This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json) Hash identifier: HUAhS/EB7Gv1bu2NeXoDRC7SI8u2Cai+rFD3O4tGwzM= Subject key identifier: 03:55:4E:20:82:B1:32:73:73:9F:16:28:9E:60:C4:F0:F2:D5:1F:78 Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f Certificate serial: 019B2B8A7BA9431D98BBF5E84EDC8AC6AB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft Manifest number: 0B22 Signing time: Wed 17 Dec 2025 09:00:54 +0000 Manifest this update: Wed 17 Dec 2025 09:00:54 +0000 Manifest next update: Thu 18 Dec 2025 09:00:54 +0000 Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: C0QoGALtf6ch+nEBMnBbjsAjPUfwDEBnlP63DZlO7nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:7b:a9:43:1d:98:bb:f5:e8:4e:dc:8a:c6:ab:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f Validity Not Before: Dec 17 09:00:54 2025 GMT Not After : Dec 18 09:00:54 2025 GMT Subject: CN=03554e2082b13273739f16289e60c4f0f2d51f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:68:c7:22:2d:c8:8d:bc:09:8f:a9:a1:88: a1:7e:5c:97:a3:56:b3:fb:67:bf:02:ee:e3:e0:41: 2b:e0:69:cb:46:3e:b9:24:73:22:2b:d0:37:db:d9: 21:41:35:2e:13:af:ef:29:bf:8f:d6:53:a5:ea:67: db:57:2a:29:81:70:68:35:3f:c9:af:11:f1:35:e3: 78:97:3b:74:b3:57:fa:bd:a8:b0:21:33:47:8a:fd: 9b:91:3c:ad:5a:c7:0a:63:a5:b5:a4:04:07:7c:dd: b2:f2:9e:ea:db:88:cd:31:e4:2a:60:fb:f3:56:52: 04:c9:69:65:8d:6e:2b:79:e2:a0:b6:7c:fb:2e:98: 37:d2:e3:0a:4c:81:ab:d1:b0:25:23:66:1e:c6:a6: 67:07:2e:5f:19:1f:1d:3f:7a:0a:75:aa:5b:48:35: a0:40:83:e7:db:43:04:d5:25:19:0e:c6:ce:f3:13: 06:05:89:7b:ff:13:0f:48:e0:15:fc:2b:a8:6b:5d: e8:73:c6:4f:64:34:16:a3:a6:21:af:c3:15:38:f4: 52:23:be:77:5b:ce:03:14:b7:18:68:ca:e7:ca:3c: e2:ab:c8:36:7d:a6:31:d7:4a:fe:eb:79:4d:bf:27: cb:aa:ba:68:ad:7e:d6:ca:08:38:a6:f1:ac:3c:f9: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:4E:20:82:B1:32:73:73:9F:16:28:9E:60:C4:F0:F2:D5:1F:78 X509v3 Authority Key Identifier: keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:93:57:04:85:24:73:44:61:6c:e3:d0:58:ad:df:47:04:2d: 45:6c:b4:55:17:8f:6f:f5:3a:cd:5e:be:fe:5b:a2:f3:f3:54: 93:51:b0:61:b1:3c:86:6b:4d:5c:47:69:50:1e:ac:60:27:92: be:4c:f0:bc:89:8a:d8:20:e6:aa:ec:ee:18:47:1e:89:6c:8e: 8d:bf:0a:58:2c:33:c9:dd:f3:82:c0:16:1e:fc:3b:4c:4c:29: 8a:54:11:fc:94:a9:64:5b:6a:15:13:b6:e8:f7:16:5c:41:a0: e7:f1:80:e4:c3:a2:47:56:b1:68:41:c5:a4:fa:3f:d4:0c:78: ac:c9:fb:03:0a:a9:a0:f8:b7:d9:c8:f7:d3:c8:0c:82:97:1d: cb:aa:dd:40:d9:6a:e8:ce:91:ce:58:3c:ec:71:aa:11:c9:ab: 1e:50:b6:fe:bc:79:ac:ea:63:5f:f4:7b:e0:6c:e4:7b:65:57: 73:a3:ee:20:84:aa:47:7f:ff:2d:9f:51:9f:33:65:f2:d5:d8: d0:dd:11:2d:b1:3e:58:a6:50:f9:bb:cb:1b:66:fa:9f:e4:98: ca:de:c8:db:52:06:26:00:65:a0:fd:9c:dd:2b:7a:e7:e4:17: c1:05:80:24:02:ba:58:15:44:83:3a:39:c5:f3:5c:10:ec:fc: 79:04:12:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinupQx2Yu/XoTtyKxqtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw NGIwMWYwHhcNMjUxMjE3MDkwMDU0WhcNMjUxMjE4MDkwMDU0WjAzMTEwLwYDVQQD EygwMzU1NGUyMDgyYjEzMjczNzM5ZjE2Mjg5ZTYwYzRmMGYyZDUxZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rJoxyItyI28CY+poYihflyXo1az +2e/Au7j4EEr4GnLRj65JHMiK9A329khQTUuE6/vKb+P1lOl6mfbVyopgXBoNT/J rxHxNeN4lzt0s1f6vaiwITNHiv2bkTytWscKY6W1pAQHfN2y8p7q24jNMeQqYPvz VlIEyWlljW4reeKgtnz7Lpg30uMKTIGr0bAlI2YexqZnBy5fGR8dP3oKdapbSDWg QIPn20ME1SUZDsbO8xMGBYl7/xMPSOAV/Cuoa13oc8ZPZDQWo6Yhr8MVOPRSI753 W84DFLcYaMrnyjziq8g2faYx10r+63lNvyfLqrporX7Wygg4pvGsPPnu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANVTiCCsTJzc58WKJ5gxPDy1R94MB8GA1UdIwQY MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpNXBIUk c0RhbOPQWK3fRwQtRWy0VRePb/U6zV6+/lui8/NUk1GwYbE8hmtNXEdpUB6sYCeS vkzwvImK2CDmquzuGEceiWyOjb8KWCwzyd3zgsAWHvw7TEwpilQR/JSpZFtqFRO2 6PcWXEGg5/GA5MOiR1axaEHFpPo/1Ax4rMn7AwqpoPi32cj308gMgpcdy6rdQNlq 6M6Rzlg87HGqEcmrHlC2/rx5rOpjX/R74Gzke2VXc6PuIISqR3//LZ9RnzNl8tXY 0N0RLbE+WKZQ+bvLG2b6n+SYyt7I21IGJgBloP2c3St65+QXwQWAJAK6WBVEgzo5 xfNcEOz8eQQSDw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:08 2025 by rpki-client