This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft File: VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json) Hash identifier: 9wjvhJr9PqjzOHP5cZRFhpl8AHpPtPGNfS5mAISGlYQ= Subject key identifier: 9E:3D:DD:5F:5B:1A:85:16:CB:DA:FD:AF:38:83:52:41:AF:83:E1:CE Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B Certificate issuer: /CN=56f82214f54379d7b34e1a103d658a131e70181b Certificate serial: 019AF31B80A1764DF1D6E2A527027A9F25F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: nT9CY+bCLPDYHCAnF9gLON8h0BgVWgkYVcTIk42Jz8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:a1:76:4d:f1:d6:e2:a5:27:02:7a:9f:25:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=9e3ddd5f5b1a8516cbdafdaf38835241af83e1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:8f:60:df:0e:3d:98:4c:5d:28:33:12:45: b1:23:8f:2c:7c:af:ca:a3:08:b6:4d:81:b1:ef:9e: 40:46:c9:fd:6a:34:f7:f8:81:d5:fd:e1:b5:f8:d8: 6c:4a:39:e1:9c:99:f3:1d:04:be:23:27:7c:d5:50: c4:47:80:15:8e:72:0d:ce:80:6c:31:bd:01:bd:f4: d1:b3:60:87:ff:e0:65:fa:21:60:31:69:17:3d:74: e7:e0:4d:32:25:0e:4c:32:e3:bf:67:c1:66:7f:90: 10:72:d8:61:f6:ed:15:98:e0:36:f9:bd:e5:30:b8: f8:3c:8e:d7:48:10:80:5c:0d:6a:a4:b3:ba:7c:e0: df:85:43:f0:cd:d6:e0:bd:7c:a7:71:6d:8c:32:a7: 78:de:21:76:82:92:ef:7e:ae:12:1a:1b:e3:59:a7: c0:d6:a5:f3:1f:2a:a1:4c:47:8b:54:30:90:8f:33: 8b:86:b6:49:cd:23:36:05:13:40:8a:f7:a6:c9:32: 3b:2b:97:a2:44:08:ff:41:55:a4:31:6e:98:07:40: 52:1f:6d:c8:82:cc:ff:f0:a3:d8:b2:4b:6e:5e:7b: 57:0e:80:0e:82:68:2b:3b:01:ab:d9:eb:4f:c6:e8: dd:81:ae:c4:f2:f8:00:ef:77:32:62:14:76:9e:98: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:DD:5F:5B:1A:85:16:CB:DA:FD:AF:38:83:52:41:AF:83:E1:CE X509v3 Authority Key Identifier: keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:66:1f:fc:10:5c:18:fa:8b:f0:3f:12:f8:13:0a:c6:e9:16: 9a:49:f7:ca:e3:98:65:46:59:b9:20:c3:99:8a:02:52:f0:ef: 63:2b:47:2b:7c:47:ff:0d:ba:58:c4:2b:7e:d3:29:61:23:0a: 54:ab:26:c9:ca:cc:c4:4a:8f:4c:37:25:22:37:a3:82:ea:c6: f1:af:ac:e8:5d:c9:54:2c:90:24:54:28:e3:6d:5f:1e:58:54: 57:70:f1:47:8d:40:1a:ff:e7:04:67:a6:af:80:87:b5:e7:f8: d8:ef:2f:aa:ab:be:0a:8e:e0:b6:86:ed:b6:76:b7:7b:9d:eb: d8:5b:83:77:39:fa:75:58:df:a8:38:45:c3:77:96:22:96:09: d8:60:49:8a:3a:b1:9a:fb:e6:d5:8c:de:a1:8a:5d:26:aa:58: 7c:56:29:06:4b:18:2d:18:aa:e5:c2:da:5b:87:ba:81:ed:ed: 05:10:b3:29:1d:e2:99:a3:52:d1:3f:b5:53:8a:04:c5:5d:03: a0:15:36:db:8e:a6:06:9c:41:e0:aa:b4:0d:1e:11:fc:bb:20: 91:22:8b:84:9b:a7:97:83:9a:16:70:45:4d:a9:a4:e4:69:d8: 9f:bb:1e:7d:a3:ed:36:3f:ce:f9:cb:3a:95:28:30:4b:9d:ea: 18:e6:bb:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4Chdk3x1uKlJwJ6nyX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjgyMjE0ZjU0Mzc5ZDdiMzRlMWExMDNkNjU4YTEzMWU3 MDE4MWIwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD Eyg5ZTNkZGQ1ZjViMWE4NTE2Y2JkYWZkYWYzODgzNTI0MWFmODNlMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYWPYN8OPZhMXSgzEkWxI48sfK/K owi2TYGx755ARsn9ajT3+IHV/eG1+NhsSjnhnJnzHQS+Iyd81VDER4AVjnINzoBs Mb0BvfTRs2CH/+Bl+iFgMWkXPXTn4E0yJQ5MMuO/Z8Fmf5AQcthh9u0VmOA2+b3l MLj4PI7XSBCAXA1qpLO6fODfhUPwzdbgvXyncW2MMqd43iF2gpLvfq4SGhvjWafA 1qXzHyqhTEeLVDCQjzOLhrZJzSM2BRNAivemyTI7K5eiRAj/QVWkMW6YB0BSH23I gsz/8KPYsktuXntXDoAOgmgrOwGr2etPxujdga7E8vgA73cyYhR2npj/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ493V9bGoUWy9r9rziDUkGvg+HOMB8GA1UdIwQY MBaAFFb4IhT1Q3nXs04aED1lihMecBgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTkt ZTU4MDllYmUyZDRiLzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTktZTU4MDllYmUyZDRi LzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2mYf/BBc GPqL8D8S+BMKxukWmkn3yuOYZUZZuSDDmYoCUvDvYytHK3xH/w26WMQrftMpYSMK VKsmycrMxEqPTDclIjejgurG8a+s6F3JVCyQJFQo421fHlhUV3DxR41AGv/nBGem r4CHtef42O8vqqu+Co7gtobttna3e53r2FuDdzn6dVjfqDhFw3eWIpYJ2GBJijqx mvvm1YzeoYpdJqpYfFYpBksYLRiq5cLaW4e6ge3tBRCzKR3imaNS0T+1U4oExV0D oBU2246mBpxB4Kq0DR4R/LsgkSKLhJunl4OaFnBFTamk5GnYn7sefaPtNj/O+cs6 lSgwS53qGOa7AA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:42 2025 by rpki-client