This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json) Hash identifier: afX6z5EdSzc6XgdIajaxLyparJmwXSgHuiikubHi11A= Subject key identifier: 2C:3A:D5:48:92:DF:7E:8F:D9:CE:EC:73:2F:76:42:8F:99:3F:5B:97 Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019B4513D9D398DAC657FC1414C2D842BB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 08:01:27 +0000 Manifest this update: Mon 22 Dec 2025 08:01:27 +0000 Manifest next update: Tue 23 Dec 2025 08:01:27 +0000 Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=) 2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: WsDULzBAKeWvLTwsmEhoxjU0rtVmInRif3lo1a9NgkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:d9:d3:98:da:c6:57:fc:14:14:c2:d8:42:bb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Dec 22 08:01:27 2025 GMT Not After : Dec 23 08:01:27 2025 GMT Subject: CN=2c3ad54892df7e8fd9ceec732f76428f993f5b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:0e:e4:65:c3:38:4b:15:62:f3:8f:fa:69: 1e:0c:d6:5d:e9:96:db:04:c2:9a:0d:e0:79:d3:d2: b9:d1:f0:a5:9d:86:4e:fc:7f:af:a0:d8:63:fa:e3: 08:c3:02:df:c0:13:4c:7b:69:4e:7c:1c:d3:96:2f: ca:c9:2f:c9:bf:23:d4:bb:60:15:dc:11:b6:af:02: f2:94:10:c0:d4:22:2e:0e:8f:a7:e3:41:aa:7c:1e: d6:8e:21:01:27:fb:e3:d2:a3:33:43:8e:6a:e5:40: 34:0b:16:ec:5c:85:5a:b7:0b:fb:55:77:12:cb:13: bc:cb:3b:b5:5a:2e:ee:9c:65:12:32:c7:2c:79:f3: aa:31:ad:c2:9f:40:4c:e5:c2:49:9b:1d:7a:bf:fe: 4a:9d:28:81:6f:9d:c2:9e:f0:51:9a:f6:d1:cd:66: db:6d:32:52:5c:e2:63:f5:ac:ff:51:1b:af:0a:9d: eb:b1:dc:03:b8:65:e5:d9:08:8f:e7:3a:27:f6:e0: 88:7e:ee:e2:d5:e7:65:e6:71:c7:80:ca:3c:cf:a4: 67:2e:98:c0:e8:e7:ae:b1:79:73:c8:14:61:20:cb: 03:2d:dc:66:0c:43:7f:6b:f0:5b:4a:ed:ae:79:ba: 44:9d:3a:03:b3:1f:25:7a:d2:b7:62:dc:d7:2c:06: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:D5:48:92:DF:7E:8F:D9:CE:EC:73:2F:76:42:8F:99:3F:5B:97 X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3d:94:ba:3e:8b:6e:e5:b6:a4:4b:24:cb:7b:f7:9a:bf:92: 80:c0:6a:28:ea:5f:69:f2:d4:47:4f:3a:d9:4b:16:e1:f6:49: 2e:87:da:22:c9:36:83:92:d2:43:e6:5a:da:2c:0e:b8:7c:db: 62:d8:36:95:af:ec:6c:f8:06:ce:a3:a5:5d:a5:71:57:ec:b4: 14:79:40:3e:27:4a:8d:e6:47:a7:85:b2:dd:47:2c:98:fc:72: 9c:6b:d8:3c:43:90:9c:85:71:f0:b8:ce:50:5b:6c:6c:73:26: 45:98:80:72:3a:8d:c0:33:9b:e5:09:d6:25:c0:c9:a7:31:12: e1:24:8a:25:07:0e:11:14:3e:70:36:4c:be:fc:1c:64:ca:d5: aa:87:e9:5b:d6:bd:25:cb:3d:8e:ad:c8:e7:f7:44:57:7b:6d: 11:cd:54:28:8f:da:8c:6d:0a:d1:c9:74:f7:5a:31:08:f0:ea: 59:89:eb:90:6e:3a:99:77:60:45:ae:f4:4d:09:bb:0e:5f:06: 6f:89:5c:b2:89:f2:3e:81:b6:78:4f:5c:3c:c9:33:b2:ff:56: 86:b5:84:3c:09:e8:b2:0b:54:5e:ca:c8:a9:c4:61:1c:89:b5: 99:d1:c1:c5:7f:a5:b1:9c:20:71:f4:66:3a:71:93:8c:2b:b2: da:79:0b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9nTmNrGV/wUFMLYQrt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjUxMjIyMDgwMTI3WhcNMjUxMjIzMDgwMTI3WjAzMTEwLwYDVQQD EygyYzNhZDU0ODkyZGY3ZThmZDljZWVjNzMyZjc2NDI4Zjk5M2Y1Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5sO5GXDOEsVYvOP+mkeDNZd6Zbb BMKaDeB509K50fClnYZO/H+voNhj+uMIwwLfwBNMe2lOfBzTli/KyS/JvyPUu2AV 3BG2rwLylBDA1CIuDo+n40GqfB7WjiEBJ/vj0qMzQ45q5UA0CxbsXIVatwv7VXcS yxO8yzu1Wi7unGUSMscsefOqMa3Cn0BM5cJJmx16v/5KnSiBb53CnvBRmvbRzWbb bTJSXOJj9az/URuvCp3rsdwDuGXl2QiP5zon9uCIfu7i1edl5nHHgMo8z6RnLpjA 6OeusXlzyBRhIMsDLdxmDEN/a/BbSu2uebpEnToDsx8letK3YtzXLAbs1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw61UiS336P2c7scy92Qo+ZP1uXMB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj2Uuj6L buW2pEsky3v3mr+SgMBqKOpfafLUR0862UsW4fZJLofaIsk2g5LSQ+Za2iwOuHzb Ytg2la/sbPgGzqOlXaVxV+y0FHlAPidKjeZHp4Wy3UcsmPxynGvYPEOQnIVx8LjO UFtsbHMmRZiAcjqNwDOb5QnWJcDJpzES4SSKJQcOERQ+cDZMvvwcZMrVqofpW9a9 Jcs9jq3I5/dEV3ttEc1UKI/ajG0K0cl091oxCPDqWYnrkG46mXdgRa70TQm7Dl8G b4lcsonyPoG2eE9cPMkzsv9WhrWEPAnosgtUXsrIqcRhHIm1mdHBxX+lsZwgcfRm OnGTjCuy2nkLYA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:39:02 2025 by rpki-client