This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json) Hash identifier: k9f14Vhn59ihUy7lMeTeNavBTt6RLt92Nf8U2brNRH0= Subject key identifier: E1:55:7C:93:AA:9F:A3:C2:62:50:FD:AE:BE:C1:58:D1:52:45:E1:03 Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Certificate serial: 019B2DB04A6FDEB0DA89ECC213E8C46AFAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft Manifest number: 0B7B Signing time: Wed 17 Dec 2025 19:01:26 +0000 Manifest this update: Wed 17 Dec 2025 19:01:26 +0000 Manifest next update: Thu 18 Dec 2025 19:01:26 +0000 Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: wnQ5r6OsSGYc1c8WUVwHD2A9d8jS6ucDbO1oT7TDX1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:4a:6f:de:b0:da:89:ec:c2:13:e8:c4:6a:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Validity Not Before: Dec 17 19:01:26 2025 GMT Not After : Dec 18 19:01:26 2025 GMT Subject: CN=e1557c93aa9fa3c26250fdaebec158d15245e103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:69:66:1e:f0:ff:77:d0:3c:3e:92:26:53: 84:5f:a0:39:3c:90:3f:9a:91:92:19:f7:3c:65:ac: 7c:27:ee:33:81:92:d4:22:7a:a2:c9:0e:46:fd:80: 09:93:9f:57:09:ea:08:e0:c2:01:76:44:06:7f:fd: 6f:55:3c:50:9b:34:bf:f8:89:8c:01:f3:aa:0b:83: 8e:a9:95:dc:c8:0d:68:3c:c0:cd:10:a1:a7:9b:00: e2:8b:50:20:0a:fd:90:a8:f2:20:da:bd:4d:e3:e8: db:6a:ae:f9:5f:0b:18:41:f2:f6:ae:d9:7f:a3:11: ed:79:da:4e:a4:fa:48:a1:eb:43:bb:b1:8b:00:5a: 8a:2d:ba:84:a2:9c:b9:0a:e8:bc:6e:53:d1:db:65: 86:3b:3f:15:ca:88:54:b8:9d:ca:d4:ce:72:d0:9f: f4:d9:dc:da:b4:a2:78:14:8f:41:55:e4:71:a4:0d: ce:de:d7:5b:90:2e:39:bc:54:d4:e4:30:b5:b9:07: 10:d2:1a:96:3c:78:b8:d1:cc:38:37:a3:a6:48:59: 7f:5b:c1:01:29:e1:dc:37:48:90:f5:b0:c6:b5:0f: 4d:7b:2b:3e:0a:8a:ba:44:42:66:de:79:8f:01:14: 0c:77:56:53:0a:08:a6:b4:8e:0b:67:95:ae:5b:3d: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:7C:93:AA:9F:A3:C2:62:50:FD:AE:BE:C1:58:D1:52:45:E1:03 X509v3 Authority Key Identifier: keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:8a:2b:50:e1:68:82:17:3f:56:b2:c2:55:f0:aa:f4:b5:bd: 41:6d:70:01:d5:ed:5d:8a:36:fa:35:e8:e2:00:c2:e0:a3:ed: 0e:17:1f:c6:0b:80:30:48:aa:84:02:43:d5:73:a2:99:9a:a2: f8:bf:40:f5:5c:6a:e4:9a:c2:0a:d0:34:c6:f3:f3:9a:82:a1: f3:54:6b:8f:58:09:4a:33:56:84:fd:05:7c:42:1c:9b:f0:dc: d1:b7:d5:27:e1:4e:9d:f4:50:5c:0f:8c:b3:cf:c5:29:5c:ad: 42:63:b7:2c:cc:df:67:ab:9f:03:ea:2e:e8:84:c1:e8:c5:bc: c1:45:34:d6:02:ca:36:20:59:6e:d6:32:4c:48:9e:bd:50:7d: 18:53:ea:6d:80:71:f7:7f:42:3c:65:2c:ee:fd:3a:37:57:bd: d9:bb:cc:cd:fc:16:85:0c:7f:77:b2:b9:20:d0:4e:6d:a8:f5: dc:27:2b:3c:ee:e9:4f:a5:1b:b7:1b:95:5d:c8:43:76:f9:f6: 3a:1c:8d:bc:2b:9b:73:ac:21:d7:03:6f:06:03:8a:4d:27:56: 77:0c:a8:36:dd:45:f2:c6:d5:4e:62:e5:5d:a8:1b:ea:d6:a4: 89:bb:75:cf:00:2c:81:26:bb:2b:eb:3b:f9:79:d6:b5:e0:67: 35:78:23:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsEpv3rDaiezCE+jEavquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi ZWUzNjgwHhcNMjUxMjE3MTkwMTI2WhcNMjUxMjE4MTkwMTI2WjAzMTEwLwYDVQQD EyhlMTU1N2M5M2FhOWZhM2MyNjI1MGZkYWViZWMxNThkMTUyNDVlMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdtpZh7w/3fQPD6SJlOEX6A5PJA/ mpGSGfc8Zax8J+4zgZLUInqiyQ5G/YAJk59XCeoI4MIBdkQGf/1vVTxQmzS/+ImM AfOqC4OOqZXcyA1oPMDNEKGnmwDii1AgCv2QqPIg2r1N4+jbaq75XwsYQfL2rtl/ oxHtedpOpPpIoetDu7GLAFqKLbqEopy5Cui8blPR22WGOz8VyohUuJ3K1M5y0J/0 2dzatKJ4FI9BVeRxpA3O3tdbkC45vFTU5DC1uQcQ0hqWPHi40cw4N6OmSFl/W8EB KeHcN0iQ9bDGtQ9Neys+Coq6REJm3nmPARQMd1ZTCgimtI4LZ5WuWz0i1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFVfJOqn6PCYlD9rr7BWNFSReEDMB8GA1UdIwQY MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoorUOFo ghc/VrLCVfCq9LW9QW1wAdXtXYo2+jXo4gDC4KPtDhcfxguAMEiqhAJD1XOimZqi +L9A9Vxq5JrCCtA0xvPzmoKh81Rrj1gJSjNWhP0FfEIcm/Dc0bfVJ+FOnfRQXA+M s8/FKVytQmO3LMzfZ6ufA+ou6ITB6MW8wUU01gLKNiBZbtYyTEievVB9GFPqbYBx 939CPGUs7v06N1e92bvMzfwWhQx/d7K5INBObaj13CcrPO7pT6UbtxuVXchDdvn2 OhyNvCubc6wh1wNvBgOKTSdWdwyoNt1F8sbVTmLlXagb6takibt1zwAsgSa7K+s7 +XnWteBnNXgjpg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:04 2025 by rpki-client