This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json) Hash identifier: O5j1xasazqb0ohhfC/5oRqb9G612mfboKyrAoMNnl2I= Subject key identifier: 0B:AC:CE:FE:56:B7:3B:A9:9D:6F:CD:92:C0:D9:19:25:A7:27:3A:48 Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9 Certificate serial: 019AF0BF364EDD7B6581639443D810776CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft Manifest number: 15A2 Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=) 2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: dCkR9lniC9nzLiOk+wBfuAkELbd0uOyrAEA2EbktAEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:36:4e:dd:7b:65:81:63:94:43:d8:10:77:6c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9 Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=0baccefe56b73ba99d6fcd92c0d91925a7273a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:10:67:5f:65:95:67:59:b1:ca:a4:e3:b0: dc:d2:c6:7a:6b:e4:a4:17:46:df:cf:f2:4d:c1:98: 71:7f:13:75:ed:be:9f:45:5f:c4:65:4e:7b:02:59: 78:31:7f:90:05:a2:c4:ab:92:5c:65:ea:e2:4e:97: 50:07:1e:8e:81:d7:e0:66:b2:23:f9:f4:98:88:63: 13:a5:9b:d1:67:5f:d8:7b:81:bb:a7:6c:82:31:b5: c9:3a:dc:6e:e0:1d:b6:76:80:e7:db:c4:8d:aa:e7: 5a:50:72:2a:d0:3d:19:53:60:35:7c:e2:b6:0a:9f: 1f:60:1a:ee:90:19:af:f8:40:e0:44:81:47:c6:be: 4b:ab:14:b1:78:bf:76:d2:37:6a:53:e0:40:33:91: a7:63:e2:e2:2d:03:cc:76:ba:48:5e:e7:4b:6e:93: bb:ba:43:fa:b8:bb:5d:9e:8e:c5:aa:d6:13:f2:92: 66:f4:0c:05:b2:fe:54:9a:71:bb:c2:c9:4e:0a:95: d4:46:b9:b7:fd:c1:97:5b:25:5f:86:78:99:58:2b: d1:94:c3:fd:45:67:84:0c:0e:8a:f1:e3:09:2f:0b: 31:26:fd:82:76:27:89:78:27:01:4a:a3:d3:7d:04: 48:9a:eb:9f:ff:b3:f9:2e:5a:44:74:fb:b0:6d:9a: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AC:CE:FE:56:B7:3B:A9:9D:6F:CD:92:C0:D9:19:25:A7:27:3A:48 X509v3 Authority Key Identifier: keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:90:0b:32:64:53:f1:1c:84:28:9e:df:5d:d3:cb:5e:4d:7c: 6c:24:72:d7:51:b6:39:d5:69:dc:87:03:1c:dd:a6:9a:27:7a: 1b:11:c0:eb:ff:2d:cc:fe:9d:fe:50:cf:71:4d:08:00:d1:2a: ba:a9:59:27:e6:91:d7:a4:fe:2f:c2:dc:73:72:7f:42:f3:f5: 2c:de:37:58:6f:31:20:f7:e2:84:5a:dd:95:a4:6f:80:2c:33: d5:f3:3d:49:b2:7a:3b:a7:f7:d4:31:80:00:75:b2:9c:e1:b4: 1d:a9:b8:d7:11:54:50:b1:57:d7:c4:1b:84:ba:b6:38:b0:2c: 8f:21:c6:24:c2:9c:7a:ad:49:de:74:bf:53:94:4b:d4:4b:86: 4c:42:e4:ca:be:84:db:56:7b:d9:38:1a:9f:05:7b:27:1e:71: b4:16:56:cd:4d:de:b1:bf:26:52:9a:59:f3:76:66:80:6a:77: 87:d4:c8:c1:d2:9f:13:73:18:93:b6:55:01:7a:7e:b4:8b:bb: ed:ab:14:25:38:2f:01:b3:95:4a:10:e5:84:62:28:70:e1:55: ec:85:a6:f5:7d:bb:83:a5:66:db:91:17:30:99:30:54:b0:bd: 2e:0a:a9:1d:2b:ce:79:c0:c0:a7:f6:b3:62:a7:66:1c:83:b1: 1a:d7:66:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzZO3XtlgWOUQ9gQd2y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTdiNjc3NzdiOWE2ODMyOTMzNTc2NDk3YjQ2YTliMTYz MDRjZDkwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EygwYmFjY2VmZTU2YjczYmE5OWQ2ZmNkOTJjMGQ5MTkyNWE3MjczYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRMQZ19llWdZscqk47Dc0sZ6a+Sk F0bfz/JNwZhxfxN17b6fRV/EZU57All4MX+QBaLEq5JcZeriTpdQBx6OgdfgZrIj +fSYiGMTpZvRZ1/Ye4G7p2yCMbXJOtxu4B22doDn28SNqudaUHIq0D0ZU2A1fOK2 Cp8fYBrukBmv+EDgRIFHxr5LqxSxeL920jdqU+BAM5GnY+LiLQPMdrpIXudLbpO7 ukP6uLtdno7FqtYT8pJm9AwFsv5UmnG7wslOCpXURrm3/cGXWyVfhniZWCvRlMP9 RWeEDA6K8eMJLwsxJv2CdieJeCcBSqPTfQRImuuf/7P5LlpEdPuwbZoSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuszv5WtzupnW/NksDZGSWnJzpIMB8GA1UdIwQY MBaAFL6ntnd3uaaDKTNXZJe0apsWMEzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjct M2I5MWZmOWExYWNkLzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjctM2I5MWZmOWExYWNk LzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJALMmRT 8RyEKJ7fXdPLXk18bCRy11G2OdVp3IcDHN2mmid6GxHA6/8tzP6d/lDPcU0IANEq uqlZJ+aR16T+L8Lcc3J/QvP1LN43WG8xIPfihFrdlaRvgCwz1fM9SbJ6O6f31DGA AHWynOG0Ham41xFUULFX18QbhLq2OLAsjyHGJMKceq1J3nS/U5RL1EuGTELkyr6E 21Z72TganwV7Jx5xtBZWzU3esb8mUppZ83ZmgGp3h9TIwdKfE3MYk7ZVAXp+tIu7 7asUJTgvAbOVShDlhGIocOFV7IWm9X27g6Vm25EXMJkwVLC9LgqpHSvOecDAp/az YqdmHIOxGtdmQg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:13 2025 by rpki-client