This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json) Hash identifier: QoywNwmHgOnQ2FzuMSQuz+XqK6txkwp8sT2ewDupHKs= Subject key identifier: 4F:33:BE:0E:F7:7A:34:C6:81:63:3C:F7:D4:AC:C8:70:B2:A3:C3:DE Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Certificate serial: 019B22199D12B0A0A89408E5E730DAA069B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft Manifest number: 0D6B Signing time: Mon 15 Dec 2025 13:01:02 +0000 Manifest this update: Mon 15 Dec 2025 13:01:02 +0000 Manifest next update: Tue 16 Dec 2025 13:01:02 +0000 Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: 5fHoXu1vHkba3aX5/gmkfcf55lsVnemkxyf2fG2boYY=) 2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:9d:12:b0:a0:a8:94:08:e5:e7:30:da:a0:69:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Validity Not Before: Dec 15 13:01:02 2025 GMT Not After : Dec 16 13:01:02 2025 GMT Subject: CN=4f33be0ef77a34c681633cf7d4acc870b2a3c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:f4:09:73:71:86:14:d9:da:f9:21:8a:8d: e0:30:24:81:ca:4d:22:ad:36:91:9e:02:fb:bd:31: cb:a0:d8:1f:d7:e8:b0:e0:6d:64:18:e1:97:2a:16: 9b:8d:08:8c:a4:d9:b9:8f:04:94:a5:4a:38:24:d0: cd:2e:ea:89:af:68:f6:b8:71:23:e4:0e:4e:09:e6: 27:fb:4d:04:ca:10:82:ca:5d:ad:e2:7a:3c:ff:70: b6:71:02:54:5e:b0:6d:76:c6:b1:36:5f:e0:8d:a0: 47:bd:19:79:b9:c2:fa:6f:6d:3c:a1:c3:e6:7d:ca: ee:d4:19:12:b5:44:1c:15:27:20:a3:b6:92:92:fd: c8:7b:9c:0b:c3:b5:44:b1:8f:ea:a5:8c:da:a2:22: 92:04:23:12:4b:1b:38:1b:d0:94:7f:13:94:a9:10: 8a:64:a5:ff:9e:7c:63:57:03:27:54:08:fe:cd:43: 92:cb:c0:b0:48:9d:8d:db:ed:04:d4:06:3f:bc:a7: 9c:f5:3c:74:17:f8:d6:45:8a:57:b7:e4:ae:f6:23: e8:01:fb:98:e9:9e:05:f7:85:17:ca:76:39:be:e2: e7:05:7a:38:37:6e:f1:08:46:c6:72:23:56:11:63: bd:f4:4e:d1:d4:7b:f0:d6:0f:46:73:da:9c:51:f2: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:BE:0E:F7:7A:34:C6:81:63:3C:F7:D4:AC:C8:70:B2:A3:C3:DE X509v3 Authority Key Identifier: keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:76:3c:88:3a:b7:8f:6c:f5:74:1a:5b:c5:a9:2e:0f:16: 70:94:ee:b6:b5:31:47:c8:ef:76:4d:69:8c:00:d1:9b:58:2c: de:06:d8:1d:3b:54:27:36:d9:55:bf:07:23:23:7f:35:65:66: b5:0c:97:02:52:48:cc:e4:a6:67:e5:32:ac:d0:83:b6:b5:0f: f6:71:1b:8f:94:9e:e9:85:a5:03:6d:f7:b4:bc:77:bf:fe:e7: ed:4f:98:87:d0:9c:03:04:63:95:de:f5:a8:31:76:0e:91:fb: 10:b3:7b:b5:84:c5:3d:5e:7a:c4:53:3b:4d:67:1a:da:32:84: 37:8e:05:74:6d:94:09:b8:0f:f1:cb:e5:55:43:71:13:46:b7: 91:21:cf:82:d9:dc:73:27:d0:5c:28:c1:80:92:77:15:3d:1f: 86:f2:16:7e:9d:1c:76:ea:80:3f:31:f2:ea:55:8d:70:9c:4a: 51:40:c4:0b:b1:c2:12:20:9f:0a:9e:54:30:44:dc:69:96:8d: 38:03:e9:dc:6a:26:b9:51:10:e7:d8:b4:de:73:db:cd:19:46: 2d:93:bb:c7:42:a5:ac:bc:75:e9:bd:88:10:af:f3:20:2d:7c: eb:c6:ae:b7:97:d5:83:06:bc:ec:9e:4f:f9:40:4c:c1:f0:cf: dc:57:e9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGZ0SsKColAjl5zDaoGm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm MjQ0ZDMwHhcNMjUxMjE1MTMwMTAyWhcNMjUxMjE2MTMwMTAyWjAzMTEwLwYDVQQD Eyg0ZjMzYmUwZWY3N2EzNGM2ODE2MzNjZjdkNGFjYzg3MGIyYTNjM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWT0CXNxhhTZ2vkhio3gMCSByk0i rTaRngL7vTHLoNgf1+iw4G1kGOGXKhabjQiMpNm5jwSUpUo4JNDNLuqJr2j2uHEj 5A5OCeYn+00EyhCCyl2t4no8/3C2cQJUXrBtdsaxNl/gjaBHvRl5ucL6b208ocPm fcru1BkStUQcFScgo7aSkv3Ie5wLw7VEsY/qpYzaoiKSBCMSSxs4G9CUfxOUqRCK ZKX/nnxjVwMnVAj+zUOSy8CwSJ2N2+0E1AY/vKec9Tx0F/jWRYpXt+Su9iPoAfuY 6Z4F94UXynY5vuLnBXo4N27xCEbGciNWEWO99E7R1Hvw1g9Gc9qcUfLpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8zvg73ejTGgWM899SsyHCyo8PeMB8GA1UdIwQY MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1 LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq192PIg6 t49s9XQaW8WpLg8WcJTutrUxR8jvdk1pjADRm1gs3gbYHTtUJzbZVb8HIyN/NWVm tQyXAlJIzOSmZ+UyrNCDtrUP9nEbj5Se6YWlA233tLx3v/7n7U+Yh9CcAwRjld71 qDF2DpH7ELN7tYTFPV56xFM7TWca2jKEN44FdG2UCbgP8cvlVUNxE0a3kSHPgtnc cyfQXCjBgJJ3FT0fhvIWfp0cduqAPzHy6lWNcJxKUUDEC7HCEiCfCp5UMETcaZaN OAPp3GomuVEQ59i03nPbzRlGLZO7x0KlrLx16b2IEK/zIC1868aut5fVgwa87J5P +UBMwfDP3FfpPQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:12:47 2025 by rpki-client