This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json) Hash identifier: BdvzaQ73byoGzyodDr748ax9DLRDzNGslIk1oPuf+PY= Subject key identifier: A3:8C:72:15:C9:47:56:49:CB:52:29:75:62:23:60:6B:C4:01:AE:FA Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937 Certificate serial: 019B1A974FB1BA1C5078359FAE321C6AB18D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 02:01:22 +0000 Manifest this update: Sun 14 Dec 2025 02:01:22 +0000 Manifest next update: Mon 15 Dec 2025 02:01:22 +0000 Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=) 2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: MwQRBd6mCzy70rh9LkDDDewtUCukq8UWBACNwOCNMQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:4f:b1:ba:1c:50:78:35:9f:ae:32:1c:6a:b1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937 Validity Not Before: Dec 14 02:01:22 2025 GMT Not After : Dec 15 02:01:22 2025 GMT Subject: CN=a38c7215c9475649cb5229756223606bc401aefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:57:40:03:e4:e7:cb:f7:86:8e:1b:40:6d: 26:ac:7d:15:ae:7d:ed:a4:ab:66:e9:12:44:2e:be: a7:43:4f:97:a1:8c:69:06:6c:10:d4:58:3f:95:12: 39:3d:d0:97:a1:4a:46:d9:0d:6c:29:ee:61:12:1e: aa:b2:92:26:8f:b1:14:1d:a6:7c:ae:71:82:f8:6b: df:e7:95:0a:63:89:01:e3:ee:31:e3:38:f0:19:53: 3a:56:78:85:d9:c0:3b:4d:99:ea:71:24:72:49:87: c0:70:4a:0c:5f:26:68:3e:2d:43:67:ff:6d:c5:96: e8:8e:e6:d4:4c:2d:71:e9:32:20:27:7c:f0:6a:01: c8:91:74:04:b8:46:2c:03:23:0a:44:a2:0d:99:33: 2b:ce:79:be:e2:d4:5a:9b:49:72:d6:81:f1:8a:9b: 50:6c:86:a3:21:4a:0b:c6:11:b9:40:8d:aa:6f:89: 92:04:ba:7f:5b:b9:cf:54:07:e6:03:95:6f:9b:09: a2:10:34:f2:3d:e3:3f:fd:17:31:55:39:36:aa:30: d8:e9:4e:14:ec:ad:c2:4f:93:e6:66:8f:7b:66:b9: 7f:64:81:d0:80:c5:ab:f7:89:37:0f:b3:46:1e:bd: 32:79:26:12:87:55:cb:46:8b:fc:01:a7:2f:db:a2: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8C:72:15:C9:47:56:49:CB:52:29:75:62:23:60:6B:C4:01:AE:FA X509v3 Authority Key Identifier: keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:27:40:ec:a3:75:ad:ac:b8:e5:fa:cf:5f:3a:26:08:06: cd:41:08:e8:36:74:35:30:25:ff:2b:80:f8:30:a2:a6:78:ad: c6:c4:19:43:69:b6:3d:20:1d:99:f7:53:93:ef:64:a1:f4:4d: 16:ba:f9:33:46:09:63:0e:11:58:c3:e3:ae:e4:5c:7f:30:3d: 6c:23:84:d5:63:ff:b3:d2:b1:f3:8f:2d:fb:06:ef:50:c3:45: 3f:72:f0:65:dd:0f:b7:4e:19:04:fe:60:33:a1:7c:ba:f5:6b: 72:9b:d9:b1:bc:56:b4:7f:06:61:0e:81:22:94:e9:99:99:43: 73:9d:c3:06:d6:b2:42:f3:db:2f:65:a1:01:7d:5e:5f:22:d0: 9d:7e:b4:ad:df:56:80:5f:91:3b:4b:f7:25:7f:db:28:7e:de: 5b:de:59:fd:dc:c6:21:05:34:01:39:f6:42:44:83:df:3e:56: e4:ff:df:d4:cf:d9:c0:4f:18:8e:4d:ba:d5:11:e7:35:1a:6f: d0:37:d7:f6:49:f8:dd:44:c5:29:79:7b:3c:e0:31:7b:0a:21: 55:ee:0c:91:9f:19:b3:84:4f:f4:c8:2d:41:90:94:9e:f8:e8: 5e:54:b0:8c:40:91:36:d9:a4:96:56:81:9f:9c:26:7c:8d:8e: 0f:d0:7a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal0+xuhxQeDWfrjIcarGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy ODg5MzcwHhcNMjUxMjE0MDIwMTIyWhcNMjUxMjE1MDIwMTIyWjAzMTEwLwYDVQQD EyhhMzhjNzIxNWM5NDc1NjQ5Y2I1MjI5NzU2MjIzNjA2YmM0MDFhZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKRXQAPk58v3ho4bQG0mrH0Vrn3t pKtm6RJELr6nQ0+XoYxpBmwQ1Fg/lRI5PdCXoUpG2Q1sKe5hEh6qspImj7EUHaZ8 rnGC+Gvf55UKY4kB4+4x4zjwGVM6VniF2cA7TZnqcSRySYfAcEoMXyZoPi1DZ/9t xZbojubUTC1x6TIgJ3zwagHIkXQEuEYsAyMKRKINmTMrznm+4tRam0ly1oHxiptQ bIajIUoLxhG5QI2qb4mSBLp/W7nPVAfmA5VvmwmiEDTyPeM//RcxVTk2qjDY6U4U 7K3CT5PmZo97Zrl/ZIHQgMWr94k3D7NGHr0yeSYSh1XLRov8Aacv26L0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOMchXJR1ZJy1IpdWIjYGvEAa76MB8GA1UdIwQY MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt ZTJhOTIwNWE5ZDJhLzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJMnQOyj da2suOX6z186JggGzUEI6DZ0NTAl/yuA+DCipnitxsQZQ2m2PSAdmfdTk+9kofRN Frr5M0YJYw4RWMPjruRcfzA9bCOE1WP/s9Kx848t+wbvUMNFP3LwZd0Pt04ZBP5g M6F8uvVrcpvZsbxWtH8GYQ6BIpTpmZlDc53DBtayQvPbL2WhAX1eXyLQnX60rd9W gF+RO0v3JX/bKH7eW95Z/dzGIQU0ATn2QkSD3z5W5P/f1M/ZwE8Yjk261RHnNRpv 0DfX9kn43UTFKXl7POAxewohVe4MkZ8Zs4RP9MgtQZCUnvjoXlSwjECRNtmkllaB n5wmfI2OD9B6Kg== -----END CERTIFICATE-----Generated at Sun Dec 14 12:10:34 2025 by rpki-client