This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json) Hash identifier: iH9XV67Qv5zd2IaAp1SLf/u3eoPu1KXeX76xOzfS6lk= Subject key identifier: 40:64:29:23:B3:F1:F1:40:82:83:8A:53:07:8E:51:CF:84:A0:67:66 Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Certificate serial: 019AF12E234FCDF7A8FCF911D536E7E09EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=) 2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: Qh87Scmu7lqbAF56jqIA3hW7xm27iTJ7kz9uco1sEnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:23:4f:cd:f7:a8:fc:f9:11:d5:36:e7:e0:9e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=40642923b3f1f14082838a53078e51cf84a06766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:25:fa:2e:c4:09:82:32:35:63:a4:e5:1b: a0:b7:b8:f6:66:af:4d:32:73:21:1f:ab:a7:9e:c3: 37:3e:93:e5:7d:83:77:a8:8d:d1:f2:5a:0b:b6:af: 40:f9:00:ec:cf:99:8b:9d:96:e1:ab:c2:63:40:80: 70:86:fa:38:5a:56:02:c9:ff:a6:c0:13:1b:61:1e: f8:85:c3:26:3a:af:ed:13:45:b5:ba:4a:c2:f2:6a: c9:cd:f5:c0:8c:c3:79:08:11:70:c6:ea:01:ab:02: 6e:60:d8:74:68:8c:72:71:df:69:f3:1e:b0:6b:9e: e3:c4:b4:fd:aa:fc:2d:46:97:d1:06:c9:4f:80:9a: eb:11:3a:2a:4d:b8:36:f6:bd:0a:a2:fc:59:5d:e8: 82:21:5d:34:66:69:bf:fb:44:14:9d:67:8c:d7:9d: ec:dd:63:93:40:24:90:2f:54:12:69:fd:1f:5f:c1: fb:3d:42:4e:01:da:2d:32:34:38:25:94:79:93:76: d3:71:88:91:25:9c:ae:80:86:77:04:bb:3d:99:cc: 87:5b:02:ee:37:93:87:24:81:86:82:e8:5e:93:c9: 51:84:2c:e3:de:91:6d:8e:b6:06:50:4c:10:42:aa: 38:20:d5:7d:cb:74:d2:82:cd:56:28:75:92:30:63: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:29:23:B3:F1:F1:40:82:83:8A:53:07:8E:51:CF:84:A0:67:66 X509v3 Authority Key Identifier: keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:57:d1:3c:93:e2:81:62:d1:2b:e9:bc:45:53:eb:b9:89: af:88:d7:b3:02:f8:46:81:ef:05:a3:14:76:95:88:2d:a3:10: 9b:74:7c:67:85:f7:fb:f9:35:bc:3c:d0:7f:87:a5:49:e4:cf: 7e:cf:c6:b9:cf:80:00:0c:26:5e:ca:57:f7:49:0c:7b:7a:87: 85:7b:92:77:7a:5c:76:07:2b:fb:8a:d7:4a:a7:85:46:a6:c0: 5e:be:e9:86:fb:45:55:86:48:7e:ca:ee:28:99:2b:fa:50:87: df:ff:75:30:e6:ab:bc:63:f3:ae:33:1d:12:d6:ce:3e:bb:e3: ca:62:a0:fb:51:2b:1e:99:72:ef:3a:3d:47:d6:a4:fb:50:48: e5:e6:51:8c:0e:b5:09:22:ef:f0:10:dc:07:64:77:e0:93:f8: ab:c8:39:1f:48:1a:db:fd:a3:0e:69:bf:e2:39:14:fa:2a:4f: b2:6d:8d:2d:9a:bc:00:03:75:ff:db:98:80:6c:9e:43:50:3b: 0e:dc:ad:22:e7:38:e6:44:b1:2b:3d:6a:30:63:eb:59:a7:02: 5b:89:af:9f:fe:34:cb:19:54:92:5a:e5:90:ff:ab:c6:c8:1c: 2a:27:0c:3c:ac:69:b9:f3:88:29:fa:5c:1f:40:88:78:94:94: fa:4f:ff:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiNPzfeo/PkR1Tbn4J62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4 YjQ3N2YwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg0MDY0MjkyM2IzZjFmMTQwODI4MzhhNTMwNzhlNTFjZjg0YTA2NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iol+i7ECYIyNWOk5Rugt7j2Zq9N MnMhH6unnsM3PpPlfYN3qI3R8loLtq9A+QDsz5mLnZbhq8JjQIBwhvo4WlYCyf+m wBMbYR74hcMmOq/tE0W1ukrC8mrJzfXAjMN5CBFwxuoBqwJuYNh0aIxycd9p8x6w a57jxLT9qvwtRpfRBslPgJrrEToqTbg29r0KovxZXeiCIV00Zmm/+0QUnWeM153s 3WOTQCSQL1QSaf0fX8H7PUJOAdotMjQ4JZR5k3bTcYiRJZyugIZ3BLs9mcyHWwLu N5OHJIGGguhek8lRhCzj3pFtjrYGUEwQQqo4INV9y3TSgs1WKHWSMGPS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBkKSOz8fFAgoOKUweOUc+EoGdmMB8GA1UdIwQY MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3 LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMRX0TyT 4oFi0SvpvEVT67mJr4jXswL4RoHvBaMUdpWILaMQm3R8Z4X3+/k1vDzQf4elSeTP fs/Guc+AAAwmXspX90kMe3qHhXuSd3pcdgcr+4rXSqeFRqbAXr7phvtFVYZIfsru KJkr+lCH3/91MOarvGPzrjMdEtbOPrvjymKg+1ErHply7zo9R9ak+1BI5eZRjA61 CSLv8BDcB2R34JP4q8g5H0ga2/2jDmm/4jkU+ipPsm2NLZq8AAN1/9uYgGyeQ1A7 DtytIuc45kSxKz1qMGPrWacCW4mvn/40yxlUklrlkP+rxsgcKicMPKxpufOIKfpc H0CIeJSU+k//Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:14 2025 by rpki-client