This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json) Hash identifier: mKsfyezNC/89SQJQl4wiGYLxeDo//oFUPNglYdzPzHk= Subject key identifier: B1:A2:2A:56:78:52:4E:27:A5:54:85:2F:74:38:B9:19:7C:9A:C5:0D Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4 Certificate serial: 019AF19AED8D5E43A268F5B44BE49480334A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft Manifest number: 13B2 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: 1zXZ/hUk2W5e7YQCjMQliCGCOS3Xfmok3uot1+4yP+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:8d:5e:43:a2:68:f5:b4:4b:e4:94:80:33:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=b1a22a5678524e27a554852f7438b9197c9ac50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:25:84:aa:8b:53:75:14:72:e7:91:39:3c: 4b:cc:c3:86:d6:f6:92:a2:48:3b:82:91:a7:0a:51: 3c:f4:00:88:6a:f6:d0:85:f2:b6:e8:5c:13:e3:18: 9e:f3:13:96:89:f7:97:3e:96:cf:7b:8f:e9:6d:ab: 0c:84:9f:f9:1b:10:61:d7:d3:8a:10:a5:c7:b1:79: f3:44:a7:92:32:df:79:c6:54:65:7f:b3:88:e3:bc: 08:eb:09:db:d1:41:6b:39:75:28:86:51:5a:e2:a2: 04:3e:26:59:86:7e:7d:86:f3:54:f1:65:12:9b:c8: f1:61:b4:e8:e3:2c:9e:c0:16:d3:8a:8d:9b:26:81: 8d:f2:75:a1:26:71:4e:58:72:a5:e4:dc:a6:eb:69: 66:55:33:da:59:42:1d:69:64:bd:94:65:07:91:f8: 2e:47:84:82:c7:9d:63:82:d3:a5:af:fd:89:13:7a: cf:4d:96:9d:f3:4c:d0:3c:9b:dd:cf:71:89:62:6a: 49:3b:54:ee:0f:ce:8a:30:7f:ae:d6:b9:c0:09:df: 3a:bf:34:9c:5f:76:f4:da:fa:0f:0f:8c:1a:44:ff: 59:4d:da:d8:ba:88:31:58:55:fa:49:98:40:d3:b3: ad:81:ad:b0:e2:ed:74:9d:8c:3b:04:0e:39:cc:25: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A2:2A:56:78:52:4E:27:A5:54:85:2F:74:38:B9:19:7C:9A:C5:0D X509v3 Authority Key Identifier: keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:31:8e:ae:9c:e5:a5:b0:e9:c1:3a:c0:16:dd:56:bb:55:c1: be:9b:d4:e8:58:8a:b4:2b:e6:4d:c0:4c:c9:8d:17:91:3f:8d: 42:e8:6c:a6:1c:94:ba:5d:97:c2:c0:f5:44:2b:7e:26:5d:e1: 91:5b:97:fe:0e:35:6b:6d:39:99:d3:41:14:77:de:3f:c7:84: e4:4e:ae:d2:10:08:52:f2:50:60:96:b5:7e:3e:ca:66:e4:3f: ff:90:9b:c7:61:ca:6b:43:13:6b:5a:15:96:9c:1e:6c:20:49: a5:3c:7d:f4:3e:75:b8:3b:30:2f:ff:e7:57:b9:a7:aa:50:67: 67:b1:4f:31:42:35:84:fa:df:3b:59:8d:1f:77:91:ea:4c:85: c4:82:cb:99:bf:d1:6b:59:9f:c2:48:37:5d:e9:de:a2:6c:1d: 90:42:43:c0:1d:b6:8a:5d:8b:34:60:bf:59:71:11:9b:c8:22: 0b:71:53:75:af:0f:6b:22:e7:ad:22:00:9f:9a:77:e8:94:79: cd:2c:27:e3:21:96:bb:b0:9c:6e:89:98:c3:bc:4b:75:57:98: a1:40:ae:f5:c8:a1:e9:bf:66:10:9a:66:f9:64:09:c0:58:f8: 4d:14:08:d2:90:d4:c2:53:2b:bd:d6:06:a0:dc:70:13:f1:6a: 67:db:cf:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu2NXkOiaPW0S+SUgDNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTNhNGZiMjY4MWRiMjhiNWMzZjVmMWQ0NmEyZDM1OTk2 MGZhYTQwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD EyhiMWEyMmE1Njc4NTI0ZTI3YTU1NDg1MmY3NDM4YjkxOTdjOWFjNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LIlhKqLU3UUcueROTxLzMOG1vaS okg7gpGnClE89ACIavbQhfK26FwT4xie8xOWifeXPpbPe4/pbasMhJ/5GxBh19OK EKXHsXnzRKeSMt95xlRlf7OI47wI6wnb0UFrOXUohlFa4qIEPiZZhn59hvNU8WUS m8jxYbTo4yyewBbTio2bJoGN8nWhJnFOWHKl5Nym62lmVTPaWUIdaWS9lGUHkfgu R4SCx51jgtOlr/2JE3rPTZad80zQPJvdz3GJYmpJO1TuD86KMH+u1rnACd86vzSc X3b02voPD4waRP9ZTdrYuogxWFX6SZhA07Otga2w4u10nYw7BA45zCUwtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGiKlZ4Uk4npVSFL3Q4uRl8msUNMB8GA1UdIwQY MBaAFL3jpPsmgdsotcP18dRqLTWZYPqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMt ODA4ZmVhYWY5ODdkLzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMtODA4ZmVhYWY5ODdk LzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjGOrpzl pbDpwTrAFt1Wu1XBvpvU6FiKtCvmTcBMyY0XkT+NQuhsphyUul2XwsD1RCt+Jl3h kVuX/g41a205mdNBFHfeP8eE5E6u0hAIUvJQYJa1fj7KZuQ//5Cbx2HKa0MTa1oV lpwebCBJpTx99D51uDswL//nV7mnqlBnZ7FPMUI1hPrfO1mNH3eR6kyFxILLmb/R a1mfwkg3XeneomwdkEJDwB22il2LNGC/WXERm8giC3FTda8PayLnrSIAn5p36JR5 zSwn4yGWu7CcbomYw7xLdVeYoUCu9cih6b9mEJpm+WQJwFj4TRQI0pDUwlMrvdYG oNxwE/FqZ9vPSA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:27 2025 by rpki-client