This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json) Hash identifier: xN81J5NGQNf5iyUqakxEqxwSzDxoSxBCNYXF7gHOKOA= Subject key identifier: BD:84:25:17:CF:A7:2E:9A:D2:5B:98:F6:D8:01:F8:C4:D7:44:B3:40 Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019AF23F982627589951B1D94851B8F0DF22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: 3alv3XwEbOFu7iiK8LFbOce6T6M.roa (hash: 0D37DkikXSNhNHk7nw4gpplDRFgdjXDIi3MfBRU1TWY=) 2: QfCE84C5mXjE3pc-vv8Z3PN8Ftc.roa (hash: fWz5/zlEwc/FfIJ7uTaCeiVlT5ulVNUEAcYZgSkvI+4=) 3: UKSPoLqIB9OwePcX6MiaKIQ_BKk.roa (hash: r2Jdc8SrerX8AADHr5ZXdXpVsMbJMBhTSOZg2PzUZsc=) 4: UzRHQuzUI0Ss5Pz4cItdnmMHCLw.asa (hash: 3AMssHCd/Ax3dExijoPFYSMky22OYdzCGjVn4xJGhIA=) 5: XuYgpmXug2q0Cu_sdJBe-1XGD2I.roa (hash: joQ8DCTmx5DI+ZzMDXT+0TtQtcaVPpX4LENPUyxWUVI=) 6: bl1f-poGtLSo5yagSqXyluvVirs.roa (hash: cpYv0yRUyLmXhceQZE6Ke54aLJ1RjsI2p0KUhTzYBqQ=) 7: dYt1KKj4tCGLif9Uw-PUq5XSPt0.roa (hash: VRn5rOavF3Z1TUQt1A8oCfFVCQrXkGJKkkqLjlnItNg=) 8: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: Lr42wvXM43VXDaWZK0lK8iAIrwjIDe+0nU3I3WUcBxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:98:26:27:58:99:51:b1:d9:48:51:b8:f0:df:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=bd842517cfa72e9ad25b98f6d801f8c4d744b340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:11:da:cc:6d:9d:fd:1d:30:fc:32:70:16: ae:b2:2a:dd:9b:40:53:29:4c:43:36:4f:31:48:b7: b1:16:3d:e3:58:b8:1a:c0:68:8d:86:a9:f6:2d:5e: 9a:3f:be:a8:82:a8:32:04:17:45:b0:4b:ce:7f:0b: 18:87:a2:5c:dd:da:9a:64:18:26:5b:05:1f:63:7f: 70:fe:d1:0d:35:ed:70:f8:e3:c9:69:db:66:e6:7e: 24:52:a8:08:cf:6b:06:59:43:85:09:e1:fe:4a:bd: 96:9a:c9:a8:1b:7b:22:66:37:a7:1f:6f:2e:f6:3d: cf:c0:c5:df:cf:e8:ef:36:0b:7d:d2:8e:c1:f1:5a: fd:7b:2e:be:e3:e6:60:74:01:ba:a7:ac:4a:ae:a5: 11:bc:2c:71:52:43:35:2d:24:f3:08:49:68:c5:01: 42:7b:72:55:15:93:e0:18:0c:1c:04:4a:5d:f6:56: a3:59:8f:f6:6e:69:c7:63:87:5e:66:3f:ad:f4:88: a1:7e:04:9a:b0:36:fb:65:e0:dc:54:3d:f2:dc:75: cc:87:83:8d:c1:26:d4:78:7a:70:31:bf:70:06:ff: a6:e4:19:33:8c:18:56:38:a3:f5:83:ed:9a:b3:75: 6b:b8:84:bb:98:76:06:65:58:76:21:f6:d0:1c:92: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:84:25:17:CF:A7:2E:9A:D2:5B:98:F6:D8:01:F8:C4:D7:44:B3:40 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d1:f3:9b:7c:3f:58:1c:f9:40:05:3b:cf:db:9e:33:48:a4: ef:01:c8:a0:e1:db:a2:88:e2:06:b8:3e:26:67:9c:44:06:b5: 53:6b:6e:d2:1d:48:c2:d2:68:0d:00:7d:22:bc:c3:3c:f4:8b: 9a:8e:ae:64:bd:ad:c2:7e:50:d3:91:86:4f:5e:2e:cc:74:2c: 74:1c:09:31:3b:82:ac:0b:8c:8f:2d:bd:f6:cf:84:dc:9d:1a: 83:df:8a:01:40:a7:c9:99:92:db:0c:37:c0:a8:e1:42:95:8c: d5:54:fc:8d:75:3f:d2:44:54:8a:a9:d6:c7:06:c6:b5:36:eb: a0:b4:a7:a2:7f:cb:f7:84:27:25:5b:66:1f:03:6b:65:5b:27: d9:86:86:50:ad:a3:93:ce:8e:77:c5:5f:e9:ae:cd:28:22:95: 28:0a:c5:d1:bd:1a:50:de:50:5c:2c:eb:aa:de:36:da:10:e7: ca:97:76:62:e7:d5:bc:28:b7:e7:24:75:39:0a:61:bf:6d:62: 71:bd:79:35:24:10:c4:a7:59:f6:d6:b4:0e:da:5f:43:47:28: ed:33:4e:84:25:5a:25:3e:09:d7:b1:98:5b:58:7c:d1:7e:e8: de:63:14:4d:da:fa:e5:6b:0f:4f:ca:12:6f:9e:cd:6b:48:76: ff:57:36:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5gmJ1iZUbHZSFG48N8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhiZDg0MjUxN2NmYTcyZTlhZDI1Yjk4ZjZkODAxZjhjNGQ3NDRiMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhsR2sxtnf0dMPwycBausirdm0BT KUxDNk8xSLexFj3jWLgawGiNhqn2LV6aP76ogqgyBBdFsEvOfwsYh6Jc3dqaZBgm WwUfY39w/tENNe1w+OPJadtm5n4kUqgIz2sGWUOFCeH+Sr2WmsmoG3siZjenH28u 9j3PwMXfz+jvNgt90o7B8Vr9ey6+4+ZgdAG6p6xKrqURvCxxUkM1LSTzCEloxQFC e3JVFZPgGAwcBEpd9lajWY/2bmnHY4deZj+t9IihfgSasDb7ZeDcVD3y3HXMh4ON wSbUeHpwMb9wBv+m5BkzjBhWOKP1g+2as3VruIS7mHYGZVh2IfbQHJKA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2EJRfPpy6a0luY9tgB+MTXRLNAMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNHzm3w/ WBz5QAU7z9ueM0ik7wHIoOHboojiBrg+JmecRAa1U2tu0h1IwtJoDQB9IrzDPPSL mo6uZL2twn5Q05GGT14uzHQsdBwJMTuCrAuMjy299s+E3J0ag9+KAUCnyZmS2ww3 wKjhQpWM1VT8jXU/0kRUiqnWxwbGtTbroLSnon/L94QnJVtmHwNrZVsn2YaGUK2j k86Od8Vf6a7NKCKVKArF0b0aUN5QXCzrqt422hDnypd2YufVvCi35yR1OQphv21i cb15NSQQxKdZ9ta0DtpfQ0co7TNOhCVaJT4J17GYW1h80X7o3mMUTdr65WsPT8oS b57Na0h2/1c2hw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:24 2025 by rpki-client