This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json) Hash identifier: e7WxW+6qBLCJADgxF7wqz0EepocJ9DRS248LSExaxTQ= Subject key identifier: 54:24:D1:64:8E:0A:E7:DE:D7:43:43:EE:6E:6B:6C:C5:E5:DD:BE:EE Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72 Certificate serial: 019AF2099A6E8476EC43128CA579D0460FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft Manifest number: 1038 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=) 2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: os/WxqjDYPfSsbhL5Ls+bzikcvMLz5dZ34eiyv+HQms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9a:6e:84:76:ec:43:12:8c:a5:79:d0:46:0f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=5424d1648e0ae7ded74343ee6e6b6cc5e5ddbeee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:e4:73:f7:ee:26:0f:9f:10:49:fe:6b:ee: 44:ff:bd:69:9e:6b:f4:7a:d5:9d:3f:ce:f2:bc:ab: 15:eb:e2:ec:3e:7e:ec:72:44:62:12:87:47:91:17: 6d:fb:24:a5:9f:e5:18:2f:96:d6:12:ff:6c:6a:47: 3e:e5:e9:1e:e1:37:6e:23:e7:38:ee:aa:47:44:b9: 3b:f4:cb:bf:1f:ca:1b:ac:54:d7:87:b6:68:1f:4d: 3f:75:c6:73:19:68:2b:67:ad:6f:31:23:d5:a1:7c: ef:38:45:ff:70:2e:90:49:70:4f:7e:04:39:83:0e: 1d:9c:bf:bd:73:8e:f9:80:07:2f:5a:be:21:03:21: 36:30:7c:fd:53:65:28:36:a2:37:a0:c3:f5:56:65: 07:4d:2f:c8:17:f8:02:69:86:bd:c6:e9:6a:28:ef: 41:6f:33:4c:14:16:43:33:f5:00:20:13:d7:72:cc: 11:33:25:53:30:6a:b0:a3:e7:a4:a3:dc:68:4d:06: 7d:08:9b:88:70:24:53:65:21:6f:73:f8:19:f1:ca: 9c:92:2d:86:94:87:91:68:86:f6:24:a8:32:d7:0d: e8:72:21:fa:84:f5:05:7a:d2:d3:0d:22:9f:63:84: 00:30:7b:b0:32:8a:08:3b:48:ad:ef:7d:3f:a2:16: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:D1:64:8E:0A:E7:DE:D7:43:43:EE:6E:6B:6C:C5:E5:DD:BE:EE X509v3 Authority Key Identifier: keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ad:5f:d7:09:e3:e5:d8:32:9f:4b:56:03:92:87:5f:e7:88: 09:5a:9b:9e:36:91:f6:ed:93:05:5c:03:69:a1:d7:fb:e2:60: 30:24:80:47:8f:5d:1e:ba:ba:6e:85:21:ae:43:04:bf:3b:cf: 29:8a:d6:b5:41:59:7d:e1:8d:88:19:56:60:d9:85:e6:40:e0: 2a:86:f2:cd:03:d6:31:fb:6d:97:c4:99:3b:f7:b6:ac:f5:63: 5a:f5:df:60:d8:d3:38:a1:6c:26:01:38:c3:f2:03:17:18:44: 3f:74:55:42:a0:0d:2c:fb:9f:50:99:70:74:7b:eb:c4:58:0b: 99:be:27:65:eb:9f:d9:df:ca:62:cc:e4:ed:e0:0b:0e:f0:50: 46:6f:c7:6f:7e:a3:30:c8:42:86:5f:ae:7e:f0:f5:15:9f:47: 07:26:b4:b6:8f:b6:41:6f:92:c9:a7:7d:94:73:b5:15:72:bf: 7a:fd:77:a0:6a:0d:24:92:a4:d1:30:36:a6:33:1e:b8:c2:dc: 0e:b5:66:a2:83:63:8b:39:ad:14:65:f0:30:8f:b9:ee:ec:0b: 8e:3d:50:7c:a3:68:41:cf:58:3e:5a:8b:07:41:e5:34:4a:06: 07:fb:71:b4:a0:f3:3f:b8:77:ea:1d:20:74:b5:e6:90:50:04: ab:b4:05:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZpuhHbsQxKMpXnQRg/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl NDNlNzIwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg1NDI0ZDE2NDhlMGFlN2RlZDc0MzQzZWU2ZTZiNmNjNWU1ZGRiZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy7kc/fuJg+fEEn+a+5E/71pnmv0 etWdP87yvKsV6+LsPn7sckRiEodHkRdt+ySln+UYL5bWEv9sakc+5eke4TduI+c4 7qpHRLk79Mu/H8obrFTXh7ZoH00/dcZzGWgrZ61vMSPVoXzvOEX/cC6QSXBPfgQ5 gw4dnL+9c475gAcvWr4hAyE2MHz9U2UoNqI3oMP1VmUHTS/IF/gCaYa9xulqKO9B bzNMFBZDM/UAIBPXcswRMyVTMGqwo+eko9xoTQZ9CJuIcCRTZSFvc/gZ8cqcki2G lIeRaIb2JKgy1w3ociH6hPUFetLTDSKfY4QAMHuwMooIO0it730/ohaPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQk0WSOCufe10ND7m5rbMXl3b7uMB8GA1UdIwQY MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR61f1wnj 5dgyn0tWA5KHX+eICVqbnjaR9u2TBVwDaaHX++JgMCSAR49dHrq6boUhrkMEvzvP KYrWtUFZfeGNiBlWYNmF5kDgKobyzQPWMfttl8SZO/e2rPVjWvXfYNjTOKFsJgE4 w/IDFxhEP3RVQqANLPufUJlwdHvrxFgLmb4nZeuf2d/KYszk7eALDvBQRm/Hb36j MMhChl+ufvD1FZ9HBya0to+2QW+Syad9lHO1FXK/ev13oGoNJJKk0TA2pjMeuMLc DrVmooNjizmtFGXwMI+57uwLjj1QfKNoQc9YPlqLB0HlNEoGB/txtKDzP7h36h0g dLXmkFAEq7QFyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:30 2025 by rpki-client