This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json) Hash identifier: j5GZQDJ3WYJstEMDLHoxY6NMNgo4o/5FapJOkEAHB/U= Subject key identifier: 76:49:C6:19:9E:0A:26:05:A0:71:52:30:89:FF:D6:79:4E:BD:5D:19 Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Certificate serial: 019AF0F5CB0539FCF6434B05F4F227D37EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: 0lKYtxr1N69uuVTtKw9J4CN3Eb8.roa (hash: MtKKDqEwQK8oLNrI5q7cgTy3r/JPJS+wfQHFJIbjFJ8=) 2: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=) 3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: ErHhUam7CMHDbLTegAxX28Z9SfFoFkZ/tEZaJ5wgGO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cb:05:39:fc:f6:43:4b:05:f4:f2:27:d3:7e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=7649c6199e0a2605a071523089ffd6794ebd5d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:73:80:0b:3a:08:70:0e:aa:5c:bb:29:61: fe:eb:28:90:09:db:c0:32:ee:3e:e4:ba:0f:13:04: 38:12:41:2e:8e:6c:54:68:6b:5b:3b:69:7e:ea:b6: c8:7c:85:14:f8:c0:60:c6:83:33:5a:2a:de:7a:d4: 6f:c9:e6:0a:bd:1a:6f:e5:d4:fe:9b:de:b1:db:bd: 55:51:ae:78:f9:75:6f:dd:3d:54:48:aa:f1:c8:41: 92:83:1a:77:95:95:38:a4:8c:09:04:b2:5b:a5:a0: 84:b1:ea:70:a3:4b:ec:47:e2:a6:3c:83:7c:0a:29: 51:57:e0:32:e9:98:b7:77:18:e7:56:1e:8f:67:98: e7:34:14:ff:88:13:0c:93:d9:fc:02:9d:b5:36:05: eb:ea:d8:29:48:48:dc:90:9f:ff:d1:e3:e4:5e:dc: dc:4c:7c:e9:10:16:6f:dd:35:c3:a3:7e:a3:c6:7b: 48:08:d0:db:fe:08:29:49:d7:4e:1d:eb:da:a6:3c: 19:e9:59:6a:bd:43:89:c7:41:dd:ea:e4:17:0e:05: 34:6a:30:0d:c0:ab:16:86:49:3f:ed:3b:5d:8c:8b: 3b:2b:81:1f:cc:ca:1f:81:76:bf:2d:8c:78:fa:ba: 75:46:37:ef:b8:ce:79:15:24:2f:a7:93:af:16:cf: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:C6:19:9E:0A:26:05:A0:71:52:30:89:FF:D6:79:4E:BD:5D:19 X509v3 Authority Key Identifier: keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f2:bf:01:0c:69:11:c3:c0:63:24:9d:3f:e2:a3:98:c0:9f: c5:c2:52:d5:2d:36:e4:99:d5:6a:31:96:65:0c:eb:91:db:30: 5a:ca:fd:97:4c:9d:c8:0c:6c:92:c6:79:ae:23:68:29:4f:de: 58:43:6f:0c:58:0b:0c:90:81:6a:b2:33:41:82:ca:a2:68:04: 2a:e6:d5:58:3e:b4:1e:f2:ea:45:2f:ba:0d:2d:a3:32:68:98: 15:96:e7:50:5b:7d:5c:2c:99:16:24:f2:25:59:e6:e6:a0:48: 0c:61:89:97:d4:74:e6:17:76:dc:52:22:58:ae:06:8b:a6:a4: a2:d8:18:a5:7a:22:87:39:5f:45:81:27:41:a2:e2:50:1b:e4: 96:e9:18:5b:1c:01:f1:c2:3d:7f:06:da:72:82:f1:05:fb:80: e7:ec:8e:d8:3f:50:58:30:37:64:04:88:0c:d5:13:0c:cd:97: fa:1b:a8:db:71:0e:08:8b:d7:5e:16:a4:a5:82:62:19:6c:66: 6d:86:d9:ab:dd:50:97:26:93:9d:5a:0a:37:8a:ef:fc:54:94: 36:ea:d2:c7:c8:82:c1:1d:64:b3:e9:3b:e0:a9:78:0c:50:7e: fb:b2:83:e7:1c:de:60:d0:9d:19:85:72:37:bc:5e:45:93:15: a1:fb:c3:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9csFOfz2Q0sF9PIn037zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj ZTk2MjQwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD Eyg3NjQ5YzYxOTllMGEyNjA1YTA3MTUyMzA4OWZmZDY3OTRlYmQ1ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYtzgAs6CHAOqly7KWH+6yiQCdvA Mu4+5LoPEwQ4EkEujmxUaGtbO2l+6rbIfIUU+MBgxoMzWireetRvyeYKvRpv5dT+ m96x271VUa54+XVv3T1USKrxyEGSgxp3lZU4pIwJBLJbpaCEsepwo0vsR+KmPIN8 CilRV+Ay6Zi3dxjnVh6PZ5jnNBT/iBMMk9n8Ap21NgXr6tgpSEjckJ//0ePkXtzc THzpEBZv3TXDo36jxntICNDb/ggpSddOHevapjwZ6VlqvUOJx0Hd6uQXDgU0ajAN wKsWhkk/7TtdjIs7K4EfzMofgXa/LYx4+rp1RjfvuM55FSQvp5OvFs9QAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZJxhmeCiYFoHFSMIn/1nlOvV0ZMB8GA1UdIwQY MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt ZWE3MGEyOWM3NmYwLzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfK/AQxp EcPAYySdP+KjmMCfxcJS1S025JnVajGWZQzrkdswWsr9l0ydyAxsksZ5riNoKU/e WENvDFgLDJCBarIzQYLKomgEKubVWD60HvLqRS+6DS2jMmiYFZbnUFt9XCyZFiTy JVnm5qBIDGGJl9R05hd23FIiWK4Gi6akotgYpXoihzlfRYEnQaLiUBvklukYWxwB 8cI9fwbacoLxBfuA5+yO2D9QWDA3ZASIDNUTDM2X+huo23EOCIvXXhakpYJiGWxm bYbZq91QlyaTnVoKN4rv/FSUNurSx8iCwR1ks+k74Kl4DFB++7KD5xzeYNCdGYVy N7xeRZMVofvDzg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:08 2025 by rpki-client