This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json) Hash identifier: YLrb3kyCjfkZKzZCOXV85Ul++SiJI7+XNaykxHXyOHw= Subject key identifier: A8:E0:72:7D:E6:D7:4E:CA:A3:90:6A:6D:C4:03:F6:06:CA:A2:19:42 Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Certificate serial: 019AF3C043AE76108FEF745D844930A64504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft Manifest number: 0D53 Signing time: Sat 06 Dec 2025 13:00:55 +0000 Manifest this update: Sat 06 Dec 2025 13:00:55 +0000 Manifest next update: Sun 07 Dec 2025 13:00:55 +0000 Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: QEs5LWnoAJS9OOqqmAUqAAOLabaP/fFV0WvWSXBLTUU=) 2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:43:ae:76:10:8f:ef:74:5d:84:49:30:a6:45:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Validity Not Before: Dec 6 13:00:55 2025 GMT Not After : Dec 7 13:00:55 2025 GMT Subject: CN=a8e0727de6d74ecaa3906a6dc403f606caa21942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:27:b3:04:3e:5b:36:50:a7:27:20:1a:f0: 28:1f:c2:40:62:36:c3:05:5a:95:67:f4:a7:44:b1: f0:43:4a:6c:cf:09:68:c6:07:95:0c:8c:3a:7f:13: 86:41:38:18:56:87:bd:1e:49:9b:aa:0d:ba:20:bf: ac:b3:32:5e:5e:a9:f1:3a:a8:51:a0:c3:93:a3:8e: 5a:59:c1:9e:a5:0a:15:02:69:4e:dc:07:14:dc:df: 5b:15:54:72:6d:b7:48:54:f4:3c:bd:07:07:2c:a6: b0:cd:0e:ad:40:c7:f9:e8:91:c7:73:8a:d2:ff:12: d2:2a:e0:ab:c9:57:d1:e1:d3:e3:18:5a:fa:53:d0: c8:65:4e:61:b6:25:f6:10:21:fe:8f:9a:9a:55:f9: 9f:9d:08:93:f1:74:d3:ed:d5:e6:1d:07:0b:6d:bf: ac:d1:ec:b2:ef:43:9c:22:b2:13:e2:71:53:42:2b: 69:9d:15:a5:74:36:3a:4f:38:ce:9b:eb:13:57:65: 4b:25:a9:c8:1f:66:2b:ab:bf:29:93:54:b7:47:b0: 49:b5:91:f0:8a:52:69:6b:4d:01:c8:e3:38:b1:fa: ba:41:de:5b:eb:f0:bc:c8:11:b3:e0:83:99:d1:4c: 03:ac:9e:9f:23:54:8a:ab:9b:df:19:47:25:2b:c4: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E0:72:7D:E6:D7:4E:CA:A3:90:6A:6D:C4:03:F6:06:CA:A2:19:42 X509v3 Authority Key Identifier: keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f8:82:5a:4c:af:a9:a6:68:4a:e7:b7:3e:e8:2a:bc:f6:79: 50:25:dc:7b:75:3a:b1:10:0c:23:f8:cc:5e:57:c2:89:4f:38: 18:f4:53:24:c1:0d:ea:9c:0a:3f:22:ae:6c:67:23:4b:e7:b7: 7b:a3:c8:64:14:b9:a0:7b:9c:0c:a1:99:ac:57:15:98:a0:97: 6d:6b:ee:57:5d:a5:67:6c:df:76:b2:2b:aa:a5:de:d1:30:14: 7e:74:c0:34:80:df:53:48:b8:f5:cc:29:80:cb:8b:68:c1:94: 27:c5:6b:e4:7f:98:f3:bb:a9:67:c8:c0:d5:a7:d1:e1:c3:f1: 04:f2:da:bb:8e:08:17:34:e3:92:24:bf:b9:39:a9:95:64:4f: ed:fe:a4:19:13:34:5e:0b:d7:d6:62:cd:b9:41:f0:18:54:18: 02:c0:23:21:28:41:02:9e:eb:6a:40:85:73:c0:2c:32:81:08: 1d:a9:e4:30:0a:02:7b:83:f2:dd:2f:49:97:85:6d:6e:92:ae: 41:50:fc:8b:15:88:47:4b:d8:68:86:be:98:91:b8:2a:0c:92: d2:48:92:24:90:ef:0b:cb:dc:bb:5b:27:0d:ea:88:a2:95:b7: fe:bd:69:83:fd:e5:6d:a3:87:82:10:19:f8:58:c7:fd:9e:1b: bb:f5:08:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEOudhCP73RdhEkwpkUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm MjQ0ZDMwHhcNMjUxMjA2MTMwMDU1WhcNMjUxMjA3MTMwMDU1WjAzMTEwLwYDVQQD EyhhOGUwNzI3ZGU2ZDc0ZWNhYTM5MDZhNmRjNDAzZjYwNmNhYTIxOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HwnswQ+WzZQpycgGvAoH8JAYjbD BVqVZ/SnRLHwQ0pszwloxgeVDIw6fxOGQTgYVoe9Hkmbqg26IL+sszJeXqnxOqhR oMOTo45aWcGepQoVAmlO3AcU3N9bFVRybbdIVPQ8vQcHLKawzQ6tQMf56JHHc4rS /xLSKuCryVfR4dPjGFr6U9DIZU5htiX2ECH+j5qaVfmfnQiT8XTT7dXmHQcLbb+s 0eyy70OcIrIT4nFTQitpnRWldDY6TzjOm+sTV2VLJanIH2Yrq78pk1S3R7BJtZHw ilJpa00ByOM4sfq6Qd5b6/C8yBGz4IOZ0UwDrJ6fI1SKq5vfGUclK8TzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjgcn3m107Ko5BqbcQD9gbKohlCMB8GA1UdIwQY MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1 LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfiCWkyv qaZoSue3PugqvPZ5UCXce3U6sRAMI/jMXlfCiU84GPRTJMEN6pwKPyKubGcjS+e3 e6PIZBS5oHucDKGZrFcVmKCXbWvuV12lZ2zfdrIrqqXe0TAUfnTANIDfU0i49cwp gMuLaMGUJ8Vr5H+Y87upZ8jA1afR4cPxBPLau44IFzTjkiS/uTmplWRP7f6kGRM0 XgvX1mLNuUHwGFQYAsAjIShBAp7rakCFc8AsMoEIHankMAoCe4Py3S9Jl4VtbpKu QVD8ixWIR0vYaIa+mJG4KgyS0kiSJJDvC8vcu1snDeqIopW3/r1pg/3lbaOHghAZ +FjH/Z4bu/UI8g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:47:15 2025 by rpki-client