This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json) Hash identifier: x6axvOxiGQGEFzCATn8Kpga/vtE7vJkk8tWKSM/Nd2E= Subject key identifier: C2:35:33:5D:FC:5D:1B:38:11:29:7B:3F:F9:CF:3D:C3:09:9D:10:76 Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019B3D59BBF0AE6BDB8C4A781C202CA0AFDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:00:49 +0000 Manifest this update: Sat 20 Dec 2025 20:00:49 +0000 Manifest next update: Sun 21 Dec 2025 20:00:49 +0000 Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=) 2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: 8L0M5W/1cfben8p1+2UTsG7wjY1MN0v7IJK/wkvofpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:bb:f0:ae:6b:db:8c:4a:78:1c:20:2c:a0:af:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Dec 20 20:00:49 2025 GMT Not After : Dec 21 20:00:49 2025 GMT Subject: CN=c235335dfc5d1b3811297b3ff9cf3dc3099d1076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:73:4d:87:a6:b4:2c:71:1c:a5:0d:de:97: bd:f3:fd:d0:6b:86:92:e2:cd:7d:30:6e:dc:2e:86: ad:5c:ea:fb:03:32:18:3c:59:0f:6d:64:7c:f9:fc: 8f:45:be:25:ae:34:b3:6e:36:38:3a:54:e6:6d:13: 6e:fa:e1:68:a2:6f:4f:88:df:ae:f1:f7:e9:51:93: fa:c2:60:6a:2e:59:d1:3c:c9:08:8f:46:ce:f0:ff: 8d:d8:96:6b:47:27:11:f9:98:6a:0d:97:3b:e4:fb: 8d:36:6e:78:90:0b:7f:a6:a2:1f:93:1b:88:86:3c: 3a:57:c8:1b:b3:15:54:24:0d:8f:64:d6:5a:03:53: c8:2a:08:79:49:d7:50:41:08:37:bc:2c:ad:77:fa: 77:7a:22:49:17:b1:b5:98:f4:36:72:06:73:1a:83: 3a:dd:44:9c:6b:23:fd:ca:99:a2:dc:5e:23:97:9d: 94:37:bc:4a:86:7f:f1:3c:fe:c0:c5:85:32:61:8b: d5:a0:a4:ba:1c:23:e8:f7:ac:a9:0b:c0:11:b3:ad: 0f:dd:14:d3:7b:3e:18:3d:4b:72:80:26:e7:99:6e: 60:5a:48:af:c8:97:b8:72:75:13:2e:96:04:92:2f: be:33:30:20:ec:ba:31:e0:7f:ff:a0:89:9c:60:fb: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:33:5D:FC:5D:1B:38:11:29:7B:3F:F9:CF:3D:C3:09:9D:10:76 X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:21:a5:c6:4e:aa:16:e7:a7:7f:dd:1a:fb:17:01:eb:e4:89: 51:65:be:d7:c9:35:0f:9b:ad:54:64:57:68:d5:65:3d:4d:b1: cb:10:cf:0f:7c:71:27:07:0f:e4:6e:7e:c0:54:31:18:96:bb: a5:e1:4c:dd:8d:2f:fb:43:92:5f:5e:b7:b1:32:e0:ec:8d:5a: 9f:00:06:0f:90:ec:df:8c:81:1f:24:6b:a7:64:39:2b:54:b0: 84:50:cd:90:50:00:70:7d:2d:31:66:b8:8f:ea:19:a5:e0:89: 01:12:c2:4c:3b:33:3d:d0:2a:25:77:ee:f2:03:5a:03:31:f1: a4:9e:92:8f:91:5f:d6:ad:f9:94:ab:72:b7:72:59:b0:e0:00: 3b:19:10:2c:96:87:22:17:ad:8d:38:48:6b:38:3d:68:51:66: b6:e6:58:9e:fc:7c:ae:7f:24:99:02:53:25:91:ce:a6:2a:78: be:c0:a1:47:3d:a8:93:e5:30:27:82:4a:b4:eb:43:54:e2:21: 0e:85:c7:2d:d4:db:d0:6e:96:19:42:4a:77:24:61:ca:70:d1: 90:28:cc:d2:49:33:14:78:c2:b3:5b:13:77:19:85:3e:61:b9: da:b6:3e:31:8a:6a:3f:06:67:68:97:15:dd:76:2e:d2:01:59: 86:94:34:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbvwrmvbjEp4HCAsoK/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjUxMjIwMjAwMDQ5WhcNMjUxMjIxMjAwMDQ5WjAzMTEwLwYDVQQD EyhjMjM1MzM1ZGZjNWQxYjM4MTEyOTdiM2ZmOWNmM2RjMzA5OWQxMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wBzTYemtCxxHKUN3pe98/3Qa4aS 4s19MG7cLoatXOr7AzIYPFkPbWR8+fyPRb4lrjSzbjY4OlTmbRNu+uFoom9PiN+u 8ffpUZP6wmBqLlnRPMkIj0bO8P+N2JZrRycR+ZhqDZc75PuNNm54kAt/pqIfkxuI hjw6V8gbsxVUJA2PZNZaA1PIKgh5SddQQQg3vCytd/p3eiJJF7G1mPQ2cgZzGoM6 3UScayP9ypmi3F4jl52UN7xKhn/xPP7AxYUyYYvVoKS6HCPo96ypC8ARs60P3RTT ez4YPUtygCbnmW5gWkivyJe4cnUTLpYEki++MzAg7Lox4H//oImcYPsphwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI1M138XRs4ESl7P/nPPcMJnRB2MB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCGlxk6q Fuenf90a+xcB6+SJUWW+18k1D5utVGRXaNVlPU2xyxDPD3xxJwcP5G5+wFQxGJa7 peFM3Y0v+0OSX163sTLg7I1anwAGD5Ds34yBHyRrp2Q5K1SwhFDNkFAAcH0tMWa4 j+oZpeCJARLCTDszPdAqJXfu8gNaAzHxpJ6Sj5Ff1q35lKtyt3JZsOAAOxkQLJaH IhetjThIazg9aFFmtuZYnvx8rn8kmQJTJZHOpip4vsChRz2ok+UwJ4JKtOtDVOIh DoXHLdTb0G6WGUJKdyRhynDRkCjM0kkzFHjCs1sTdxmFPmG52rY+MYpqPwZnaJcV 3XYu0gFZhpQ0hA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:31 2025 by rpki-client