This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json) Hash identifier: K5Tfgy1eBV9c3g5CqyvXUOqlSTwpStk/CpfLf85Aa1w= Subject key identifier: 26:F7:73:4C:E4:94:0C:8A:4A:77:11:00:4E:BE:3D:10:1A:70:90:19 Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Certificate serial: 019AF19B7B0F5BBE98590E0C0A7964A95223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft Manifest number: 0C40 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: 66lRkDeJSPIGh+ux75DkTAfC+EUFUTkxlc5QYjXnG7c=) 2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7b:0f:5b:be:98:59:0e:0c:0a:79:64:a9:52:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=26f7734ce4940c8a4a7711004ebe3d101a709019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:2a:61:9b:b5:80:98:67:8c:47:a7:81:94: 46:60:f6:62:98:52:3d:d9:7c:a9:f9:1d:85:b5:8f: 02:95:6d:6e:fe:bc:d1:69:c4:7f:b9:23:20:18:38: f7:db:c4:da:b7:d2:0f:c3:5d:50:12:e7:9c:f6:84: dc:f8:1e:4f:67:17:c8:53:7f:e0:cf:e7:f4:c6:58: 33:3d:3c:57:8d:f0:3f:95:22:9a:b9:26:a2:ee:cc: cf:30:22:e6:3a:43:f0:98:ed:3f:91:51:8d:3d:31: 11:8e:f2:97:fe:9f:0f:11:dd:c2:78:cc:49:66:3b: f4:46:d6:e5:5f:55:9b:63:c1:98:ac:fe:73:53:84: 89:6c:4f:bc:e8:48:e0:32:97:65:56:95:3c:9d:cc: e1:bb:19:58:52:e8:0e:25:6c:ea:ab:34:8c:bc:d6: 21:8a:45:d8:c0:b4:92:2d:53:13:20:1b:cd:9d:f8: bb:19:66:b9:51:8d:24:d7:ed:cc:c9:df:af:8f:17: 6c:d1:6a:ca:89:ed:bd:8c:7a:9a:47:e1:15:4e:66: 05:77:35:41:61:4f:98:12:23:e5:35:53:a3:8c:9f: 65:22:f0:e1:7a:3e:42:6c:24:82:df:f5:00:bf:6e: 18:af:52:45:7a:21:d5:8a:a1:7b:9e:58:38:c4:bd: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:73:4C:E4:94:0C:8A:4A:77:11:00:4E:BE:3D:10:1A:70:90:19 X509v3 Authority Key Identifier: keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b2:3c:08:0d:59:a9:30:1d:64:3a:76:7d:e1:c6:bb:9a:88: 6b:6a:fa:d8:4b:b4:51:84:9a:97:ce:53:4d:98:f9:01:27:3e: a4:e9:b0:07:d6:95:fe:42:1a:f8:8b:92:14:12:77:22:27:c1: 57:2f:5e:ed:74:b4:07:ac:9c:f4:9f:4c:ef:ba:b2:5d:a9:9f: e3:69:3b:52:21:c0:17:04:01:d6:9a:7e:bc:5d:ca:e8:7a:42: 48:9c:bc:9d:21:ff:0f:ba:0f:b3:1b:64:40:7e:c8:df:70:d4: c3:9a:12:90:8e:78:bc:05:a1:77:e7:cf:b8:f8:4c:d5:f8:66: ca:f9:5a:52:2a:cd:61:17:24:84:2d:6a:43:7d:0d:dc:46:91: aa:a1:93:c3:da:2a:08:37:9e:3d:66:b3:ed:43:e1:d8:1a:d9: 14:05:eb:e3:72:04:88:12:55:c8:76:1d:73:cb:a4:e2:a9:f8: e9:d4:a3:53:ea:a6:3f:12:74:da:58:28:ec:42:25:5d:ca:ad: c5:d2:05:1f:3d:9d:8f:a9:96:23:7d:0e:a2:e6:f6:5e:bd:75: 96:da:21:d8:e9:0b:a1:3f:d0:bb:6f:96:16:57:a7:ff:54:33: b4:d4:92:d8:f5:a5:3a:f6:0d:f6:74:11:76:07:44:05:bf:cb: f9:c3:72:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3sPW76YWQ4MCnlkqVIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmVjMjE3ZTliMTI5MzE2YzIzYTZmYTlmOWE3MjFmMTBj MmQ5NWQwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EygyNmY3NzM0Y2U0OTQwYzhhNGE3NzExMDA0ZWJlM2QxMDFhNzA5MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdkqYZu1gJhnjEengZRGYPZimFI9 2Xyp+R2FtY8ClW1u/rzRacR/uSMgGDj328Tat9IPw11QEuec9oTc+B5PZxfIU3/g z+f0xlgzPTxXjfA/lSKauSai7szPMCLmOkPwmO0/kVGNPTERjvKX/p8PEd3CeMxJ Zjv0RtblX1WbY8GYrP5zU4SJbE+86EjgMpdlVpU8nczhuxlYUugOJWzqqzSMvNYh ikXYwLSSLVMTIBvNnfi7GWa5UY0k1+3Myd+vjxds0WrKie29jHqaR+EVTmYFdzVB YU+YEiPlNVOjjJ9lIvDhej5CbCSC3/UAv24Yr1JFeiHViqF7nlg4xL0YtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb3c0zklAyKSncRAE6+PRAacJAZMB8GA1UdIwQY MBaAFFRuwhfpsSkxbCOm+p+ach8QwtldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQt YzQ3YzI2ZmE2OGFmLzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQtYzQ3YzI2ZmE2OGFm LzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerI8CA1Z qTAdZDp2feHGu5qIa2r62Eu0UYSal85TTZj5ASc+pOmwB9aV/kIa+IuSFBJ3IifB Vy9e7XS0B6yc9J9M77qyXamf42k7UiHAFwQB1pp+vF3K6HpCSJy8nSH/D7oPsxtk QH7I33DUw5oSkI54vAWhd+fPuPhM1fhmyvlaUirNYRckhC1qQ30N3EaRqqGTw9oq CDeePWaz7UPh2BrZFAXr43IEiBJVyHYdc8uk4qn46dSjU+qmPxJ02lgo7EIlXcqt xdIFHz2dj6mWI30Ooub2Xr11ltoh2OkLoT/Qu2+WFlen/1QztNSS2PWlOvYN9nQR dgdEBb/L+cNy0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:47 2025 by rpki-client