This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json) Hash identifier: ubK/ZEV2NW+SOd+B3RTfN+T10jSP2T3fmqbKA4QGfrw= Subject key identifier: BA:37:66:45:58:D2:CF:AC:B6:87:36:5A:E3:94:12:0A:78:A2:FE:6C Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f Certificate serial: 019AF3895E10B26169D11FB0C419D459B54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft Manifest number: 0B05 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: OiKKfebhrmE2UIv2pj+u63OjGlTwdDs1MbhjRItqXQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5e:10:b2:61:69:d1:1f:b0:c4:19:d4:59:b5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=ba37664558d2cfacb687365ae394120a78a2fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:74:d4:c7:9c:9c:3a:32:05:64:ca:f7:50: 1e:32:ae:88:54:13:ea:dd:eb:2b:5c:fc:4d:db:f3: d3:68:be:a7:ba:e3:43:af:91:e0:68:8d:e2:e5:5a: 82:61:81:85:57:d3:d2:38:f5:cb:b3:0d:82:c6:dc: ed:17:7c:de:51:61:45:7d:5d:e6:c6:80:8c:e6:21: 3e:48:33:6d:05:92:47:75:18:06:c4:7d:3a:b7:4a: c8:a2:87:08:99:58:b7:84:16:35:fb:a0:04:8f:39: 18:29:da:53:d4:f6:61:7f:77:8b:b9:d4:07:cd:6d: 76:7d:39:d6:7d:e8:de:32:b7:69:31:37:29:85:af: bd:dd:dd:64:28:75:43:87:d7:a2:b9:61:f8:e6:ef: c9:34:e1:a2:f6:ca:0d:31:ea:c5:77:f2:22:58:e3: cb:9a:5e:d8:40:c0:5b:f0:a2:6c:dc:bd:75:5e:9a: 0a:31:13:72:99:2b:9f:30:e8:64:df:00:3f:61:b4: 2c:73:a5:79:72:24:4f:1b:6d:de:eb:90:5b:16:1a: e8:e4:d7:a6:91:38:bb:21:54:6c:49:56:7c:80:9c: 04:97:ed:e3:7f:f3:18:69:f5:e0:d7:20:91:a3:9f: 97:43:d1:8e:ac:59:ca:4f:a4:8b:8a:b7:50:d6:c9: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:66:45:58:D2:CF:AC:B6:87:36:5A:E3:94:12:0A:78:A2:FE:6C X509v3 Authority Key Identifier: keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8f:47:7b:d0:60:85:c9:6f:6e:d5:4d:ea:9a:1b:f9:59:0d: 22:15:d1:1c:4c:43:78:d9:b2:6d:bc:cc:03:cd:ee:a9:a2:a1: b7:75:97:6d:a3:70:88:ab:5a:39:a4:c0:4a:4b:a8:e8:ca:90: c2:88:5d:c9:3d:87:f4:d7:1a:5f:36:07:8e:09:20:a0:20:7e: b4:38:70:59:ba:4f:76:3f:a8:bc:64:11:74:c8:0b:9e:d3:0d: e9:30:32:da:b0:df:c7:de:5f:c5:87:1d:60:c0:4e:30:6b:5c: b1:d4:c6:cf:70:bb:40:71:20:74:23:77:e7:2f:e4:a3:d9:58: 52:59:cd:b4:c2:e9:71:bc:3b:02:32:d2:92:78:4f:3c:28:36: e0:bc:bb:7d:a1:67:4b:d6:07:6e:2b:1b:82:13:de:5e:6b:08: 88:b7:8b:f7:d1:d0:f8:b1:06:8a:7e:50:f1:ab:f4:89:85:25: 26:c0:5e:18:92:e3:d5:8c:f0:06:f0:03:30:07:2a:87:df:fc: 4a:e0:24:57:ab:a2:7d:a1:9a:f1:44:d0:fc:5b:8a:37:7b:a6: 3d:32:99:ec:5d:75:b8:9d:e8:0b:b5:e5:a4:ec:f2:9f:10:57: 6f:ab:57:5e:f8:d1:a2:11:ff:27:ce:63:ba:e0:b9:e7:b0:80: b7:f3:88:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV4QsmFp0R+wxBnUWbVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw NGIwMWYwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EyhiYTM3NjY0NTU4ZDJjZmFjYjY4NzM2NWFlMzk0MTIwYTc4YTJmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzR01MecnDoyBWTK91AeMq6IVBPq 3esrXPxN2/PTaL6nuuNDr5HgaI3i5VqCYYGFV9PSOPXLsw2CxtztF3zeUWFFfV3m xoCM5iE+SDNtBZJHdRgGxH06t0rIoocImVi3hBY1+6AEjzkYKdpT1PZhf3eLudQH zW12fTnWfejeMrdpMTcpha+93d1kKHVDh9eiuWH45u/JNOGi9soNMerFd/IiWOPL ml7YQMBb8KJs3L11XpoKMRNymSufMOhk3wA/YbQsc6V5ciRPG23e65BbFhro5Nem kTi7IVRsSVZ8gJwEl+3jf/MYafXg1yCRo5+XQ9GOrFnKT6SLirdQ1slCFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo3ZkVY0s+stoc2WuOUEgp4ov5sMB8GA1UdIwQY MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY9He9Bg hclvbtVN6pob+VkNIhXRHExDeNmybbzMA83uqaKht3WXbaNwiKtaOaTASkuo6MqQ wohdyT2H9NcaXzYHjgkgoCB+tDhwWbpPdj+ovGQRdMgLntMN6TAy2rDfx95fxYcd YMBOMGtcsdTGz3C7QHEgdCN35y/ko9lYUlnNtMLpcbw7AjLSknhPPCg24Ly7faFn S9YHbisbghPeXmsIiLeL99HQ+LEGin5Q8av0iYUlJsBeGJLj1YzwBvADMAcqh9/8 SuAkV6uifaGa8UTQ/FuKN3umPTKZ7F11uJ3oC7XlpOzynxBXb6tXXvjRohH/J85j uuC557CAt/OIow== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:41 2025 by rpki-client