This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft File: VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json) Hash identifier: /+gmfHuniqk77UZYogpQwxzkwEP9JAzZ4eEksFLQpqo= Subject key identifier: 6D:C8:AA:27:46:D2:F0:BD:B3:13:DE:75:67:1B:8A:C4:CD:E1:4C:5D Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57 Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57 Certificate serial: 019AF19AD5730BD531DCD6825DCE5E142C6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: 87bZxaXOXC5rBSSK/C7N0u9XSddeeY+PuB467DfGWk0=) 2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d5:73:0b:d5:31:dc:d6:82:5d:ce:5e:14:2c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=6dc8aa2746d2f0bdb313de75671b8ac4cde14c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:1a:93:d7:28:85:d3:33:45:c6:e4:96:70: 64:7d:64:1a:f1:2d:7f:ec:49:68:0a:62:0a:24:25: 25:9b:9c:6e:29:f6:be:a5:a6:b6:24:f1:8d:24:ea: 55:04:d9:f0:34:ae:e9:40:d9:48:02:3f:86:e3:33: c2:23:38:38:63:c3:56:d6:0c:5e:5d:30:75:9e:da: 46:32:bb:0a:08:2b:f0:08:71:a9:e5:fe:8b:61:b2: 40:b3:a7:20:29:76:c3:e7:ca:bb:8e:ee:52:e2:6b: cf:10:d1:d6:01:a2:22:2e:f6:31:fc:27:66:00:fa: ee:4b:97:e6:c2:fc:7d:bf:29:aa:aa:c8:b0:30:d5: 1c:34:69:08:9f:30:a9:dc:f2:8d:66:d8:f4:f1:3c: 63:73:5c:58:b9:a0:40:4b:66:73:65:92:68:42:21: 8f:a0:46:17:61:21:15:5d:e2:38:5c:21:22:cd:83: 6e:8f:88:c3:13:6c:b3:35:49:28:45:c1:65:40:8a: 73:0e:9a:6e:c5:0d:77:92:4c:ab:de:f9:34:44:e7: 82:c5:c7:56:00:ef:69:b0:06:5f:2d:4e:b2:d7:24: 13:d2:29:3f:5e:88:f5:e9:95:e5:b1:da:6c:f1:aa: 1c:b7:bf:85:c6:f4:8b:07:93:08:54:4c:c6:e7:75: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:AA:27:46:D2:F0:BD:B3:13:DE:75:67:1B:8A:C4:CD:E1:4C:5D X509v3 Authority Key Identifier: keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:a1:fb:48:e0:8b:d5:80:c3:94:9f:ae:44:bb:ef:2a:70: 4d:5b:bf:d8:ea:7f:fe:bc:a7:7e:31:dc:ac:ad:5c:ea:0b:49: be:b8:ab:c1:16:f7:ca:25:41:36:c9:f9:b9:9d:43:65:bc:e6: 20:47:81:07:a3:6c:b9:14:1f:3d:75:a5:b2:fc:8c:22:91:60: 61:bd:de:c8:4d:6a:07:dd:82:62:93:e9:44:33:aa:de:b0:c9: 63:23:54:7d:6a:a0:bc:7a:d1:38:d9:0b:5e:63:67:ea:a1:c2: de:96:cd:77:35:60:c3:69:7a:ca:75:5d:d4:2d:53:65:c6:e6: 28:dc:c2:7a:30:be:b0:a5:91:2d:7a:70:a7:e5:2c:b4:93:f3: 6d:0d:d4:44:ff:57:f6:73:4e:34:30:c5:8e:b5:fc:86:b8:a4: fb:ec:2f:c5:05:0b:57:eb:49:45:84:36:fd:fa:20:e2:78:d3: 62:05:b6:be:07:fc:8a:ef:4a:06:c5:a5:81:cf:aa:bc:75:f6: 8e:0d:6c:26:01:96:82:68:f7:e4:e4:f4:66:f7:67:61:b2:18: d3:b6:3d:95:cf:3c:ae:89:5d:f9:78:1a:c5:7e:2f:e4:b8:88: 38:c8:ab:b1:09:e0:48:96:e0:96:5c:17:f6:52:58:da:c5:87: cc:1a:01:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtVzC9Ux3NaCXc5eFCxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MDgwNWI3MzAxODcxMTY5YmQwOWI4ODY1NjlkMWY2OWRj MTliNTcwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD Eyg2ZGM4YWEyNzQ2ZDJmMGJkYjMxM2RlNzU2NzFiOGFjNGNkZTE0YzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j4ak9cohdMzRcbklnBkfWQa8S1/ 7EloCmIKJCUlm5xuKfa+paa2JPGNJOpVBNnwNK7pQNlIAj+G4zPCIzg4Y8NW1gxe XTB1ntpGMrsKCCvwCHGp5f6LYbJAs6cgKXbD58q7ju5S4mvPENHWAaIiLvYx/Cdm APruS5fmwvx9vymqqsiwMNUcNGkInzCp3PKNZtj08Txjc1xYuaBAS2ZzZZJoQiGP oEYXYSEVXeI4XCEizYNuj4jDE2yzNUkoRcFlQIpzDppuxQ13kkyr3vk0ROeCxcdW AO9psAZfLU6y1yQT0ik/Xoj16ZXlsdps8aoct7+FxvSLB5MIVEzG53W/bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3IqidG0vC9sxPedWcbisTN4UxdMB8GA1UdIwQY MBaAFFYIBbcwGHEWm9CbiGVp0fadwZtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUt MDhkYTQyMGYyOGM4LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUtMDhkYTQyMGYyOGM4 LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXKh+0jg i9WAw5SfrkS77ypwTVu/2Op//rynfjHcrK1c6gtJvrirwRb3yiVBNsn5uZ1DZbzm IEeBB6NsuRQfPXWlsvyMIpFgYb3eyE1qB92CYpPpRDOq3rDJYyNUfWqgvHrRONkL XmNn6qHC3pbNdzVgw2l6ynVd1C1TZcbmKNzCejC+sKWRLXpwp+UstJPzbQ3URP9X 9nNONDDFjrX8hrik++wvxQULV+tJRYQ2/fog4njTYgW2vgf8iu9KBsWlgc+qvHX2 jg1sJgGWgmj35OT0ZvdnYbIY07Y9lc88rold+XgaxX4v5LiIOMirsQngSJbgllwX 9lJY2sWHzBoBjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:48 2025 by rpki-client