This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json) Hash identifier: +bWuyC+0LeygCA0EYXqRcLJPfEMEQZr3rCIp8frmIgU= Subject key identifier: 8C:EE:F4:75:2F:F2:62:9E:67:BA:12:DB:90:AF:F5:DD:E0:AC:66:13 Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1 Certificate serial: 019B6A697394DD1C820DFEBE62032316B92B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 14:00:54 +0000 Manifest this update: Mon 29 Dec 2025 14:00:54 +0000 Manifest next update: Tue 30 Dec 2025 14:00:54 +0000 Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=) 2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=) 3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: ECrL2ppnrzMydjcUrx7fC3ZxRB3j2nc7whcI3N4uxt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:73:94:dd:1c:82:0d:fe:be:62:03:23:16:b9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1 Validity Not Before: Dec 29 14:00:54 2025 GMT Not After : Dec 30 14:00:54 2025 GMT Subject: CN=8ceef4752ff2629e67ba12db90aff5dde0ac6613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:d6:e7:84:36:4f:4d:fc:21:69:88:5b:04: 77:8d:1c:ae:90:b4:72:e9:d1:59:a2:b9:6c:8d:f6: 32:7d:b8:26:3c:7c:13:c2:d1:48:e1:d0:13:58:d8: d9:ad:f6:09:29:a6:9d:13:5a:91:21:63:76:2d:25: 74:33:bb:44:8c:e2:10:2f:5a:52:a7:e1:54:0f:a3: af:b2:91:e0:d7:63:89:0a:67:5a:a6:ea:ec:98:cd: b3:2f:92:1e:7a:3d:22:cd:3e:61:a3:26:ee:ab:fe: c8:7b:72:74:49:38:32:13:04:6b:54:d3:5e:b7:a6: 85:e4:5e:f5:ac:60:c1:bf:46:01:36:65:4d:d5:c3: 23:80:26:77:d4:4e:d9:b1:4b:19:ce:17:c8:b9:86: 70:7c:3a:83:58:c7:2b:97:4e:d7:be:bf:c1:ef:82: 36:1a:d3:ad:34:d2:d5:57:fe:30:57:a7:13:22:28: a9:72:3b:e3:06:6c:e6:1f:01:a8:b0:2d:0f:79:bc: fc:10:91:4a:cd:25:31:83:d3:ea:d7:ee:df:c6:2e: e3:36:76:16:13:3a:3f:1d:f5:45:13:e3:07:d8:d1: dc:82:9e:af:eb:e7:41:77:95:a6:b0:3f:df:e6:fc: c4:75:77:19:28:98:73:0b:4a:3c:c1:a8:9f:66:3f: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EE:F4:75:2F:F2:62:9E:67:BA:12:DB:90:AF:F5:DD:E0:AC:66:13 X509v3 Authority Key Identifier: keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:73:f7:50:f5:9b:a4:1c:c6:e9:bd:2c:51:a9:a3:de:80:1a: b3:cf:ab:61:2b:bb:81:3e:89:36:71:a6:88:41:ce:27:c3:8b: f6:2a:a1:8c:18:54:bf:60:f9:1a:e4:ca:e1:8e:a7:8e:26:22: 01:99:6a:e1:cf:77:2e:96:3f:0e:6c:c6:9e:56:a6:8c:03:db: 77:58:03:5c:b8:3e:2f:a2:dc:da:10:b3:53:59:87:f6:56:eb: 6f:b2:8c:03:a2:b8:1d:5c:1d:1b:23:0b:3e:ec:f3:70:21:77: 2c:3b:0d:59:e7:12:4a:d3:f0:a0:06:d8:cd:b3:42:6c:90:df: f7:46:da:a6:52:83:23:ce:62:41:7e:a8:4a:b7:94:8e:71:5d: b4:76:f5:c1:b5:9e:8e:a2:39:54:bd:64:90:69:af:ca:72:01: 37:d1:69:0d:e1:93:e3:55:70:d7:10:c9:11:b1:2f:05:7c:89: ea:f9:79:8f:12:3d:0e:1a:3e:58:b9:b2:54:6a:94:7b:3b:1e: 97:0c:5d:aa:fb:9b:96:7c:ce:ca:51:32:0a:a1:d1:98:fc:88: a1:8d:4c:54:5d:e1:5d:8a:2a:1c:b0:01:4e:28:b0:69:08:d1: b4:3c:33:ce:d7:3a:29:81:6f:10:81:57:d8:00:fb:5c:e9:b7: d6:70:4c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaXOU3RyCDf6+YgMjFrkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw NzAyYzEwHhcNMjUxMjI5MTQwMDU0WhcNMjUxMjMwMTQwMDU0WjAzMTEwLwYDVQQD Eyg4Y2VlZjQ3NTJmZjI2MjllNjdiYTEyZGI5MGFmZjVkZGUwYWM2NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4/W54Q2T038IWmIWwR3jRyukLRy 6dFZorlsjfYyfbgmPHwTwtFI4dATWNjZrfYJKaadE1qRIWN2LSV0M7tEjOIQL1pS p+FUD6OvspHg12OJCmdapursmM2zL5Ieej0izT5hoybuq/7Ie3J0STgyEwRrVNNe t6aF5F71rGDBv0YBNmVN1cMjgCZ31E7ZsUsZzhfIuYZwfDqDWMcrl07Xvr/B74I2 GtOtNNLVV/4wV6cTIiipcjvjBmzmHwGosC0Pebz8EJFKzSUxg9Pq1+7fxi7jNnYW Ezo/HfVFE+MH2NHcgp6v6+dBd5WmsD/f5vzEdXcZKJhzC0o8waifZj82AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzu9HUv8mKeZ7oS25Cv9d3grGYTMB8GA1UdIwQY MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3P3UPWb pBzG6b0sUamj3oAas8+rYSu7gT6JNnGmiEHOJ8OL9iqhjBhUv2D5GuTK4Y6njiYi AZlq4c93LpY/DmzGnlamjAPbd1gDXLg+L6Lc2hCzU1mH9lbrb7KMA6K4HVwdGyML PuzzcCF3LDsNWecSStPwoAbYzbNCbJDf90baplKDI85iQX6oSreUjnFdtHb1wbWe jqI5VL1kkGmvynIBN9FpDeGT41Vw1xDJEbEvBXyJ6vl5jxI9Dho+WLmyVGqUezse lwxdqvublnzOylEyCqHRmPyIoY1MVF3hXYoqHLABTiiwaQjRtDwzztc6KYFvEIFX 2AD7XOm31nBMKA== -----END CERTIFICATE-----Generated at Mon Dec 29 16:27:49 2025 by rpki-client