This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json) Hash identifier: wYyhJpXOCoEYt6t74htGrV6RkwzuAM3IoHT8cMSVobc= Subject key identifier: 85:5F:D3:E2:A6:8F:DE:2A:60:AD:F9:E5:A4:9F:DC:87:2C:B3:BF:97 Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Certificate serial: 019AF2093E3714FD58718E7115DA1B669FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft Manifest number: 0843 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: c5sZ+1UnfvfCUbNac07lHABaRcLKeroi/t0TF2CrtBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3e:37:14:fd:58:71:8e:71:15:da:1b:66:9f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=855fd3e2a68fde2a60adf9e5a49fdc872cb3bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:34:ce:13:4e:e5:03:f4:c4:38:28:ba:8a: ab:91:21:b6:ca:25:a6:27:7b:18:e7:1e:2e:ea:3b: 69:1f:0c:46:48:d6:85:54:8b:84:04:db:42:c3:b0: 45:73:5c:5c:c8:5e:a7:41:ea:fb:5b:fc:48:a7:93: 46:5f:08:25:7b:af:ae:5f:a9:71:1c:95:28:51:ab: ba:38:ae:91:33:63:7f:97:de:bc:12:2e:a5:09:4f: 08:b0:47:fc:1e:17:ad:d7:86:ab:0c:44:f6:2f:e5: 1e:0a:16:dd:85:03:1d:ec:d9:a2:59:4b:72:a8:4d: 1d:bf:38:f0:69:af:a3:86:db:0a:43:5a:22:39:7d: 53:9c:9a:89:73:42:25:a5:61:59:5a:0b:9a:e0:8e: bc:e2:0e:86:ed:8a:3c:c6:15:d7:5d:59:1b:4b:1d: b5:5a:9f:13:f9:d8:85:89:43:4b:84:75:fe:c1:df: 4a:40:71:2d:b2:94:ce:4f:b1:52:85:ed:50:51:fc: ff:a8:a5:38:8f:7a:7b:c8:fb:27:61:74:5d:e1:71: f5:68:9b:6e:3c:79:c2:5f:c4:87:b0:2f:ef:cd:5b: 10:e1:95:2a:fd:e2:e3:28:5b:a5:37:ad:66:eb:fa: c4:88:6a:5f:d8:1a:8a:5b:11:0d:0b:75:89:27:7f: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:D3:E2:A6:8F:DE:2A:60:AD:F9:E5:A4:9F:DC:87:2C:B3:BF:97 X509v3 Authority Key Identifier: keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:c5:51:2c:14:77:38:cf:8f:cd:dc:02:0c:d7:d9:89:ad: 64:30:35:12:3a:07:95:7c:24:1e:28:e5:91:4f:8c:38:e7:b9: 83:56:8b:ce:e4:4d:8f:ba:2b:3d:8b:b9:e0:9a:9b:b0:ef:3c: 21:3a:eb:a8:28:54:88:2a:d5:de:bc:e1:f3:0a:69:e9:0c:34: 86:dd:e0:d2:1f:29:bc:be:12:d1:35:91:ae:b1:d7:92:8c:ef: 65:a9:b2:8e:80:d7:61:c5:1c:34:21:e4:ec:0e:65:99:2f:19: 7f:df:00:7f:50:53:0d:06:39:17:52:24:bf:93:48:78:31:57: 78:32:e3:a7:24:ec:7e:94:ba:75:30:2d:9f:3c:51:ea:fe:c4: 4b:44:7f:71:68:47:9f:8f:0f:8b:e9:16:7a:e6:01:27:90:41: 21:23:50:a3:b0:1d:d0:f4:e8:cb:90:22:3d:ea:71:33:2f:43: 83:4a:3e:9c:f4:3a:e8:96:73:71:95:a9:10:91:27:54:0a:d7: 10:c3:3d:5b:5c:e9:34:cf:d2:4b:51:3f:eb:a2:29:60:c2:ac: c0:3a:66:ab:df:bc:81:cc:e3:3d:27:0f:89:de:d3:5e:84:39: e5:4e:2b:4e:d2:07:b0:e4:f5:3c:56:87:cc:4c:35:ea:8e:a1: 32:84:d6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT43FP1YcY5xFdobZp+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDVlYWM3YzNhZjUzNTUxYzllNjIzNjUzZGQzYWQ3ZGYx NTU0YmIwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD Eyg4NTVmZDNlMmE2OGZkZTJhNjBhZGY5ZTVhNDlmZGM4NzJjYjNiZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtE0zhNO5QP0xDgouoqrkSG2yiWm J3sY5x4u6jtpHwxGSNaFVIuEBNtCw7BFc1xcyF6nQer7W/xIp5NGXwgle6+uX6lx HJUoUau6OK6RM2N/l968Ei6lCU8IsEf8Hhet14arDET2L+UeChbdhQMd7NmiWUty qE0dvzjwaa+jhtsKQ1oiOX1TnJqJc0IlpWFZWgua4I684g6G7Yo8xhXXXVkbSx21 Wp8T+diFiUNLhHX+wd9KQHEtspTOT7FShe1QUfz/qKU4j3p7yPsnYXRd4XH1aJtu PHnCX8SHsC/vzVsQ4ZUq/eLjKFulN61m6/rEiGpf2BqKWxENC3WJJ3+htQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVf0+Kmj94qYK355aSf3Icss7+XMB8GA1UdIwQY MBaAFL4F6sfDr1NVHJ5iNlPdOtffFVS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTkt Y2ZkYWFjMGE2MmRiLzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTktY2ZkYWFjMGE2MmRi LzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfa3FUSwU dzjPj83cAgzX2YmtZDA1EjoHlXwkHijlkU+MOOe5g1aLzuRNj7orPYu54JqbsO88 ITrrqChUiCrV3rzh8wpp6Qw0ht3g0h8pvL4S0TWRrrHXkozvZamyjoDXYcUcNCHk 7A5lmS8Zf98Af1BTDQY5F1Ikv5NIeDFXeDLjpyTsfpS6dTAtnzxR6v7ES0R/cWhH n48Pi+kWeuYBJ5BBISNQo7Ad0PToy5AiPepxMy9Dg0o+nPQ66JZzcZWpEJEnVArX EMM9W1zpNM/SS1E/66IpYMKswDpmq9+8gczjPScPid7TXoQ55U4rTtIHsOT1PFaH zEw16o6hMoTW1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:52 2025 by rpki-client