This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json) Hash identifier: nC1q4ZiSfHVzJGenexjXt94AM/RkzTVs5d+q039qXrs= Subject key identifier: 9A:68:AD:97:EA:FC:27:BA:0D:2A:68:E0:BA:F1:CB:E2:0C:93:48:09 Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Certificate serial: 019AF1D242F44BEA8963B0F164BEBD9F43BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft Manifest number: 0B5C Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: BQmMXkzFzW0DvoS6aNVc0zpGrUt9q/xnzshW0xNwZmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:42:f4:4b:ea:89:63:b0:f1:64:be:bd:9f:43:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=9a68ad97eafc27ba0d2a68e0baf1cbe20c934809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:7d:8d:88:a2:d4:75:73:ab:ca:96:eb:f2: b5:65:46:77:27:80:28:dc:57:cd:30:80:e5:0f:13: ab:19:27:e2:b5:ad:02:f2:e1:f4:f5:d8:bb:bc:b3: 91:71:e6:13:0f:8b:42:b6:7c:1b:d7:b4:82:82:9b: 17:b4:0a:b4:5a:ca:04:a3:95:ff:88:1b:85:aa:74: 06:af:61:6a:52:16:10:ba:70:b9:82:6f:20:8e:39: 00:93:9c:8e:8f:7b:59:4f:97:b6:23:5c:66:0e:9f: 49:ca:de:01:ee:d1:36:82:e9:08:bf:d3:2c:57:f3: 38:23:95:71:7c:e4:c9:36:52:f2:14:25:39:aa:87: 10:46:0f:bf:8d:88:a9:cc:9c:bd:1b:91:02:e9:b1: 69:86:68:d8:50:36:cd:d2:d9:37:14:cc:3a:46:76: 5f:10:09:a6:72:58:9e:fc:71:a3:f6:8a:00:e6:8f: 4b:3f:d5:bb:f0:84:5d:37:f9:8e:b4:a9:19:ea:d9: 60:9a:ac:ac:9b:c6:7b:2f:82:af:04:5c:df:89:2a: 33:47:2f:6d:05:51:61:7c:8f:32:b3:21:ae:56:dd: 32:84:46:e5:e3:bc:6e:f6:e4:04:01:9f:a2:58:c8: 21:46:9a:3d:bd:17:68:c6:04:08:1e:68:eb:d9:cb: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:AD:97:EA:FC:27:BA:0D:2A:68:E0:BA:F1:CB:E2:0C:93:48:09 X509v3 Authority Key Identifier: keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:a4:f0:b2:4c:61:41:a1:0f:84:78:f2:6b:6d:14:e0:20: 24:85:2f:05:cd:d5:ee:83:b5:5d:39:91:b6:d3:ca:8a:27:c4: cc:52:ed:f2:02:80:13:ae:a0:9f:a6:cb:e6:6e:d8:c8:62:94: 4a:e1:76:9f:c3:be:62:37:8f:86:f6:1d:5f:96:e3:9f:ef:df: 1e:11:db:2c:a0:51:32:57:49:e7:74:aa:f0:da:aa:bf:33:f4: eb:ed:32:4d:ad:f7:bd:50:34:67:02:c8:02:ab:41:aa:6c:3a: d9:cf:6b:11:fe:65:37:f0:aa:25:cb:fb:dc:1f:97:4a:f5:fa: 0d:c0:21:1c:97:4d:56:bb:b6:5a:26:3a:11:67:7f:99:e2:a2: 79:ac:74:84:80:5d:3c:c1:c3:df:73:c6:49:e5:21:ae:9a:ff: 2f:53:cf:10:95:0d:0c:0b:61:3d:3c:09:ca:6d:c3:09:52:b5: 20:90:30:01:9b:2d:35:41:15:0d:69:34:4a:38:36:38:fe:4c: 69:b9:4e:7d:ac:a2:a7:d8:5a:ff:9f:c7:93:ed:fc:46:ba:a8: b2:63:cb:3e:de:0f:2e:c1:69:f2:a7:ac:d4:86:8f:27:a7:cf: 65:a6:ea:c4:cf:e7:fb:73:67:ca:95:b3:75:37:79:4e:58:50: 84:24:dc:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kL0S+qJY7DxZL69n0O9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi ZWUzNjgwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD Eyg5YTY4YWQ5N2VhZmMyN2JhMGQyYTY4ZTBiYWYxY2JlMjBjOTM0ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsJ9jYii1HVzq8qW6/K1ZUZ3J4Ao 3FfNMIDlDxOrGSfita0C8uH09di7vLORceYTD4tCtnwb17SCgpsXtAq0WsoEo5X/ iBuFqnQGr2FqUhYQunC5gm8gjjkAk5yOj3tZT5e2I1xmDp9Jyt4B7tE2gukIv9Ms V/M4I5VxfOTJNlLyFCU5qocQRg+/jYipzJy9G5EC6bFphmjYUDbN0tk3FMw6RnZf EAmmclie/HGj9ooA5o9LP9W78IRdN/mOtKkZ6tlgmqysm8Z7L4KvBFzfiSozRy9t BVFhfI8ysyGuVt0yhEbl47xu9uQEAZ+iWMghRpo9vRdoxgQIHmjr2ct03wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJporZfq/Ce6DSpo4Lrxy+IMk0gJMB8GA1UdIwQY MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5Ok8LJM YUGhD4R48mttFOAgJIUvBc3V7oO1XTmRttPKiifEzFLt8gKAE66gn6bL5m7YyGKU SuF2n8O+YjePhvYdX5bjn+/fHhHbLKBRMldJ53Sq8NqqvzP06+0yTa33vVA0ZwLI AqtBqmw62c9rEf5lN/CqJcv73B+XSvX6DcAhHJdNVru2WiY6EWd/meKieax0hIBd PMHD33PGSeUhrpr/L1PPEJUNDAthPTwJym3DCVK1IJAwAZstNUEVDWk0Sjg2OP5M ablOfayip9ha/5/Hk+38RrqosmPLPt4PLsFp8qes1IaPJ6fPZabqxM/n+3NnypWz dTd5TlhQhCTccA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:12 2025 by rpki-client