This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json) Hash identifier: cppFCDOB/cL57oIDpY8Ci8Ca387odO6hEbcn/FAPVUg= Subject key identifier: B3:22:42:DD:E0:EF:3A:E9:CA:F4:E9:70:C7:0E:E8:53:68:3F:BC:C5 Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9 Certificate serial: 019B41DB5D34E18F4860840C7093748F6E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft Manifest number: 15CC Signing time: Sun 21 Dec 2025 17:00:53 +0000 Manifest this update: Sun 21 Dec 2025 17:00:53 +0000 Manifest next update: Mon 22 Dec 2025 17:00:53 +0000 Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=) 2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: elkzTYmNMNKakjlIMcvEgxMLhH0zhxdlcBScLIKWBAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:5d:34:e1:8f:48:60:84:0c:70:93:74:8f:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9 Validity Not Before: Dec 21 17:00:53 2025 GMT Not After : Dec 22 17:00:53 2025 GMT Subject: CN=b32242dde0ef3ae9caf4e970c70ee853683fbcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:a3:be:9c:b0:d1:97:3c:19:06:17:40:61: de:c7:52:b2:24:f8:bd:09:ca:99:63:d9:f6:8b:5b: 2a:d6:fa:3a:62:bb:44:26:45:5f:1e:9a:d4:69:4f: 76:b2:2b:8c:15:5d:68:a9:dd:99:76:57:df:6d:9d: a4:aa:d6:52:16:c2:01:50:4c:80:20:09:76:29:75: 19:5b:f6:69:64:32:48:0d:e3:fd:4f:56:89:65:8a: 1f:28:10:49:fc:be:ab:1f:8e:3a:74:53:94:bb:31: c1:93:9a:e3:31:76:eb:e5:70:5a:70:7e:b9:c8:0a: 3f:67:95:df:21:4c:47:b9:d0:e7:c7:4c:2c:bf:7f: 8e:a9:6e:de:82:ce:b3:85:d0:b9:b5:75:72:22:96: ce:f9:3b:85:9b:9d:87:67:65:11:bf:db:b2:b9:8e: 53:88:dd:c3:33:0f:43:38:52:09:0b:87:c3:5d:bf: 5a:f0:14:a4:39:6d:0b:63:65:a1:10:33:e9:16:f9: 6d:2f:da:90:a1:df:37:5b:b6:d4:a5:6a:15:e7:b2: a8:c3:15:69:68:d3:7b:35:c1:41:d0:5f:c4:cb:39: 5d:dd:9a:61:dc:1e:b6:7a:a8:5e:25:4c:71:16:fd: 00:a6:79:aa:93:d9:a2:81:54:b8:ec:c2:28:1e:82: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:22:42:DD:E0:EF:3A:E9:CA:F4:E9:70:C7:0E:E8:53:68:3F:BC:C5 X509v3 Authority Key Identifier: keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:c2:72:00:6f:43:6b:af:9b:f4:e8:46:a6:2d:e4:9a:3c: 7f:31:b2:b1:0f:9c:92:22:35:fd:01:f0:d5:7d:1e:02:47:3a: 0e:b9:e8:13:05:d3:24:f4:76:2f:00:fb:c2:92:4c:7d:6a:fc: 77:72:41:fc:51:a2:d8:f4:79:41:a8:e6:64:7c:9b:1c:36:d5: b9:09:3a:42:59:ff:eb:03:61:0b:5d:b1:3b:c7:72:11:4f:ff: 45:35:5a:04:cb:c2:fb:88:10:fc:3e:9e:1c:bb:e6:da:12:c7: 8d:44:6b:dc:17:b2:eb:94:25:b0:5d:34:5b:bb:8d:ad:c1:06: f9:4b:87:d5:3a:af:bf:65:29:16:1e:8c:c4:a4:b6:0b:58:6e: ae:bc:65:3e:a5:48:94:b7:9b:0d:2b:1f:4f:9d:93:c9:8d:3b: da:66:24:b5:bc:35:91:32:c3:28:b9:38:3f:dc:59:39:80:87: 61:5d:82:8e:ce:8c:75:fd:44:d7:61:7d:6e:aa:d1:09:b8:71: 22:aa:32:cd:32:01:a7:49:57:68:a9:10:dc:ba:bc:ec:a7:04: e8:cf:ae:cd:27:f9:64:5c:f0:74:55:b2:8c:0c:9d:e8:2d:23: ec:d2:c2:5d:14:74:ee:fb:49:f5:ea:6b:03:2e:d2:9d:5b:ac: 77:19:d8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21004Y9IYIQMcJN0j24gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTdiNjc3NzdiOWE2ODMyOTMzNTc2NDk3YjQ2YTliMTYz MDRjZDkwHhcNMjUxMjIxMTcwMDUzWhcNMjUxMjIyMTcwMDUzWjAzMTEwLwYDVQQD EyhiMzIyNDJkZGUwZWYzYWU5Y2FmNGU5NzBjNzBlZTg1MzY4M2ZiY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/6jvpyw0Zc8GQYXQGHex1KyJPi9 CcqZY9n2i1sq1vo6YrtEJkVfHprUaU92siuMFV1oqd2ZdlffbZ2kqtZSFsIBUEyA IAl2KXUZW/ZpZDJIDeP9T1aJZYofKBBJ/L6rH446dFOUuzHBk5rjMXbr5XBacH65 yAo/Z5XfIUxHudDnx0wsv3+OqW7egs6zhdC5tXVyIpbO+TuFm52HZ2URv9uyuY5T iN3DMw9DOFIJC4fDXb9a8BSkOW0LY2WhEDPpFvltL9qQod83W7bUpWoV57KowxVp aNN7NcFB0F/Eyzld3Zph3B62eqheJUxxFv0Apnmqk9migVS47MIoHoLATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMiQt3g7zrpyvTpcMcO6FNoP7zFMB8GA1UdIwQY MBaAFL6ntnd3uaaDKTNXZJe0apsWMEzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjct M2I5MWZmOWExYWNkLzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjctM2I5MWZmOWExYWNk LzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf7CcgBv Q2uvm/ToRqYt5Jo8fzGysQ+ckiI1/QHw1X0eAkc6DrnoEwXTJPR2LwD7wpJMfWr8 d3JB/FGi2PR5QajmZHybHDbVuQk6Qln/6wNhC12xO8dyEU//RTVaBMvC+4gQ/D6e HLvm2hLHjURr3Bey65QlsF00W7uNrcEG+UuH1Tqvv2UpFh6MxKS2C1hurrxlPqVI lLebDSsfT52TyY072mYktbw1kTLDKLk4P9xZOYCHYV2Cjs6Mdf1E12F9bqrRCbhx IqoyzTIBp0lXaKkQ3Lq87KcE6M+uzSf5ZFzwdFWyjAyd6C0j7NLCXRR07vtJ9epr Ay7SnVusdxnY8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 00:19:58 2025 by rpki-client