This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json) Hash identifier: y3ZcWMz2Y/cAw8aiL2K7gUMY7x3rdrn7f6oVhpywJQI= Subject key identifier: DB:A5:DB:78:00:54:11:8C:A3:83:EA:4F:D7:BE:60:7F:95:93:33:80 Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Certificate serial: 019B3D239CB84B40D73910C4A3E852AA92F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft Manifest number: 0B83 Signing time: Sat 20 Dec 2025 19:01:42 +0000 Manifest this update: Sat 20 Dec 2025 19:01:42 +0000 Manifest next update: Sun 21 Dec 2025 19:01:42 +0000 Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: BV5ios2gsUU8iiJQucCDJT/WuJUTi6rKQnAbjbDeFCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:9c:b8:4b:40:d7:39:10:c4:a3:e8:52:aa:92:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Validity Not Before: Dec 20 19:01:42 2025 GMT Not After : Dec 21 19:01:42 2025 GMT Subject: CN=dba5db780054118ca383ea4fd7be607f95933380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:fc:70:c5:f2:00:3d:89:ea:73:04:8b:de: cc:3f:1d:88:d1:ad:ba:5f:f5:fe:19:34:7a:54:c3: 9f:df:55:84:0d:61:97:21:6e:dd:bd:7e:ea:af:02: 57:92:88:75:1d:62:6b:c2:5c:a0:3e:97:19:be:6a: 41:01:05:27:3c:32:7e:92:ae:e2:18:93:f0:53:08: 2a:b8:5c:c1:42:3b:e8:07:fd:9d:f5:31:af:ac:bc: bd:71:a0:99:f8:3b:e8:4b:bc:fc:12:fc:ab:a1:6b: cb:01:13:d3:de:e2:bb:73:32:06:f1:74:bd:8a:20: d0:10:92:47:ac:c7:13:37:8a:be:47:e6:a9:d1:4a: db:63:07:27:72:c8:68:c7:13:54:1d:11:48:f8:13: 5b:ec:7e:5b:78:37:9c:93:1b:6b:56:18:51:97:48: 7b:d7:0b:09:3f:c6:f1:0f:8b:d0:b1:6c:84:ab:e6: 38:3c:17:a8:ca:da:57:d4:04:d5:9e:c1:c5:1d:d2: c0:3e:27:19:69:56:6b:de:57:41:e2:27:cf:6c:06: 05:2d:12:53:e1:84:31:3d:85:af:04:c5:06:cf:00: 59:7c:42:c9:40:30:ec:78:60:5a:2d:6b:5b:6f:6a: 92:f4:7b:76:cc:52:2e:8b:6d:00:32:39:cc:da:d4: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A5:DB:78:00:54:11:8C:A3:83:EA:4F:D7:BE:60:7F:95:93:33:80 X509v3 Authority Key Identifier: keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cb:c1:76:c3:bc:42:61:fb:83:24:10:92:09:29:a5:cc:7e: b9:bf:5e:9e:f7:04:31:6b:18:2a:b4:48:a5:7a:51:83:25:5b: af:89:ff:f3:4d:01:22:79:77:d5:e5:7d:28:14:d0:0a:d6:d5: b9:0b:f0:55:98:39:8e:99:e2:7f:2c:dd:82:19:ef:53:ba:13: 7e:31:8f:30:ca:1e:fc:04:75:51:ec:75:5f:f2:97:1b:17:19: 89:95:a4:88:54:7b:51:00:b7:e3:26:ac:35:da:88:14:4f:0e: 4e:21:6d:ad:a4:67:f2:9f:52:2f:44:8f:de:5e:4b:15:38:d1: d4:9a:c6:1d:3e:ee:7e:64:68:a2:bc:64:ac:9e:06:2a:d8:23: 4a:c6:b8:b8:c6:39:7b:5b:e4:6a:81:8b:04:3d:67:a6:2a:05: 3a:4c:1a:7f:3c:58:d1:75:9b:80:02:84:9c:51:b3:1c:0d:a9: 51:36:dd:1b:bf:ed:24:24:83:cd:5f:be:33:74:99:61:e3:b3: 18:d0:b7:a4:00:bc:bd:13:ed:ed:ad:27:ab:57:0e:c2:0a:f3: 93:c3:87:aa:40:01:27:ad:dc:52:ca:23:88:fa:0d:d6:6d:be: 86:4a:d5:ae:4c:b1:e8:36:77:61:54:71:d1:6d:15:80:1e:d2: 3f:fc:4a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5y4S0DXORDEo+hSqpL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi ZWUzNjgwHhcNMjUxMjIwMTkwMTQyWhcNMjUxMjIxMTkwMTQyWjAzMTEwLwYDVQQD EyhkYmE1ZGI3ODAwNTQxMThjYTM4M2VhNGZkN2JlNjA3Zjk1OTMzMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQH8cMXyAD2J6nMEi97MPx2I0a26 X/X+GTR6VMOf31WEDWGXIW7dvX7qrwJXkoh1HWJrwlygPpcZvmpBAQUnPDJ+kq7i GJPwUwgquFzBQjvoB/2d9TGvrLy9caCZ+DvoS7z8EvyroWvLARPT3uK7czIG8XS9 iiDQEJJHrMcTN4q+R+ap0UrbYwcncshoxxNUHRFI+BNb7H5beDeckxtrVhhRl0h7 1wsJP8bxD4vQsWyEq+Y4PBeoytpX1ATVnsHFHdLAPicZaVZr3ldB4ifPbAYFLRJT 4YQxPYWvBMUGzwBZfELJQDDseGBaLWtbb2qS9Ht2zFIui20AMjnM2tSGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNul23gAVBGMo4PqT9e+YH+VkzOAMB8GA1UdIwQY MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsvBdsO8 QmH7gyQQkgkppcx+ub9envcEMWsYKrRIpXpRgyVbr4n/800BInl31eV9KBTQCtbV uQvwVZg5jpnifyzdghnvU7oTfjGPMMoe/AR1Uex1X/KXGxcZiZWkiFR7UQC34yas NdqIFE8OTiFtraRn8p9SL0SP3l5LFTjR1JrGHT7ufmRoorxkrJ4GKtgjSsa4uMY5 e1vkaoGLBD1npioFOkwafzxY0XWbgAKEnFGzHA2pUTbdG7/tJCSDzV++M3SZYeOz GNC3pAC8vRPt7a0nq1cOwgrzk8OHqkABJ63cUsojiPoN1m2+hkrVrkyx6DZ3YVRx 0W0VgB7SP/xK1w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:03:52 2025 by rpki-client