This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json) Hash identifier: KN7yS+dWtFUO1L8vnoQqikIImj1eUw40JPDIIa4fMQc= Subject key identifier: 3D:D1:23:49:D5:4B:6E:03:7E:5C:26:BC:BF:26:11:7D:D7:DE:4F:59 Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91 Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891 Certificate serial: 019AF2093BA4DC24D68C8EF6B42417C4DE46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft Manifest number: 1344 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=) 2: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=) 3: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: rUz9xuGvwCsBWqdsQXx9Kcp7nETFt4ZQO044CDpL6/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3b:a4:dc:24:d6:8c:8e:f6:b4:24:17:c4:de:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde75079618691bae1f47bcbed52314496963891 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=3dd12349d54b6e037e5c26bcbf26117dd7de4f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:4d:be:f6:45:f4:b6:5d:c9:9b:2a:ca:d2: 29:7e:58:1e:94:79:c8:14:f2:c9:c6:24:5f:c6:92: 19:83:84:b0:62:0c:fb:2a:e0:10:77:c7:54:87:ac: 33:37:06:bd:37:93:06:98:87:e2:37:d2:52:1e:b6: 0d:84:34:a3:31:80:a3:11:6a:be:6b:3c:01:d4:59: d5:86:83:74:57:8d:28:53:42:59:ad:7a:89:b0:34: f7:66:e8:c0:e9:86:6b:83:80:f9:25:17:6a:84:81: 67:ed:e4:5b:87:88:36:4c:ad:9a:87:7b:c9:58:94: ac:e6:ba:7d:d0:f1:ee:b0:b8:e0:35:6c:a8:c3:34: 90:1d:9b:66:01:09:8b:ea:06:ae:83:22:41:78:6a: fb:30:fe:63:55:da:e5:76:d9:bd:e0:2b:dc:dc:3b: c9:bc:82:a5:3d:a4:ac:0a:42:4b:45:87:61:60:ae: 49:5e:4c:b8:c8:00:65:fd:c6:1f:80:fa:25:20:a2: 03:37:2e:e9:71:60:6c:e1:a8:d2:67:a6:d1:c4:fd: 69:aa:5d:25:31:c5:60:d0:03:f7:46:ac:86:c4:38: ca:93:4e:36:8e:65:06:81:45:08:4a:d9:56:c8:a8: 87:70:96:d3:f3:ca:97:39:b6:c7:98:0f:a4:01:93: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:23:49:D5:4B:6E:03:7E:5C:26:BC:BF:26:11:7D:D7:DE:4F:59 X509v3 Authority Key Identifier: keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:c1:6b:a5:82:bf:2a:02:ef:c4:c0:dd:3e:1d:ab:26:cc: 8c:6e:4f:2c:9f:81:ac:4f:cc:d0:cb:2e:16:01:32:ad:a7:cb: d1:e0:19:c0:23:6a:0b:c3:6e:db:ad:2a:cc:30:89:45:f0:0e: 4b:e6:67:e7:8d:b9:23:38:1a:9c:87:fc:00:5d:ea:32:bc:07: 00:dd:7c:58:40:57:ed:bb:60:e4:27:f8:da:aa:16:c7:28:a6: 5b:4a:8a:54:1a:0f:c0:fb:7a:c6:ea:da:46:e3:de:bb:d4:ca: 9f:c1:08:95:20:8b:9b:3a:8a:49:3b:03:0a:17:63:2e:74:b8: e7:2d:16:be:5d:49:0a:6d:66:67:00:68:aa:d4:de:97:a1:f3: 9d:08:a7:15:5c:b6:13:4b:b9:cc:24:b0:a5:bb:8d:69:f3:c6: d6:08:65:da:13:b4:96:68:f2:45:aa:5a:52:93:f3:07:8e:f2: 2e:cc:9b:75:c4:08:35:7f:c2:20:20:ee:a5:b0:73:56:b0:73: d8:87:f6:f0:06:5a:2a:6e:1c:05:a5:e5:cc:bd:21:fc:ee:8e: 4f:4c:20:a0:73:77:47:68:91:fa:46:4a:c7:0c:22:ae:04:5e: d8:32:63:8d:2a:d3:a1:e0:c6:a3:84:43:44:79:dd:45:1a:ac: c7:f6:59:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTuk3CTWjI72tCQXxN5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTc1MDc5NjE4NjkxYmFlMWY0N2JjYmVkNTIzMTQ0OTY5 NjM4OTEwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EygzZGQxMjM0OWQ1NGI2ZTAzN2U1YzI2YmNiZjI2MTE3ZGQ3ZGU0ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1apNvvZF9LZdyZsqytIpflgelHnI FPLJxiRfxpIZg4SwYgz7KuAQd8dUh6wzNwa9N5MGmIfiN9JSHrYNhDSjMYCjEWq+ azwB1FnVhoN0V40oU0JZrXqJsDT3ZujA6YZrg4D5JRdqhIFn7eRbh4g2TK2ah3vJ WJSs5rp90PHusLjgNWyowzSQHZtmAQmL6gaugyJBeGr7MP5jVdrldtm94Cvc3DvJ vIKlPaSsCkJLRYdhYK5JXky4yABl/cYfgPolIKIDNy7pcWBs4ajSZ6bRxP1pql0l McVg0AP3RqyGxDjKk042jmUGgUUIStlWyKiHcJbT88qXObbHmA+kAZNrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3RI0nVS24DflwmvL8mEX3X3k9ZMB8GA1UdIwQY MBaAFL3nUHlhhpG64fR7y+1SMUSWljiRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84ZjIwOTMtMDMxOC00NzZjLTllOWMt NTNmYzQ5MDU2MjliLzEvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84ZjIwOTMtMDMxOC00NzZjLTllOWMtNTNmYzQ5MDU2Mjli LzEvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnHBa6WC vyoC78TA3T4dqybMjG5PLJ+BrE/M0MsuFgEyrafL0eAZwCNqC8Nu260qzDCJRfAO S+Zn5425IzganIf8AF3qMrwHAN18WEBX7btg5Cf42qoWxyimW0qKVBoPwPt6xura RuPeu9TKn8EIlSCLmzqKSTsDChdjLnS45y0Wvl1JCm1mZwBoqtTel6HznQinFVy2 E0u5zCSwpbuNafPG1ghl2hO0lmjyRapaUpPzB47yLsybdcQINX/CICDupbBzVrBz 2If28AZaKm4cBaXlzL0h/O6OT0wgoHN3R2iR+kZKxwwirgRe2DJjjSrToeDGo4RD RHndRRqsx/ZZcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:44 2025 by rpki-client