This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json) Hash identifier: iP/wJgGWkYQdeGHYzOLqdssQqpsDMqZeSkUMBjUKX7U= Subject key identifier: 07:B3:77:6B:9E:D5:C9:BA:3B:11:25:5C:58:88:5A:DA:CA:53:62:24 Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4 Certificate serial: 019B6D3352449AAA75658950E0491366C204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft Manifest number: 13F2 Signing time: Tue 30 Dec 2025 03:00:38 +0000 Manifest this update: Tue 30 Dec 2025 03:00:38 +0000 Manifest next update: Wed 31 Dec 2025 03:00:38 +0000 Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: bsOufQ5cmcWoTM2IbjRQ1c2unui80q1Fx7m8Nw4taNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:52:44:9a:aa:75:65:89:50:e0:49:13:66:c2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4 Validity Not Before: Dec 30 03:00:38 2025 GMT Not After : Dec 31 03:00:38 2025 GMT Subject: CN=07b3776b9ed5c9ba3b11255c58885adaca536224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:7a:2e:fe:d8:dd:89:75:f4:4f:5f:38:e8: ff:dc:8e:46:f0:85:d7:71:0b:af:77:24:74:63:ed: 1a:0c:21:67:cb:93:32:95:c1:55:4a:73:38:4b:4f: f2:46:21:44:1b:74:ff:64:82:0c:c3:0f:96:2e:fd: 59:a6:8c:e2:05:1c:5a:44:9e:fb:f2:f4:ea:0a:71: d8:e7:d4:78:74:3d:47:97:b2:64:ec:dc:5f:21:64: 2e:49:5f:8a:54:06:81:25:29:fd:ca:4a:64:a1:01: 8a:dd:df:e9:be:af:9d:d1:2a:1b:40:5a:db:5f:72: 34:69:7a:51:7c:19:6b:d7:d6:cb:9a:a3:f2:00:7e: 21:72:a8:2b:b1:38:07:bb:d1:bc:ed:52:0f:6b:c9: 33:2e:f2:d2:ad:fb:ac:61:3f:3e:f0:df:80:f3:be: 87:f5:3d:37:51:bd:fe:28:d2:6a:95:fc:3b:86:8b: 83:5f:aa:c3:73:a0:c2:fd:89:08:f9:e4:64:df:ec: 25:32:7f:96:bd:3f:8e:f4:80:a5:b5:ee:00:43:5a: f2:10:8a:da:68:f2:2a:1c:b3:a1:1c:7b:3c:4b:97: 91:c9:02:20:19:0f:c3:50:9e:25:02:a3:7c:96:35: 95:28:7f:a5:e9:02:5f:f3:84:49:2a:38:67:0b:03: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:77:6B:9E:D5:C9:BA:3B:11:25:5C:58:88:5A:DA:CA:53:62:24 X509v3 Authority Key Identifier: keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ae:9a:0c:96:7b:5e:6b:73:2b:00:ca:ab:cb:e3:51:c7:47: 4a:d6:11:d5:f7:b9:b5:6b:4f:52:8c:ae:c1:1a:64:43:19:5b: 8e:ce:0c:b6:ad:2a:cd:12:5c:aa:f3:78:0f:dc:55:26:1c:c0: ae:2b:61:e2:0e:69:1e:91:34:4e:dc:c6:00:e9:4d:31:d3:32: d9:88:5a:cb:f1:5d:01:bd:7e:35:de:3f:69:8c:19:93:2f:ea: ae:d6:b5:18:f0:7e:4b:f2:be:66:ae:1e:39:98:98:84:70:85: f3:29:0a:f3:9e:d1:39:37:b9:9f:9d:94:fe:7b:fd:b2:92:32: 3f:d9:03:64:3c:ae:19:43:a8:8d:75:61:15:0f:59:76:b4:18: 40:2b:e6:87:bd:6b:af:91:5b:e1:3c:e6:fb:37:a4:44:e7:8d: d8:ed:87:3a:f0:38:2b:0d:48:f1:51:f7:c5:d6:47:4f:18:8e: 60:4f:09:46:e0:70:5c:89:58:a7:46:69:eb:3e:b1:e8:54:16: 67:2a:a3:71:1e:3a:10:48:63:d3:25:2f:73:1b:69:0b:03:cd: 7e:4c:2c:d3:c3:26:8c:7a:39:f1:56:09:74:0f:91:64:0b:8b: 0e:fd:3a:0a:20:1d:63:56:c8:30:c6:b0:65:bf:c5:79:fc:33: e1:ff:4b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM1JEmqp1ZYlQ4EkTZsIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTNhNGZiMjY4MWRiMjhiNWMzZjVmMWQ0NmEyZDM1OTk2 MGZhYTQwHhcNMjUxMjMwMDMwMDM4WhcNMjUxMjMxMDMwMDM4WjAzMTEwLwYDVQQD EygwN2IzNzc2YjllZDVjOWJhM2IxMTI1NWM1ODg4NWFkYWNhNTM2MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/x6Lv7Y3Yl19E9fOOj/3I5G8IXX cQuvdyR0Y+0aDCFny5MylcFVSnM4S0/yRiFEG3T/ZIIMww+WLv1ZpoziBRxaRJ77 8vTqCnHY59R4dD1Hl7Jk7NxfIWQuSV+KVAaBJSn9ykpkoQGK3d/pvq+d0SobQFrb X3I0aXpRfBlr19bLmqPyAH4hcqgrsTgHu9G87VIPa8kzLvLSrfusYT8+8N+A876H 9T03Ub3+KNJqlfw7houDX6rDc6DC/YkI+eRk3+wlMn+WvT+O9IClte4AQ1ryEIra aPIqHLOhHHs8S5eRyQIgGQ/DUJ4lAqN8ljWVKH+l6QJf84RJKjhnCwOmSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAezd2ue1cm6OxElXFiIWtrKU2IkMB8GA1UdIwQY MBaAFL3jpPsmgdsotcP18dRqLTWZYPqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMt ODA4ZmVhYWY5ODdkLzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMtODA4ZmVhYWY5ODdk LzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka6aDJZ7 XmtzKwDKq8vjUcdHStYR1fe5tWtPUoyuwRpkQxlbjs4Mtq0qzRJcqvN4D9xVJhzA rith4g5pHpE0TtzGAOlNMdMy2Yhay/FdAb1+Nd4/aYwZky/qrta1GPB+S/K+Zq4e OZiYhHCF8ykK857ROTe5n52U/nv9spIyP9kDZDyuGUOojXVhFQ9ZdrQYQCvmh71r r5Fb4Tzm+zekROeN2O2HOvA4Kw1I8VH3xdZHTxiOYE8JRuBwXIlYp0Zp6z6x6FQW ZyqjcR46EEhj0yUvcxtpCwPNfkws08MmjHo58VYJdA+RZAuLDv06CiAdY1bIMMaw Zb/Fefwz4f9Lnw== -----END CERTIFICATE-----Generated at Tue Dec 30 04:55:14 2025 by rpki-client