This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json) Hash identifier: kZo5H3Ukii9G6LxG2oOigvpQYrCWz+TyKBQamXarMWE= Subject key identifier: F2:1F:A1:19:49:01:72:88:0D:5D:CA:92:E0:3B:4B:14:F6:A3:34:F0 Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Certificate serial: 019AF19A91A11D354780EA6C73D0C8906ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft Manifest number: 0E37 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: olc2Y8iylqMSKyCyshdN5SCe0vI.roa (hash: UAcPq7niB1CGXkTFu0WQUaf9we2Qrdpi5zBQPRcbjno=) 2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: E3wl0/EAGC7QAqLPy61ckkgouqZ5dSywIZNAZlIyAHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:91:a1:1d:35:47:80:ea:6c:73:d0:c8:90:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=f21fa119490172880d5dca92e03b4b14f6a334f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:94:fe:f9:d7:ed:69:7d:fe:a6:77:5f:5a: 64:18:d3:f8:69:88:0e:ff:36:00:80:52:95:ca:09: de:4b:a4:ac:cd:8b:3c:3a:40:ad:76:35:0f:72:22: 41:f1:e2:62:0a:88:38:13:23:1f:8c:c4:76:23:b2: 6b:70:cb:83:5f:7f:b2:18:59:8a:42:ee:a3:93:3e: 2a:80:8d:b4:95:a3:c9:da:91:19:d7:79:9e:45:4a: 22:be:e0:1a:c3:87:a3:c6:8b:58:04:5d:ee:26:01: 5a:37:ac:44:f1:ff:5c:89:46:8e:e0:dd:29:fc:1d: c0:79:32:e9:47:4c:b4:45:f7:e6:45:18:e8:61:63: b6:d7:fc:4d:2d:d8:b8:8a:25:d5:bf:5e:0f:01:bd: ec:df:47:9b:69:55:3b:29:58:57:b4:0c:59:ab:62: e8:0a:5e:dc:2c:b6:6d:04:f1:fa:9c:62:9e:1b:8b: b9:3d:e3:0e:12:81:1e:3e:6c:76:da:38:c2:8b:6a: 9e:d0:7d:81:d8:87:7a:96:9b:16:2e:85:d0:87:5a: 8c:78:74:9c:46:7c:f2:e6:fb:f7:70:d1:37:73:81: 7b:85:74:91:ff:5e:21:9b:54:b7:06:93:58:ef:ca: bb:6a:a0:b5:b7:32:8d:d2:51:42:6e:a9:b4:6e:c4: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:A1:19:49:01:72:88:0D:5D:CA:92:E0:3B:4B:14:F6:A3:34:F0 X509v3 Authority Key Identifier: keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:20:97:bd:05:f6:2a:17:06:89:89:b0:16:a7:54:bc:72: ae:0a:f6:ae:15:9d:d2:87:f8:b5:d3:f7:fd:9e:4f:cb:fe:6d: a4:99:ca:60:e4:1c:cc:dd:65:59:ff:ad:59:ed:f8:d9:69:b4: 05:f5:3d:e7:b2:1e:70:91:69:f5:c6:8e:b0:70:2d:34:01:2b: 28:d8:cf:6f:73:5e:47:e2:e7:5c:c3:3a:1b:f4:bf:58:2f:85: 85:fb:34:51:72:8f:cd:3c:de:bc:5e:d8:60:e8:7c:38:93:1a: 06:d4:14:2e:bd:52:0c:5a:4e:6a:0d:0d:fe:c1:0d:de:f1:8f: ff:d9:6a:68:21:1e:5a:5b:1b:f7:d0:b9:36:c6:3c:0c:53:7d: a0:98:82:5f:d9:e8:56:ad:9f:cd:9c:c2:92:a3:96:1c:18:47: 41:30:e6:e7:aa:1d:57:7c:20:d9:ad:6d:af:99:38:89:fd:d0: 92:e4:b0:d4:e4:16:08:29:1f:e4:97:b6:09:0a:d7:e8:ce:41: 7c:b5:c2:19:9b:9b:7b:96:37:30:00:6c:e5:30:0b:b6:28:ce: 55:76:92:bc:d9:ba:59:ff:a3:33:6f:c9:7b:dc:62:e9:7e:eb: 8a:c5:0a:a2:c1:88:27:f7:c1:b4:3f:bd:4b:da:82:20:ea:90: ae:34:00:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpGhHTVHgOpsc9DIkG7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi MzgzZmEwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhmMjFmYTExOTQ5MDE3Mjg4MGQ1ZGNhOTJlMDNiNGIxNGY2YTMzNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7yU/vnX7Wl9/qZ3X1pkGNP4aYgO /zYAgFKVygneS6SszYs8OkCtdjUPciJB8eJiCog4EyMfjMR2I7JrcMuDX3+yGFmK Qu6jkz4qgI20laPJ2pEZ13meRUoivuAaw4ejxotYBF3uJgFaN6xE8f9ciUaO4N0p /B3AeTLpR0y0RffmRRjoYWO21/xNLdi4iiXVv14PAb3s30ebaVU7KVhXtAxZq2Lo Cl7cLLZtBPH6nGKeG4u5PeMOEoEePmx22jjCi2qe0H2B2Id6lpsWLoXQh1qMeHSc Rnzy5vv3cNE3c4F7hXSR/14hm1S3BpNY78q7aqC1tzKN0lFCbqm0bsRIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIfoRlJAXKIDV3KkuA7SxT2ozTwMB8GA1UdIwQY MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2 LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyMgl70F 9ioXBomJsBanVLxyrgr2rhWd0of4tdP3/Z5Py/5tpJnKYOQczN1lWf+tWe342Wm0 BfU957IecJFp9caOsHAtNAErKNjPb3NeR+LnXMM6G/S/WC+Fhfs0UXKPzTzevF7Y YOh8OJMaBtQULr1SDFpOag0N/sEN3vGP/9lqaCEeWlsb99C5NsY8DFN9oJiCX9no Vq2fzZzCkqOWHBhHQTDm56odV3wg2a1tr5k4if3QkuSw1OQWCCkf5Je2CQrX6M5B fLXCGZube5Y3MABs5TALtijOVXaSvNm6Wf+jM2/Je9xi6X7risUKosGIJ/fBtD+9 S9qCIOqQrjQA+g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:06 2025 by rpki-client