This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json) Hash identifier: K4SWCSFzKC/hYHrw7lFcWFOFKaTHzVlNdyAy2n1fq5E= Subject key identifier: E0:24:0B:7D:5F:6E:5C:AE:76:A8:9C:15:24:D7:1C:D1:10:AC:B5:AB Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43 Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143 Certificate serial: 019AF31D531ABF40DC80FB19AE3C8154F7CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft Manifest number: 0B87 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=) 2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: fx672kb+PMrX1EFq24zxeHPArbxgUBUyRiiyKDb+KRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:53:1a:bf:40:dc:80:fb:19:ae:3c:81:54:f7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=e0240b7d5f6e5cae76a89c1524d71cd110acb5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:32:c1:e8:b8:df:5a:f6:bb:30:71:8f:1d: df:c4:fe:7f:dd:83:e8:46:60:1c:db:8d:0b:c1:23: d4:8c:23:39:ac:e6:3e:1f:29:4c:ce:c3:42:db:01: 30:26:27:0f:b3:ad:ce:50:e7:b2:f6:cf:17:85:6e: 45:7d:f5:da:27:36:44:49:e2:d6:a4:51:bd:bd:91: c6:c0:bb:4e:ee:73:40:fa:57:e8:68:b5:96:8b:6f: ff:f4:81:ee:ec:4b:ba:44:5a:d4:37:a5:b5:15:bb: dd:d7:0d:01:5b:97:f7:d2:15:08:e2:65:66:ba:9a: cb:51:c0:64:29:90:f0:e2:7c:35:d1:5e:de:8d:e7: e0:fe:fd:8f:4f:07:ed:5f:df:e9:96:72:df:67:71: cc:5f:82:5c:c9:31:10:58:00:17:af:50:01:6f:5c: 49:93:84:20:0a:b9:ec:de:36:0b:39:57:c4:59:a8: f0:74:7e:0a:fb:83:5c:b6:b1:59:0d:60:7d:b7:6a: 8f:16:5a:5a:ea:02:a4:e9:fa:ca:bc:bf:2f:1d:c0: 07:0f:7e:45:69:16:a1:84:dc:4a:04:8a:e1:69:13: ca:cc:75:eb:57:fa:2b:0f:4a:81:28:be:7c:32:62: ce:c2:ee:54:b8:8e:42:5a:58:cb:8a:c0:d7:ce:dd: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:0B:7D:5F:6E:5C:AE:76:A8:9C:15:24:D7:1C:D1:10:AC:B5:AB X509v3 Authority Key Identifier: keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:48:0a:0d:3d:24:36:42:30:34:92:95:b8:fe:f1:4e:1f:1c: b6:51:09:c2:69:4c:a5:c7:b2:c1:d9:49:18:d2:7a:28:55:3d: bf:ab:16:6c:dd:b8:3e:21:27:64:ae:d7:ee:6e:a1:ca:4c:c7: 8e:84:65:42:2a:86:63:a3:88:a3:d8:19:a8:1c:ac:a7:ed:9b: f6:4f:b7:5d:e2:e5:8c:29:5e:94:d0:6f:64:9c:15:5f:95:8c: 5b:c1:22:04:ce:2e:b4:a5:40:0b:75:97:56:0d:49:ae:44:44: 67:c8:3d:90:4c:a7:7e:35:c7:09:5f:87:5d:65:99:b6:2d:43: 3a:d4:cc:68:db:39:27:73:70:db:67:cb:69:57:0f:ef:e7:81: e3:5b:5d:9f:4b:9a:6a:e3:c5:1a:d7:6c:e2:ae:d6:66:8e:17: 17:34:73:a3:63:bd:2c:a1:b1:69:5e:22:4c:62:a3:a0:9b:01: 41:66:59:69:0c:3e:a9:00:3d:01:6f:e4:e2:39:ac:61:e8:07: ef:61:da:4c:68:47:a3:97:6b:dd:02:d1:60:b1:ac:5e:9a:04: f2:a9:06:9e:06:a9:48:ed:68:c4:2a:87:7c:ae:46:6b:34:c1: 9c:44:2e:6e:b7:5a:52:d9:19:59:ef:b8:fe:0a:1b:a2:17:13: 0c:37:ec:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVMav0DcgPsZrjyBVPfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3 MjExNDMwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD EyhlMDI0MGI3ZDVmNmU1Y2FlNzZhODljMTUyNGQ3MWNkMTEwYWNiNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jUywei431r2uzBxjx3fxP5/3YPo RmAc240LwSPUjCM5rOY+HylMzsNC2wEwJicPs63OUOey9s8XhW5FffXaJzZESeLW pFG9vZHGwLtO7nNA+lfoaLWWi2//9IHu7Eu6RFrUN6W1Fbvd1w0BW5f30hUI4mVm uprLUcBkKZDw4nw10V7ejefg/v2PTwftX9/plnLfZ3HMX4JcyTEQWAAXr1ABb1xJ k4QgCrns3jYLOVfEWajwdH4K+4NctrFZDWB9t2qPFlpa6gKk6frKvL8vHcAHD35F aRahhNxKBIrhaRPKzHXrV/orD0qBKL58MmLOwu5UuI5CWljLisDXzt2JpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAkC31fblyudqicFSTXHNEQrLWrMB8GA1UdIwQY MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5 LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0gKDT0k NkIwNJKVuP7xTh8ctlEJwmlMpceywdlJGNJ6KFU9v6sWbN24PiEnZK7X7m6hykzH joRlQiqGY6OIo9gZqBysp+2b9k+3XeLljClelNBvZJwVX5WMW8EiBM4utKVAC3WX Vg1JrkREZ8g9kEynfjXHCV+HXWWZti1DOtTMaNs5J3Nw22fLaVcP7+eB41tdn0ua auPFGtds4q7WZo4XFzRzo2O9LKGxaV4iTGKjoJsBQWZZaQw+qQA9AW/k4jmsYegH 72HaTGhHo5dr3QLRYLGsXpoE8qkGngapSO1oxCqHfK5GazTBnEQubrdaUtkZWe+4 /gobohcTDDfsiA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:05 2025 by rpki-client