This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json) Hash identifier: D/qLK/QY4YQEyPyurAVrBclp9Q8898A+vwx1b2f70mc= Subject key identifier: C0:D9:7D:D8:20:C7:37:10:77:B9:10:0E:D0:17:E1:26:DA:07:25:57 Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Certificate serial: 019B2B8B008AA12A3A0373FE0A6A14F57BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft Manifest number: 0C5E Signing time: Wed 17 Dec 2025 09:01:28 +0000 Manifest this update: Wed 17 Dec 2025 09:01:28 +0000 Manifest next update: Thu 18 Dec 2025 09:01:28 +0000 Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: k2fwczuMxlTblgy2zFKPqusuV4Dvfe+wFGrMhD1WqwM=) 2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:00:8a:a1:2a:3a:03:73:fe:0a:6a:14:f5:7b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Validity Not Before: Dec 17 09:01:28 2025 GMT Not After : Dec 18 09:01:28 2025 GMT Subject: CN=c0d97dd820c7371077b9100ed017e126da072557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:f7:a7:0f:e3:63:28:9e:d2:0a:b3:af:2b: 11:4a:85:44:16:58:b1:63:c9:c1:88:79:d5:12:67: 2e:37:91:38:d9:7c:7e:eb:61:5a:f1:45:76:36:a8: ed:36:81:05:25:15:d4:d2:3d:cf:4c:34:c5:37:cf: 0a:cd:c1:c7:a4:98:d2:fc:b6:08:b7:8e:c5:86:20: 5d:07:51:40:40:f6:f5:c2:1d:18:29:83:9e:fb:15: 9b:67:7d:4c:8f:9c:ce:79:3c:64:4c:0b:2b:db:8e: bf:a9:f5:01:54:83:b8:d5:88:dc:5f:5e:87:d9:0a: fe:93:4e:fe:61:fb:a8:38:02:8f:e4:01:fe:ab:fd: f0:fb:e5:80:22:2a:e7:e6:c2:9a:71:98:ca:a6:38: 35:38:da:87:e4:40:46:72:1d:7d:9d:12:f4:59:7f: 1c:b4:68:52:60:ae:dc:be:13:c6:39:55:9f:d3:c3: fa:00:94:77:10:b6:30:c7:9e:f1:4a:1a:11:55:b1: 1a:a3:5c:11:51:46:bd:24:65:0d:b8:81:87:6d:e0: bd:fa:59:33:17:3c:c0:6c:4a:e5:e6:83:47:8c:5e: 4e:1a:9c:b2:dd:03:df:55:1a:bc:35:e9:1d:45:ea: 80:96:db:78:fe:db:56:de:79:b0:51:02:d0:55:92: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D9:7D:D8:20:C7:37:10:77:B9:10:0E:D0:17:E1:26:DA:07:25:57 X509v3 Authority Key Identifier: keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:83:2e:c0:a2:a7:bc:c4:da:b7:6d:7b:90:e0:9c:1c:f1:c3: bc:12:eb:87:4f:34:21:92:97:7c:39:c8:db:be:a1:bb:f0:19: dc:51:c8:b6:40:17:be:fa:0d:c2:e3:a7:2b:57:39:32:49:d5: 17:4c:ad:ba:3f:6a:bd:7b:fb:07:76:11:04:3c:31:a0:18:8d: 3c:50:18:3e:7c:e1:dc:4e:f0:60:1a:2f:8b:51:43:91:67:ab: be:a0:a9:e1:cc:a5:a9:b2:96:d0:cb:e1:bb:2d:1b:0d:af:5f: d5:9f:8d:cb:40:f9:c9:e1:d4:60:cd:ea:7f:45:7d:ba:21:ff: c7:49:2a:59:f4:68:c4:2e:48:eb:e4:01:f6:fa:41:de:25:56: 0f:52:92:65:a8:5c:c2:e3:4e:13:37:ba:5e:26:a2:09:49:d1: db:35:8f:57:06:45:60:0f:4f:79:de:e3:45:cf:c6:cd:26:f6: e3:bf:eb:de:22:b5:c8:57:a0:2c:dd:77:f4:82:50:78:71:c1: 1a:e9:a7:cd:0a:15:bb:96:ae:3e:6b:1e:cb:c6:81:27:88:be: 87:04:4f:25:1c:bb:d6:b0:52:97:fc:d3:73:a7:36:ac:4a:c5: c6:93:dc:0a:4e:20:c6:d8:58:2a:28:bf:99:0d:fe:f3:bd:84: db:b2:86:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriwCKoSo6A3P+CmoU9XvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmVjMjE3ZTliMTI5MzE2YzIzYTZmYTlmOWE3MjFmMTBj MmQ5NWQwHhcNMjUxMjE3MDkwMTI4WhcNMjUxMjE4MDkwMTI4WjAzMTEwLwYDVQQD EyhjMGQ5N2RkODIwYzczNzEwNzdiOTEwMGVkMDE3ZTEyNmRhMDcyNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEX3pw/jYyie0gqzrysRSoVEFlix Y8nBiHnVEmcuN5E42Xx+62Fa8UV2NqjtNoEFJRXU0j3PTDTFN88KzcHHpJjS/LYI t47FhiBdB1FAQPb1wh0YKYOe+xWbZ31Mj5zOeTxkTAsr246/qfUBVIO41YjcX16H 2Qr+k07+YfuoOAKP5AH+q/3w++WAIirn5sKacZjKpjg1ONqH5EBGch19nRL0WX8c tGhSYK7cvhPGOVWf08P6AJR3ELYwx57xShoRVbEao1wRUUa9JGUNuIGHbeC9+lkz FzzAbErl5oNHjF5OGpyy3QPfVRq8NekdReqAltt4/ttW3nmwUQLQVZLKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDZfdggxzcQd7kQDtAX4SbaByVXMB8GA1UdIwQY MBaAFFRuwhfpsSkxbCOm+p+ach8QwtldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQt YzQ3YzI2ZmE2OGFmLzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQtYzQ3YzI2ZmE2OGFm LzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4MuwKKn vMTat217kOCcHPHDvBLrh080IZKXfDnI276hu/AZ3FHItkAXvvoNwuOnK1c5MknV F0ytuj9qvXv7B3YRBDwxoBiNPFAYPnzh3E7wYBovi1FDkWervqCp4cylqbKW0Mvh uy0bDa9f1Z+Ny0D5yeHUYM3qf0V9uiH/x0kqWfRoxC5I6+QB9vpB3iVWD1KSZahc wuNOEze6XiaiCUnR2zWPVwZFYA9Ped7jRc/GzSb247/r3iK1yFegLN139IJQeHHB GumnzQoVu5auPmsey8aBJ4i+hwRPJRy71rBSl/zTc6c2rErFxpPcCk4gxthYKii/ mQ3+872E27KGQQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:47:23 2025 by rpki-client