This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json) Hash identifier: sS4v3iqpAJR6GwgJMUbzYMzNm5zomj/sK680v/DaCRw= Subject key identifier: 05:F7:12:1E:7E:E5:56:A1:85:83:C5:62:E8:A3:EC:A2:3F:DC:33:AA Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1 Certificate serial: 019AF465059CA2F8BBC5226EC080CC70E1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:52 +0000 Manifest this update: Sat 06 Dec 2025 16:00:52 +0000 Manifest next update: Sun 07 Dec 2025 16:00:52 +0000 Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: Y2Nzos2a2MLcWOVbZxGaeDjat+NbQDl3pQc0UDguAEQ=) 2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:05:9c:a2:f8:bb:c5:22:6e:c0:80:cc:70:e1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1 Validity Not Before: Dec 6 16:00:52 2025 GMT Not After : Dec 7 16:00:52 2025 GMT Subject: CN=05f7121e7ee556a18583c562e8a3eca23fdc33aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:3c:78:df:ba:d9:da:fe:cc:ed:fb:ae:dd: 79:20:10:bd:4b:b2:3e:0d:79:46:b1:5c:7f:b2:e2: 25:9f:91:b8:d0:4e:50:f4:9b:f6:10:36:cb:d1:de: 6d:86:c7:d1:fc:1b:79:85:f5:3a:1b:d9:38:05:74: 16:9b:ee:82:58:7e:18:19:8e:45:5c:db:90:ee:ad: 63:62:cb:e0:a2:c9:db:f1:0a:f0:ce:f5:cf:13:a5: ef:24:74:4b:d6:bd:80:03:a0:b3:c9:b3:ac:f7:d4: 36:82:18:82:58:02:9d:e8:ce:0c:92:a9:00:06:72: 4b:e5:37:94:67:46:47:7e:0b:e5:f6:1b:9d:5f:66: 44:2c:01:41:02:67:b9:75:32:c9:20:37:e7:5c:69: 81:b6:82:43:39:a3:9e:1b:f2:10:7f:47:83:57:dc: 83:b7:93:6a:ee:5e:48:a4:72:f1:6b:c8:01:03:4c: b0:55:a6:11:51:fe:84:7e:17:a9:48:67:ff:e9:5a: e6:c2:88:0c:2e:1c:3a:08:fa:e6:ea:9e:44:ca:85: 98:a1:4f:d5:36:d5:99:c8:8f:42:ef:79:d8:32:9c: c0:ae:20:54:94:3f:04:61:cd:9a:20:45:e6:a6:26: cf:89:a3:18:d0:25:75:95:1a:0c:51:5a:ef:cb:b2: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F7:12:1E:7E:E5:56:A1:85:83:C5:62:E8:A3:EC:A2:3F:DC:33:AA X509v3 Authority Key Identifier: keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:72:d0:ac:4b:17:d3:f9:8c:05:5e:f5:73:2e:3b:73:51:96: 21:a2:82:e6:83:80:6b:6c:de:53:f4:49:37:6b:5f:a4:6d:db: 95:ce:1e:93:bb:82:00:a3:20:60:fb:4f:fc:84:ab:57:ae:f5: f2:cc:07:3d:76:1b:47:e7:dd:ab:a8:55:2b:a2:2f:89:77:af: 86:f1:ea:14:00:e9:93:59:22:3a:b5:f0:6e:b7:a2:2a:18:dc: 23:0b:8d:4d:51:68:20:0d:75:8b:c1:9e:1c:c1:c4:5c:e9:dc: 2b:4b:29:a7:c8:14:8e:31:69:ff:84:27:55:56:3c:2f:94:3c: 85:ca:3d:c4:21:84:b5:18:98:16:8d:0b:d8:a4:b0:05:47:b9: 25:f7:80:54:2a:da:4b:5a:80:8f:b1:62:4d:97:6a:62:d0:1c: f7:a5:8b:30:c1:7a:f9:e9:f0:bb:69:05:31:c3:23:6d:8c:ac: 1a:42:73:f5:d3:48:6d:6b:6f:e1:64:f6:ce:f9:dd:33:97:d2: dc:f2:ee:a7:2b:19:68:1f:e4:7d:43:d3:82:40:13:bb:22:4b: f0:46:d5:df:55:ca:78:ba:22:14:9c:54:d7:da:e7:b6:77:80: 6b:a9:85:45:f4:7c:00:12:4a:63:4f:6a:1d:ab:d3:34:e7:e9: 3c:86:3c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQWcovi7xSJuwIDMcOH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDc4OTU3MzZlZDkyODYwZjMxMzUwMDhhODU4MTNmOThi YmQ3YzEwHhcNMjUxMjA2MTYwMDUyWhcNMjUxMjA3MTYwMDUyWjAzMTEwLwYDVQQD EygwNWY3MTIxZTdlZTU1NmExODU4M2M1NjJlOGEzZWNhMjNmZGMzM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fw8eN+62dr+zO37rt15IBC9S7I+ DXlGsVx/suIln5G40E5Q9Jv2EDbL0d5thsfR/Bt5hfU6G9k4BXQWm+6CWH4YGY5F XNuQ7q1jYsvgosnb8QrwzvXPE6XvJHRL1r2AA6CzybOs99Q2ghiCWAKd6M4MkqkA BnJL5TeUZ0ZHfgvl9hudX2ZELAFBAme5dTLJIDfnXGmBtoJDOaOeG/IQf0eDV9yD t5Nq7l5IpHLxa8gBA0ywVaYRUf6EfhepSGf/6VrmwogMLhw6CPrm6p5EyoWYoU/V NtWZyI9C73nYMpzAriBUlD8EYc2aIEXmpibPiaMY0CV1lRoMUVrvy7INSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX3Eh5+5VahhYPFYuij7KI/3DOqMB8GA1UdIwQY MBaAFL4HiVc27ZKGDzE1AIqFgT+Yu9fBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDct MjFkNjEwMDM4M2UwLzEvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDctMjFkNjEwMDM4M2Uw LzEvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3LQrEsX 0/mMBV71cy47c1GWIaKC5oOAa2zeU/RJN2tfpG3blc4ek7uCAKMgYPtP/ISrV671 8swHPXYbR+fdq6hVK6IviXevhvHqFADpk1kiOrXwbreiKhjcIwuNTVFoIA11i8Ge HMHEXOncK0spp8gUjjFp/4QnVVY8L5Q8hco9xCGEtRiYFo0L2KSwBUe5JfeAVCra S1qAj7FiTZdqYtAc96WLMMF6+enwu2kFMcMjbYysGkJz9dNIbWtv4WT2zvndM5fS 3PLupysZaB/kfUPTgkATuyJL8EbV31XKeLoiFJxU19rntneAa6mFRfR8ABJKY09q HavTNOfpPIY8Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:45 2025 by rpki-client