This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json) Hash identifier: 3Dgs2lJkvAoORg923KwTFybiWVxX8HnhdNYLMkSMCDo= Subject key identifier: FA:D4:2F:61:8D:E4:86:BD:74:D4:4C:57:41:6F:42:AF:63:CC:E6:6B Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Certificate serial: 019B34C43382398F0EFB3568FB86B10A1218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft Manifest number: 096B Signing time: Fri 19 Dec 2025 04:00:31 +0000 Manifest this update: Fri 19 Dec 2025 04:00:31 +0000 Manifest next update: Sat 20 Dec 2025 04:00:31 +0000 Files and hashes: 1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=) 2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: IHI65kSt+TEG0w7/jdEaZM7CmV2xIVgWE715qXXYpqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:33:82:39:8f:0e:fb:35:68:fb:86:b1:0a:12:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Validity Not Before: Dec 19 04:00:31 2025 GMT Not After : Dec 20 04:00:31 2025 GMT Subject: CN=fad42f618de486bd74d44c57416f42af63cce66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:03:78:d5:5c:3b:c2:1a:48:d5:47:bc:3b: bb:4f:af:ac:1a:f4:c7:fb:59:71:3d:1a:68:b4:df: 99:d4:4f:9e:aa:3c:62:11:dd:79:aa:84:a6:b3:df: 5d:e5:09:fc:ef:f0:28:73:3c:43:0b:72:1c:c9:83: a7:3b:ad:31:c6:5c:cc:2b:63:77:0b:05:67:e0:03: 33:6c:f2:d7:3c:9f:3c:a7:10:60:de:5b:49:ea:a0: f4:9d:5c:8a:e6:e6:3d:48:50:07:ee:e7:03:80:6c: 56:58:6e:b8:d1:5f:15:bc:ae:e7:a8:88:66:93:94: 0f:fe:e7:8e:5a:d8:a2:f4:2a:6b:ac:60:c7:03:97: 1b:f9:74:b3:f2:31:10:f8:95:d4:29:c7:62:19:5b: 9e:d3:24:98:e3:7f:fd:d9:3e:02:27:13:dc:ed:3c: 94:f3:a3:e0:50:17:44:ae:9b:4a:82:3f:08:30:c4: 9f:1b:a2:2f:ba:19:9a:f9:98:ed:a3:af:63:00:fa: 35:65:22:f6:7e:76:1a:59:55:0d:b0:db:04:05:d0: 85:85:c8:ba:1b:3c:ae:b9:5b:dc:25:4e:e2:c3:d7: ce:0f:85:75:6f:3b:52:9b:75:8d:40:37:69:aa:92: 6f:00:70:db:50:bb:20:73:f2:32:23:97:d5:9e:96: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:2F:61:8D:E4:86:BD:74:D4:4C:57:41:6F:42:AF:63:CC:E6:6B X509v3 Authority Key Identifier: keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ea:ec:d4:e6:b5:05:16:05:15:84:16:bf:3a:16:de:56:e1: fa:99:80:b7:9b:d2:a0:79:ad:bc:38:cd:52:bb:ef:e2:ab:c2: 5c:e1:25:76:fe:43:96:b0:99:a9:a4:88:e0:e8:68:5e:e3:48: 3f:de:95:2e:de:0f:dc:05:39:8a:af:6c:fe:43:38:71:4c:6d: 1a:fb:fa:80:7c:6e:c3:fb:db:52:70:11:bd:65:10:d0:cd:8b: 3a:09:c5:87:54:e4:a7:94:35:c1:07:81:78:e3:b0:0a:ea:67: 50:4c:73:81:b9:ab:4b:85:57:11:11:95:ad:5d:e1:e2:8c:ad: ba:1c:14:f0:21:fd:6c:a0:ff:44:a2:b8:e5:3c:d4:b0:3e:db: 36:2d:03:24:0b:3e:eb:ab:57:68:ca:ec:11:ef:05:b5:24:81: 15:ca:50:e1:9f:5f:35:a6:97:ca:83:d3:0e:55:a1:61:19:08: 71:43:25:1e:c0:86:b8:fd:2e:c7:96:44:e6:f6:36:1b:c0:44: 6c:8a:32:0b:16:bf:b1:84:30:06:76:eb:5c:28:99:d2:79:d0: 50:96:10:8a:70:80:2f:66:74:c5:02:a3:12:34:dd:68:ab:cd: c7:e5:25:45:21:4c:a1:e4:66:50:af:1e:79:2c:ff:64:12:29: 09:d5:6f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDOCOY8O+zVo+4axChIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDQ5Y2E0MmUxZDgyY2UyN2I1NGJiZmQwMTc3ODFkNTQ1 YTc5YjcwHhcNMjUxMjE5MDQwMDMxWhcNMjUxMjIwMDQwMDMxWjAzMTEwLwYDVQQD EyhmYWQ0MmY2MThkZTQ4NmJkNzRkNDRjNTc0MTZmNDJhZjYzY2NlNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ4DeNVcO8IaSNVHvDu7T6+sGvTH +1lxPRpotN+Z1E+eqjxiEd15qoSms99d5Qn87/AoczxDC3IcyYOnO60xxlzMK2N3 CwVn4AMzbPLXPJ88pxBg3ltJ6qD0nVyK5uY9SFAH7ucDgGxWWG640V8VvK7nqIhm k5QP/ueOWtii9CprrGDHA5cb+XSz8jEQ+JXUKcdiGVue0ySY43/92T4CJxPc7TyU 86PgUBdErptKgj8IMMSfG6Ivuhma+Zjto69jAPo1ZSL2fnYaWVUNsNsEBdCFhci6 GzyuuVvcJU7iw9fOD4V1bztSm3WNQDdpqpJvAHDbULsgc/IyI5fVnpajEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrUL2GN5Ia9dNRMV0FvQq9jzOZrMB8GA1UdIwQY MBaAFL0EnKQuHYLOJ7VLv9AXeB1UWnm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUt MWFhMDM0YTJhZjljLzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUtMWFhMDM0YTJhZjlj LzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFers1Oa1 BRYFFYQWvzoW3lbh+pmAt5vSoHmtvDjNUrvv4qvCXOEldv5DlrCZqaSI4OhoXuNI P96VLt4P3AU5iq9s/kM4cUxtGvv6gHxuw/vbUnARvWUQ0M2LOgnFh1Tkp5Q1wQeB eOOwCupnUExzgbmrS4VXERGVrV3h4oytuhwU8CH9bKD/RKK45TzUsD7bNi0DJAs+ 66tXaMrsEe8FtSSBFcpQ4Z9fNaaXyoPTDlWhYRkIcUMlHsCGuP0ux5ZE5vY2G8BE bIoyCxa/sYQwBnbrXCiZ0nnQUJYQinCAL2Z0xQKjEjTdaKvNx+UlRSFMoeRmUK8e eSz/ZBIpCdVvSw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:12:41 2025 by rpki-client