This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json) Hash identifier: dO8Rml9nbJH2tcfDeKbjXDljGhKHpX2vCKzqHtqWBIo= Subject key identifier: 91:F3:07:59:45:D8:44:F5:FD:3E:84:99:EC:D1:BD:C8:26:0F:D4:86 Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Certificate serial: 019B3E357572CE70C7820610AE4873F4337C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft Manifest number: 05BF Signing time: Sun 21 Dec 2025 00:00:49 +0000 Manifest this update: Sun 21 Dec 2025 00:00:49 +0000 Manifest next update: Mon 22 Dec 2025 00:00:49 +0000 Files and hashes: 1: 0lKYtxr1N69uuVTtKw9J4CN3Eb8.roa (hash: MtKKDqEwQK8oLNrI5q7cgTy3r/JPJS+wfQHFJIbjFJ8=) 2: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=) 3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: ypAPYQuNrjuOUQtpv2hoeUR4TcWdKTx/sNJWjNozTqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:75:72:ce:70:c7:82:06:10:ae:48:73:f4:33:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Validity Not Before: Dec 21 00:00:49 2025 GMT Not After : Dec 22 00:00:49 2025 GMT Subject: CN=91f3075945d844f5fd3e8499ecd1bdc8260fd486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:93:22:29:ca:4c:b0:e5:d7:70:8a:e5:09: b7:7f:c7:30:d3:c6:8d:0c:96:ff:c0:62:2a:09:cd: d0:c0:b7:4b:b3:c9:b5:dc:0b:9b:83:68:06:22:f6: 9a:47:d4:01:f2:f3:dd:d3:8b:37:c9:68:a3:41:1c: 36:2b:fd:8f:1c:9f:c0:4f:b6:bc:37:ee:fb:10:85: cb:40:4a:07:26:f4:b7:9d:65:c1:46:a0:c0:56:97: 7a:0e:11:d6:94:4c:f5:58:f9:4e:87:b4:32:1d:95: 21:38:63:48:4b:69:76:91:59:92:9e:ea:9f:ff:58: d3:62:65:36:68:71:c0:13:de:7b:d0:5f:8b:a6:b8: 95:cc:9b:60:cd:9a:d6:b3:5e:0e:1e:b7:72:16:63: 44:47:02:24:30:b6:a1:9d:94:b4:db:ad:48:61:da: 8d:7a:3f:5e:bf:2e:2b:8d:87:d1:77:52:7f:6f:f6: c2:bc:4d:e0:f5:dc:ca:f2:39:93:0f:b5:4a:9f:36: a8:ff:f8:af:0e:7d:b7:50:bc:f3:d3:c8:e1:05:af: 46:06:b4:29:e7:5d:4a:13:62:39:d4:1f:59:55:49: 2a:7c:00:b0:75:a2:1f:db:18:28:cb:3a:a4:5c:98: 56:3c:4c:22:14:6f:78:d7:97:ff:e7:ea:4b:79:ee: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:07:59:45:D8:44:F5:FD:3E:84:99:EC:D1:BD:C8:26:0F:D4:86 X509v3 Authority Key Identifier: keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:44:58:28:8d:25:02:01:d2:d9:ea:c2:a2:26:1f:35:92: 74:a9:9e:7e:4c:36:dd:75:25:25:8c:94:c9:28:46:37:df:7f: 43:cd:2a:22:79:92:65:db:f6:7f:35:b3:c0:b3:ae:24:bc:24: 19:62:35:fb:df:cf:2b:9e:63:1d:b6:93:fe:ea:64:e8:9f:ff: b3:d7:8c:7a:d2:5a:cf:89:a0:39:dd:0f:c4:5f:69:b0:7a:56: 43:b2:7a:b7:cb:55:33:6f:a1:ff:59:d5:aa:27:a8:99:b8:c0: d9:69:44:84:d6:f1:70:0d:a7:97:2a:ae:01:0c:ae:09:83:54: 96:0f:68:19:96:86:ff:7c:cc:c7:b4:4a:2d:a0:ca:f8:f4:ba: f8:0b:dc:f4:91:34:5e:72:1f:33:42:8b:88:c4:11:e3:fc:39: 5b:90:5a:f9:c9:ea:31:2c:0e:2f:de:5d:b0:54:57:33:42:ca: 5f:c5:f2:60:81:0e:7b:f8:ee:c0:41:c7:09:74:d3:29:71:c4: 53:8e:dc:b4:36:c8:fa:9b:39:3d:11:35:31:f0:72:b8:dc:12: 1b:45:f4:00:ed:dd:09:a3:85:dc:d8:3c:3b:45:39:98:bd:21: cb:90:ab:ec:8d:1d:61:f2:bd:2e:23:91:52:cd:f9:fa:a2:15: 6d:5e:02:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXVyznDHggYQrkhz9DN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj ZTk2MjQwHhcNMjUxMjIxMDAwMDQ5WhcNMjUxMjIyMDAwMDQ5WjAzMTEwLwYDVQQD Eyg5MWYzMDc1OTQ1ZDg0NGY1ZmQzZTg0OTllY2QxYmRjODI2MGZkNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+TIinKTLDl13CK5Qm3f8cw08aN DJb/wGIqCc3QwLdLs8m13Aubg2gGIvaaR9QB8vPd04s3yWijQRw2K/2PHJ/AT7a8 N+77EIXLQEoHJvS3nWXBRqDAVpd6DhHWlEz1WPlOh7QyHZUhOGNIS2l2kVmSnuqf /1jTYmU2aHHAE9570F+LpriVzJtgzZrWs14OHrdyFmNERwIkMLahnZS0261IYdqN ej9evy4rjYfRd1J/b/bCvE3g9dzK8jmTD7VKnzao//ivDn23ULzz08jhBa9GBrQp 511KE2I51B9ZVUkqfACwdaIf2xgoyzqkXJhWPEwiFG9415f/5+pLee7mlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHzB1lF2ET1/T6EmezRvcgmD9SGMB8GA1UdIwQY MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt ZWE3MGEyOWM3NmYwLzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd1EWCiN JQIB0tnqwqImHzWSdKmefkw23XUlJYyUyShGN99/Q80qInmSZdv2fzWzwLOuJLwk GWI1+9/PK55jHbaT/upk6J//s9eMetJaz4mgOd0PxF9psHpWQ7J6t8tVM2+h/1nV qieombjA2WlEhNbxcA2nlyquAQyuCYNUlg9oGZaG/3zMx7RKLaDK+PS6+Avc9JE0 XnIfM0KLiMQR4/w5W5Ba+cnqMSwOL95dsFRXM0LKX8XyYIEOe/juwEHHCXTTKXHE U47ctDbI+ps5PRE1MfByuNwSG0X0AO3dCaOF3Ng8O0U5mL0hy5Cr7I0dYfK9LiOR Us35+qIVbV4CDA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:55 2025 by rpki-client