:4e:3e:45:ce:bf: a6:67:d7:fc:46:fe:9d:da:57:9e:57:b9:19:ba:e6:1a:67:55: b9:ba:ec:e2:59:d4:a4:74:6f:25:38:fc:08:9b:7b:f6:99:bf: 13:ea:55:11:7b:32:d3:43:d3:0e:15:6d:63:64:52:51:a6:23: 4f:8b:e8:cc:4f:ef:f1:22:bc:8c:6c:58:8c:53:4d:36:0f:c6: c4:5a:7c:c0:a5:fc:38:5e:30:fc:a4:49:6f:8c:3e:fa:cb:83: b0:07:04:57:0b:d0:1a:00:cf:da:ba:b7:88:e8:7f:46:7f:95: fd:4b:f3:45:b9:ac:e0:f1:c5:b3:3a:5c:3a:7c:f8:ad:b4:f6: e7:65:fc:80:b9:13:7a:a7:7e:00:8b:46:5f:9c:ae:32:14:2a: de:2e:5f:96:69:8d:02:ad:d8:b6:bd:88:d2:40:4b:4f:ef:52: cf:a2:27:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96EJu/UbAp1qABSuvJ+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy ODg5MzcwHhcNMjUxMjA2MTQwMTIzWhcNMjUxMjA3MTQwMTIzWjAzMTEwLwYDVQQD Eyg2OWZkZTEwOWZlM2Q3OWVkYzEwNzZhN2Q3MzUzZGY5NmExY2RlZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lNmm1WuSX/yDUyyQs9pyUgsmseL QHVUeJItvt8yRVJTyIyyt/Jj7quWfNjlqmzkSnzq8e7fS61CiDBdPeTX5mJc0amt xERi73DqgWN7tHwMuUciWOup3AEnloTzgqnB1MC0VxsDaN5rj7zwZU3hIuBwJ3az NeFCKMa8FbaV/xNakdx0BqT7+cyQDiwqRdosgKc2UHFmz/dhZtHAlCObhW1owE/l d5+hlAKTg3RhesWscSfPmhQICgRLWAQoWMs6B7ehpIAbIPZ8AhJlkoJochxWhZkf oIh8YIkGOJtOaY3nhgPqpuJ5ZzodubzdNtdxQDY6PHhG5t758R3lXPzkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn94Qn+PXntwQdqfXNT35ahze2cMB8GA1UdIwQY MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt ZTJhOTIwNWE5ZDJhLzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtF/bD+IS ho/nmUj+UdsOnfcr9g185qT5s19dUkwincxvv0jIO3dTQbRgQUREWuxgnPDm0lfD 8/N4N4WxjHICIzGnqf3Z9qRekNHuyC8XhL6sqAPbBU4+Rc6/pmfX/Eb+ndpXnle5 GbrmGmdVubrs4lnUpHRvJTj8CJt79pm/E+pVEXsy00PTDhVtY2RSUaYjT4vozE/v 8SK8jGxYjFNNNg/GxFp8wKX8OF4w/KRJb4w++suDsAcEVwvQGgDP2rq3iOh/Rn+V /UvzRbms4PHFszpcOnz4rbT252X8gLkTeqd+AItGX5yuMhQq3i5flmmNAq3Ytr2I 0kBLT+9Sz6InZw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:36 2025 by rpki-client