This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json) Hash identifier: WLHXSC+iVDhYySVWEoNiqbnr6gtymbUSxzhLsqk8gd8= Subject key identifier: F9:BF:5C:42:A7:32:BA:15:29:B5:7C:29:48:7A:66:93:12:6B:19:95 Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Certificate serial: 019B3C7DC01B9628DD28503235DAD954D684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft Manifest number: 0FC8 Signing time: Sat 20 Dec 2025 16:00:32 +0000 Manifest this update: Sat 20 Dec 2025 16:00:32 +0000 Manifest next update: Sun 21 Dec 2025 16:00:32 +0000 Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=) 2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 14MyNWVgiHDY9GKCun8d8OPhSKDMKD6WXUw4e8Ula20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c0:1b:96:28:dd:28:50:32:35:da:d9:54:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Validity Not Before: Dec 20 16:00:32 2025 GMT Not After : Dec 21 16:00:32 2025 GMT Subject: CN=f9bf5c42a732ba1529b57c29487a6693126b1995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:cd:ab:e8:ad:63:84:95:ef:70:0d:a8:21: 3f:3a:4b:ab:e3:5b:ca:c9:32:09:35:c2:85:e7:39: 54:ba:11:0e:f3:2c:f4:a2:9f:0f:f4:ea:f6:d7:b1: 8f:76:b8:be:4f:52:e0:da:33:bb:4a:48:ad:de:a4: df:6d:fa:52:8b:20:82:27:07:45:87:33:72:30:7c: ac:1a:4d:6c:6d:61:45:b6:e0:b7:67:6f:83:47:02: a5:ed:b7:00:79:37:78:c3:e3:58:ec:76:e4:7a:1d: 65:ba:c1:b1:69:4f:12:72:8c:cb:57:8e:07:5e:54: 68:5d:e3:0e:62:bd:63:c4:c9:84:3c:96:a6:b9:3c: 2a:c7:d0:28:4f:ff:e1:95:98:69:cd:21:ce:60:65: d6:0c:4c:75:8f:21:7e:d4:31:78:8d:7e:d1:38:91: 2c:77:4e:7b:23:8c:c1:d0:d9:23:e0:77:e5:4c:a5: 85:f3:a8:25:57:82:36:b8:fe:80:33:69:95:f6:f9: 88:13:ef:80:00:16:20:fe:58:e7:f2:97:31:1e:ca: f1:58:38:6a:51:cb:59:0b:a3:d8:2d:fb:a7:2b:7f: 70:f7:88:b4:b0:93:89:06:7c:74:d7:73:83:be:03: ab:65:4c:7f:8a:54:18:26:dc:40:95:a7:94:48:50: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BF:5C:42:A7:32:BA:15:29:B5:7C:29:48:7A:66:93:12:6B:19:95 X509v3 Authority Key Identifier: keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cb:11:da:51:d4:81:a1:47:e6:ea:c2:e3:e1:2a:4a:a8:35: af:3e:3b:af:74:13:bd:00:7c:2b:7b:ff:e1:7d:e8:dc:1f:37: 0d:69:13:ed:0b:50:de:c0:bc:b8:52:4b:4f:a9:37:5a:10:58: b7:60:d1:39:0b:31:26:71:77:3f:33:25:5f:cd:13:97:a5:04: 31:c8:8f:7c:0b:86:5d:f1:e1:4f:fd:2b:be:25:6b:59:f9:9c: c0:5b:bf:20:31:42:86:60:68:44:85:2f:35:32:3a:40:8e:b3: 91:7e:a5:9a:d5:99:bc:0c:47:c9:f9:e7:65:af:6d:77:4d:ec: ee:b9:cf:b1:58:ea:b9:0b:33:68:22:87:96:b7:3d:98:c2:d6: a4:f3:03:a5:3c:f3:97:20:ef:17:37:a7:27:0b:a1:4f:9c:e7: e5:8c:1b:5c:6d:22:69:97:ba:7c:9c:9c:4e:9c:1b:30:94:c1: 13:d0:93:e7:4a:a0:7a:a1:cb:ed:d8:12:40:6e:42:c4:78:d2: 34:03:35:2f:7a:71:e3:2a:81:0f:bd:f0:64:c3:c0:73:b3:0c: 93:c9:76:9c:87:a4:e3:5a:36:22:fb:47:a9:22:45:42:3a:ea: c1:02:cf:64:02:92:a3:4d:c4:ad:6e:2c:10:04:31:7c:8d:75: c6:c7:3a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcAblijdKFAyNdrZVNaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4 NWFiNjQwHhcNMjUxMjIwMTYwMDMyWhcNMjUxMjIxMTYwMDMyWjAzMTEwLwYDVQQD EyhmOWJmNWM0MmE3MzJiYTE1MjliNTdjMjk0ODdhNjY5MzEyNmIxOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmXNq+itY4SV73ANqCE/Okur41vK yTIJNcKF5zlUuhEO8yz0op8P9Or217GPdri+T1Lg2jO7Skit3qTfbfpSiyCCJwdF hzNyMHysGk1sbWFFtuC3Z2+DRwKl7bcAeTd4w+NY7Hbkeh1lusGxaU8ScozLV44H XlRoXeMOYr1jxMmEPJamuTwqx9AoT//hlZhpzSHOYGXWDEx1jyF+1DF4jX7ROJEs d057I4zB0Nkj4HflTKWF86glV4I2uP6AM2mV9vmIE++AABYg/ljn8pcxHsrxWDhq UctZC6PYLfunK39w94i0sJOJBnx013ODvgOrZUx/ilQYJtxAlaeUSFAtFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm/XEKnMroVKbV8KUh6ZpMSaxmVMB8GA1UdIwQY MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt MzE3NmYwOTk5ZGRhLzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMsR2lHU gaFH5urC4+EqSqg1rz47r3QTvQB8K3v/4X3o3B83DWkT7QtQ3sC8uFJLT6k3WhBY t2DROQsxJnF3PzMlX80Tl6UEMciPfAuGXfHhT/0rviVrWfmcwFu/IDFChmBoRIUv NTI6QI6zkX6lmtWZvAxHyfnnZa9td03s7rnPsVjquQszaCKHlrc9mMLWpPMDpTzz lyDvFzenJwuhT5zn5YwbXG0iaZe6fJycTpwbMJTBE9CT50qgeqHL7dgSQG5CxHjS NAM1L3px4yqBD73wZMPAc7MMk8l2nIek41o2IvtHqSJFQjrqwQLPZAKSo03ErW4s EAQxfI11xsc6dw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:58 2025 by rpki-client