This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json) Hash identifier: c8OdTcGU9DRFpTqfFpPIoGI4dRAd7Yeu+j1C2lsRRsU= Subject key identifier: B0:AD:43:3F:3B:F9:D1:15:01:CA:43:62:32:5B:AB:86:FD:13:F3:82 Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Certificate serial: 019B3C7DB6B2E278044BD8EEFAF8E8BB360A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft Manifest number: 096F Signing time: Sat 20 Dec 2025 16:00:30 +0000 Manifest this update: Sat 20 Dec 2025 16:00:30 +0000 Manifest next update: Sun 21 Dec 2025 16:00:30 +0000 Files and hashes: 1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=) 2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: dV/XD9xamaTTN8l4b2QQ+IC7WDeKaGU9xIX2Te6vzE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:b6:b2:e2:78:04:4b:d8:ee:fa:f8:e8:bb:36:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Validity Not Before: Dec 20 16:00:30 2025 GMT Not After : Dec 21 16:00:30 2025 GMT Subject: CN=b0ad433f3bf9d11501ca4362325bab86fd13f382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:96:37:b6:16:6d:b3:52:7e:24:83:27:f0: a4:3b:87:32:60:38:1f:63:17:1c:2c:90:85:17:9b: ea:d0:f9:8f:8f:53:ff:51:4e:92:a5:a9:ae:1f:10: ea:c6:8b:2f:34:d9:d1:cb:47:cd:2e:59:0b:86:72: 70:21:ae:a2:16:32:4e:05:79:be:db:ba:2c:69:09: 26:dc:7d:20:65:a5:12:87:5c:cd:46:0a:33:68:b2: e4:ca:83:ae:fd:3e:01:9e:38:91:3c:eb:8e:e1:14: 4b:1c:cf:e4:dc:fa:e2:e5:7f:e3:a8:5b:97:a9:c0: 6f:9b:b2:fa:df:f7:ba:ef:5d:b9:6f:70:af:44:05: 8a:80:bf:f6:2e:f0:00:65:a3:42:38:b7:fa:b9:62: 51:b0:7d:f8:dc:7f:fa:23:ee:39:14:11:51:ed:1a: 4c:85:f4:98:d3:e9:5b:61:ec:0e:3d:91:3a:88:d3: fe:4d:0a:b7:8b:a8:c0:9b:37:ba:d2:4c:f4:8e:ae: 24:f1:d7:cb:74:7b:94:7a:56:71:fd:1c:9f:eb:d0: 44:d5:43:47:aa:1d:77:d9:d0:cc:49:d5:00:cf:cb: 55:a6:39:79:73:51:89:21:63:8b:29:f6:89:23:c9: db:ec:f1:e5:71:88:72:2c:58:45:bf:8c:10:e6:e1: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AD:43:3F:3B:F9:D1:15:01:CA:43:62:32:5B:AB:86:FD:13:F3:82 X509v3 Authority Key Identifier: keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:91:09:7e:b5:bd:63:cc:e2:e6:15:f2:10:72:81:65:0f:6b: 6a:83:92:f3:ff:cd:a1:ce:45:1a:60:3e:06:8c:69:b5:6c:35: 12:a4:9e:07:07:4c:07:c1:85:10:de:67:13:19:56:7c:8c:9d: 49:93:fc:fc:ef:79:78:5c:dd:1b:9b:78:69:1e:ad:37:38:3a: 6f:6b:2c:ff:06:ae:16:43:dc:4a:32:3f:bd:88:54:2a:b8:84: 5f:a0:33:53:28:52:06:80:0a:e0:c3:9e:a7:ce:10:64:93:4b: 8e:c6:f3:2a:1c:82:f5:02:3c:75:db:13:f4:80:a0:b3:ad:8e: c7:92:10:06:db:4b:9f:54:46:04:07:c3:13:fe:4b:17:91:b0: b1:88:a3:a6:80:22:5e:27:bf:77:1f:f8:39:24:37:4c:ee:c9: a5:90:45:9f:22:b2:b8:d7:28:7a:f1:ed:fd:e0:35:ac:d9:03: 8c:37:0d:4a:0e:c6:32:46:7b:c2:a0:02:76:34:e4:eb:eb:16: 65:93:bf:66:a8:34:31:f2:ba:23:2c:78:a8:26:24:ce:7e:1d: e8:8d:4f:74:cc:b7:79:95:f6:e6:7d:58:2e:76:d1:2d:26:aa: fd:98:1f:7c:84:8f:12:a4:43:1b:b4:56:cb:f1:7e:ab:f6:e7: 44:56:ec:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fbay4ngES9ju+vjouzYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDQ5Y2E0MmUxZDgyY2UyN2I1NGJiZmQwMTc3ODFkNTQ1 YTc5YjcwHhcNMjUxMjIwMTYwMDMwWhcNMjUxMjIxMTYwMDMwWjAzMTEwLwYDVQQD EyhiMGFkNDMzZjNiZjlkMTE1MDFjYTQzNjIzMjViYWI4NmZkMTNmMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3uWN7YWbbNSfiSDJ/CkO4cyYDgf YxccLJCFF5vq0PmPj1P/UU6SpamuHxDqxosvNNnRy0fNLlkLhnJwIa6iFjJOBXm+ 27osaQkm3H0gZaUSh1zNRgozaLLkyoOu/T4BnjiRPOuO4RRLHM/k3Pri5X/jqFuX qcBvm7L63/e67125b3CvRAWKgL/2LvAAZaNCOLf6uWJRsH343H/6I+45FBFR7RpM hfSY0+lbYewOPZE6iNP+TQq3i6jAmze60kz0jq4k8dfLdHuUelZx/Ryf69BE1UNH qh132dDMSdUAz8tVpjl5c1GJIWOLKfaJI8nb7PHlcYhyLFhFv4wQ5uEkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCtQz87+dEVAcpDYjJbq4b9E/OCMB8GA1UdIwQY MBaAFL0EnKQuHYLOJ7VLv9AXeB1UWnm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUt MWFhMDM0YTJhZjljLzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUtMWFhMDM0YTJhZjlj LzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZEJfrW9 Y8zi5hXyEHKBZQ9raoOS8//Noc5FGmA+BoxptWw1EqSeBwdMB8GFEN5nExlWfIyd SZP8/O95eFzdG5t4aR6tNzg6b2ss/wauFkPcSjI/vYhUKriEX6AzUyhSBoAK4MOe p84QZJNLjsbzKhyC9QI8ddsT9ICgs62Ox5IQBttLn1RGBAfDE/5LF5GwsYijpoAi Xie/dx/4OSQ3TO7JpZBFnyKyuNcoevHt/eA1rNkDjDcNSg7GMkZ7wqACdjTk6+sW ZZO/Zqg0MfK6Iyx4qCYkzn4d6I1PdMy3eZX25n1YLnbRLSaq/ZgffISPEqRDG7RW y/F+q/bnRFbsAg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:11 2025 by rpki-client