This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json) Hash identifier: xYS8Pi1jBOvi0ayvrsKpbFce/Wp9YpxG/iMIE+y7UC8= Subject key identifier: B7:89:AB:06:DE:39:21:D8:52:16:00:F3:8A:CE:57:6F:7F:AA:0C:B9 Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc Certificate serial: 019AF9546E664E383B93C387288C174EFF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft Manifest number: 04AA Signing time: Sun 07 Dec 2025 15:00:51 +0000 Manifest this update: Sun 07 Dec 2025 15:00:51 +0000 Manifest next update: Mon 08 Dec 2025 15:00:51 +0000 Files and hashes: 1: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=) 2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: Ra4jfxr/vDIvahRNPuvz0qzyWsrpGSNAs3YwBMVDzZ8=) 3: xkUeW_PwUlUASvf--c5chXoaFus.roa (hash: /Oa4g8Q6DrNk3m323+ds3bthVQQSIsVnBGQZ3q3zNQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:6e:66:4e:38:3b:93:c3:87:28:8c:17:4e:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503251db69693362a927e2b130467945c54f0fc Validity Not Before: Dec 7 15:00:51 2025 GMT Not After : Dec 8 15:00:51 2025 GMT Subject: CN=b789ab06de3921d8521600f38ace576f7faa0cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:0d:5a:d3:9f:06:a1:14:15:e8:f6:e5:a2: b1:46:db:02:e7:e6:9f:1b:4c:db:c3:51:42:db:59: 8c:b9:6e:b0:dc:cc:d1:43:65:3e:db:63:08:7a:6a: 49:56:58:16:5b:ed:09:44:22:64:a4:73:e1:bf:68: 78:28:f0:b3:b7:10:87:fb:01:d9:e5:da:ea:06:64: d5:1a:ee:02:31:46:e3:52:b5:59:96:00:13:25:bd: 95:8e:a7:a7:82:2b:75:7e:a8:64:d4:38:f5:bc:49: 93:1f:8a:01:68:74:65:5e:de:ac:2b:8b:d5:30:8a: 52:b5:4d:a7:a9:c0:ed:59:c5:ea:b0:36:83:7a:1f: c4:9c:bc:4c:43:02:e3:a5:a3:40:03:48:10:40:19: 13:30:d9:75:ae:07:c2:9b:51:11:aa:0c:8a:17:af: 0c:1b:36:14:ba:34:7f:80:6f:fc:d1:e9:41:fa:f3: 83:c0:de:c9:fd:cc:fc:3e:0b:28:0f:78:50:ae:b0: f4:1d:20:b5:ff:ec:2c:93:49:e2:c6:51:73:19:15: 8d:01:99:39:09:cb:d4:96:ab:e3:1f:07:b9:33:99: 94:04:ec:a5:e1:ed:a2:02:59:97:b7:ae:10:57:a2: 0c:fb:99:17:15:ad:22:da:fa:a0:12:1e:57:a1:4b: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:AB:06:DE:39:21:D8:52:16:00:F3:8A:CE:57:6F:7F:AA:0C:B9 X509v3 Authority Key Identifier: keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:b8:15:cf:3b:f8:6e:c2:80:9c:ef:5e:39:4d:ba:34:6e: 32:ee:0f:20:c2:19:be:34:e9:48:86:4b:54:ca:f7:b9:38:dd: 02:a8:4c:a8:0c:fc:16:e8:40:68:13:af:99:39:bc:d5:3f:af: e6:8c:fe:3c:5b:fe:79:7a:51:56:5d:27:a4:a5:06:86:71:76: c1:08:93:01:98:e1:35:17:ac:2d:4e:8d:a8:4d:9a:d0:ce:56: d4:66:ca:38:ae:e6:55:e2:ba:fb:eb:fa:41:2a:27:9f:05:f9: 39:13:47:c5:a8:d6:5a:9e:6d:4c:b3:a3:e3:d6:a2:23:5d:24: ab:e4:cf:5b:ad:31:4d:bd:eb:7c:78:40:aa:e5:1f:3d:d0:f3: 1a:77:f4:68:7f:38:a3:8d:0c:ae:fd:79:4d:7e:4d:78:16:77: 15:6a:61:c2:3a:63:92:c0:fa:fb:ee:16:f0:6b:f3:2e:21:5a: 23:cb:cf:83:3e:12:2d:8a:22:0c:c6:c6:f3:ff:d0:ee:23:2f: 80:c4:87:2f:86:1e:97:e7:b7:6d:6c:da:2a:7a:04:d3:31:64: bc:17:37:51:cd:22:88:23:f6:59:d4:55:d6:10:13:96:41:bd: 94:a6:16:34:37:bc:71:83:cf:dd:27:51:58:84:f8:d1:a1:f1: 97:e4:75:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VG5mTjg7k8OHKIwXTv8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1 NGYwZmMwHhcNMjUxMjA3MTUwMDUxWhcNMjUxMjA4MTUwMDUxWjAzMTEwLwYDVQQD EyhiNzg5YWIwNmRlMzkyMWQ4NTIxNjAwZjM4YWNlNTc2ZjdmYWEwY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA420NWtOfBqEUFej25aKxRtsC5+af G0zbw1FC21mMuW6w3MzRQ2U+22MIempJVlgWW+0JRCJkpHPhv2h4KPCztxCH+wHZ 5drqBmTVGu4CMUbjUrVZlgATJb2Vjqengit1fqhk1Dj1vEmTH4oBaHRlXt6sK4vV MIpStU2nqcDtWcXqsDaDeh/EnLxMQwLjpaNAA0gQQBkTMNl1rgfCm1ERqgyKF68M GzYUujR/gG/80elB+vODwN7J/cz8PgsoD3hQrrD0HSC1/+wsk0nixlFzGRWNAZk5 CcvUlqvjHwe5M5mUBOyl4e2iAlmXt64QV6IM+5kXFa0i2vqgEh5XoUvXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeJqwbeOSHYUhYA84rOV29/qgy5MB8GA1UdIwQY MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It M2NiYWQ1YjkwNGI1LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1 LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ764Fc87 +G7CgJzvXjlNujRuMu4PIMIZvjTpSIZLVMr3uTjdAqhMqAz8FuhAaBOvmTm81T+v 5oz+PFv+eXpRVl0npKUGhnF2wQiTAZjhNResLU6NqE2a0M5W1GbKOK7mVeK6++v6 QSonnwX5ORNHxajWWp5tTLOj49aiI10kq+TPW60xTb3rfHhAquUfPdDzGnf0aH84 o40Mrv15TX5NeBZ3FWphwjpjksD6++4W8GvzLiFaI8vPgz4SLYoiDMbG8//Q7iMv gMSHL4Yel+e3bWzaKnoE0zFkvBc3Uc0iiCP2WdRV1hATlkG9lKYWNDe8cYPP3SdR WIT40aHxl+R1Qw== -----END CERTIFICATE-----Generated at Sun Dec 7 20:37:46 2025 by rpki-client