This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json) Hash identifier: BvEa/InOMaUlh+08hgrif6A+Dt6QcdNu4xXfB9dnsuk= Subject key identifier: 6F:63:E2:2B:29:8A:57:95:33:B0:A5:A4:22:E3:E2:2F:C8:8C:28:2B Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Certificate serial: 019B1081B2976CE2A0906EB9FEFC71BB2B24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft Manifest number: 0C50 Signing time: Fri 12 Dec 2025 03:01:33 +0000 Manifest this update: Fri 12 Dec 2025 03:01:33 +0000 Manifest next update: Sat 13 Dec 2025 03:01:33 +0000 Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: 5+eZIXgCSMJAL4ItEWFT7BsmgOl6ISR7TwegDkdAu8k=) 2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:b2:97:6c:e2:a0:90:6e:b9:fe:fc:71:bb:2b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Validity Not Before: Dec 12 03:01:33 2025 GMT Not After : Dec 13 03:01:33 2025 GMT Subject: CN=6f63e22b298a579533b0a5a422e3e22fc88c282b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:2f:e2:aa:41:54:ee:36:02:fd:20:1e:fa: 3c:3d:29:3d:ff:27:7c:22:fa:ea:71:f2:42:f9:92: 15:0d:38:f7:c8:bb:a4:a0:e6:87:88:9c:ba:51:ab: 2c:0c:50:12:63:dc:d1:28:c4:6c:95:6a:f5:9c:6e: f9:46:49:0e:0e:97:cb:3f:71:e4:66:77:17:06:8c: 44:49:e3:e9:df:d9:51:fc:e1:35:b8:84:f2:80:87: 19:fe:77:78:c8:07:63:d1:20:34:29:c8:25:08:bc: 2b:28:84:59:f3:49:93:c8:4c:ad:22:a1:93:27:13: 8b:b2:88:c1:cb:6e:71:ea:77:db:81:2a:4a:61:b2: 7a:7a:27:d9:a6:64:0e:db:31:54:0e:97:bd:6a:65: 49:98:4d:67:f0:ea:28:88:f3:4f:ad:aa:37:c4:f2: 55:2d:6d:9d:8b:7f:25:f7:c5:b4:be:58:aa:05:1d: cc:87:cc:0b:8d:4b:cd:b3:7f:fb:65:1d:44:81:24: 36:81:98:34:5f:82:14:86:05:c9:dc:5e:1b:e8:77: 1e:d1:f5:41:b1:2e:45:80:7d:59:03:ca:f6:7f:88: 93:71:e1:88:06:ee:b5:f3:d6:7a:16:c6:82:93:4c: 5b:84:67:ce:d3:9b:69:38:7b:9f:5f:c6:9b:2a:ba: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:63:E2:2B:29:8A:57:95:33:B0:A5:A4:22:E3:E2:2F:C8:8C:28:2B X509v3 Authority Key Identifier: keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:42:20:80:c8:9a:73:eb:b6:cb:15:d0:7b:8f:53:3d:5a:d6: 15:dc:e2:ab:d3:b7:3b:59:fc:21:1d:4b:dc:86:a4:a1:e1:50: 1d:ae:1e:a9:13:bc:d4:3b:3a:64:6f:dd:69:16:a9:7b:75:1a: 3e:50:25:01:63:48:4d:15:5d:fd:4e:bd:70:c5:df:fd:eb:c1: 12:9f:61:1c:1e:08:a5:59:8e:6e:b9:b8:c7:d4:a9:47:29:1f: 5d:55:bb:28:d7:c1:97:ad:67:22:c1:f7:29:b6:b7:3b:f0:74: d0:fe:03:e1:30:c8:3f:7b:8f:74:46:94:42:f1:83:bd:ff:55: 40:25:13:0a:eb:7b:34:3d:9c:7c:8f:b6:b9:de:0b:a3:bd:8f: ec:69:8f:60:da:c6:33:2b:8a:ba:fd:b2:43:86:79:43:9c:f1: 1a:0f:22:53:46:46:3c:b5:76:34:40:6a:d5:3c:86:98:10:42: ed:14:d3:3f:55:b6:4e:7f:cf:f5:8d:de:15:bc:86:48:5c:f5: 9f:a3:05:30:38:00:e8:17:7c:58:67:93:32:0d:04:d8:85:d4: 17:2c:ba:c3:a8:b7:8e:12:1b:a6:6a:80:43:06:4b:b7:4a:de: 91:b8:cd:e1:96:d1:01:af:88:67:02:9d:d8:7a:13:05:83:04: 7d:32:33:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgbKXbOKgkG65/vxxuyskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmVjMjE3ZTliMTI5MzE2YzIzYTZmYTlmOWE3MjFmMTBj MmQ5NWQwHhcNMjUxMjEyMDMwMTMzWhcNMjUxMjEzMDMwMTMzWjAzMTEwLwYDVQQD Eyg2ZjYzZTIyYjI5OGE1Nzk1MzNiMGE1YTQyMmUzZTIyZmM4OGMyODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x8v4qpBVO42Av0gHvo8PSk9/yd8 IvrqcfJC+ZIVDTj3yLukoOaHiJy6UassDFASY9zRKMRslWr1nG75RkkODpfLP3Hk ZncXBoxESePp39lR/OE1uITygIcZ/nd4yAdj0SA0KcglCLwrKIRZ80mTyEytIqGT JxOLsojBy25x6nfbgSpKYbJ6eifZpmQO2zFUDpe9amVJmE1n8OooiPNPrao3xPJV LW2di38l98W0vliqBR3Mh8wLjUvNs3/7ZR1EgSQ2gZg0X4IUhgXJ3F4b6Hce0fVB sS5FgH1ZA8r2f4iTceGIBu6189Z6FsaCk0xbhGfO05tpOHufX8abKrpzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9j4ispileVM7ClpCLj4i/IjCgrMB8GA1UdIwQY MBaAFFRuwhfpsSkxbCOm+p+ach8QwtldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQt YzQ3YzI2ZmE2OGFmLzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQtYzQ3YzI2ZmE2OGFm LzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0IggMia c+u2yxXQe49TPVrWFdziq9O3O1n8IR1L3IakoeFQHa4eqRO81Ds6ZG/daRape3Ua PlAlAWNITRVd/U69cMXf/evBEp9hHB4IpVmObrm4x9SpRykfXVW7KNfBl61nIsH3 Kba3O/B00P4D4TDIP3uPdEaUQvGDvf9VQCUTCut7ND2cfI+2ud4Lo72P7GmPYNrG MyuKuv2yQ4Z5Q5zxGg8iU0ZGPLV2NEBq1TyGmBBC7RTTP1W2Tn/P9Y3eFbyGSFz1 n6MFMDgA6Bd8WGeTMg0E2IXUFyy6w6i3jhIbpmqAQwZLt0rekbjN4ZbRAa+IZwKd 2HoTBYMEfTIz+w== -----END CERTIFICATE-----Generated at Fri Dec 12 08:53:02 2025 by rpki-client