This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json) Hash identifier: eNM8twMBaEsq0DUjhppvQBiAErBNulYKCFZC5SAiWUM= Subject key identifier: C7:C8:8C:19:0A:02:9D:92:52:6B:3D:AB:06:1A:0C:97:93:1F:C6:B2 Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Certificate serial: 019AF2401CC064B47F9D1C04C10FA9D683FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft Manifest number: 11E9 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=) 2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: g/Qci8mthXDgwEQYMcEymHxC5tC1mWnW431huKp+cXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1c:c0:64:b4:7f:9d:1c:04:c1:0f:a9:d6:83:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=c7c88c190a029d92526b3dab061a0c97931fc6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:7e:0f:1e:12:92:05:4b:ab:81:fe:31:50: 13:05:c7:82:5a:38:08:f7:a5:75:53:4c:54:71:68: 24:0d:c0:c4:95:0e:da:03:a6:ee:9a:cd:0e:9b:97: 8e:dd:81:74:92:06:04:90:fd:9c:5b:52:2f:30:20: a1:27:a7:97:f8:59:5c:e6:1b:13:9e:12:14:61:65: fd:7f:1c:7c:a2:ff:96:18:4f:ad:55:8e:b9:1f:9c: 7d:9a:c3:64:db:49:46:23:bb:b3:b1:15:10:d6:1f: 8b:f1:bf:56:9f:e3:19:e2:52:4f:40:6f:a9:b6:ce: 4e:b2:16:4a:83:ab:86:12:39:5c:1f:39:7e:7b:b4: c4:1a:7c:87:71:00:1b:70:09:53:a4:85:9b:32:12: 75:6c:6e:50:2c:71:83:5b:ee:5c:b4:63:bb:b1:55: d0:a1:ef:f2:6f:15:f2:4c:48:6d:83:5c:7b:0e:9b: 09:3e:1e:3c:b1:a4:a4:3c:82:72:af:ac:aa:d8:b7: d0:89:37:e9:34:60:d0:24:44:8b:b5:08:70:00:93: df:97:52:e3:2f:88:35:d8:40:ac:19:8c:c1:bd:1f: a4:4d:9b:d7:56:81:60:9f:36:e2:20:f4:df:68:a5: 2d:d5:34:74:0d:4a:c6:39:4b:20:33:80:30:53:86: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:8C:19:0A:02:9D:92:52:6B:3D:AB:06:1A:0C:97:93:1F:C6:B2 X509v3 Authority Key Identifier: keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:6f:0d:63:20:6f:16:c6:f9:ab:97:2b:74:8b:e6:1b:1f:86: 68:d7:cb:eb:e4:b2:cd:67:af:03:4a:4a:13:37:10:18:4a:18: 13:aa:5e:46:8a:86:2a:63:c2:32:b3:7b:9d:a1:7d:b7:cc:fc: 2f:bf:39:7c:be:8e:31:72:10:b6:b7:d3:e0:3c:28:ed:73:37: d2:6a:f0:0c:5d:f9:9c:ce:92:f4:1a:88:2d:91:8f:fd:38:38: de:f4:51:d9:49:12:70:1a:e6:3a:f3:05:a5:dd:1f:64:a6:4e: 5f:b6:8a:60:6f:42:3e:0e:61:57:a6:d8:5f:7f:e3:35:c1:68: d9:37:98:5c:9a:92:be:9d:1e:49:a3:ac:b5:04:76:42:8b:05: bb:09:39:c7:e5:2d:73:b4:3a:a1:54:90:13:4e:e4:aa:05:b9: fe:a8:57:2d:6c:95:2c:e3:13:03:76:ac:6c:bf:2a:a5:d6:34: 40:41:cd:84:4b:59:14:ad:e9:d9:da:84:01:ff:82:34:a0:06: a9:bc:1e:3e:7c:e4:b8:ff:6f:9b:e3:a2:38:9f:a2:09:7c:9a: 3d:e0:a6:4b:3f:3a:db:15:f5:ba:7f:7b:78:12:a9:b3:f9:15: d4:5b:c3:6c:22:87:04:a1:31:3b:1b:40:75:9d:6b:34:01:3d: 3e:d8:0b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBzAZLR/nRwEwQ+p1oP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4 MmJjMTgwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EyhjN2M4OGMxOTBhMDI5ZDkyNTI2YjNkYWIwNjFhMGM5NzkzMWZjNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCh+Dx4SkgVLq4H+MVATBceCWjgI 96V1U0xUcWgkDcDElQ7aA6bums0Om5eO3YF0kgYEkP2cW1IvMCChJ6eX+Flc5hsT nhIUYWX9fxx8ov+WGE+tVY65H5x9msNk20lGI7uzsRUQ1h+L8b9Wn+MZ4lJPQG+p ts5OshZKg6uGEjlcHzl+e7TEGnyHcQAbcAlTpIWbMhJ1bG5QLHGDW+5ctGO7sVXQ oe/ybxXyTEhtg1x7DpsJPh48saSkPIJyr6yq2LfQiTfpNGDQJESLtQhwAJPfl1Lj L4g12ECsGYzBvR+kTZvXVoFgnzbiIPTfaKUt1TR0DUrGOUsgM4AwU4ZoCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfIjBkKAp2SUms9qwYaDJeTH8ayMB8GA1UdIwQY MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3G8NYyBv Fsb5q5crdIvmGx+GaNfL6+SyzWevA0pKEzcQGEoYE6peRoqGKmPCMrN7naF9t8z8 L785fL6OMXIQtrfT4Dwo7XM30mrwDF35nM6S9BqILZGP/Tg43vRR2UkScBrmOvMF pd0fZKZOX7aKYG9CPg5hV6bYX3/jNcFo2TeYXJqSvp0eSaOstQR2QosFuwk5x+Ut c7Q6oVSQE07kqgW5/qhXLWyVLOMTA3asbL8qpdY0QEHNhEtZFK3p2dqEAf+CNKAG qbwePnzkuP9vm+OiOJ+iCXyaPeCmSz862xX1un97eBKps/kV1FvDbCKHBKExOxtA dZ1rNAE9PtgLlA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:04 2025 by rpki-client