This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json) Hash identifier: US0JLRpm2S7o+fjsWAXFOC3ojrCaYZSOBdMeWD7yYJ0= Subject key identifier: D4:86:64:5D:3D:5A:B0:45:01:44:F6:74:23:8F:8D:70:A3:26:F9:5C Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Certificate serial: 019AF1D1D7B394F46BED48A5EE0405E1619C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: YyENkTUdn24N7VB2vdGoBEETpn/865Yw+vTK30ADdHM=) 2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:b3:94:f4:6b:ed:48:a5:ee:04:05:e1:61:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=d486645d3d5ab0450144f674238f8d70a326f95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:5c:fb:11:5a:1c:b7:54:93:b6:42:fb:92: ed:f0:fd:3b:33:af:ee:3c:6e:6b:13:aa:5a:4c:2f: c7:a4:61:3c:5a:c2:f9:46:23:1e:36:39:d1:72:0c: c1:05:0e:5a:b8:e4:28:e3:75:d9:b3:62:47:5d:cd: 05:3e:1f:ed:58:5d:fe:fa:56:22:08:06:04:05:96: dd:19:85:fa:45:c7:dc:a0:b5:71:e9:39:5c:f9:e8: 48:9f:7e:9a:a7:58:44:24:a1:c6:bc:7d:16:2a:a2: 25:b5:55:48:76:26:31:81:30:d3:6f:9a:db:53:ff: 82:b0:d4:3c:16:b3:7c:de:d8:4a:ad:ff:0b:69:a2: 90:42:20:32:f1:26:4f:0d:4a:f4:cf:46:23:ac:ee: 14:c6:6c:94:4b:72:00:bc:e7:11:e1:0f:26:a2:89: be:2c:ea:5d:f3:ff:ca:ae:07:59:57:1b:cb:6c:4b: 0e:95:8e:68:04:d0:da:ad:46:4c:0d:71:ee:b4:f7: 5c:d6:28:9e:3c:d7:a6:15:23:7c:29:9e:d6:ab:c2: 7a:02:cd:4c:a2:07:bc:40:09:31:33:8e:2d:60:5f: 10:65:a8:3c:10:d4:d6:6a:2d:20:81:8d:84:99:08: ba:55:24:4b:7b:76:57:e9:fe:f8:42:e6:07:b3:ea: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:86:64:5D:3D:5A:B0:45:01:44:F6:74:23:8F:8D:70:A3:26:F9:5C X509v3 Authority Key Identifier: keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:eb:07:31:a0:7d:a1:27:1c:14:66:85:63:85:cb:b7:ce:fe: 6e:37:84:0c:f8:55:33:6d:df:81:d8:81:98:e3:94:de:f3:20: 9a:e0:28:22:b6:8b:20:03:b6:c6:f9:52:3a:4b:f7:3a:b0:7d: 68:24:e4:ae:bd:1f:64:98:42:14:eb:49:f7:12:67:84:82:a1: f1:8e:53:d6:d5:53:e7:f5:a1:6e:41:f6:00:73:fe:de:50:c0: a2:16:61:5c:3b:93:5f:1b:7e:7a:22:0d:5a:19:c7:e6:ba:cc: 0c:d4:6c:45:56:45:85:ee:7d:ae:e8:02:c6:99:83:f6:23:9e: 57:57:0d:17:c0:d9:b0:72:85:20:8a:01:a6:7f:43:5f:fb:85: 74:ec:6a:53:1e:e3:88:30:46:c8:f4:ad:fe:cf:6a:4d:27:06: 19:fc:c2:1f:aa:bd:18:e9:38:3d:f3:a9:6c:42:47:b3:5d:db: a4:1b:e8:1c:99:a2:4d:f9:d4:fa:2c:0d:ed:6f:5b:f8:35:d5: 88:da:e2:42:97:72:61:2c:1c:f0:bf:d0:1f:e4:9f:42:60:a9: 53:c1:78:12:20:f9:2a:37:c5:e6:a2:a1:b4:f8:bf:10:a2:80: 2a:a8:cc:39:35:49:c4:ff:35:7a:5f:5d:ad:e3:66:7e:d5:82: ef:8a:9d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dezlPRr7Uil7gQF4WGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm ZDQ5NzAwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhkNDg2NjQ1ZDNkNWFiMDQ1MDE0NGY2NzQyMzhmOGQ3MGEzMjZmOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSNc+xFaHLdUk7ZC+5Lt8P07M6/u PG5rE6paTC/HpGE8WsL5RiMeNjnRcgzBBQ5auOQo43XZs2JHXc0FPh/tWF3++lYi CAYEBZbdGYX6RcfcoLVx6Tlc+ehIn36ap1hEJKHGvH0WKqIltVVIdiYxgTDTb5rb U/+CsNQ8FrN83thKrf8LaaKQQiAy8SZPDUr0z0YjrO4UxmyUS3IAvOcR4Q8moom+ LOpd8//KrgdZVxvLbEsOlY5oBNDarUZMDXHutPdc1iiePNemFSN8KZ7Wq8J6As1M oge8QAkxM44tYF8QZag8ENTWai0ggY2EmQi6VSRLe3ZX6f74QuYHs+qNMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSGZF09WrBFAUT2dCOPjXCjJvlcMB8GA1UdIwQY MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1 LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+sHMaB9 oSccFGaFY4XLt87+bjeEDPhVM23fgdiBmOOU3vMgmuAoIraLIAO2xvlSOkv3OrB9 aCTkrr0fZJhCFOtJ9xJnhIKh8Y5T1tVT5/WhbkH2AHP+3lDAohZhXDuTXxt+eiIN WhnH5rrMDNRsRVZFhe59rugCxpmD9iOeV1cNF8DZsHKFIIoBpn9DX/uFdOxqUx7j iDBGyPSt/s9qTScGGfzCH6q9GOk4PfOpbEJHs13bpBvoHJmiTfnU+iwN7W9b+DXV iNriQpdyYSwc8L/QH+SfQmCpU8F4EiD5KjfF5qKhtPi/EKKAKqjMOTVJxP81el9d reNmftWC74qdoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:59 2025 by rpki-client