This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json) Hash identifier: BBDIF7BhIu4eV1ntY7RgqwdcshkD7RTXlFQPwFG0nPc= Subject key identifier: BB:12:CD:2A:C9:0D:5A:92:31:AA:FC:26:48:4B:A9:1C:B4:30:E4:93 Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Certificate serial: 019B3C7E1AFCC2784AD95C109344E65C484D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:00:55 +0000 Manifest this update: Sat 20 Dec 2025 16:00:55 +0000 Manifest next update: Sun 21 Dec 2025 16:00:55 +0000 Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=) 2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: pp0Jr1KL0a4sHz5vFmZlNCIi+orFfXend6kXUfL+5Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1a:fc:c2:78:4a:d9:5c:10:93:44:e6:5c:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Validity Not Before: Dec 20 16:00:55 2025 GMT Not After : Dec 21 16:00:55 2025 GMT Subject: CN=bb12cd2ac90d5a9231aafc26484ba91cb430e493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:01:c9:93:5f:4c:14:7b:60:fd:38:c3:59: af:81:a3:cc:3d:4b:07:64:c3:2f:08:af:ea:a8:d8: de:6f:fb:58:30:a7:86:24:ab:71:16:b5:92:b0:9b: d2:ef:98:02:35:29:2f:a9:eb:b3:df:6b:bf:01:ab: 25:7f:50:58:42:cf:79:a1:15:7a:df:b2:89:f5:89: 02:7e:70:cc:ed:c7:ff:b2:07:2b:b5:35:86:b8:98: 01:9f:dd:f3:e1:57:c6:07:14:75:df:c6:fe:fd:ad: 3b:74:3b:f7:dd:14:ea:e6:6f:2d:12:e5:a3:88:92: ff:c3:24:86:69:03:63:82:45:fe:f8:13:f7:29:d6: dc:08:aa:2b:0f:ca:21:12:f9:ab:61:90:0f:a2:fc: 7f:ad:7e:75:34:1e:f2:46:d1:fe:a9:45:3b:e1:e0: 6f:a1:4b:28:82:88:61:ca:3d:c0:0f:d0:ac:80:8b: e2:e2:1b:d1:fe:2d:92:78:06:79:9b:b1:3a:ec:05: a4:14:b1:08:10:16:29:ce:04:ba:7f:1a:de:11:4d: 76:47:f8:f7:76:6c:2b:60:cf:ab:4a:b6:45:3b:d1: 1e:01:f0:fd:97:e2:e3:e3:da:8b:e4:92:a3:63:e3: 05:ba:fd:d9:30:ab:c8:cf:41:23:d1:20:82:6d:fe: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:12:CD:2A:C9:0D:5A:92:31:AA:FC:26:48:4B:A9:1C:B4:30:E4:93 X509v3 Authority Key Identifier: keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:00:ec:27:66:21:15:79:77:d9:35:f4:5c:22:6b:2b:cd: 42:e6:8d:67:05:99:36:81:10:ab:27:22:f9:67:96:4d:d2:de: 1a:82:66:fe:42:3e:a8:79:a0:21:3b:1e:c0:88:0a:6c:f1:45: c2:f1:44:00:5a:1c:77:c9:f6:5a:97:c9:c4:ca:d9:ae:bc:e2: 21:d7:55:93:ec:d8:d9:94:ff:ff:98:26:37:d9:22:3d:7f:dc: 76:cf:a1:f3:77:e8:03:ac:5d:a3:43:41:7a:6c:24:d0:4f:8f: 21:eb:f7:38:20:2a:5e:7a:2f:4e:e3:d7:a3:ea:5a:06:86:12: 73:d4:0f:35:27:16:67:3b:a6:cb:0d:54:0a:71:2f:be:8a:52: 24:2e:de:c1:df:42:aa:87:ba:b8:00:df:d6:e0:47:20:0a:4e: 2f:af:3d:bf:0b:0d:09:be:8c:89:cc:c1:d2:bb:5a:fe:c6:5e: 1f:16:00:7b:79:43:bc:a2:5d:50:1f:57:46:bc:a4:a0:43:60: 5c:7d:f5:67:1b:74:00:42:e2:5d:94:c3:ae:0d:f0:c7:2b:04: 3b:fb:ee:cb:de:e5:7a:8e:5b:28:71:d7:13:56:2b:77:70:46: 89:85:88:35:6a:5e:85:c7:21:af:d0:e8:2e:ee:0b:ad:f5:9b: 0b:4d:15:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhr8wnhK2VwQk0TmXEhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4 YjQ3N2YwHhcNMjUxMjIwMTYwMDU1WhcNMjUxMjIxMTYwMDU1WjAzMTEwLwYDVQQD EyhiYjEyY2QyYWM5MGQ1YTkyMzFhYWZjMjY0ODRiYTkxY2I0MzBlNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7cByZNfTBR7YP04w1mvgaPMPUsH ZMMvCK/qqNjeb/tYMKeGJKtxFrWSsJvS75gCNSkvqeuz32u/Aaslf1BYQs95oRV6 37KJ9YkCfnDM7cf/sgcrtTWGuJgBn93z4VfGBxR138b+/a07dDv33RTq5m8tEuWj iJL/wySGaQNjgkX++BP3KdbcCKorD8ohEvmrYZAPovx/rX51NB7yRtH+qUU74eBv oUsogohhyj3AD9CsgIvi4hvR/i2SeAZ5m7E67AWkFLEIEBYpzgS6fxreEU12R/j3 dmwrYM+rSrZFO9EeAfD9l+Lj49qL5JKjY+MFuv3ZMKvIz0Ej0SCCbf7GlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsSzSrJDVqSMar8JkhLqRy0MOSTMB8GA1UdIwQY MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3 LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2AA7Cdm IRV5d9k19FwiayvNQuaNZwWZNoEQqyci+WeWTdLeGoJm/kI+qHmgITsewIgKbPFF wvFEAFocd8n2WpfJxMrZrrziIddVk+zY2ZT//5gmN9kiPX/cds+h83foA6xdo0NB emwk0E+PIev3OCAqXnovTuPXo+paBoYSc9QPNScWZzumyw1UCnEvvopSJC7ewd9C qoe6uADf1uBHIApOL689vwsNCb6MiczB0rta/sZeHxYAe3lDvKJdUB9XRrykoENg XH31Zxt0AELiXZTDrg3wxysEO/vuy97leo5bKHHXE1Yrd3BGiYWINWpehcchr9Do Lu4LrfWbC00VLA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:23 2025 by rpki-client