This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json) Hash identifier: R6H6x9lO8ubPanwnCnrtdETYgnbtbPdZo/FRUTjBGB4= Subject key identifier: 02:4D:02:8B:BD:F8:00:91:5E:61:F5:C3:BE:39:1A:34:E1:6B:69:AE Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Certificate serial: 019B266473847C4909B30E0AF82E63990BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft Manifest number: 1204 Signing time: Tue 16 Dec 2025 09:01:15 +0000 Manifest this update: Tue 16 Dec 2025 09:01:15 +0000 Manifest next update: Wed 17 Dec 2025 09:01:15 +0000 Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=) 2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: gJKxV4YsiUzZfHqp+6SI96ti87xyh9gF4faqfqwJmfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:73:84:7c:49:09:b3:0e:0a:f8:2e:63:99:0b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18 Validity Not Before: Dec 16 09:01:15 2025 GMT Not After : Dec 17 09:01:15 2025 GMT Subject: CN=024d028bbdf800915e61f5c3be391a34e16b69ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:5b:92:a4:9a:fd:7b:c3:22:f6:6c:64:50: c4:bd:be:a6:dc:91:db:80:db:f6:cd:06:70:f9:84: e5:e2:f4:6b:30:f4:29:82:51:27:e5:99:cf:3c:5d: 3b:a1:71:1c:98:e0:c3:3f:56:43:61:e3:f6:82:b4: f9:6b:2d:bd:b7:76:12:71:e3:cd:17:b3:8b:74:8a: b2:ed:ed:5e:0f:81:86:47:34:17:35:f3:01:32:81: 18:49:44:7f:a4:c6:b4:dc:a9:75:ae:c2:3b:d7:35: 70:89:06:b8:89:ee:a7:58:b4:92:f9:50:f5:70:bd: c2:33:89:30:0c:bd:64:29:2a:8e:ae:25:10:13:8c: 35:b4:0a:14:9f:40:29:ed:c9:84:5d:3f:91:aa:8b: eb:29:86:f0:e8:ae:73:e7:02:2d:29:4b:00:82:00: 77:85:97:e1:4e:ab:e8:6b:0e:8a:03:74:87:84:c2: 58:69:6b:a0:f4:04:04:f5:c3:08:22:31:7c:b4:0d: 58:71:8b:bd:c6:9d:1f:7a:87:37:b3:9d:bd:00:3d: d9:de:6f:f2:89:20:51:83:4a:84:23:5f:12:1a:4f: eb:4b:46:79:1f:80:9d:ad:c4:3e:31:c1:65:35:3a: e9:49:7d:bc:1d:00:bf:e0:92:b5:1e:16:1e:ed:b8: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4D:02:8B:BD:F8:00:91:5E:61:F5:C3:BE:39:1A:34:E1:6B:69:AE X509v3 Authority Key Identifier: keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d0:eb:22:e9:83:2a:fd:f2:84:75:64:d3:52:ca:d8:4b:29: 52:59:7a:a1:59:15:e0:4a:a9:01:78:92:47:3a:91:49:df:e4: 1a:8c:40:f4:fc:dc:ee:18:93:c8:12:6e:75:cc:70:d9:26:64: 35:ec:28:a4:8c:5e:a9:89:99:11:65:c5:21:fc:c7:cd:33:a1: 9a:fd:05:62:57:5a:96:3e:ae:81:1b:0d:e4:80:ce:77:41:9c: e2:df:14:53:19:71:21:7f:35:7d:23:61:1f:0a:6e:7a:d4:33: 76:3c:1c:ab:3a:30:0c:78:2e:37:12:60:66:dc:c5:01:41:e8: e8:74:69:ba:73:56:79:41:75:36:e0:08:5d:19:f8:c1:3a:a7: b1:cb:2a:bd:91:c2:a8:db:e4:e3:b7:3d:91:5a:99:b2:59:f8: d7:5c:fc:35:d7:dc:8e:81:a9:f5:5a:a3:a0:97:54:1b:a6:3d: f0:fa:3d:49:df:ad:25:02:58:7c:b3:ad:c3:f4:81:59:db:75: a1:f7:cb:65:90:5b:14:29:fa:e6:2a:83:f1:20:2e:e2:28:9f: 11:a0:e6:bb:cd:fc:50:7c:98:60:0f:f5:0c:1a:25:59:3b:fd: f7:6a:28:a2:4f:de:9a:a1:15:fd:fb:39:2a:cd:e2:7f:8d:07: 83:27:df:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZHOEfEkJsw4K+C5jmQvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4 MmJjMTgwHhcNMjUxMjE2MDkwMTE1WhcNMjUxMjE3MDkwMTE1WjAzMTEwLwYDVQQD EygwMjRkMDI4YmJkZjgwMDkxNWU2MWY1YzNiZTM5MWEzNGUxNmI2OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaFbkqSa/XvDIvZsZFDEvb6m3JHb gNv2zQZw+YTl4vRrMPQpglEn5ZnPPF07oXEcmODDP1ZDYeP2grT5ay29t3YScePN F7OLdIqy7e1eD4GGRzQXNfMBMoEYSUR/pMa03Kl1rsI71zVwiQa4ie6nWLSS+VD1 cL3CM4kwDL1kKSqOriUQE4w1tAoUn0Ap7cmEXT+RqovrKYbw6K5z5wItKUsAggB3 hZfhTqvoaw6KA3SHhMJYaWug9AQE9cMIIjF8tA1YcYu9xp0feoc3s529AD3Z3m/y iSBRg0qEI18SGk/rS0Z5H4CdrcQ+McFlNTrpSX28HQC/4JK1HhYe7bjnnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJNAou9+ACRXmH1w745GjTha2muMB8GA1UdIwQY MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9DrIumD Kv3yhHVk01LK2EspUll6oVkV4EqpAXiSRzqRSd/kGoxA9Pzc7hiTyBJudcxw2SZk NewopIxeqYmZEWXFIfzHzTOhmv0FYldalj6ugRsN5IDOd0Gc4t8UUxlxIX81fSNh HwpuetQzdjwcqzowDHguNxJgZtzFAUHo6HRpunNWeUF1NuAIXRn4wTqnscsqvZHC qNvk47c9kVqZsln411z8NdfcjoGp9VqjoJdUG6Y98Po9Sd+tJQJYfLOtw/SBWdt1 offLZZBbFCn65iqD8SAu4iifEaDmu838UHyYYA/1DBolWTv992oook/emqEV/fs5 Ks3if40HgyffVA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:23 2025 by rpki-client