This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json) Hash identifier: hOeKwvP0Q2ALOa9ZeN7RAkvtD5Y+v7hLoT6LiNe7y08= Subject key identifier: B2:CF:43:17:7E:FD:98:D7:F7:E2:1B:0E:2B:38:FD:7D:69:F2:5F:69 Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537 Certificate serial: 019B446EA1A8089935D8BD136BE9DCEDE386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft Manifest number: 0380 Signing time: Mon 22 Dec 2025 05:00:59 +0000 Manifest this update: Mon 22 Dec 2025 05:00:59 +0000 Manifest next update: Tue 23 Dec 2025 05:00:59 +0000 Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: O1AwChRvvZTK0Fo5KXLK6xa995UvK0RtRn2QyHkIG9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:a1:a8:08:99:35:d8:bd:13:6b:e9:dc:ed:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537 Validity Not Before: Dec 22 05:00:59 2025 GMT Not After : Dec 23 05:00:59 2025 GMT Subject: CN=b2cf43177efd98d7f7e21b0e2b38fd7d69f25f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:53:68:7c:b7:25:79:ae:4f:88:b2:8a:3c: db:60:0e:ec:8a:3a:11:3c:1c:d3:01:f1:10:ee:98: b7:e5:30:ab:62:e8:96:ae:82:b6:12:c5:7d:48:85: 25:03:b2:85:07:84:f7:88:c5:ac:84:26:39:0c:1a: 5d:3e:ee:ed:f8:04:d3:e4:76:4d:bc:99:be:f4:08: 1b:95:c1:73:99:78:d7:60:0d:f6:8b:85:01:8a:b9: c7:3f:a6:59:be:1f:c7:a1:22:56:89:70:76:92:5e: 9e:2e:47:53:5a:7c:9a:73:07:e7:90:8c:a8:a7:03: 0c:bf:80:d3:87:e4:05:1e:e3:6d:31:14:e3:d3:1a: 66:ae:72:36:e3:8d:52:c1:67:e5:c5:af:e4:1a:8d: e6:cc:8c:db:e0:2b:4a:31:7a:ab:be:82:c7:d0:45: 65:2d:d1:d1:b0:ca:d5:5e:ab:11:a9:98:07:3a:53: d5:8b:82:69:eb:ac:10:85:19:f1:d8:9a:c2:cb:b7: 9f:35:c3:39:c4:5d:b5:58:c9:d0:48:5d:8b:00:32: 9e:c2:f0:98:00:4c:e7:d2:8e:c1:3e:d1:d1:16:20: 3b:5a:1a:5f:75:e0:71:4f:3b:0d:b9:0f:1f:3b:8d: fd:ec:ee:fc:97:ec:c1:54:21:01:59:50:f9:86:f7: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:43:17:7E:FD:98:D7:F7:E2:1B:0E:2B:38:FD:7D:69:F2:5F:69 X509v3 Authority Key Identifier: keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f5:52:ed:15:08:49:60:29:a8:fc:81:df:bc:fe:ac:ac:2a: 19:90:6d:0d:92:00:be:5a:54:e7:02:5e:9d:25:ad:4e:22:9f: f1:fe:c1:25:68:5a:ac:bb:91:cb:4f:78:ad:29:f8:94:ce:66: db:fc:83:89:30:16:cc:eb:86:9c:63:3a:9b:63:37:36:a7:ef: 3d:2c:09:4b:03:4e:d3:37:fd:fb:0b:96:f8:f0:5f:7c:9a:bd: 59:57:38:b7:e2:13:1a:57:42:37:78:39:5e:94:81:6a:f9:71: 81:99:64:23:e5:4f:3f:63:2c:85:d6:a8:12:48:1a:f3:66:c2: 67:66:d3:9c:db:c2:e4:b4:74:1f:36:1a:86:f4:70:55:55:66: e5:49:58:6f:44:7d:46:6e:01:f0:aa:d3:02:6b:a4:f7:e6:52: b7:31:7f:c4:86:8e:18:7b:e0:2a:01:c3:e9:7c:ad:cd:9e:76: 2f:92:bc:eb:2c:b9:34:31:fd:cf:7f:f6:16:09:87:37:1c:c8: bf:a9:b1:12:ac:9a:9d:2b:8b:2b:84:ee:f7:9f:2a:c5:5e:d3: a1:0c:c3:3b:95:9a:ba:10:ea:ef:bd:ed:1e:26:52:42:ca:a0: 9f:37:6d:e2:6a:dc:b7:fe:9a:e2:c0:2d:26:4e:c7:57:96:83: 35:82:a3:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbqGoCJk12L0Ta+nc7eOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDMzZGYwM2VkNTFjZTc5MjRhNDgwMTgzYmNmZmRiNGYw NDI1MzcwHhcNMjUxMjIyMDUwMDU5WhcNMjUxMjIzMDUwMDU5WjAzMTEwLwYDVQQD EyhiMmNmNDMxNzdlZmQ5OGQ3ZjdlMjFiMGUyYjM4ZmQ3ZDY5ZjI1ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuddTaHy3JXmuT4iyijzbYA7sijoR PBzTAfEQ7pi35TCrYuiWroK2EsV9SIUlA7KFB4T3iMWshCY5DBpdPu7t+ATT5HZN vJm+9AgblcFzmXjXYA32i4UBirnHP6ZZvh/HoSJWiXB2kl6eLkdTWnyacwfnkIyo pwMMv4DTh+QFHuNtMRTj0xpmrnI2441SwWflxa/kGo3mzIzb4CtKMXqrvoLH0EVl LdHRsMrVXqsRqZgHOlPVi4Jp66wQhRnx2JrCy7efNcM5xF21WMnQSF2LADKewvCY AEzn0o7BPtHRFiA7WhpfdeBxTzsNuQ8fO4397O78l+zBVCEBWVD5hvf95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLPQxd+/ZjX9+IbDis4/X1p8l9pMB8GA1UdIwQY MBaAFL0DPfA+1RznkkpIAYO8/9tPBCU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDkt Yjg0ODdmZTk2MTQ5LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDktYjg0ODdmZTk2MTQ5 LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfVS7RUI SWApqPyB37z+rKwqGZBtDZIAvlpU5wJenSWtTiKf8f7BJWharLuRy094rSn4lM5m 2/yDiTAWzOuGnGM6m2M3NqfvPSwJSwNO0zf9+wuW+PBffJq9WVc4t+ITGldCN3g5 XpSBavlxgZlkI+VPP2MshdaoEkga82bCZ2bTnNvC5LR0HzYahvRwVVVm5UlYb0R9 Rm4B8KrTAmuk9+ZStzF/xIaOGHvgKgHD6XytzZ52L5K86yy5NDH9z3/2FgmHNxzI v6mxEqyanSuLK4Tu958qxV7ToQzDO5WauhDq773tHiZSQsqgnzdt4mrct/6a4sAt Jk7HV5aDNYKjqw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:58 2025 by rpki-client