This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json) Hash identifier: nWpc9h9O9Sl03HjFsfr+xwDVw4goGQvov8n7AHuDsKQ= Subject key identifier: F5:30:9B:0F:C8:44:51:35:18:05:25:39:3D:D9:D3:61:1B:F6:E0:7F Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1 Certificate serial: 019B0F6E7B702C52228714D5EE2C502D895A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 22:00:57 +0000 Manifest this update: Thu 11 Dec 2025 22:00:57 +0000 Manifest next update: Fri 12 Dec 2025 22:00:57 +0000 Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: v1DxFvI4E0Q2fLnD6SBOK0aozTBtZ7tH9hHTlaqf8/I=) 2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:7b:70:2c:52:22:87:14:d5:ee:2c:50:2d:89:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1 Validity Not Before: Dec 11 22:00:57 2025 GMT Not After : Dec 12 22:00:57 2025 GMT Subject: CN=f5309b0fc8445135180525393dd9d3611bf6e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:f3:be:58:b4:4a:7a:05:1b:a1:01:a4:3f: c5:6a:d7:de:b9:0d:e7:8b:2c:50:27:a3:23:39:ae: 11:19:5c:d8:b5:a4:97:a2:70:2e:14:6e:c9:cf:9b: ba:95:db:33:f1:6a:f8:48:83:40:fe:a5:ec:2d:11: 95:2f:70:63:52:23:34:7a:eb:41:8d:62:c8:52:ad: 4c:2f:f3:87:f8:af:65:89:2c:ab:3f:e9:16:78:ef: 54:8e:e7:db:7f:2c:69:6e:4d:22:0e:d6:6b:42:8e: 6e:c4:c3:45:c6:db:97:00:f0:31:95:d7:65:4d:71: ac:db:86:e6:88:31:63:92:6b:79:0b:01:3f:9f:4f: 66:53:fb:ed:19:8e:c3:fa:a5:29:f9:b7:bd:37:d6: 0c:01:89:fc:3a:e9:9f:06:6c:46:ef:11:fe:82:66: 07:f6:b2:3b:9f:e2:7f:b3:75:76:41:47:a3:19:be: 15:35:d9:9d:9e:65:21:37:0d:e7:d3:5c:d8:8a:c2: 97:59:c2:ed:df:d8:1f:ee:b4:7e:2b:97:ab:d5:fa: 63:f4:aa:6a:5d:bd:62:d8:f4:a9:c1:36:1f:1f:36: 4d:e4:a6:8f:2f:e1:19:22:8a:f0:fc:d1:3c:35:a9: 57:72:57:15:05:df:13:43:f0:a0:3a:09:47:eb:95: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:30:9B:0F:C8:44:51:35:18:05:25:39:3D:D9:D3:61:1B:F6:E0:7F X509v3 Authority Key Identifier: keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fb:0e:c5:92:6e:48:33:2f:49:72:be:76:43:fd:1d:98:48: d6:da:79:e2:33:12:59:41:12:86:d7:77:14:cf:2d:18:2e:72: ee:d3:33:15:cc:fd:b4:85:13:63:ac:8b:71:fb:ed:1b:c2:e7: cb:21:bb:d7:fe:da:42:19:60:d1:e3:62:9a:2f:e2:69:70:5e: f3:30:e6:3c:18:a2:fb:11:96:35:92:d5:d4:d7:15:22:0b:e7: 08:c9:53:5f:b1:bd:bb:ad:dd:19:22:75:79:04:89:0a:15:d4: 2d:47:4d:e2:0c:17:9a:39:c3:24:e5:27:31:51:cf:a6:0b:1f: bb:e6:55:ef:bb:16:b8:d4:70:5f:46:b8:75:ad:1c:e5:4a:5c: c4:84:e6:de:ae:d9:37:75:21:d5:0b:90:9a:10:08:b2:82:a4: d0:04:76:77:b4:03:97:a1:07:da:93:2d:30:98:db:1f:ba:82: 95:62:59:3f:f7:b6:71:f9:fc:82:61:c9:25:69:02:ed:03:74: 35:02:f0:44:ec:33:24:a6:2d:3c:d8:f4:16:8e:10:6b:ba:54: 56:c4:21:53:70:3c:90:fe:79:67:91:e7:d7:d7:f7:75:79:ea: 4c:fd:42:53:22:4d:90:27:e1:7e:87:d8:c9:a2:67:5a:d5:60: de:68:70:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbntwLFIihxTV7ixQLYlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDc4OTU3MzZlZDkyODYwZjMxMzUwMDhhODU4MTNmOThi YmQ3YzEwHhcNMjUxMjExMjIwMDU3WhcNMjUxMjEyMjIwMDU3WjAzMTEwLwYDVQQD EyhmNTMwOWIwZmM4NDQ1MTM1MTgwNTI1MzkzZGQ5ZDM2MTFiZjZlMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW/zvli0SnoFG6EBpD/FatfeuQ3n iyxQJ6MjOa4RGVzYtaSXonAuFG7Jz5u6ldsz8Wr4SINA/qXsLRGVL3BjUiM0eutB jWLIUq1ML/OH+K9liSyrP+kWeO9Ujufbfyxpbk0iDtZrQo5uxMNFxtuXAPAxlddl TXGs24bmiDFjkmt5CwE/n09mU/vtGY7D+qUp+be9N9YMAYn8OumfBmxG7xH+gmYH 9rI7n+J/s3V2QUejGb4VNdmdnmUhNw3n01zYisKXWcLt39gf7rR+K5er1fpj9Kpq Xb1i2PSpwTYfHzZN5KaPL+EZIorw/NE8NalXclcVBd8TQ/CgOglH65V7mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUwmw/IRFE1GAUlOT3Z02Eb9uB/MB8GA1UdIwQY MBaAFL4HiVc27ZKGDzE1AIqFgT+Yu9fBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDct MjFkNjEwMDM4M2UwLzEvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi82NTlmMmMtYzI4OS00Njk5LTg3ZDctMjFkNjEwMDM4M2Uw LzEvdmdlSlZ6YnRrb1lQTVRVQWlvV0JQNWk3MThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvsOxZJu SDMvSXK+dkP9HZhI1tp54jMSWUEShtd3FM8tGC5y7tMzFcz9tIUTY6yLcfvtG8Ln yyG71/7aQhlg0eNimi/iaXBe8zDmPBii+xGWNZLV1NcVIgvnCMlTX7G9u63dGSJ1 eQSJChXULUdN4gwXmjnDJOUnMVHPpgsfu+ZV77sWuNRwX0a4da0c5UpcxITm3q7Z N3Uh1QuQmhAIsoKk0AR2d7QDl6EH2pMtMJjbH7qClWJZP/e2cfn8gmHJJWkC7QN0 NQLwROwzJKYtPNj0Fo4Qa7pUVsQhU3A8kP55Z5Hn19f3dXnqTP1CUyJNkCfhfofY yaJnWtVg3mhwwQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:48 2025 by rpki-client