This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json) Hash identifier: sd1F8gqAx41UK7W1gV49KMOdogLI3ghZce8JOtafJkg= Subject key identifier: BF:04:54:D3:D1:DD:C2:4B:10:C2:B3:68:43:4A:89:DE:BE:A5:19:CB Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537 Certificate serial: 019AF3521F43F88E5C6ED70D1E516E924D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft Manifest number: 0356 Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: eGxqBcqYHPnWwN3G2VFpfv6NxVwUqvfAOBp4aG2ixYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1f:43:f8:8e:5c:6e:d7:0d:1e:51:6e:92:4d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537 Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=bf0454d3d1ddc24b10c2b368434a89debea519cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:d6:45:5f:15:18:48:38:94:75:0f:52:53: 4a:de:d3:4d:5d:f8:b3:cb:5e:54:d5:9e:ba:c9:b6: 3d:4f:e3:8e:74:dd:9b:67:a9:6f:90:4f:f3:3e:33: 73:75:25:2f:2d:5c:9c:51:4e:c4:7a:71:df:1d:93: bf:24:2c:4e:89:9b:d4:35:c1:d3:b0:2e:b2:77:1c: 88:fa:c4:91:b7:8e:99:7c:5f:42:40:60:a5:bf:cb: 15:a9:a5:2a:33:68:17:50:2b:a1:99:df:01:6c:3d: cd:79:c2:dd:6e:da:3d:94:5d:8a:f6:d3:26:97:8d: 63:96:ec:8e:c8:5f:c4:31:7f:57:f8:2c:34:24:86: 7b:ad:0e:23:33:96:fb:a2:e2:7a:e0:d0:d4:fe:40: 17:c6:06:7d:ba:96:bb:9e:53:85:e9:d1:61:50:53: 5f:91:ec:52:c6:99:10:f2:0d:6b:e2:11:06:e4:e3: 64:75:26:98:c7:1c:54:61:2d:4b:4e:7e:ff:1c:19: 52:bd:87:df:d2:f2:0f:bd:a1:67:f1:c2:24:96:db: a5:00:7c:68:55:49:14:34:0e:c7:65:89:a1:71:24: 9e:16:c9:62:9f:17:20:97:53:c3:17:0d:9f:21:15: 4a:ed:f0:c5:55:0a:d3:76:1f:ee:fc:fd:0b:63:86: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:04:54:D3:D1:DD:C2:4B:10:C2:B3:68:43:4A:89:DE:BE:A5:19:CB X509v3 Authority Key Identifier: keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e8:0a:6c:df:77:a6:bc:2d:55:84:1e:d7:3a:90:c9:af:05: eb:cc:44:12:44:a2:2c:eb:87:89:84:af:c8:b8:0d:c6:60:1e: f3:f3:17:cd:17:4e:96:b0:d4:0a:27:a0:ae:5e:d3:ad:8c:8d: 2b:ac:d3:43:7b:64:b7:b6:6d:55:5b:76:2e:74:6a:48:1c:c3: 87:a9:54:f0:92:14:04:f4:00:29:76:13:b2:7d:5c:23:de:50: bf:54:3b:c6:51:4e:8e:be:24:63:33:f8:cd:04:fe:09:fa:e1: 66:7f:94:eb:28:b1:2c:0b:d2:83:a0:36:06:5f:8d:2c:7d:c6: 74:54:ae:79:75:f6:4c:78:4c:20:4f:a0:40:3b:3b:78:57:94: fb:4a:ee:87:2b:5c:de:fd:fa:65:0c:e3:0e:aa:88:f8:f4:97: 9c:c2:e2:a6:c5:ed:37:b6:0f:92:d3:25:f5:dd:2d:f6:b7:4b: e1:44:d4:e9:57:d9:bd:ca:8c:6d:2f:6b:aa:83:71:66:1a:35: 6e:51:76:8d:13:aa:56:05:90:56:1d:96:02:71:7a:da:d1:18: 59:28:3a:10:7c:9f:40:f2:b6:8b:f1:05:9e:c5:19:00:c4:ad: 08:88:5a:db:07:e6:7c:84:cd:0a:cc:10:87:38:87:94:e7:79: 6b:25:8b:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh9D+I5cbtcNHlFukk0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDMzZGYwM2VkNTFjZTc5MjRhNDgwMTgzYmNmZmRiNGYw NDI1MzcwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD EyhiZjA0NTRkM2QxZGRjMjRiMTBjMmIzNjg0MzRhODlkZWJlYTUxOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVHWRV8VGEg4lHUPUlNK3tNNXfiz y15U1Z66ybY9T+OOdN2bZ6lvkE/zPjNzdSUvLVycUU7EenHfHZO/JCxOiZvUNcHT sC6ydxyI+sSRt46ZfF9CQGClv8sVqaUqM2gXUCuhmd8BbD3NecLdbto9lF2K9tMm l41jluyOyF/EMX9X+Cw0JIZ7rQ4jM5b7ouJ64NDU/kAXxgZ9upa7nlOF6dFhUFNf kexSxpkQ8g1r4hEG5ONkdSaYxxxUYS1LTn7/HBlSvYff0vIPvaFn8cIkltulAHxo VUkUNA7HZYmhcSSeFslinxcgl1PDFw2fIRVK7fDFVQrTdh/u/P0LY4b06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8EVNPR3cJLEMKzaENKid6+pRnLMB8GA1UdIwQY MBaAFL0DPfA+1RznkkpIAYO8/9tPBCU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDkt Yjg0ODdmZTk2MTQ5LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDktYjg0ODdmZTk2MTQ5 LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFegKbN93 prwtVYQe1zqQya8F68xEEkSiLOuHiYSvyLgNxmAe8/MXzRdOlrDUCiegrl7TrYyN K6zTQ3tkt7ZtVVt2LnRqSBzDh6lU8JIUBPQAKXYTsn1cI95Qv1Q7xlFOjr4kYzP4 zQT+CfrhZn+U6yixLAvSg6A2Bl+NLH3GdFSueXX2THhMIE+gQDs7eFeU+0ruhytc 3v36ZQzjDqqI+PSXnMLipsXtN7YPktMl9d0t9rdL4UTU6VfZvcqMbS9rqoNxZho1 blF2jROqVgWQVh2WAnF62tEYWSg6EHyfQPK2i/EFnsUZAMStCIha2wfmfITNCswQ hziHlOd5ayWLJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:33 2025 by rpki-client