This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft File: vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json) Hash identifier: 4Vibno2q0vfvjLuWqrImfM9FK6rYy6FUhf8q9vjf2X8= Subject key identifier: 5F:D3:EE:C3:3E:70:F9:CB:85:10:C5:00:16:FA:D0:09:2E:CC:B6:4A Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 Certificate issuer: /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Certificate serial: 019B4437507A69F100A8DBB7B3D7C287404E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft Manifest number: 0973 Signing time: Mon 22 Dec 2025 04:00:34 +0000 Manifest this update: Mon 22 Dec 2025 04:00:34 +0000 Manifest next update: Tue 23 Dec 2025 04:00:34 +0000 Files and hashes: 1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=) 2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: TbsrzNtPqurRGK1ioF0ZHPmzcIgCY+9oDIaspWDRvLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:50:7a:69:f1:00:a8:db:b7:b3:d7:c2:87:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7 Validity Not Before: Dec 22 04:00:34 2025 GMT Not After : Dec 23 04:00:34 2025 GMT Subject: CN=5fd3eec33e70f9cb8510c50016fad0092eccb64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:c8:72:d9:bc:26:96:c8:f3:16:8e:48:d1: 3e:a4:40:43:ab:f9:57:a4:f3:5a:a4:7d:fe:59:87: 0b:97:59:29:16:cf:fa:46:28:72:65:fa:73:2e:01: 5c:a4:3e:7d:c8:a2:49:5b:4f:82:d5:b9:bd:5a:f3: cd:78:d8:87:1a:3a:4f:3e:a6:58:16:6b:55:94:2e: 8a:7c:41:73:f2:29:7c:a5:8b:2c:97:42:7a:e1:31: ac:15:55:b8:f9:05:b4:b1:9c:52:dc:17:2f:ba:52: 68:f6:4c:96:44:25:99:b6:3b:e9:c8:ed:3d:de:56: 7b:f3:0c:fc:7d:58:35:ba:fc:6c:a4:68:21:f4:e9: df:bd:08:65:14:a2:27:f2:9e:7b:18:6a:87:23:33: 50:04:15:ed:34:05:d7:03:4b:19:73:1c:19:6c:91: 5a:3b:d3:ab:e8:b6:da:25:05:85:3a:89:0f:c3:3c: 33:bf:99:ff:9b:20:0a:30:13:41:c2:cc:27:a0:c1: 22:54:03:e1:f3:16:1a:68:12:af:9c:0b:16:b9:cb: 24:cc:da:52:4d:56:88:5a:5d:0f:f7:00:c2:28:2e: 39:26:d6:8a:6f:28:00:00:1c:e4:a5:13:2a:e3:86: 2f:85:31:42:08:a7:8f:5e:a8:ba:e7:d1:92:26:58: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:EE:C3:3E:70:F9:CB:85:10:C5:00:16:FA:D0:09:2E:CC:B6:4A X509v3 Authority Key Identifier: keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c9:ae:57:15:08:91:f6:c9:75:be:6c:78:ef:62:1c:37:f1: 81:1b:cf:ea:98:ab:0e:ab:c3:68:9e:da:f2:37:2e:34:7b:9e: 5a:40:ac:c8:cf:9f:70:00:64:8b:f6:4e:c4:55:39:a1:34:65: d3:bc:dd:0e:3c:30:90:07:cc:10:b0:22:b0:89:3f:af:27:22: 74:ff:e7:f7:db:1f:0a:cf:72:2f:d2:cc:72:ec:46:74:d7:fd: 34:85:5f:3a:b4:48:7b:26:6e:6c:92:73:3d:b9:8b:bd:fc:1e: 18:bc:f9:fa:a9:58:95:51:43:4c:1d:71:d2:0e:26:e0:39:db: 6c:8a:fc:fb:16:81:40:47:ff:1b:6d:de:d6:b8:d3:d4:f4:5f: 26:78:cf:29:98:70:a4:fc:38:b5:8b:64:f4:51:bd:f9:6f:09: bb:01:0e:f9:5b:f8:86:1e:a7:c3:84:5b:3c:c5:1e:33:a1:d9: bc:4d:96:34:92:85:b5:1a:a0:41:85:e2:e3:94:a2:b9:01:9a: 64:9b:8a:12:8a:c7:db:75:c3:8c:a1:c5:9e:16:72:48:2b:f3: 4a:66:2e:4a:a2:16:0f:6b:e5:93:b8:02:a3:4c:86:3b:8e:c4: 39:c1:85:20:fa:2d:ce:0a:5c:1b:f0:11:69:d4:df:51:21:5e: f6:25:5c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN1B6afEAqNu3s9fCh0BOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDQ5Y2E0MmUxZDgyY2UyN2I1NGJiZmQwMTc3ODFkNTQ1 YTc5YjcwHhcNMjUxMjIyMDQwMDM0WhcNMjUxMjIzMDQwMDM0WjAzMTEwLwYDVQQD Eyg1ZmQzZWVjMzNlNzBmOWNiODUxMGM1MDAxNmZhZDAwOTJlY2NiNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvrIctm8JpbI8xaOSNE+pEBDq/lX pPNapH3+WYcLl1kpFs/6RihyZfpzLgFcpD59yKJJW0+C1bm9WvPNeNiHGjpPPqZY FmtVlC6KfEFz8il8pYssl0J64TGsFVW4+QW0sZxS3BcvulJo9kyWRCWZtjvpyO09 3lZ78wz8fVg1uvxspGgh9OnfvQhlFKIn8p57GGqHIzNQBBXtNAXXA0sZcxwZbJFa O9Or6LbaJQWFOokPwzwzv5n/myAKMBNBwswnoMEiVAPh8xYaaBKvnAsWucskzNpS TVaIWl0P9wDCKC45JtaKbygAABzkpRMq44YvhTFCCKePXqi659GSJlgyFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/T7sM+cPnLhRDFABb60AkuzLZKMB8GA1UdIwQY MBaAFL0EnKQuHYLOJ7VLv9AXeB1UWnm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUt MWFhMDM0YTJhZjljLzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUtMWFhMDM0YTJhZjlj LzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcmuVxUI kfbJdb5seO9iHDfxgRvP6pirDqvDaJ7a8jcuNHueWkCsyM+fcABki/ZOxFU5oTRl 07zdDjwwkAfMELAisIk/rycidP/n99sfCs9yL9LMcuxGdNf9NIVfOrRIeyZubJJz PbmLvfweGLz5+qlYlVFDTB1x0g4m4DnbbIr8+xaBQEf/G23e1rjT1PRfJnjPKZhw pPw4tYtk9FG9+W8JuwEO+Vv4hh6nw4RbPMUeM6HZvE2WNJKFtRqgQYXi45SiuQGa ZJuKEorH23XDjKHFnhZySCvzSmYuSqIWD2vlk7gCo0yGO47EOcGFIPotzgpcG/AR adTfUSFe9iVcGA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:24:52 2025 by rpki-client