This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json) Hash identifier: 6mNYgl6INvWicJPKdg7/dIS/xgT25qc+k0aNlVzcrxw= Subject key identifier: AD:54:ED:34:D4:24:4D:61:14:DE:D7:1D:DE:85:41:95:7C:D9:D9:0A Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Certificate serial: 019B44DCC128DFBCBDC4532643A54FA08B6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft Manifest number: 0ABF Signing time: Mon 22 Dec 2025 07:01:16 +0000 Manifest this update: Mon 22 Dec 2025 07:01:16 +0000 Manifest next update: Tue 23 Dec 2025 07:01:16 +0000 Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=) 2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: /q40dc/dqPilAQxKFAs/U4Mvp5AehaZGhK2jKQg6pHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:c1:28:df:bc:bd:c4:53:26:43:a5:4f:a0:8b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Validity Not Before: Dec 22 07:01:16 2025 GMT Not After : Dec 23 07:01:16 2025 GMT Subject: CN=ad54ed34d4244d6114ded71dde8541957cd9d90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:b7:1f:d7:ec:9c:98:47:55:d2:5b:f2:d3: 98:72:69:9a:4b:8d:54:78:e8:42:b2:b5:c7:77:89: a4:02:41:89:82:16:1a:9f:25:80:3b:44:48:09:a2: 82:1e:49:63:e9:21:32:e7:44:fc:d3:80:bd:19:f4: 3a:97:ee:de:3f:25:da:06:2e:f2:ab:14:76:eb:f2: 27:12:68:80:e7:53:8e:4c:7e:cb:86:95:5a:b7:42: fc:de:ce:cd:98:d9:b4:07:d2:e9:09:43:3f:22:ff: a7:aa:0f:39:dc:5b:cc:4f:a1:e5:97:b7:b6:25:24: 1b:02:33:4d:b5:0a:89:6b:1b:c8:33:4b:55:e2:9b: 89:31:67:af:1a:72:af:41:33:a9:b7:35:9c:4a:fb: 88:5b:de:cb:74:31:5e:73:1a:56:ed:fe:5b:5f:f5: 1b:7e:1c:59:4e:ba:96:59:bf:78:3c:a3:36:f3:79: fc:b6:43:37:d7:3c:58:c5:fd:d8:59:90:bd:e2:ab: 36:84:18:14:30:66:39:1f:ec:68:b1:6e:bd:b1:96: 8b:0f:5f:3a:65:41:b6:c7:dd:a0:c5:4b:c5:78:ad: b4:90:e0:7f:d1:76:e8:e0:0c:a2:f9:35:6a:6a:de: 93:36:41:f7:fa:f0:9c:b1:49:17:5e:ff:a7:99:ef: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:ED:34:D4:24:4D:61:14:DE:D7:1D:DE:85:41:95:7C:D9:D9:0A X509v3 Authority Key Identifier: keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c6:b1:fc:69:15:85:0b:c6:13:b4:9f:80:de:4d:71:f7:15: 87:0c:4e:f2:8d:3a:75:f2:93:7b:c4:3e:a2:0e:fc:6e:4b:82: 5d:53:b3:db:02:5d:7b:96:5c:04:ac:e7:41:43:b5:56:2c:9a: 42:ac:a9:82:69:79:ac:cc:e9:12:29:13:06:14:58:57:9c:c2: d3:0e:9a:f2:ed:cc:3a:e0:6e:26:15:6e:28:aa:99:2a:57:eb: b7:79:d9:dd:c3:29:4d:0d:bd:39:07:99:89:17:ba:71:21:6f: ad:f7:b4:19:3c:17:1e:f6:5d:c9:77:01:1a:7a:4e:ab:aa:83: d3:00:f7:8c:05:5b:aa:b7:cd:55:87:71:1d:97:e1:65:37:0d: e4:b0:84:43:a7:dc:d2:b5:72:52:cd:20:d2:61:43:c7:c1:f8: d8:34:c1:a9:11:a8:cd:23:5e:28:33:ac:fb:6b:7f:82:d1:73: 40:ca:26:34:85:fe:1e:5f:97:57:d5:3a:07:36:6c:a0:44:ac: 7d:65:35:3c:86:3c:a9:d0:cf:f6:ca:5d:a9:8e:d1:c3:bf:93: 2a:81:d2:45:ca:41:4f:9c:36:d4:41:22:55:0a:2e:23:0c:d2: a7:28:82:f2:03:07:18:d8:e5:ba:d6:6b:df:ef:ad:10:3c:52: 93:c7:bb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3MEo37y9xFMmQ6VPoItrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0 OTNiZTUwHhcNMjUxMjIyMDcwMTE2WhcNMjUxMjIzMDcwMTE2WjAzMTEwLwYDVQQD EyhhZDU0ZWQzNGQ0MjQ0ZDYxMTRkZWQ3MWRkZTg1NDE5NTdjZDlkOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19i3H9fsnJhHVdJb8tOYcmmaS41U eOhCsrXHd4mkAkGJghYanyWAO0RICaKCHklj6SEy50T804C9GfQ6l+7ePyXaBi7y qxR26/InEmiA51OOTH7LhpVat0L83s7NmNm0B9LpCUM/Iv+nqg853FvMT6Hll7e2 JSQbAjNNtQqJaxvIM0tV4puJMWevGnKvQTOptzWcSvuIW97LdDFecxpW7f5bX/Ub fhxZTrqWWb94PKM283n8tkM31zxYxf3YWZC94qs2hBgUMGY5H+xosW69sZaLD186 ZUG2x92gxUvFeK20kOB/0Xbo4Ayi+TVqat6TNkH3+vCcsUkXXv+nme9pGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1U7TTUJE1hFN7XHd6FQZV82dkKMB8GA1UdIwQY MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3 LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8ax/GkV hQvGE7SfgN5NcfcVhwxO8o06dfKTe8Q+og78bkuCXVOz2wJde5ZcBKznQUO1Viya Qqypgml5rMzpEikTBhRYV5zC0w6a8u3MOuBuJhVuKKqZKlfrt3nZ3cMpTQ29OQeZ iRe6cSFvrfe0GTwXHvZdyXcBGnpOq6qD0wD3jAVbqrfNVYdxHZfhZTcN5LCEQ6fc 0rVyUs0g0mFDx8H42DTBqRGozSNeKDOs+2t/gtFzQMomNIX+Hl+XV9U6BzZsoESs fWU1PIY8qdDP9spdqY7Rw7+TKoHSRcpBT5w21EEiVQouIwzSpyiC8gMHGNjlutZr 3++tEDxSk8e7wQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:08 2025 by rpki-client