This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json) Hash identifier: gcNxCU3C7B4yEOJvFqLf78FL61puT92g0daHibLOdfQ= Subject key identifier: 43:B8:71:25:C7:13:E7:55:23:68:DF:17:0A:A9:01:74:71:B1:6C:9B Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Certificate serial: 019B593EDD7AFB98CF2EEB67F6B68BA9CDFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft Manifest number: 05CD Signing time: Fri 26 Dec 2025 06:00:50 +0000 Manifest this update: Fri 26 Dec 2025 06:00:50 +0000 Manifest next update: Sat 27 Dec 2025 06:00:50 +0000 Files and hashes: 1: 0lKYtxr1N69uuVTtKw9J4CN3Eb8.roa (hash: MtKKDqEwQK8oLNrI5q7cgTy3r/JPJS+wfQHFJIbjFJ8=) 2: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=) 3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: m0mjDa2jN39ugWUcr4Dtm/8jWiw+nwAf9cEosLyN8MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:dd:7a:fb:98:cf:2e:eb:67:f6:b6:8b:a9:cd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Validity Not Before: Dec 26 06:00:50 2025 GMT Not After : Dec 27 06:00:50 2025 GMT Subject: CN=43b87125c713e7552368df170aa9017471b16c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d9:15:b7:26:6e:17:c0:e2:08:9e:42:02: 5a:a4:24:e6:3c:79:0b:22:11:ce:73:5f:c9:fb:61: ac:d7:4b:19:41:95:d3:ab:fd:10:91:b2:52:3a:25: 4b:21:f5:ea:e9:71:b1:36:be:9e:95:42:ba:77:0e: 0d:b1:d6:7b:20:c9:72:3d:fe:63:b8:1b:1f:c1:92: 27:0e:26:c0:a2:d3:e6:d5:36:1d:4d:a5:a4:01:7f: 65:84:0d:9c:ca:80:e8:cc:fb:b1:c4:a8:ed:18:8a: 29:b4:cb:e8:ec:14:54:61:e7:30:b0:6c:ea:82:a6: 6d:3b:a1:23:32:16:da:ec:16:20:63:c4:c1:14:92: 50:ee:b9:66:6a:96:46:46:e0:6e:1c:3c:de:2d:f1: 30:c8:5b:1a:eb:8c:74:d7:b9:c4:40:c2:2d:db:1f: db:b8:5e:6e:a5:b6:74:d1:b9:a3:e9:fd:7e:47:1d: 6c:ac:f7:cb:bb:fc:46:b2:70:0b:a9:81:37:0b:ad: 9c:99:5e:62:6b:fa:67:b9:55:84:02:ef:d8:22:6e: 8d:20:b7:1c:e3:36:6b:84:89:1c:a1:b0:99:2d:b0: 49:eb:c4:ee:b0:00:ce:6a:98:d3:e7:c0:d0:bc:fd: 62:2a:49:14:2a:ad:a9:ca:ea:ae:ba:6d:10:d2:61: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:71:25:C7:13:E7:55:23:68:DF:17:0A:A9:01:74:71:B1:6C:9B X509v3 Authority Key Identifier: keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f9:37:c8:1a:4e:22:9a:c0:99:96:4d:e4:93:9b:4e:91:6c: 81:b1:af:88:08:45:9c:95:82:e9:a0:c8:da:cc:31:dc:28:15: c0:ab:09:e9:27:8e:f7:dc:7b:a3:ee:27:f4:88:a2:eb:45:07: fd:b2:2d:26:45:d7:95:56:5f:b1:8b:d3:89:b8:21:a7:b9:49: d1:25:f8:40:a5:32:11:d3:c2:5e:b6:2e:c1:3a:23:3c:30:73: 7d:1f:34:99:cf:c5:37:c0:f1:01:b8:f5:60:39:2e:c4:9b:48: a8:8c:98:74:65:05:d0:d9:c6:84:eb:93:eb:30:2b:7c:08:fd: 9c:3b:0a:a1:2a:be:35:5f:9c:da:b0:9f:c7:d3:8a:71:13:30: 49:ff:eb:74:df:3e:85:ff:1e:dd:2f:8f:3f:71:44:08:cf:02: dd:ea:08:63:2b:91:2e:bb:86:74:b0:17:78:2a:1f:1f:ae:3b: 52:a1:47:e3:e4:9e:b1:26:e1:17:54:45:86:76:2f:85:99:e5: 20:2b:39:bf:f7:bd:c4:13:5c:e8:ef:82:e0:7e:5c:13:aa:be: e6:f2:37:de:c0:8f:93:ca:cd:ad:ea:d1:bc:7e:d0:51:ab:db: fa:44:d1:84:8f:f5:3e:16:83:b9:19:6a:aa:8b:6f:e6:1d:da: d1:f1:c8:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPt16+5jPLutn9raLqc36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj ZTk2MjQwHhcNMjUxMjI2MDYwMDUwWhcNMjUxMjI3MDYwMDUwWjAzMTEwLwYDVQQD Eyg0M2I4NzEyNWM3MTNlNzU1MjM2OGRmMTcwYWE5MDE3NDcxYjE2YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV3ZFbcmbhfA4gieQgJapCTmPHkL IhHOc1/J+2Gs10sZQZXTq/0QkbJSOiVLIfXq6XGxNr6elUK6dw4NsdZ7IMlyPf5j uBsfwZInDibAotPm1TYdTaWkAX9lhA2cyoDozPuxxKjtGIoptMvo7BRUYecwsGzq gqZtO6EjMhba7BYgY8TBFJJQ7rlmapZGRuBuHDzeLfEwyFsa64x017nEQMIt2x/b uF5upbZ00bmj6f1+Rx1srPfLu/xGsnALqYE3C62cmV5ia/pnuVWEAu/YIm6NILcc 4zZrhIkcobCZLbBJ68TusADOapjT58DQvP1iKkkUKq2pyuquum0Q0mFbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO4cSXHE+dVI2jfFwqpAXRxsWybMB8GA1UdIwQY MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt ZWE3MGEyOWM3NmYwLzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofk3yBpO IprAmZZN5JObTpFsgbGviAhFnJWC6aDI2swx3CgVwKsJ6SeO99x7o+4n9Iii60UH /bItJkXXlVZfsYvTibghp7lJ0SX4QKUyEdPCXrYuwTojPDBzfR80mc/FN8DxAbj1 YDkuxJtIqIyYdGUF0NnGhOuT6zArfAj9nDsKoSq+NV+c2rCfx9OKcRMwSf/rdN8+ hf8e3S+PP3FECM8C3eoIYyuRLruGdLAXeCofH647UqFH4+SesSbhF1RFhnYvhZnl ICs5v/e9xBNc6O+C4H5cE6q+5vI33sCPk8rNrerRvH7QUavb+kTRhI/1PhaDuRlq qotv5h3a0fHIgg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:55 2025 by rpki-client