This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json) Hash identifier: xksWupmdJCTlADo1mgm0zUUNhIErH43ex3fTHXzOM+I= Subject key identifier: 0A:4D:5E:13:64:43:56:4A:E1:AE:2B:47:D3:D1:1E:5B:09:2F:62:16 Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42 Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442 Certificate serial: 019B657A8DE4174016B89FE1FBB1527112B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft Manifest number: 179A Signing time: Sun 28 Dec 2025 15:01:29 +0000 Manifest this update: Sun 28 Dec 2025 15:01:29 +0000 Manifest next update: Mon 29 Dec 2025 15:01:29 +0000 Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: pbPrllF26gQ3tqPsBizBUTr6lZhDIRmkIlGErIRTOEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:8d:e4:17:40:16:b8:9f:e1:fb:b1:52:71:12:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442 Validity Not Before: Dec 28 15:01:29 2025 GMT Not After : Dec 29 15:01:29 2025 GMT Subject: CN=0a4d5e136443564ae1ae2b47d3d11e5b092f6216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:e2:a2:26:c6:1b:d2:9e:4a:18:3f:36:0f: 7e:c4:84:0e:c6:11:c5:04:30:42:13:ea:e1:12:2c: e0:4c:40:13:51:73:a5:24:20:f1:4f:bd:4d:79:19: 46:fe:f6:bf:64:10:c1:f7:54:b6:13:a5:3d:02:0b: cd:b1:63:25:fe:35:46:0a:d6:07:48:1b:a5:46:65: b9:9a:23:81:26:57:86:8b:79:ad:92:f1:ee:8e:18: e3:38:b8:49:96:f6:5a:8b:70:e5:f8:52:e1:02:17: 38:5c:7a:89:45:dd:a1:a2:ae:67:d4:e9:33:3c:ef: bd:fa:00:2d:54:37:7f:69:5b:53:95:49:55:34:74: cb:92:8b:c2:55:23:0e:b5:d3:b1:55:8e:5c:e2:df: c9:61:8d:cc:57:65:19:4c:2a:ee:1c:04:15:3b:14: e3:72:d3:bf:c0:9f:29:86:ec:0b:38:48:65:b4:0e: 8e:33:94:28:e0:45:a3:19:27:1b:8d:f0:cd:bd:86: 43:26:25:38:c4:70:aa:99:72:f5:99:a6:53:fe:38: 43:9c:6d:6b:ce:d9:4d:c8:7b:f2:5f:c4:68:6c:41: 19:30:1c:1d:9e:08:cd:7b:a7:fd:52:0b:56:53:ac: 79:e3:40:1e:7f:14:1c:7a:bc:f0:10:02:b1:86:8c: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:5E:13:64:43:56:4A:E1:AE:2B:47:D3:D1:1E:5B:09:2F:62:16 X509v3 Authority Key Identifier: keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b8:93:6d:03:41:42:1a:b8:f4:19:49:c0:4e:c2:d0:6e:e4: 83:99:17:e6:4f:e6:11:ec:0c:c6:35:82:73:0e:c4:1f:5b:a4: c2:0f:b9:c1:55:a3:d6:42:f0:14:84:51:b6:47:fd:68:00:fb: a2:f2:3f:66:dc:62:26:b6:0e:9c:9a:40:a7:3c:37:c5:e4:e9: 1e:77:31:62:52:24:cb:5f:64:be:9a:80:49:4c:36:33:ee:10: e0:63:80:d0:3b:3c:0d:43:43:f8:db:23:72:0f:15:ba:24:d7: 90:e1:34:4e:01:1d:22:b3:9a:b3:30:d9:35:80:2b:ea:15:bf: 76:d3:e0:09:9f:15:72:06:fa:91:1c:bb:07:fa:03:53:74:ac: 0d:af:b4:37:ec:5f:24:0d:58:f4:f8:5b:4b:29:d4:2f:88:31: 33:73:36:62:11:73:01:09:0b:23:d2:6f:0b:92:0d:91:2e:91: 49:e5:a2:d0:29:bd:7b:21:52:e1:95:ae:e5:eb:2c:59:e6:84: 7d:ec:30:9a:69:61:7b:84:ee:a6:f0:9f:f3:ad:8b:84:22:81: ba:df:e0:c2:99:70:00:98:d3:34:87:ef:d2:8a:ab:00:39:1d: ae:88:24:0b:e3:4f:b5:8c:51:fa:5e:9b:f3:65:ea:25:c3:96: 56:d2:ff:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtleo3kF0AWuJ/h+7FScRKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTU5NGUzNDZmMTRkMDk4M2MxYTZiZjRiYjVjNzE0ZmY5 Yjg0NDIwHhcNMjUxMjI4MTUwMTI5WhcNMjUxMjI5MTUwMTI5WjAzMTEwLwYDVQQD EygwYTRkNWUxMzY0NDM1NjRhZTFhZTJiNDdkM2QxMWU1YjA5MmY2MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+HioibGG9KeShg/Ng9+xIQOxhHF BDBCE+rhEizgTEATUXOlJCDxT71NeRlG/va/ZBDB91S2E6U9AgvNsWMl/jVGCtYH SBulRmW5miOBJleGi3mtkvHujhjjOLhJlvZai3Dl+FLhAhc4XHqJRd2hoq5n1Okz PO+9+gAtVDd/aVtTlUlVNHTLkovCVSMOtdOxVY5c4t/JYY3MV2UZTCruHAQVOxTj ctO/wJ8phuwLOEhltA6OM5Qo4EWjGScbjfDNvYZDJiU4xHCqmXL1maZT/jhDnG1r ztlNyHvyX8RobEEZMBwdngjNe6f9UgtWU6x540AefxQcerzwEAKxhozYvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApNXhNkQ1ZK4a4rR9PRHlsJL2IWMB8GA1UdIwQY MBaAFL3llONG8U0Jg8Gmv0u1xxT/m4RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUt YzdhMzY2YjkxZjQzLzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUtYzdhMzY2YjkxZjQz LzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoriTbQNB Qhq49BlJwE7C0G7kg5kX5k/mEewMxjWCcw7EH1ukwg+5wVWj1kLwFIRRtkf9aAD7 ovI/ZtxiJrYOnJpApzw3xeTpHncxYlIky19kvpqASUw2M+4Q4GOA0Ds8DUND+Nsj cg8VuiTXkOE0TgEdIrOaszDZNYAr6hW/dtPgCZ8Vcgb6kRy7B/oDU3SsDa+0N+xf JA1Y9PhbSynUL4gxM3M2YhFzAQkLI9JvC5INkS6RSeWi0Cm9eyFS4ZWu5essWeaE fewwmmlhe4TupvCf862LhCKBut/gwplwAJjTNIfv0oqrADkdrogkC+NPtYxR+l6b 82XqJcOWVtL/Rg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:58 2025 by rpki-client