This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json) Hash identifier: Xa5WIMHo9sXSDB0JLakSHyW+Rd7wlU8WGvUM2//mV18= Subject key identifier: DA:DC:13:98:DF:83:2F:AF:84:8F:CD:65:9C:9E:41:86:68:3E:78:56 Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Certificate serial: 019B202B7561864EEAEC77406183B17D04FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft Manifest number: 0B74 Signing time: Mon 15 Dec 2025 04:01:17 +0000 Manifest this update: Mon 15 Dec 2025 04:01:17 +0000 Manifest next update: Tue 16 Dec 2025 04:01:17 +0000 Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: cXIjO5osR1tI7Hf4lnH936tf8W7raWR84gAzfGIdChE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:75:61:86:4e:ea:ec:77:40:61:83:b1:7d:04:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Validity Not Before: Dec 15 04:01:17 2025 GMT Not After : Dec 16 04:01:17 2025 GMT Subject: CN=dadc1398df832faf848fcd659c9e4186683e7856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:dc:2f:91:f2:a2:01:fe:d1:40:1a:ce:11: c5:2e:6a:41:30:68:c4:21:c6:8b:b2:39:a5:46:d5: df:fe:e9:2a:d6:f1:8f:d2:00:9a:3f:72:31:af:44: ce:b2:40:26:ea:c1:0a:1e:3c:05:52:e5:e5:88:67: 67:78:ca:94:04:e1:0a:67:48:6d:3a:47:38:7c:30: 97:10:e6:d1:82:40:f6:52:43:08:5f:4d:50:c3:8d: 2c:34:d2:4c:dd:b7:1e:0f:e6:ae:59:8c:fe:6c:63: 2f:6c:50:3c:50:e7:50:e7:71:b2:ea:35:f7:09:35: 3c:5c:c3:32:19:70:e3:b4:3c:1a:ba:ba:c7:8a:17: b9:d5:49:3a:91:fd:ec:58:48:3b:53:c9:e5:ef:1b: a1:d2:bf:01:61:1c:e4:46:26:04:a6:39:f9:72:88: 85:24:cb:7e:87:f4:e3:b6:1d:f9:c2:8c:bb:cb:76: 16:a0:63:d6:2d:c5:64:4f:0d:0e:1d:a5:f4:34:e2: 6f:db:05:2f:b2:ca:58:27:a2:3c:9d:80:0e:1d:e0: bc:7a:3a:4c:63:bf:8b:05:7c:86:0a:02:de:17:62: 3c:a1:f0:9d:a5:0e:70:f4:79:d9:b4:dd:19:12:d6: 03:70:75:dd:63:a6:22:4d:a4:cc:7e:e1:ee:1e:6a: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:13:98:DF:83:2F:AF:84:8F:CD:65:9C:9E:41:86:68:3E:78:56 X509v3 Authority Key Identifier: keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0c:fb:03:87:c0:e1:1c:92:ba:58:86:ae:ef:ed:b1:d2:62: 82:3c:ff:40:76:fb:b9:d1:6e:23:66:88:da:83:34:47:fc:4c: c9:17:6e:09:d3:4d:ff:1e:f8:d2:ea:ff:99:f4:2f:34:84:b8: 55:7b:83:74:78:dc:5a:91:96:f3:75:bb:74:74:d9:cc:eb:41: c6:e7:c0:a5:51:ff:1a:61:76:bd:a4:77:b8:b4:61:1e:1f:ef: 2d:82:04:5b:ed:16:68:cd:ba:d1:2f:fa:eb:ed:cc:77:81:b0: ef:3d:cb:88:fd:82:4f:5b:bb:0e:1e:b0:59:c8:70:01:b5:97: c4:ce:51:7d:44:10:6f:4c:3e:c6:7c:a2:43:68:ca:0b:f4:78: a3:55:ca:2d:c8:12:18:73:8a:fc:87:e3:ea:47:f2:4f:ba:d6: 67:43:38:c3:5b:cf:42:9f:ef:3f:9d:d4:84:63:51:2b:3c:aa: f0:bf:6c:3f:ac:e3:c5:3f:03:8e:de:f4:d7:53:04:83:83:df: a4:90:9a:1a:26:43:b5:ec:d1:fa:4b:83:a4:71:f4:08:24:33: 42:61:8b:76:c7:84:5b:5a:a5:e5:67:c0:8c:56:bf:bd:54:3e: 7d:46:25:ff:8d:31:fd:71:84:b9:7f:d3:9b:bf:75:b0:5a:61: 71:97:30:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK3Vhhk7q7HdAYYOxfQT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi ZWUzNjgwHhcNMjUxMjE1MDQwMTE3WhcNMjUxMjE2MDQwMTE3WjAzMTEwLwYDVQQD EyhkYWRjMTM5OGRmODMyZmFmODQ4ZmNkNjU5YzllNDE4NjY4M2U3ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nrcL5HyogH+0UAazhHFLmpBMGjE IcaLsjmlRtXf/ukq1vGP0gCaP3Ixr0TOskAm6sEKHjwFUuXliGdneMqUBOEKZ0ht Okc4fDCXEObRgkD2UkMIX01Qw40sNNJM3bceD+auWYz+bGMvbFA8UOdQ53Gy6jX3 CTU8XMMyGXDjtDwaurrHihe51Uk6kf3sWEg7U8nl7xuh0r8BYRzkRiYEpjn5coiF JMt+h/Tjth35woy7y3YWoGPWLcVkTw0OHaX0NOJv2wUvsspYJ6I8nYAOHeC8ejpM Y7+LBXyGCgLeF2I8ofCdpQ5w9HnZtN0ZEtYDcHXdY6YiTaTMfuHuHmr+ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrcE5jfgy+vhI/NZZyeQYZoPnhWMB8GA1UdIwQY MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAz7A4fA 4RySuliGru/tsdJigjz/QHb7udFuI2aI2oM0R/xMyRduCdNN/x740ur/mfQvNIS4 VXuDdHjcWpGW83W7dHTZzOtBxufApVH/GmF2vaR3uLRhHh/vLYIEW+0WaM260S/6 6+3Md4Gw7z3LiP2CT1u7Dh6wWchwAbWXxM5RfUQQb0w+xnyiQ2jKC/R4o1XKLcgS GHOK/Ifj6kfyT7rWZ0M4w1vPQp/vP53UhGNRKzyq8L9sP6zjxT8Djt7011MEg4Pf pJCaGiZDtezR+kuDpHH0CCQzQmGLdseEW1ql5WfAjFa/vVQ+fUYl/40x/XGEuX/T m791sFphcZcwvg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:18 2025 by rpki-client