This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json) Hash identifier: KSnXSg+hkuveNMvoQcvyYdhUEGnN8ZcsFrVgGdqmUW0= Subject key identifier: D6:69:C7:86:D2:4E:7E:3F:5D:B0:08:85:6C:48:68:43:1B:5E:EE:7B Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Certificate serial: 019B18719E19468CAF0361C46CBCE32ADE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft Manifest number: 0D66 Signing time: Sat 13 Dec 2025 16:00:57 +0000 Manifest this update: Sat 13 Dec 2025 16:00:57 +0000 Manifest next update: Sun 14 Dec 2025 16:00:57 +0000 Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: Y8pel3u3KHNOOHOeGMqsvVSkankcJl7MaYehxCf2oj8=) 2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:9e:19:46:8c:af:03:61:c4:6c:bc:e3:2a:de:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Validity Not Before: Dec 13 16:00:57 2025 GMT Not After : Dec 14 16:00:57 2025 GMT Subject: CN=d669c786d24e7e3f5db008856c4868431b5eee7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:cd:46:22:10:82:79:51:4e:07:d1:5b:e1: db:8a:bf:da:69:90:f4:b3:24:86:07:cf:4a:e6:c3: bb:96:75:b7:03:93:b7:ce:2b:91:03:2b:85:d0:25: 63:78:5e:cd:ca:92:24:72:b1:f4:8c:da:63:17:d6: 15:53:ed:40:40:85:71:8b:00:21:8f:04:56:23:9e: 6d:b3:53:83:28:e4:c9:5d:d5:ef:9e:09:ed:47:25: 3b:e3:18:5d:ef:f6:20:11:0a:ec:b0:a4:43:db:53: 68:b2:23:c9:9a:89:89:50:82:d5:40:0f:a6:b7:0c: 93:fe:4d:41:fa:9f:e9:e0:c3:f2:62:8e:8f:f2:2b: 29:d3:15:e9:df:00:72:dc:20:e9:63:d2:e1:55:18: ea:71:cd:aa:58:a7:98:bc:1e:d9:53:ae:d2:0a:a8: 7c:33:ab:25:ce:e7:e3:ae:af:47:2f:9d:fe:c2:6f: 69:c7:c0:e3:2e:ed:6d:fa:73:4e:8b:a8:d7:c2:a2: 00:72:64:bf:53:9a:ba:66:0c:04:e9:5e:63:64:81: 84:95:9f:92:d3:5d:c7:d4:15:7a:73:54:a2:e4:90: 43:20:cc:61:32:b4:d5:2e:b5:8e:b0:7d:44:53:6c: e0:80:dd:00:14:85:8a:d8:3f:bc:c3:76:4d:c8:5d: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:69:C7:86:D2:4E:7E:3F:5D:B0:08:85:6C:48:68:43:1B:5E:EE:7B X509v3 Authority Key Identifier: keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:24:e1:72:c2:44:db:96:c4:eb:fd:69:e5:fe:2f:c0:a2:0b: 46:10:e1:c1:12:b0:e2:25:8d:52:f4:c0:90:2b:05:51:8f:7d: 8f:e3:85:f6:68:5d:97:7d:dc:73:38:f6:f1:de:59:ae:27:95: 7e:40:17:dd:db:ef:90:9d:81:3a:6b:88:2f:98:e6:ef:db:ff: 34:d5:c4:11:39:08:28:8e:a6:44:81:5a:a5:1c:25:9b:aa:f8: 68:c4:0d:11:93:ef:07:9c:45:f9:9b:ae:2a:fa:2e:63:97:cf: 49:7f:f3:74:c0:52:aa:40:06:70:c8:52:64:8f:1b:00:16:71: c9:05:5c:3d:c0:b7:94:77:09:f1:3b:52:eb:01:b8:14:25:78: 2c:37:6c:cd:b4:a4:af:34:41:96:ea:87:61:90:6c:a0:8b:ba: 51:ee:47:78:3b:63:ac:74:d7:f0:5f:ce:cc:8b:2c:28:06:1b: bb:21:18:7b:a8:b3:07:7f:cf:60:b6:94:91:48:2b:3c:5b:7e: 6d:06:cd:63:9a:c0:c2:ff:6b:95:45:d0:2b:bd:d2:dd:56:8e: 36:fe:3a:c2:0d:0f:8a:73:37:47:46:ff:ab:b9:aa:7e:70:39: 04:57:eb:16:ad:b4:8c:97:78:2a:c4:b6:36:a6:86:32:9a:b8: 12:92:5d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcZ4ZRoyvA2HEbLzjKt4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm MjQ0ZDMwHhcNMjUxMjEzMTYwMDU3WhcNMjUxMjE0MTYwMDU3WjAzMTEwLwYDVQQD EyhkNjY5Yzc4NmQyNGU3ZTNmNWRiMDA4ODU2YzQ4Njg0MzFiNWVlZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gzNRiIQgnlRTgfRW+Hbir/aaZD0 sySGB89K5sO7lnW3A5O3ziuRAyuF0CVjeF7NypIkcrH0jNpjF9YVU+1AQIVxiwAh jwRWI55ts1ODKOTJXdXvngntRyU74xhd7/YgEQrssKRD21NosiPJmomJUILVQA+m twyT/k1B+p/p4MPyYo6P8isp0xXp3wBy3CDpY9LhVRjqcc2qWKeYvB7ZU67SCqh8 M6slzufjrq9HL53+wm9px8DjLu1t+nNOi6jXwqIAcmS/U5q6ZgwE6V5jZIGElZ+S 013H1BV6c1Si5JBDIMxhMrTVLrWOsH1EU2zggN0AFIWK2D+8w3ZNyF25xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZpx4bSTn4/XbAIhWxIaEMbXu57MB8GA1UdIwQY MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1 LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiThcsJE 25bE6/1p5f4vwKILRhDhwRKw4iWNUvTAkCsFUY99j+OF9mhdl33cczj28d5ZrieV fkAX3dvvkJ2BOmuIL5jm79v/NNXEETkIKI6mRIFapRwlm6r4aMQNEZPvB5xF+Zuu KvouY5fPSX/zdMBSqkAGcMhSZI8bABZxyQVcPcC3lHcJ8TtS6wG4FCV4LDdszbSk rzRBluqHYZBsoIu6Ue5HeDtjrHTX8F/OzIssKAYbuyEYe6izB3/PYLaUkUgrPFt+ bQbNY5rAwv9rlUXQK73S3VaONv46wg0PinM3R0b/q7mqfnA5BFfrFq20jJd4KsS2 NqaGMpq4EpJdLQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:55 2025 by rpki-client