This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json) Hash identifier: ZqYCStMQ0d64wC0pxoIgSPRxIJUbhukr9rt6isuHU2A= Subject key identifier: 40:E2:B6:12:53:67:DD:9C:89:3B:0F:D8:F5:EF:11:54:D1:F0:06:A2 Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93 Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693 Certificate serial: 019AF1D1C1C4F7BC119E9D40B24462598C0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=) 2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: p2uZUg2fuTS2KQmnJb5snzVPf2tSfk9acrNezNcJ15M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:c4:f7:bc:11:9e:9d:40:b2:44:62:59:8c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=40e2b6125367dd9c893b0fd8f5ef1154d1f006a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:22:ff:41:90:50:37:d5:0a:79:93:40:aa: 47:7b:04:78:5f:42:7a:be:b9:28:c6:17:b6:09:33: 7b:25:a9:3f:b2:59:02:d3:a2:3e:c1:2b:14:a5:a7: 39:c4:16:b8:96:02:ff:00:b3:e3:f6:a9:18:21:54: e8:74:30:f8:00:b7:7a:e6:52:28:9e:97:c2:77:e5: 81:20:c4:c6:e2:45:34:80:6e:bc:e0:d2:15:b1:21: 7c:8d:8c:a1:12:cd:7d:a7:d9:c8:09:84:8e:a2:3e: 8d:76:49:34:d7:5b:5b:9c:3f:7d:6b:3a:dd:4c:63: e9:cf:37:d5:ad:15:c4:d9:e4:d9:b2:0a:c6:87:d9: 53:12:10:da:39:3c:23:22:43:a1:78:6a:4e:c9:39: d8:d7:29:86:85:9d:6a:0c:ff:e5:84:52:b0:0c:99: 7a:df:ea:d9:f6:40:94:7d:53:6d:cc:4d:1c:8c:d7: 9d:ac:c3:09:8b:54:52:23:83:fb:bd:bd:22:98:aa: 7e:e1:5c:32:46:2c:de:21:a9:63:99:fd:ba:77:cb: db:a9:79:1d:dd:42:40:f0:84:b6:26:96:d7:b4:31: b0:7a:54:51:40:62:d2:05:d7:34:0c:8e:0a:b9:33: 34:d9:9e:21:b1:93:3b:c8:43:f1:77:6a:be:3f:e5: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E2:B6:12:53:67:DD:9C:89:3B:0F:D8:F5:EF:11:54:D1:F0:06:A2 X509v3 Authority Key Identifier: keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:eb:ba:4d:83:a8:de:9e:1d:7a:0e:b3:3d:50:26:84:06:3a: d2:d1:c3:63:76:69:c0:db:60:22:02:dd:dd:40:fa:73:dd:a6: d1:89:50:6a:bf:fe:15:cc:4a:9b:7d:65:dd:c7:c7:2a:43:96: 3f:1e:3f:f0:2b:f9:ff:57:a2:53:69:cd:60:53:6d:81:0f:c5: 38:37:7b:13:3a:21:62:2b:d9:51:de:e0:44:cf:35:cb:46:61: f6:5a:ed:da:32:5c:5d:f0:72:e5:2f:36:b1:e2:4c:cf:d9:1c: 00:8c:89:12:93:fe:ce:5e:04:1d:b7:e5:70:99:f1:79:59:b7: d7:00:07:06:93:e7:f7:fd:2a:10:1d:ac:b0:5b:0e:c5:de:7c: df:72:2d:d2:36:00:62:2b:77:91:c1:f7:30:96:f6:17:0c:57: 7a:7c:13:d5:3c:89:e7:47:43:e3:52:69:d2:7a:52:b8:c7:d6: 6a:b1:c2:3c:d4:a7:1a:d4:6c:e3:f6:cc:5b:df:f7:2f:ee:a2: 24:d4:89:4f:60:64:d8:d8:dd:b3:00:f1:77:67:84:be:51:65: 16:a2:85:63:04:d6:f6:ef:9c:54:30:eb:a1:06:c0:ad:6b:ec: 6f:f4:4a:ea:40:e1:67:1a:6c:81:ff:39:ea:d5:5c:8e:3a:d7: 27:d0:7c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cHE97wRnp1AskRiWYwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjU0NjM2ODBkMTRiNjQ1ODZiMWQ1YjQ2NTY2M2JjYjU3 N2U2OTMwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg0MGUyYjYxMjUzNjdkZDljODkzYjBmZDhmNWVmMTE1NGQxZjAwNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Agi/0GQUDfVCnmTQKpHewR4X0J6 vrkoxhe2CTN7Jak/slkC06I+wSsUpac5xBa4lgL/ALPj9qkYIVTodDD4ALd65lIo npfCd+WBIMTG4kU0gG684NIVsSF8jYyhEs19p9nICYSOoj6Ndkk011tbnD99azrd TGPpzzfVrRXE2eTZsgrGh9lTEhDaOTwjIkOheGpOyTnY1ymGhZ1qDP/lhFKwDJl6 3+rZ9kCUfVNtzE0cjNedrMMJi1RSI4P7vb0imKp+4VwyRizeIaljmf26d8vbqXkd 3UJA8IS2JpbXtDGwelRRQGLSBdc0DI4KuTM02Z4hsZM7yEPxd2q+P+X1uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDithJTZ92ciTsP2PXvEVTR8AaiMB8GA1UdIwQY MBaAFLz1RjaA0UtkWGsdW0ZWY7y1d+aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWIt NDczMDQ1YTkzYTA1LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWItNDczMDQ1YTkzYTA1 LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuu6TYOo 3p4deg6zPVAmhAY60tHDY3ZpwNtgIgLd3UD6c92m0YlQar/+FcxKm31l3cfHKkOW Px4/8Cv5/1eiU2nNYFNtgQ/FODd7EzohYivZUd7gRM81y0Zh9lrt2jJcXfBy5S82 seJMz9kcAIyJEpP+zl4EHbflcJnxeVm31wAHBpPn9/0qEB2ssFsOxd5833It0jYA Yit3kcH3MJb2FwxXenwT1TyJ50dD41Jp0npSuMfWarHCPNSnGtRs4/bMW9/3L+6i JNSJT2Bk2NjdswDxd2eEvlFlFqKFYwTW9u+cVDDroQbArWvsb/RK6kDhZxpsgf85 6tVcjjrXJ9B8eg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:53 2025 by rpki-client