This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json) Hash identifier: TDMt+YzOVEd/gOB53tbSwYkHX+A8kIPg6qoinMzjm/I= Subject key identifier: A5:00:0B:8A:56:16:28:06:CD:77:B7:25:FF:AF:17:53:6A:69:7B:11 Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Certificate serial: 019B33E8DA96CEE193CDD05A8B0AC085D85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft Manifest number: 048A Signing time: Fri 19 Dec 2025 00:00:56 +0000 Manifest this update: Fri 19 Dec 2025 00:00:56 +0000 Manifest next update: Sat 20 Dec 2025 00:00:56 +0000 Files and hashes: 1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=) 2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: 3wRH/B1IuaJlx3Taka12pNhPeOSwoafLjQDMeY3PbNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:da:96:ce:e1:93:cd:d0:5a:8b:0a:c0:85:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Validity Not Before: Dec 19 00:00:56 2025 GMT Not After : Dec 20 00:00:56 2025 GMT Subject: CN=a5000b8a56162806cd77b725ffaf17536a697b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:3e:92:41:b5:7f:51:5d:aa:d0:08:37:7d: 60:ad:f7:e5:82:10:6a:a7:35:33:b3:18:b7:3e:0d: d1:12:75:cf:19:9b:8d:ac:e5:1d:cb:ee:87:c7:63: 76:ca:c8:01:6f:13:4b:d1:38:38:1e:e4:d5:67:f9: 19:f0:e7:bb:ba:e6:8e:f3:3a:47:1a:d7:1a:54:d4: 04:1d:50:0a:80:fb:14:7e:47:5c:2f:e5:85:44:82: 0d:f5:e9:f6:38:2b:e7:14:4f:fb:f2:a2:38:26:64: 48:99:44:c1:9f:3d:f2:85:36:3e:67:5b:22:77:35: 40:8c:39:db:ac:91:5d:07:fe:01:1d:cc:58:f2:32: 7e:5c:23:ba:9a:4c:1b:f6:74:2c:3c:12:3c:ea:84: df:79:74:18:8e:71:ec:48:68:41:22:c1:48:26:5b: 68:64:c1:28:8a:44:b2:29:5f:98:57:e4:e4:59:a4: 40:84:a3:8a:83:e2:90:78:d0:2e:2f:0b:97:6e:14: f8:76:b9:b7:74:1f:3a:9f:84:6a:92:91:6d:08:bf: f1:10:59:a3:a9:d4:75:a9:24:7b:ce:f9:31:e2:dd: 87:b4:8c:a7:ff:e1:69:b4:a0:24:59:01:45:dc:ed: 69:b5:8d:7d:8e:e0:48:f7:91:00:1c:1f:41:91:a1: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:0B:8A:56:16:28:06:CD:77:B7:25:FF:AF:17:53:6A:69:7B:11 X509v3 Authority Key Identifier: keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:4a:60:74:44:1f:55:5a:9b:92:96:8e:52:47:2e:aa:47: f9:6e:46:50:8d:bb:20:4d:c5:2a:8d:f1:0a:af:c7:96:5b:4e: 07:ee:87:b1:40:57:47:00:e2:ad:30:1a:38:92:18:a0:24:46: 96:e8:35:20:2b:54:3b:04:af:19:f4:97:62:4f:03:04:c4:df: c8:71:2d:d3:a4:35:04:75:15:10:eb:e5:d4:a7:37:a3:ff:59: 2d:3e:85:c0:d5:d3:46:cc:59:8f:27:a9:5f:3d:b2:eb:e6:1f: d6:13:10:a2:b2:3f:3f:0d:20:b1:fe:9d:50:ba:13:23:6f:32: d1:63:6e:08:07:a6:b3:69:c0:dd:14:ef:ab:f5:70:66:2a:1b: 24:a3:65:d8:93:3d:d7:2f:c7:f0:cf:a6:8c:58:4a:92:c1:20: d6:e0:8a:2d:13:da:81:f3:8d:3e:72:3e:6f:e8:fd:69:dc:15: 44:2a:90:30:76:f1:7d:4c:ff:d2:2d:65:15:d3:23:17:c1:84: 68:f3:28:b7:be:29:22:81:7a:2d:98:f2:e3:fc:b7:97:e4:35: e3:b0:cb:f3:e7:dc:6e:c4:66:c5:b0:a8:1c:a0:d2:73:e3:56: 99:20:78:f7:80:d8:6b:f6:43:f6:72:fd:dd:a7:70:94:44:d2: dc:f4:67:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6NqWzuGTzdBaiwrAhdhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1 ZDE0ZWMwHhcNMjUxMjE5MDAwMDU2WhcNMjUxMjIwMDAwMDU2WjAzMTEwLwYDVQQD EyhhNTAwMGI4YTU2MTYyODA2Y2Q3N2I3MjVmZmFmMTc1MzZhNjk3YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXw+kkG1f1FdqtAIN31grfflghBq pzUzsxi3Pg3REnXPGZuNrOUdy+6Hx2N2ysgBbxNL0Tg4HuTVZ/kZ8Oe7uuaO8zpH GtcaVNQEHVAKgPsUfkdcL+WFRIIN9en2OCvnFE/78qI4JmRImUTBnz3yhTY+Z1si dzVAjDnbrJFdB/4BHcxY8jJ+XCO6mkwb9nQsPBI86oTfeXQYjnHsSGhBIsFIJlto ZMEoikSyKV+YV+TkWaRAhKOKg+KQeNAuLwuXbhT4drm3dB86n4RqkpFtCL/xEFmj qdR1qSR7zvkx4t2HtIyn/+FptKAkWQFF3O1ptY19juBI95EAHB9BkaHgdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUAC4pWFigGzXe3Jf+vF1NqaXsRMB8GA1UdIwQY MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk5KYHRE H1Vam5KWjlJHLqpH+W5GUI27IE3FKo3xCq/HlltOB+6HsUBXRwDirTAaOJIYoCRG lug1ICtUOwSvGfSXYk8DBMTfyHEt06Q1BHUVEOvl1Kc3o/9ZLT6FwNXTRsxZjyep Xz2y6+Yf1hMQorI/Pw0gsf6dULoTI28y0WNuCAems2nA3RTvq/VwZiobJKNl2JM9 1y/H8M+mjFhKksEg1uCKLRPagfONPnI+b+j9adwVRCqQMHbxfUz/0i1lFdMjF8GE aPMot74pIoF6LZjy4/y3l+Q147DL8+fcbsRmxbCoHKDSc+NWmSB494DYa/ZD9nL9 3adwlETS3PRnnw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:42:06 2025 by rpki-client