This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json) Hash identifier: opvADNchCOoZiVCb6UGiPohRu8OWOXjwXvwOT1SQWxc= Subject key identifier: 38:EA:E9:C8:71:77:93:12:63:83:C7:98:19:8B:5D:5C:8C:6A:FF:AA Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Certificate serial: 019B3A5896004D0090DCECF5B85C523DE792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft Manifest number: 0B94 Signing time: Sat 20 Dec 2025 06:00:42 +0000 Manifest this update: Sat 20 Dec 2025 06:00:42 +0000 Manifest next update: Sun 21 Dec 2025 06:00:42 +0000 Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=) 2: b1CA5r7KforuhTMwFyQEdQXtFg0.roa (hash: /sCtJVvcy9/zMZdU963H1KU1tkn/lGiUH4SIeeLoE9A=) 3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: J/DVAZ9Qt055g7PJlNWOzKawQhlwzuELLQtwifUIvZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:96:00:4d:00:90:dc:ec:f5:b8:5c:52:3d:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Validity Not Before: Dec 20 06:00:42 2025 GMT Not After : Dec 21 06:00:42 2025 GMT Subject: CN=38eae9c8717793126383c798198b5d5c8c6affaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:7c:16:71:62:5c:e1:0e:03:7a:f8:b7:7d: a6:c3:86:b5:eb:51:54:fb:9d:0d:25:2e:02:70:45: b1:2f:71:cd:e0:dd:67:34:dd:41:0e:96:08:c1:ed: a6:80:9f:e0:c6:ad:e4:92:c2:fc:75:f9:31:e0:8f: 6f:83:c3:34:dd:ad:0c:4a:30:d2:51:7c:b4:ed:22: 65:a8:1d:62:8b:dd:21:90:83:ab:78:ae:3b:fa:52: 70:37:2b:59:70:a1:82:3c:92:3a:7a:69:9a:4b:b6: 16:0d:29:44:b1:ef:a7:80:33:5a:d5:bf:95:9f:6b: 12:99:da:38:0c:c7:3c:9a:97:b3:60:66:df:dd:fd: e2:de:11:77:4b:8b:26:8f:ac:0b:13:c1:1f:5b:f1: 70:43:87:50:2c:62:4a:f8:74:b6:32:ed:04:2e:62: 87:b4:bf:a4:85:28:65:78:8f:7d:4c:ec:24:b7:4b: 92:63:88:a9:e3:d7:8a:59:91:45:2e:f7:89:9c:7e: b8:9d:42:84:ce:84:e1:a1:8d:3e:d4:50:9a:b0:80: 9b:cb:14:e3:08:e1:e7:44:0f:4a:1b:41:43:8a:48: 3f:b3:18:e9:4f:8a:16:b9:6d:f2:7b:a7:99:f8:db: 12:41:93:b2:ab:24:61:92:39:1c:cd:7f:1f:cb:0b: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EA:E9:C8:71:77:93:12:63:83:C7:98:19:8B:5D:5C:8C:6A:FF:AA X509v3 Authority Key Identifier: keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:16:f3:96:52:bb:58:f0:35:49:63:09:05:7a:f0:48:30:a8: d2:22:11:97:96:33:00:e2:42:45:eb:33:e0:a6:88:63:7e:6a: ea:42:f2:47:4c:a3:e0:7b:9f:c4:78:e9:5e:68:a2:c3:0a:60: 95:1c:26:e5:8a:8f:89:2b:6b:c0:0f:1a:e6:54:40:27:af:25: 22:5d:a6:a6:69:8a:17:f4:70:03:2d:e3:fb:8e:51:c1:fb:73: 63:25:32:9a:42:35:fc:50:af:ed:0f:be:b9:8c:63:eb:70:db: 85:f2:a6:d4:6f:d3:da:83:f7:07:f3:a2:1b:e3:1f:fb:e1:a1: c8:bc:1f:80:cd:be:69:53:6d:ca:a4:07:4e:ac:29:0f:6e:09: 80:74:d4:46:9f:c7:9d:c3:23:07:3b:eb:64:28:e9:2e:d0:ff: d2:17:6a:c5:91:4a:d7:41:2c:23:83:01:d1:50:d5:ce:9f:64: 6d:99:c6:f3:10:36:d0:5e:6b:6c:fa:0b:66:cc:60:b5:99:20: 7e:06:15:57:07:84:00:f5:a1:14:59:14:69:7c:08:e3:b7:c6: 81:20:23:57:df:8f:68:ff:80:e5:7b:71:d5:a6:39:57:53:ce: 1d:08:85:2e:c1:ca:31:5a:3c:9b:b7:cc:2a:be:11:bd:90:ff: 5e:82:9d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJYATQCQ3Oz1uFxSPeeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk MTcyNzAwHhcNMjUxMjIwMDYwMDQyWhcNMjUxMjIxMDYwMDQyWjAzMTEwLwYDVQQD EygzOGVhZTljODcxNzc5MzEyNjM4M2M3OTgxOThiNWQ1YzhjNmFmZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCZ8FnFiXOEOA3r4t32mw4a161FU +50NJS4CcEWxL3HN4N1nNN1BDpYIwe2mgJ/gxq3kksL8dfkx4I9vg8M03a0MSjDS UXy07SJlqB1ii90hkIOreK47+lJwNytZcKGCPJI6emmaS7YWDSlEse+ngDNa1b+V n2sSmdo4DMc8mpezYGbf3f3i3hF3S4smj6wLE8EfW/FwQ4dQLGJK+HS2Mu0ELmKH tL+khShleI99TOwkt0uSY4ip49eKWZFFLveJnH64nUKEzoThoY0+1FCasICbyxTj COHnRA9KG0FDikg/sxjpT4oWuW3ye6eZ+NsSQZOyqyRhkjkczX8fywsyLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjq6chxd5MSY4PHmBmLXVyMav+qMB8GA1UdIwQY MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRbzllK7 WPA1SWMJBXrwSDCo0iIRl5YzAOJCResz4KaIY35q6kLyR0yj4HufxHjpXmiiwwpg lRwm5YqPiStrwA8a5lRAJ68lIl2mpmmKF/RwAy3j+45RwftzYyUymkI1/FCv7Q++ uYxj63DbhfKm1G/T2oP3B/OiG+Mf++GhyLwfgM2+aVNtyqQHTqwpD24JgHTURp/H ncMjBzvrZCjpLtD/0hdqxZFK10EsI4MB0VDVzp9kbZnG8xA20F5rbPoLZsxgtZkg fgYVVweEAPWhFFkUaXwI47fGgSAjV9+PaP+A5Xtx1aY5V1POHQiFLsHKMVo8m7fM Kr4RvZD/XoKdwg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:53 2025 by rpki-client