This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft File: VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json) Hash identifier: 22AhhJDoZjDSulfGYoEaZikb5JsrBclnR35JtIo7yr8= Subject key identifier: 2F:A8:A0:27:16:9E:3F:C1:D0:79:A4:ED:69:73:B0:AF:27:75:71:43 Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10 Certificate issuer: /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10 Certificate serial: 019AF49BBEBE4EC463230A602AC4851B211B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft Manifest number: 02BB Signing time: Sat 06 Dec 2025 17:00:38 +0000 Manifest this update: Sat 06 Dec 2025 17:00:38 +0000 Manifest next update: Sun 07 Dec 2025 17:00:38 +0000 Files and hashes: 1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: 5Na2uFCdavYjknLzTWhYbZlTv8B5Aq1zWV23RZ9Ap2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:be:be:4e:c4:63:23:0a:60:2a:c4:85:1b:21:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10 Validity Not Before: Dec 6 17:00:38 2025 GMT Not After : Dec 7 17:00:38 2025 GMT Subject: CN=2fa8a027169e3fc1d079a4ed6973b0af27757143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:60:d1:b5:e7:4f:6e:2c:75:bd:2e:bd:ec: 4b:db:0c:9e:37:a6:76:f5:33:46:94:95:ed:48:3c: ae:aa:f8:50:ee:87:f0:3b:f0:4d:8f:1a:b2:b0:86: 69:4a:c5:7d:d3:43:b6:b8:61:94:fb:3f:2c:3f:c0: 63:41:d7:e7:55:ab:0d:15:11:7a:a1:b5:aa:fc:70: 4b:d5:a0:4f:bf:7b:1f:d6:2c:60:ce:ed:e6:79:58: 87:61:6f:39:e5:f3:16:ef:f6:69:c3:ce:a8:8b:e4: 37:18:29:a0:3b:6a:de:27:da:46:7c:61:81:72:50: 92:0f:32:3c:56:c1:10:2c:a2:9f:b8:5e:56:dd:12: 51:7c:c2:a1:70:ff:5f:22:46:9c:e9:55:47:38:c8: c0:af:b9:75:ff:7d:d5:79:fd:90:95:2a:bf:6d:aa: 51:5e:e5:79:6a:e9:60:b2:8a:17:52:7c:f1:8a:cc: 95:86:ad:b7:2d:c0:5f:62:22:2d:1b:02:0b:2f:5d: 96:44:e4:87:3d:8a:f1:c1:8c:12:ae:61:36:a6:84: 37:26:87:bf:57:38:c7:0c:ae:18:e3:be:97:a0:40: 07:5c:af:be:bd:99:e6:5d:5e:8b:09:c7:09:e5:a0: 94:ea:0d:f4:49:2c:ac:04:8c:b2:5b:8f:e8:80:b4: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A8:A0:27:16:9E:3F:C1:D0:79:A4:ED:69:73:B0:AF:27:75:71:43 X509v3 Authority Key Identifier: keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bf:08:30:fa:f5:2a:95:0d:41:ee:0b:b4:67:be:20:69:91: c4:26:b9:8a:1b:20:c0:29:5a:18:d3:cf:29:ae:b4:8e:2f:94: 2f:c4:88:a3:57:e0:03:17:2d:69:95:80:90:1f:4c:1c:a2:15: 83:03:3d:a8:a7:c5:e4:0b:57:b7:2e:42:bf:47:4f:bc:5d:6e: ca:77:7e:a8:18:12:6e:b0:6c:1f:30:c1:57:34:91:6d:b5:ed: 7f:e0:01:49:25:22:b9:79:61:93:d9:51:54:67:f7:f0:3b:02: d3:04:7f:41:69:e9:43:ec:35:87:08:f2:a9:b3:df:10:d5:ef: 2d:91:86:be:1f:cc:ac:97:8b:68:e8:ef:89:2a:a4:fd:d8:e3: 08:a4:89:07:1d:44:93:b2:57:74:d2:bf:40:00:44:1f:9b:3f: 6b:a9:cd:9a:f7:61:82:9c:58:81:7d:49:cd:3a:71:2a:af:1a: 13:51:87:6c:cb:a4:1d:1e:32:09:b1:39:41:47:41:74:8f:0c: 4a:bf:2f:c2:51:20:73:82:04:4e:5c:61:34:c3:82:d5:69:57: d4:08:7b:48:a5:45:24:71:ac:0b:5c:18:36:93:56:5b:a8:1d: 63:9c:af:06:2e:87:f4:96:81:36:a1:42:cc:e3:0a:68:c4:3e: 87:bc:67:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m76+TsRjIwpgKsSFGyEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTQxZjAzMjgzYzQ5MDk2YWJlOWZmYjdhNWRjMGI1YjM4 NGRiMTAwHhcNMjUxMjA2MTcwMDM4WhcNMjUxMjA3MTcwMDM4WjAzMTEwLwYDVQQD EygyZmE4YTAyNzE2OWUzZmMxZDA3OWE0ZWQ2OTczYjBhZjI3NzU3MTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00Ng0bXnT24sdb0uvexL2wyeN6Z2 9TNGlJXtSDyuqvhQ7ofwO/BNjxqysIZpSsV900O2uGGU+z8sP8BjQdfnVasNFRF6 obWq/HBL1aBPv3sf1ixgzu3meViHYW855fMW7/Zpw86oi+Q3GCmgO2reJ9pGfGGB clCSDzI8VsEQLKKfuF5W3RJRfMKhcP9fIkac6VVHOMjAr7l1/33Vef2QlSq/bapR XuV5aulgsooXUnzxisyVhq23LcBfYiItGwILL12WROSHPYrxwYwSrmE2poQ3Joe/ VzjHDK4Y476XoEAHXK++vZnmXV6LCccJ5aCU6g30SSysBIyyW4/ogLQlkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+ooCcWnj/B0Hmk7WlzsK8ndXFDMB8GA1UdIwQY MBaAFFXkHwMoPEkJar6f+3pdwLWzhNsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVRZkF5ZzhTUWxxdnBfN2VsM0F0Yk9FMnhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZjQ4MmMtZjIzMi00YTM5LTk2MzUt M2I2NzExYzYzN2M1LzEvVmVRZkF5ZzhTUWxxdnBfN2VsM0F0Yk9FMnhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi82ZjQ4MmMtZjIzMi00YTM5LTk2MzUtM2I2NzExYzYzN2M1 LzEvVmVRZkF5ZzhTUWxxdnBfN2VsM0F0Yk9FMnhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar8IMPr1 KpUNQe4LtGe+IGmRxCa5ihsgwClaGNPPKa60ji+UL8SIo1fgAxctaZWAkB9MHKIV gwM9qKfF5AtXty5Cv0dPvF1uynd+qBgSbrBsHzDBVzSRbbXtf+ABSSUiuXlhk9lR VGf38DsC0wR/QWnpQ+w1hwjyqbPfENXvLZGGvh/MrJeLaOjviSqk/djjCKSJBx1E k7JXdNK/QABEH5s/a6nNmvdhgpxYgX1JzTpxKq8aE1GHbMukHR4yCbE5QUdBdI8M Sr8vwlEgc4IETlxhNMOC1WlX1Ah7SKVFJHGsC1wYNpNWW6gdY5yvBi6H9JaBNqFC zOMKaMQ+h7xnHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:59 2025 by rpki-client