This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json) Hash identifier: CpEvLmXXSbsX0rFN/RtdoMUE7MtmsZsJ7RLKE9OfGdw= Subject key identifier: A6:BB:62:93:35:B2:D9:44:FA:56:8C:3C:74:03:FC:D4:A4:12:7F:AF Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42 Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442 Certificate serial: 019AF19BA82C883AE61D11841121F0E3755F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: u+JQxm7qFwyMeg/e3wLht4p1qoiWEOJkiMYLC2OaEMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a8:2c:88:3a:e6:1d:11:84:11:21:f0:e3:75:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=a6bb629335b2d944fa568c3c7403fcd4a4127faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:1b:b1:da:32:f1:93:dc:23:12:80:ff:73: a5:88:dc:af:ab:ac:f8:a7:83:3e:13:e6:cb:2f:ea: ae:c1:30:00:39:5e:11:3a:98:8a:17:a6:31:a2:90: b5:c5:8e:41:e9:0a:44:35:9a:39:80:19:31:4b:74: fa:0f:c6:b5:38:03:22:14:6a:25:6b:8e:3b:f5:30: 2c:3a:81:81:00:ec:02:aa:d8:7b:34:d5:6d:a3:04: 8e:6b:a0:0a:11:f8:d5:14:7b:d5:de:fd:9c:d8:bc: b0:c7:c5:34:fd:3a:ce:17:05:f9:89:06:da:c9:8e: 54:4d:6e:10:d9:0f:69:08:cb:62:05:80:4e:ab:96: f3:b2:fe:0b:82:b3:b0:a4:3f:2f:5e:5a:2f:b8:99: 4d:8b:11:77:56:a7:c2:62:73:a3:3d:69:2d:c6:ab: 4a:b2:e3:1f:b1:47:43:db:23:5a:cf:5c:5c:88:bf: 09:d8:39:44:50:c1:8a:2a:a7:0b:70:2c:bc:88:f5: df:8a:22:76:87:4b:14:4e:ca:cc:2a:a0:c1:16:e3: 5e:ef:51:f2:58:f0:c1:7c:9c:63:a2:d8:0f:98:81: 9e:53:be:42:13:dc:07:4e:b8:fc:c1:51:af:0d:03: 48:6a:85:ac:aa:8a:14:a8:f9:6b:5f:c0:bd:cf:d6: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BB:62:93:35:B2:D9:44:FA:56:8C:3C:74:03:FC:D4:A4:12:7F:AF X509v3 Authority Key Identifier: keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:f1:dc:a9:39:4c:c3:05:51:60:0c:27:4d:81:f4:97:f1: cb:02:20:8a:4f:69:b7:72:20:14:62:9e:33:cc:d2:6f:ec:ab: d5:c1:54:e0:f9:8f:d2:76:ff:04:40:b7:e0:2c:02:15:3b:50: 65:ce:52:9f:fd:74:99:24:f3:ba:a0:28:2e:07:13:e1:ae:3b: 06:f1:e4:e7:af:7f:e1:42:00:e3:b2:a7:a2:7a:2f:0e:9f:cb: 23:d9:5a:c3:ea:a5:04:c6:67:06:2e:dc:21:92:8d:44:4c:37: f1:9b:a3:b8:77:8a:d2:50:c8:42:31:f4:0f:8f:b9:72:d1:eb: 80:b2:f4:e4:d3:dd:4a:b9:63:ab:7a:fd:18:df:23:96:f2:4a: 82:8d:2b:93:d8:4d:37:c9:60:52:74:c6:54:37:a8:21:0b:df: fb:cc:49:77:fc:4a:9f:c4:dc:11:f3:44:92:a8:0e:b3:9c:1c: c9:fc:18:86:bd:77:5d:5c:c1:e6:59:e5:a4:68:f9:0b:ee:5c: ee:2f:c6:44:fe:b8:74:dd:bb:e9:ed:9f:88:8f:9f:d8:a7:e3: ed:99:7d:ad:b4:81:1b:aa:b0:e5:1a:97:73:34:84:c8:21:05: 44:0e:39:6e:b9:bf:bd:1d:b2:9d:ea:4a:74:0c:06:ac:a1:e3: b7:29:f0:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6gsiDrmHRGEESHw43VfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTU5NGUzNDZmMTRkMDk4M2MxYTZiZjRiYjVjNzE0ZmY5 Yjg0NDIwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EyhhNmJiNjI5MzM1YjJkOTQ0ZmE1NjhjM2M3NDAzZmNkNGE0MTI3ZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOobsdoy8ZPcIxKA/3OliNyvq6z4 p4M+E+bLL+quwTAAOV4ROpiKF6YxopC1xY5B6QpENZo5gBkxS3T6D8a1OAMiFGol a4479TAsOoGBAOwCqth7NNVtowSOa6AKEfjVFHvV3v2c2Lywx8U0/TrOFwX5iQba yY5UTW4Q2Q9pCMtiBYBOq5bzsv4LgrOwpD8vXlovuJlNixF3VqfCYnOjPWktxqtK suMfsUdD2yNaz1xciL8J2DlEUMGKKqcLcCy8iPXfiiJ2h0sUTsrMKqDBFuNe71Hy WPDBfJxjotgPmIGeU75CE9wHTrj8wVGvDQNIaoWsqooUqPlrX8C9z9bsPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa7YpM1stlE+laMPHQD/NSkEn+vMB8GA1UdIwQY MBaAFL3llONG8U0Jg8Gmv0u1xxT/m4RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUt YzdhMzY2YjkxZjQzLzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUtYzdhMzY2YjkxZjQz LzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ87x3Kk5 TMMFUWAMJ02B9JfxywIgik9pt3IgFGKeM8zSb+yr1cFU4PmP0nb/BEC34CwCFTtQ Zc5Sn/10mSTzuqAoLgcT4a47BvHk569/4UIA47KnonovDp/LI9law+qlBMZnBi7c IZKNREw38ZujuHeK0lDIQjH0D4+5ctHrgLL05NPdSrljq3r9GN8jlvJKgo0rk9hN N8lgUnTGVDeoIQvf+8xJd/xKn8TcEfNEkqgOs5wcyfwYhr13XVzB5lnlpGj5C+5c 7i/GRP64dN276e2fiI+f2Kfj7Zl9rbSBG6qw5RqXczSEyCEFRA45brm/vR2ynepK dAwGrKHjtynw+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:24 2025 by rpki-client