This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json) Hash identifier: hW0uHNEFsyxzfIga/WLv9yuiV4wo+LX2AKZ32U76/0M= Subject key identifier: 00:DB:D4:A1:EB:3C:54:C1:13:65:C2:2D:C4:BB:DD:0F:DC:2B:0F:A9 Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019B378E967183D65AB0E66CBD62243BE6D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 17:00:50 +0000 Manifest this update: Fri 19 Dec 2025 17:00:50 +0000 Manifest next update: Sat 20 Dec 2025 17:00:50 +0000 Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=) 2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: C5jX5kmoZsfq4r9cXg/j9XVFpvdfbNUdpuuEuYAZ8jE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:96:71:83:d6:5a:b0:e6:6c:bd:62:24:3b:e6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Dec 19 17:00:50 2025 GMT Not After : Dec 20 17:00:50 2025 GMT Subject: CN=00dbd4a1eb3c54c11365c22dc4bbdd0fdc2b0fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:a1:47:4b:1d:e6:46:eb:9a:97:3b:44:b8: d0:1d:cc:36:7c:e9:c8:53:1e:63:cb:f3:fc:61:56: af:08:00:22:2c:40:fa:3a:83:7e:42:9a:e3:9f:58: 00:7a:0e:f4:f9:52:dd:69:ca:69:10:c8:f8:22:79: 81:6e:91:76:6a:79:51:21:aa:30:80:02:f6:21:39: f8:e0:e9:20:11:c4:fd:1b:81:2a:e3:10:b8:6b:12: 59:7b:23:d0:18:4e:84:76:c1:10:f7:01:4d:86:1f: 0e:7e:c8:a2:ef:62:f0:05:f6:ed:4b:db:a1:90:94: 24:2d:05:33:38:8a:b0:ee:0f:f9:e6:79:80:9a:8a: 80:c1:19:c8:06:34:0a:64:b2:49:90:45:2a:ae:54: 37:5e:08:04:e8:fa:c8:66:e5:e9:c1:09:da:6e:07: c0:b0:23:3b:87:4e:c5:9e:91:c4:38:10:e0:1a:a7: 2b:18:8a:15:80:5d:3e:12:8d:e2:26:f9:72:87:96: 7a:06:89:23:95:a4:5e:88:15:64:77:c4:13:72:1a: 08:82:60:d3:6f:c1:4f:ee:c1:04:5d:2e:f0:ce:04: 00:60:14:96:bc:54:44:76:d9:76:df:e1:22:ea:b8: 3e:ac:05:53:89:6f:67:88:1f:9d:0b:7e:cb:f9:20: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:D4:A1:EB:3C:54:C1:13:65:C2:2D:C4:BB:DD:0F:DC:2B:0F:A9 X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8c:80:ac:39:69:27:ca:f7:8a:d2:92:46:3d:a5:0c:d4:3a: b4:e1:6d:aa:c5:65:e8:b6:7c:5b:67:d7:9f:44:ec:31:c4:61: d9:42:bb:20:03:36:dd:5c:8f:c5:32:da:2c:4e:94:4f:80:64: 72:47:e1:b6:9a:18:63:62:0d:6c:9d:04:ba:26:a5:1f:02:7e: 78:04:c6:05:6d:02:b2:c4:f0:bc:19:3f:dd:f0:a3:15:77:c5: 44:84:d3:d0:82:03:9d:1b:fa:40:c1:21:02:b6:8d:2d:ec:90: 4d:3a:13:6f:dc:e2:2f:de:9b:f0:c8:e2:a5:51:be:f5:f5:d2: 6a:d5:00:ff:31:ab:a9:c2:94:73:0c:6b:6c:61:ac:c2:5b:f4: 76:3e:2b:66:38:d2:9f:4d:51:03:63:1b:02:20:8c:b9:c4:64: e5:9a:59:a3:a9:35:d9:5c:22:ef:56:97:27:fd:b4:86:b3:1f: 16:ec:c4:87:64:cd:9d:8a:08:9d:6f:f3:19:87:d4:9c:cd:25: 11:f9:5e:ff:b2:33:ec:eb:cf:23:a2:fb:94:ab:f6:16:1f:fc: ff:22:3b:85:ee:92:65:34:4a:c9:c4:74:ed:14:44:50:1e:88: fb:bf:1a:51:0a:22:d3:fa:65:87:42:99:62:0c:e6:8e:a2:95: cb:40:11:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jpZxg9ZasOZsvWIkO+bXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjUxMjE5MTcwMDUwWhcNMjUxMjIwMTcwMDUwWjAzMTEwLwYDVQQD EygwMGRiZDRhMWViM2M1NGMxMTM2NWMyMmRjNGJiZGQwZmRjMmIwZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlOhR0sd5kbrmpc7RLjQHcw2fOnI Ux5jy/P8YVavCAAiLED6OoN+Qprjn1gAeg70+VLdacppEMj4InmBbpF2anlRIaow gAL2ITn44OkgEcT9G4Eq4xC4axJZeyPQGE6EdsEQ9wFNhh8Ofsii72LwBfbtS9uh kJQkLQUzOIqw7g/55nmAmoqAwRnIBjQKZLJJkEUqrlQ3XggE6PrIZuXpwQnabgfA sCM7h07FnpHEOBDgGqcrGIoVgF0+Eo3iJvlyh5Z6BokjlaReiBVkd8QTchoIgmDT b8FP7sEEXS7wzgQAYBSWvFREdtl23+Ei6rg+rAVTiW9niB+dC37L+SCxzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADb1KHrPFTBE2XCLcS73Q/cKw+pMB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYyArDlp J8r3itKSRj2lDNQ6tOFtqsVl6LZ8W2fXn0TsMcRh2UK7IAM23VyPxTLaLE6UT4Bk ckfhtpoYY2INbJ0EuialHwJ+eATGBW0CssTwvBk/3fCjFXfFRITT0IIDnRv6QMEh AraNLeyQTToTb9ziL96b8MjipVG+9fXSatUA/zGrqcKUcwxrbGGswlv0dj4rZjjS n01RA2MbAiCMucRk5ZpZo6k12Vwi71aXJ/20hrMfFuzEh2TNnYoInW/zGYfUnM0l Efle/7Iz7OvPI6L7lKv2Fh/8/yI7he6SZTRKycR07RREUB6I+78aUQoi0/plh0KZ YgzmjqKVy0ARFA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:22:59 2025 by rpki-client