This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json) Hash identifier: CLe92ixCshKe9RQGEiUJXjCOMv9DmshhCwcnM82R8GQ= Subject key identifier: 3E:AC:4A:0B:38:F3:42:A3:5D:DB:0E:C3:C8:43:6C:87:9A:FC:07:DF Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Certificate serial: 019B1871405F3EFDD4AE78A117A4ABC09DF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 16:00:33 +0000 Manifest this update: Sat 13 Dec 2025 16:00:33 +0000 Manifest next update: Sun 14 Dec 2025 16:00:33 +0000 Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: xMm42WJmc6Vz5ifcZTHn2waadAq0K9QSOgdwgB1UfCg=) 2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:40:5f:3e:fd:d4:ae:78:a1:17:a4:ab:c0:9d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Validity Not Before: Dec 13 16:00:33 2025 GMT Not After : Dec 14 16:00:33 2025 GMT Subject: CN=3eac4a0b38f342a35ddb0ec3c8436c879afc07df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:a5:b3:48:9b:55:42:a1:0c:77:6f:03:11: 60:eb:3a:ee:62:69:19:a2:56:74:da:47:56:22:f9: f2:f9:73:b1:de:7f:ab:c2:9f:25:33:48:00:15:11: 73:e9:9a:2c:44:eb:bb:17:5e:d2:46:15:0d:6e:99: f9:c9:6f:c1:e6:56:65:3b:cf:3d:c5:9c:21:20:dd: 5a:a4:5d:1d:66:ba:ea:da:f0:c6:0b:1d:d6:d7:9e: 74:e5:0f:62:e4:8d:f7:22:fb:50:f9:3c:04:c9:44: 17:60:25:56:8b:1d:64:90:70:2e:4e:04:87:e2:3d: 65:ad:21:60:be:26:c8:44:34:7a:ce:61:33:d2:61: 50:4f:2c:64:53:2d:27:7c:70:05:b6:3c:30:78:93: 87:8d:82:6b:ba:77:1e:72:0c:96:18:92:82:f8:43: be:71:9c:80:92:74:7a:f9:7c:35:6b:a4:42:f4:13: b0:45:ee:0c:24:97:bc:60:00:3d:c8:22:7c:22:f3: 7d:de:ff:59:70:97:f2:56:0c:7f:37:a8:01:3a:24: 2c:5a:ee:22:2d:0c:af:8e:0b:8b:2d:97:39:0a:48: df:ae:10:34:06:a4:f4:ba:36:18:cb:b3:a6:30:2d: 26:cb:d7:9d:e8:23:fc:d2:b5:88:b2:25:24:e7:85: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:4A:0B:38:F3:42:A3:5D:DB:0E:C3:C8:43:6C:87:9A:FC:07:DF X509v3 Authority Key Identifier: keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5f:0b:64:dd:6f:67:bd:3a:a7:f2:9e:d3:f3:1a:76:92:b6: 4d:1f:9a:aa:59:61:e5:77:ea:0e:ed:82:6b:cb:78:ec:b8:d4: 56:af:8e:82:1c:4c:c0:66:1e:79:f8:37:e3:4c:9d:1f:03:cd: 70:b1:cd:90:a0:a9:4c:58:de:f3:9b:da:6f:1a:08:9c:96:7e: 6b:2a:24:d8:dd:ec:cf:7d:a0:3a:24:0c:b5:6a:cc:b8:43:df: 4f:cc:10:ef:2e:a8:f7:b0:37:43:74:90:f7:90:67:0f:36:d8: 3d:31:4d:2a:2a:73:85:30:00:d8:99:0c:3d:c1:68:7d:ef:38: 55:80:87:7c:11:13:ad:63:f7:2d:cf:bf:de:bd:34:ad:da:b9: ad:e2:ae:77:d1:bc:ca:43:2e:09:7c:f3:0c:8a:27:41:0b:c5: 38:05:ea:e8:97:0e:2f:67:d3:66:6d:c2:4e:11:96:ea:0f:9b: 0d:1d:7d:f7:81:d1:15:2a:97:b8:cb:40:28:e1:e8:99:e7:f4: 0f:59:83:bb:d5:de:08:8d:5b:cc:44:96:ac:85:9d:e0:6c:8a: 21:06:ab:9f:89:05:17:a8:8b:b6:6f:8b:f0:9b:00:67:c8:cc: 24:6f:87:20:bc:8e:bf:1e:37:51:d9:b3:2a:fe:d3:45:60:c6: 10:6a:1a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcUBfPv3UrnihF6SrwJ3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm ZDQ5NzAwHhcNMjUxMjEzMTYwMDMzWhcNMjUxMjE0MTYwMDMzWjAzMTEwLwYDVQQD EygzZWFjNGEwYjM4ZjM0MmEzNWRkYjBlYzNjODQzNmM4NzlhZmMwN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioOls0ibVUKhDHdvAxFg6zruYmkZ olZ02kdWIvny+XOx3n+rwp8lM0gAFRFz6ZosROu7F17SRhUNbpn5yW/B5lZlO889 xZwhIN1apF0dZrrq2vDGCx3W15505Q9i5I33IvtQ+TwEyUQXYCVWix1kkHAuTgSH 4j1lrSFgvibIRDR6zmEz0mFQTyxkUy0nfHAFtjwweJOHjYJruncecgyWGJKC+EO+ cZyAknR6+Xw1a6RC9BOwRe4MJJe8YAA9yCJ8IvN93v9ZcJfyVgx/N6gBOiQsWu4i LQyvjguLLZc5CkjfrhA0BqT0ujYYy7OmMC0my9ed6CP80rWIsiUk54UJWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6sSgs480KjXdsOw8hDbIea/AffMB8GA1UdIwQY MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1 LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ18LZN1v Z706p/Ke0/MadpK2TR+aqllh5XfqDu2Ca8t47LjUVq+OghxMwGYeefg340ydHwPN cLHNkKCpTFje85vabxoInJZ+ayok2N3sz32gOiQMtWrMuEPfT8wQ7y6o97A3Q3SQ 95BnDzbYPTFNKipzhTAA2JkMPcFofe84VYCHfBETrWP3Lc+/3r00rdq5reKud9G8 ykMuCXzzDIonQQvFOAXq6JcOL2fTZm3CThGW6g+bDR1994HRFSqXuMtAKOHomef0 D1mDu9XeCI1bzESWrIWd4GyKIQarn4kFF6iLtm+L8JsAZ8jMJG+HILyOvx43Udmz Kv7TRWDGEGoaiw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:04:10 2025 by rpki-client