This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json) Hash identifier: LybdCWqN+OOurHc2q1al65dAsZXtDPgrhnvR50xE3mA= Subject key identifier: B9:22:A1:D9:55:E4:28:E3:31:9B:C2:31:57:C8:B5:EC:95:DE:9C:8E Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Certificate serial: 019B5A88DBB23FF70B7EB946ED262C9DE9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:01:17 +0000 Manifest this update: Fri 26 Dec 2025 12:01:17 +0000 Manifest next update: Sat 27 Dec 2025 12:01:17 +0000 Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=) 2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=) 3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: k/V8WCVWqYD9RKWydKgO/gzLYYUdIoJEQGEI7ZcJoA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:db:b2:3f:f7:0b:7e:b9:46:ed:26:2c:9d:e9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca Validity Not Before: Dec 26 12:01:17 2025 GMT Not After : Dec 27 12:01:17 2025 GMT Subject: CN=b922a1d955e428e3319bc23157c8b5ec95de9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:91:96:46:b8:84:0b:60:6c:1e:a4:1c:06: 58:55:21:47:79:d7:93:18:56:9e:7b:4d:d7:d0:8e: 84:7a:d2:0a:b0:08:cd:44:ff:53:26:fa:bf:3e:48: c6:ce:f7:f4:3b:f7:81:82:69:f9:ff:11:e7:b8:8a: 47:bd:4f:14:c2:d9:f2:3f:2e:33:29:60:1f:6a:11: e2:7b:3a:05:67:d9:32:14:17:27:66:8e:f0:48:dc: 3f:8e:05:2f:e8:0c:d1:8c:4c:cc:e5:06:33:26:c5: e3:30:ca:93:99:86:90:53:e8:15:c6:00:4f:2b:58: e6:37:29:70:73:09:37:09:6a:a6:be:17:8c:8e:59: 3a:b2:39:72:db:33:22:23:92:15:ff:81:1f:bd:85: fa:2c:ba:a4:27:86:90:8b:ed:36:f5:bc:e8:94:9b: bc:b3:08:ab:70:3c:fd:01:46:1b:9e:2e:23:1c:0c: ac:d2:33:b6:5d:8b:92:05:fe:95:72:8e:d3:ce:41: e3:24:e5:a2:79:a2:8f:4d:75:04:99:44:60:7a:1b: 1b:72:0b:d1:77:80:a9:65:b8:ea:09:63:d3:dc:cf: 95:b8:9c:76:1c:60:06:d9:0c:3a:e3:9f:14:43:c4: a1:75:97:41:f5:5f:27:1c:50:60:a7:cc:09:7a:99: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:22:A1:D9:55:E4:28:E3:31:9B:C2:31:57:C8:B5:EC:95:DE:9C:8E X509v3 Authority Key Identifier: keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:21:c4:a1:88:ea:f8:0e:a4:d2:3d:aa:1f:22:c5:85:0d:ec: 58:57:fa:a5:ea:f1:4f:80:14:a6:4d:e1:3f:3b:53:83:a7:fa: cf:c1:d1:27:24:81:a8:4d:93:68:70:21:94:d7:db:c1:6e:6d: 66:30:a5:88:17:65:0f:06:1e:7b:cf:cc:1f:81:1e:d6:c1:96: 81:0d:ac:bb:b8:e2:f1:96:20:57:83:15:72:a5:8e:e5:70:fe: 73:b7:b6:b4:64:34:60:3a:24:a0:22:9e:b1:07:34:62:ea:1f: 77:b8:f9:bb:99:6e:40:d2:50:03:4d:19:c3:2c:19:5f:ca:91: d4:cd:3b:83:f5:ff:2f:39:0b:0a:4f:26:e5:58:8f:38:c2:f5: eb:ed:bf:93:51:a2:3f:e2:01:6c:b7:7a:6d:6a:c7:fb:5d:9c: 42:04:3e:e1:b1:16:69:93:ad:30:0d:33:df:af:4d:44:ab:7b: 21:5f:35:54:bd:33:41:c9:0c:11:7d:8c:7e:64:21:16:57:7c: 78:44:85:61:40:a0:fd:5e:25:60:82:01:62:76:11:19:9e:07: bf:41:27:6e:e5:f4:3a:8a:97:f2:b0:0b:8f:67:a3:f1:9f:92: 85:2b:4f:db:ab:f8:ad:ff:8a:f2:cd:8a:f9:4a:30:28:99:ec: 52:3a:ee:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNuyP/cLfrlG7SYsnem8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw MmI2Y2EwHhcNMjUxMjI2MTIwMTE3WhcNMjUxMjI3MTIwMTE3WjAzMTEwLwYDVQQD EyhiOTIyYTFkOTU1ZTQyOGUzMzE5YmMyMzE1N2M4YjVlYzk1ZGU5YzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTKRlka4hAtgbB6kHAZYVSFHedeT GFaee03X0I6EetIKsAjNRP9TJvq/PkjGzvf0O/eBgmn5/xHnuIpHvU8UwtnyPy4z KWAfahHiezoFZ9kyFBcnZo7wSNw/jgUv6AzRjEzM5QYzJsXjMMqTmYaQU+gVxgBP K1jmNylwcwk3CWqmvheMjlk6sjly2zMiI5IV/4EfvYX6LLqkJ4aQi+029bzolJu8 swircDz9AUYbni4jHAys0jO2XYuSBf6Vco7TzkHjJOWieaKPTXUEmURgehsbcgvR d4CpZbjqCWPT3M+VuJx2HGAG2Qw6458UQ8ShdZdB9V8nHFBgp8wJepk4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkiodlV5CjjMZvCMVfIteyV3pyOMB8GA1UdIwQY MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCHEoYjq +A6k0j2qHyLFhQ3sWFf6perxT4AUpk3hPztTg6f6z8HRJySBqE2TaHAhlNfbwW5t ZjCliBdlDwYee8/MH4Ee1sGWgQ2su7ji8ZYgV4MVcqWO5XD+c7e2tGQ0YDokoCKe sQc0Yuofd7j5u5luQNJQA00ZwywZX8qR1M07g/X/LzkLCk8m5ViPOML16+2/k1Gi P+IBbLd6bWrH+12cQgQ+4bEWaZOtMA0z369NRKt7IV81VL0zQckMEX2MfmQhFld8 eESFYUCg/V4lYIIBYnYRGZ4Hv0EnbuX0OoqX8rALj2ej8Z+ShStP26v4rf+K8s2K +UowKJnsUjru2w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client