This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft File: VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json) Hash identifier: G4/rt5UJSX8/LmEHckiKvVgSZ9+TTLicVcVJOQGbkVw= Subject key identifier: A4:BD:9E:8E:44:20:89:A0:EF:35:1D:8D:53:EB:6B:90:EA:E6:7A:3D Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F Certificate issuer: /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f Certificate serial: 019B0E927C8B31BF5B450321133FD66A8EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft Manifest number: 08B7 Signing time: Thu 11 Dec 2025 18:00:39 +0000 Manifest this update: Thu 11 Dec 2025 18:00:39 +0000 Manifest next update: Fri 12 Dec 2025 18:00:39 +0000 Files and hashes: 1: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: +eAKevyhpR5wrXHm60qcUQjUXdePEVQ2g2QaDU8U7WI=) 2: ZgXd4-iRm-6EfiiRbptDsH9YV00.roa (hash: IdlINd8LGSye4C+J8uo8raNO879fzxKpQdAtnUj3Zr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:7c:8b:31:bf:5b:45:03:21:13:3f:d6:6a:8e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f Validity Not Before: Dec 11 18:00:39 2025 GMT Not After : Dec 12 18:00:39 2025 GMT Subject: CN=a4bd9e8e442089a0ef351d8d53eb6b90eae67a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:72:2b:f8:d2:1f:9d:8e:5c:a6:91:bd:9c: a0:02:0d:f6:74:97:2b:dc:80:45:9b:16:14:9a:e2: 68:47:c3:ee:1f:98:36:cc:86:63:df:51:0c:fb:c1: ae:b6:ab:2f:92:b0:48:89:c4:e2:c4:bd:12:b9:e2: 73:9c:9d:98:40:ff:d6:a7:70:34:ea:45:da:b3:14: 27:e5:e2:f3:14:95:4d:0b:e2:d8:b3:32:2f:02:94: b0:bd:b5:cb:20:7e:e5:05:01:8b:ec:b9:f1:9d:6d: 3d:37:13:90:ae:2f:98:64:30:10:f4:cc:a5:c6:94: 5c:f8:4a:96:3d:a4:93:d3:27:37:c7:6b:43:1f:d7: bf:e1:bf:81:51:bd:f3:58:24:ec:bb:fc:a4:99:62: 5e:5d:f1:4d:c7:bf:4e:a6:0b:65:68:08:34:4c:e9: 56:c2:c4:c0:4b:bc:9d:f3:8c:0d:26:51:b5:6b:fb: 05:b5:64:c6:2b:b3:f3:c7:9c:4c:52:51:6a:6f:4d: 54:eb:af:45:97:b1:97:1d:a0:c4:08:6d:a8:db:a2: 7c:d1:3d:39:e3:e9:f2:74:53:ba:eb:57:f9:04:ad: 66:d8:be:ef:c5:b0:e2:13:a0:c2:03:bd:c3:73:85: 02:d6:bd:8e:5c:1e:8c:bd:a9:ad:50:ee:d5:73:21: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:9E:8E:44:20:89:A0:EF:35:1D:8D:53:EB:6B:90:EA:E6:7A:3D X509v3 Authority Key Identifier: keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:79:df:47:1e:52:95:3d:f5:e0:6f:e9:24:ae:f2:08:d9:23: 0a:18:27:28:56:99:a0:0d:43:5e:e1:07:f8:10:e3:db:ef:c0: 6c:64:e6:1f:94:fb:f3:11:55:66:d6:f8:45:ea:65:7e:4d:20: 5d:dd:a1:d6:80:6b:09:5d:29:bf:38:4b:e7:35:80:2c:a3:0d: 58:1c:9b:a9:b9:cb:33:a5:a1:7a:60:d3:73:1a:34:d2:ca:d2: 57:f8:11:f0:d5:28:70:ac:b0:4c:36:f1:d7:6d:60:0f:8e:fb: 6c:1d:07:e1:b2:9e:51:bc:6b:fc:22:a8:6c:df:11:05:e0:0e: 2f:8f:1e:fa:db:4d:cf:9e:a8:79:3f:40:3c:36:c3:db:97:4e: e8:c1:ce:d0:8f:34:5b:ca:5f:88:51:8f:c8:19:82:ff:1b:9b: 6c:bb:11:6f:0b:6f:49:ba:e2:96:02:00:e8:a1:05:4e:02:52: e6:52:35:3e:20:c1:c7:cf:da:28:b2:06:65:19:83:ea:f1:27: 86:81:a7:41:e3:00:8e:4b:cd:cb:21:96:f0:d5:9f:ad:d4:b5: 2d:fd:53:e8:0d:80:1e:8a:01:a9:fc:54:26:29:47:05:cc:3f: 0c:7b:03:a3:7a:a4:cc:dd:77:a9:f1:c8:0c:26:3f:5c:10:7e: e9:89:73:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOknyLMb9bRQMhEz/Wao7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDhiOWQ1Yjg1MTcxZjcyNjQyMzhiMjdhMDMwNmM1NmNm YjZiNGYwHhcNMjUxMjExMTgwMDM5WhcNMjUxMjEyMTgwMDM5WjAzMTEwLwYDVQQD EyhhNGJkOWU4ZTQ0MjA4OWEwZWYzNTFkOGQ1M2ViNmI5MGVhZTY3YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ZyK/jSH52OXKaRvZygAg32dJcr 3IBFmxYUmuJoR8PuH5g2zIZj31EM+8GutqsvkrBIicTixL0SueJznJ2YQP/Wp3A0 6kXasxQn5eLzFJVNC+LYszIvApSwvbXLIH7lBQGL7LnxnW09NxOQri+YZDAQ9Myl xpRc+EqWPaST0yc3x2tDH9e/4b+BUb3zWCTsu/ykmWJeXfFNx79OpgtlaAg0TOlW wsTAS7yd84wNJlG1a/sFtWTGK7Pzx5xMUlFqb01U669Fl7GXHaDECG2o26J80T05 4+nydFO661f5BK1m2L7vxbDiE6DCA73Dc4UC1r2OXB6MvamtUO7VcyEDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS9no5EIImg7zUdjVPra5Dq5no9MB8GA1UdIwQY MBaAFFRIudW4UXH3JkI4snoDBsVs+2tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWIt YjIyM2M3MmE1NTkzLzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWItYjIyM2M3MmE1NTkz LzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHnfRx5S lT314G/pJK7yCNkjChgnKFaZoA1DXuEH+BDj2+/AbGTmH5T78xFVZtb4Replfk0g Xd2h1oBrCV0pvzhL5zWALKMNWBybqbnLM6WhemDTcxo00srSV/gR8NUocKywTDbx 121gD477bB0H4bKeUbxr/CKobN8RBeAOL48e+ttNz56oeT9APDbD25dO6MHO0I80 W8pfiFGPyBmC/xubbLsRbwtvSbrilgIA6KEFTgJS5lI1PiDBx8/aKLIGZRmD6vEn hoGnQeMAjkvNyyGW8NWfrdS1Lf1T6A2AHooBqfxUJilHBcw/DHsDo3qkzN13qfHI DCY/XBB+6Ylz2A== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:12 2025 by rpki-client