This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json) Hash identifier: rmZADLthwHvGmClNsdy32iqXEQyY6L/WhR62BpBZIvk= Subject key identifier: B1:18:C5:DA:8E:A8:12:7D:18:62:3C:73:12:5F:EE:FE:4B:D2:11:B5 Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43 Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143 Certificate serial: 019B405C898BA5870EE44A510E1E2E1DF789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft Manifest number: 0BAF Signing time: Sun 21 Dec 2025 10:02:44 +0000 Manifest this update: Sun 21 Dec 2025 10:02:44 +0000 Manifest next update: Mon 22 Dec 2025 10:02:44 +0000 Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=) 2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: 3q67uRaAv/eF65ozdHB2zLmC0/1tlVe2EXWtx39cx38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:89:8b:a5:87:0e:e4:4a:51:0e:1e:2e:1d:f7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143 Validity Not Before: Dec 21 10:02:44 2025 GMT Not After : Dec 22 10:02:44 2025 GMT Subject: CN=b118c5da8ea8127d18623c73125feefe4bd211b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:92:36:1a:67:d8:7b:31:a4:c5:7e:cf:45: db:08:03:f6:29:72:f6:dd:1f:7f:64:03:7b:57:b4: ed:71:1d:7e:60:af:7c:cd:d4:82:d3:58:dc:27:97: 90:2a:83:94:97:11:42:6e:10:95:6c:ee:19:c2:61: 49:e9:f3:fb:98:5c:e2:bd:dc:58:89:bd:5b:14:50: 52:4c:6a:a7:56:9c:b4:4b:69:59:00:c6:0a:7a:4d: d1:c8:40:fa:a9:3a:b2:8b:e7:09:7a:af:b8:0e:67: 8d:25:20:cc:d8:63:9b:db:71:42:84:cf:01:47:24: 57:44:7e:94:f0:ec:d9:9c:52:6b:66:b2:48:3f:ab: 9e:a4:b2:95:a2:9e:de:f6:f8:0f:21:04:d3:d0:fd: a4:41:99:21:b3:d4:83:29:53:63:d8:f5:5b:b0:72: 54:18:f1:09:e0:a1:10:d5:e4:eb:a2:0b:28:59:f4: 65:b2:25:c6:b0:48:67:42:2b:86:e3:16:13:67:93: f8:7c:aa:60:64:a8:98:c1:24:1c:91:a2:ee:12:f3: 99:72:23:55:75:c6:6d:ef:10:87:d2:1d:1d:6f:8b: 5b:f7:d6:56:de:ed:46:ce:e1:65:db:c8:7a:36:8d: c8:17:8e:12:97:0f:58:9a:cb:57:5f:11:11:65:e2: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:C5:DA:8E:A8:12:7D:18:62:3C:73:12:5F:EE:FE:4B:D2:11:B5 X509v3 Authority Key Identifier: keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:03:0d:55:01:29:cb:ba:17:ed:dc:14:8d:59:ce:43:3d:96: cb:7b:dd:85:2a:aa:5d:6c:3a:ff:72:56:25:0f:a0:31:98:9b: 1b:11:93:25:1d:38:49:2e:b9:9e:a7:47:bc:4e:d8:28:88:1d: 36:20:e3:89:ae:92:4b:5b:e2:8a:9b:7a:c3:00:f0:85:56:0d: ed:90:58:6a:d6:a9:5d:d3:f5:ed:de:28:fb:1c:a9:7e:c4:ca: e9:f5:38:59:0c:c3:28:17:c2:40:fc:62:4a:7c:00:e2:6d:b3: a9:2a:c0:7c:86:d7:87:71:e3:95:20:3a:96:4e:0b:6f:56:58: 5a:bb:14:3e:93:53:36:74:e9:04:dd:ec:19:be:b8:a7:95:a3: 15:42:0c:fe:c0:93:fb:96:eb:42:c2:09:b4:2b:cd:e3:b2:11: 31:f1:ca:9c:50:6e:fe:93:f4:a5:a0:8d:6f:e4:7b:33:18:88: 63:fa:c5:8f:7d:64:22:a8:92:a1:f8:76:91:b7:cf:73:00:72: d5:33:db:56:90:63:bf:6b:06:f4:fa:16:3b:49:49:e3:fc:b0: cd:eb:80:a4:d2:5d:c0:df:db:b3:55:17:d2:c4:23:28:ff:48: a9:37:ae:1c:fd:5d:c1:2e:18:5f:47:36:8c:20:23:1f:33:f2: 56:75:04:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXImLpYcO5EpRDh4uHfeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3 MjExNDMwHhcNMjUxMjIxMTAwMjQ0WhcNMjUxMjIyMTAwMjQ0WjAzMTEwLwYDVQQD EyhiMTE4YzVkYThlYTgxMjdkMTg2MjNjNzMxMjVmZWVmZTRiZDIxMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbGSNhpn2HsxpMV+z0XbCAP2KXL2 3R9/ZAN7V7TtcR1+YK98zdSC01jcJ5eQKoOUlxFCbhCVbO4ZwmFJ6fP7mFzivdxY ib1bFFBSTGqnVpy0S2lZAMYKek3RyED6qTqyi+cJeq+4DmeNJSDM2GOb23FChM8B RyRXRH6U8OzZnFJrZrJIP6uepLKVop7e9vgPIQTT0P2kQZkhs9SDKVNj2PVbsHJU GPEJ4KEQ1eTrogsoWfRlsiXGsEhnQiuG4xYTZ5P4fKpgZKiYwSQckaLuEvOZciNV dcZt7xCH0h0db4tb99ZW3u1GzuFl28h6No3IF44Slw9YmstXXxERZeIvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEYxdqOqBJ9GGI8cxJf7v5L0hG1MB8GA1UdIwQY MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5 LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawMNVQEp y7oX7dwUjVnOQz2Wy3vdhSqqXWw6/3JWJQ+gMZibGxGTJR04SS65nqdHvE7YKIgd NiDjia6SS1viipt6wwDwhVYN7ZBYatapXdP17d4o+xypfsTK6fU4WQzDKBfCQPxi SnwA4m2zqSrAfIbXh3HjlSA6lk4Lb1ZYWrsUPpNTNnTpBN3sGb64p5WjFUIM/sCT +5brQsIJtCvN47IRMfHKnFBu/pP0paCNb+R7MxiIY/rFj31kIqiSofh2kbfPcwBy 1TPbVpBjv2sG9PoWO0lJ4/ywzeuApNJdwN/bs1UX0sQjKP9IqTeuHP1dwS4YX0c2 jCAjHzPyVnUEpA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:15 2025 by rpki-client