This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json) Hash identifier: UXMu/Ir7FJSmUxuRCtYlpQ0rHhuWuYOz5KjWZiDqAaU= Subject key identifier: E1:38:71:9F:82:5F:D2:02:5F:F9:56:3A:53:66:4A:6F:D4:28:92:D8 Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f Certificate serial: 019B2F675445E83F8F076F4D13F3E73E1E1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft Manifest number: 0B24 Signing time: Thu 18 Dec 2025 03:00:59 +0000 Manifest this update: Thu 18 Dec 2025 03:00:59 +0000 Manifest next update: Fri 19 Dec 2025 03:00:59 +0000 Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: Zs3ta2jezZ74grUMfoecQxq+1LeOAe5i8ZuL3dATEAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:54:45:e8:3f:8f:07:6f:4d:13:f3:e7:3e:1e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f Validity Not Before: Dec 18 03:00:59 2025 GMT Not After : Dec 19 03:00:59 2025 GMT Subject: CN=e138719f825fd2025ff9563a53664a6fd42892d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:25:69:eb:d0:8d:3a:58:12:a4:82:6d:f0: b9:89:19:cb:d9:82:3f:52:ef:d3:93:40:00:5b:ec: 5f:97:e5:b7:2b:65:20:be:f2:a5:7f:fc:3f:b8:46: 01:ae:31:8b:0d:b4:cb:e3:a1:89:01:44:a4:88:ad: cf:75:5b:52:69:37:d2:a7:69:50:2c:77:1d:a7:92: b0:df:9e:60:65:18:93:a9:32:c7:34:72:8a:99:32: 61:88:9c:53:5a:89:39:fb:f1:67:79:a8:30:a0:06: 02:b3:29:b4:03:c7:92:ac:15:64:84:1d:f0:90:09: 6f:13:37:a9:66:a8:6c:59:2f:e8:b7:2f:a6:2e:3e: 9e:23:c3:e3:73:ae:65:d8:68:f8:0a:04:bb:9f:41: af:de:c6:f0:2c:68:dc:e4:ef:c3:e6:57:f8:40:c6: d0:ae:e3:ca:83:29:46:d8:2f:f9:d9:ee:bb:94:34: d6:3e:5f:d8:4c:45:67:6f:99:4a:4e:af:61:ad:a9: 89:3f:36:a3:09:aa:c1:3f:93:a6:f4:02:c8:9d:ae: a5:02:00:05:e1:05:9e:9e:49:e5:31:e6:77:b0:84: 2a:15:59:29:d6:0e:b4:29:bb:4f:c6:67:4d:03:07: 88:b2:68:77:7d:5c:fb:6b:ec:df:f8:33:79:06:a1: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:38:71:9F:82:5F:D2:02:5F:F9:56:3A:53:66:4A:6F:D4:28:92:D8 X509v3 Authority Key Identifier: keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:bc:52:6c:b7:d0:a1:4b:03:21:87:c8:7e:f2:a2:68:a8: 4a:f5:20:be:92:f2:2b:32:f4:20:01:ab:f3:55:8c:ec:49:eb: 4a:d7:8f:1b:d7:cb:73:77:e3:d3:8b:66:ed:a5:a2:cc:db:12: b6:e7:14:d2:de:97:a0:8c:08:f9:e0:cb:d1:ab:25:46:55:61: f8:dd:dd:33:99:bb:8b:a5:5d:29:81:8b:a1:34:b6:6a:a4:09: 96:26:8f:2f:32:28:05:c9:c1:29:c9:ac:8a:03:c2:99:f6:5a: 7d:30:1c:34:2f:08:c0:0d:e6:44:53:fd:37:d0:da:85:20:8e: 70:cf:40:be:74:5a:d7:1c:14:49:6b:4d:76:48:d8:cd:6d:1e: ea:e6:de:f4:07:1b:8d:1a:74:8f:12:09:74:df:23:14:51:51: c7:c4:a3:7d:ff:f3:5c:b1:ed:e7:e9:c0:0c:13:fb:8c:9c:61: 00:2f:33:fa:b3:fe:04:76:73:20:b1:b1:f4:83:47:d6:81:f2: 08:81:bc:e4:4d:72:39:b9:f3:bc:3f:08:fa:6b:76:4d:8c:b3: 13:d9:30:44:11:71:3f:84:31:b5:8e:07:7f:50:e1:fb:24:c4: 87:0f:36:18:20:5f:f6:28:52:e4:e8:11:bf:8d:e4:ef:91:3c: bb:a0:9e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ1RF6D+PB29NE/PnPh4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw NGIwMWYwHhcNMjUxMjE4MDMwMDU5WhcNMjUxMjE5MDMwMDU5WjAzMTEwLwYDVQQD EyhlMTM4NzE5ZjgyNWZkMjAyNWZmOTU2M2E1MzY2NGE2ZmQ0Mjg5MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uMlaevQjTpYEqSCbfC5iRnL2YI/ Uu/Tk0AAW+xfl+W3K2UgvvKlf/w/uEYBrjGLDbTL46GJAUSkiK3PdVtSaTfSp2lQ LHcdp5Kw355gZRiTqTLHNHKKmTJhiJxTWok5+/FneagwoAYCsym0A8eSrBVkhB3w kAlvEzepZqhsWS/oty+mLj6eI8Pjc65l2Gj4CgS7n0Gv3sbwLGjc5O/D5lf4QMbQ ruPKgylG2C/52e67lDTWPl/YTEVnb5lKTq9hramJPzajCarBP5Om9ALIna6lAgAF 4QWenknlMeZ3sIQqFVkp1g60KbtPxmdNAweIsmh3fVz7a+zf+DN5BqE0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE4cZ+CX9ICX/lWOlNmSm/UKJLYMB8GA1UdIwQY MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKK8Umy3 0KFLAyGHyH7yomioSvUgvpLyKzL0IAGr81WM7EnrStePG9fLc3fj04tm7aWizNsS tucU0t6XoIwI+eDL0aslRlVh+N3dM5m7i6VdKYGLoTS2aqQJliaPLzIoBcnBKcms igPCmfZafTAcNC8IwA3mRFP9N9DahSCOcM9AvnRa1xwUSWtNdkjYzW0e6ube9Acb jRp0jxIJdN8jFFFRx8Sjff/zXLHt5+nADBP7jJxhAC8z+rP+BHZzILGx9INH1oHy CIG85E1yObnzvD8I+mt2TYyzE9kwRBFxP4QxtY4Hf1Dh+yTEhw82GCBf9ihS5OgR v43k75E8u6CeNg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:54 2025 by rpki-client