This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json) Hash identifier: F+AWvgI+toBYgjRZdWfaE3HXftwB68Nwq23HL29rIaI= Subject key identifier: 8B:8D:C6:71:0F:AD:87:8D:AE:2C:2D:71:8C:D8:65:2E:EE:EE:FD:30 Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2 Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2 Certificate serial: 019AF12DF8FF3D28AF58175477567A17727C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft Manifest number: 03D3 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: LNIBnZlVO0f5rYdWBiHTyoUzlrAyLcI8WPSlvnUBwNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f8:ff:3d:28:af:58:17:54:77:56:7a:17:72:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=8b8dc6710fad878dae2c2d718cd8652eeeeefd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:05:85:5a:c5:4f:c6:a9:82:2b:77:cd:11: a3:89:da:78:bc:54:0c:44:69:89:a0:f8:34:1d:10: 74:7e:aa:c1:e2:cd:fe:05:44:3c:29:69:4e:56:b8: b0:34:e8:74:cf:25:f7:56:03:83:53:f2:fa:10:fa: aa:4b:1f:8b:ef:8a:86:3b:e7:af:8c:33:88:ea:af: 6a:b9:43:f0:99:a3:d9:28:db:b6:35:69:d9:16:01: 0e:88:4a:ce:e0:77:5f:6c:d0:09:54:84:b3:af:44: 73:2a:aa:c9:08:34:e0:19:5e:08:80:f4:a7:c8:84: 0e:39:9b:53:ec:c1:50:5f:f9:0f:4f:fa:14:65:1b: 69:74:c0:9b:55:d0:b8:b0:af:d2:75:99:d7:50:78: de:f4:01:67:9b:e9:d7:4f:88:e4:a7:ce:73:22:0f: 8d:29:b0:8e:b8:b4:d3:05:59:6a:93:96:01:be:9a: fd:dc:de:4a:16:c4:64:64:5f:dd:cf:ff:ad:7d:07: 94:fa:18:8e:8a:2e:53:d8:05:fc:6d:0f:c0:f2:ab: 9b:1e:8f:b0:7c:70:f3:be:40:9b:e3:a0:2b:cd:57: e3:6c:2a:7e:11:35:d8:0d:26:7f:da:1e:ea:4f:ab: ae:6f:c4:31:9f:ec:f6:21:6f:45:19:50:32:0f:0f: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:C6:71:0F:AD:87:8D:AE:2C:2D:71:8C:D8:65:2E:EE:EE:FD:30 X509v3 Authority Key Identifier: keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9d:09:ed:fc:83:12:5e:9e:27:1b:c8:2a:00:4c:a4:ae:b2: 55:53:a3:e5:64:d3:7e:ea:2d:c0:46:ec:56:7f:d6:78:3f:a9: 76:67:87:0c:80:38:9e:1f:0d:af:a5:70:f4:05:5b:86:21:10: 5d:d2:66:85:5f:99:21:69:62:76:af:36:fd:04:da:ec:4a:bd: 03:fe:62:b3:8a:39:11:84:0a:98:ea:1b:d7:01:e0:dc:cb:1c: ad:29:92:04:45:5f:34:94:ca:f5:c0:50:9c:2e:22:5a:8b:83: f4:b4:6c:98:76:76:6e:5d:0a:88:78:1e:0b:d8:17:dc:e2:a4: 47:e1:2b:67:f3:de:8a:3a:81:a2:23:23:ca:fe:78:95:8e:93: a7:72:13:16:85:b3:ff:c2:2f:e0:88:d2:a8:cc:c7:b7:23:2e: 56:c1:5f:ec:28:79:51:59:f9:3b:1e:8f:0a:f5:f7:68:76:19: 00:35:04:2f:a2:9b:b9:c8:f3:9f:ac:ed:0b:f2:48:f7:30:31: f3:28:d2:da:37:74:86:9a:0a:ab:68:e9:97:21:56:1b:3c:b3: 62:19:02:90:60:5f:d1:3c:2f:ef:c9:7a:c8:ec:4d:1f:32:e8: c5:fb:6d:17:9e:92:42:ff:22:90:1c:b6:9c:76:43:5f:18:b3: ed:2a:c0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfj/PSivWBdUd1Z6F3J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDMxNzYwMmZiMGNhYTNhNTEwMDY4YmQ5ODlkNDZkYWUz ODRkZDIwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD Eyg4YjhkYzY3MTBmYWQ4NzhkYWUyYzJkNzE4Y2Q4NjUyZWVlZWVmZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye0FhVrFT8apgit3zRGjidp4vFQM RGmJoPg0HRB0fqrB4s3+BUQ8KWlOVriwNOh0zyX3VgODU/L6EPqqSx+L74qGO+ev jDOI6q9quUPwmaPZKNu2NWnZFgEOiErO4HdfbNAJVISzr0RzKqrJCDTgGV4IgPSn yIQOOZtT7MFQX/kPT/oUZRtpdMCbVdC4sK/SdZnXUHje9AFnm+nXT4jkp85zIg+N KbCOuLTTBVlqk5YBvpr93N5KFsRkZF/dz/+tfQeU+hiOii5T2AX8bQ/A8qubHo+w fHDzvkCb46ArzVfjbCp+ETXYDSZ/2h7qT6uub8Qxn+z2IW9FGVAyDw8fFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuNxnEPrYeNriwtcYzYZS7u7v0wMB8GA1UdIwQY MBaAFL4DF2AvsMqjpRAGi9mJ1G2uOE3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUt MTRhYWVhMjA4ZjI1LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUtMTRhYWVhMjA4ZjI1 LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp0J7fyD El6eJxvIKgBMpK6yVVOj5WTTfuotwEbsVn/WeD+pdmeHDIA4nh8Nr6Vw9AVbhiEQ XdJmhV+ZIWlidq82/QTa7Eq9A/5is4o5EYQKmOob1wHg3MscrSmSBEVfNJTK9cBQ nC4iWouD9LRsmHZ2bl0KiHgeC9gX3OKkR+ErZ/PeijqBoiMjyv54lY6Tp3ITFoWz /8Iv4IjSqMzHtyMuVsFf7Ch5UVn5Ox6PCvX3aHYZADUEL6Kbucjzn6ztC/JI9zAx 8yjS2jd0hpoKq2jplyFWGzyzYhkCkGBf0Twv78l6yOxNHzLoxfttF56SQv8ikBy2 nHZDXxiz7SrAdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:54 2025 by rpki-client