This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft File: VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json) Hash identifier: sAtWLSdnmvkme8z3m8vk/LgdTD7MIqEJLrehMXUHbE8= Subject key identifier: 92:8D:14:B9:D1:F0:E0:AE:8C:F6:5C:75:8A:A8:C9:C6:9F:30:15:58 Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57 Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57 Certificate serial: 019B1A28E79F0B45BAD3C00CE38336C9F223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 00:00:46 +0000 Manifest this update: Sun 14 Dec 2025 00:00:46 +0000 Manifest next update: Mon 15 Dec 2025 00:00:46 +0000 Files and hashes: 1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: XE8vg0Phqu8VKBHK09eqmJ56zzkRpcx+DtHCjmhr4A0=) 2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:e7:9f:0b:45:ba:d3:c0:0c:e3:83:36:c9:f2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57 Validity Not Before: Dec 14 00:00:46 2025 GMT Not After : Dec 15 00:00:46 2025 GMT Subject: CN=928d14b9d1f0e0ae8cf65c758aa8c9c69f301558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:cb:56:e5:8a:e7:54:b3:6f:f4:91:f1:87: 87:9a:e9:79:46:14:33:d8:9a:a6:cd:df:d0:73:06: 63:7b:36:a1:01:0e:54:5b:4e:b5:ef:7a:77:af:07: 0a:b6:d1:73:51:86:9b:c2:76:f6:e8:e1:71:76:41: 5b:e7:8c:0f:25:08:9f:67:d8:4c:62:f9:25:cd:b1: 46:fd:b9:ba:64:97:d2:f3:ab:d5:9f:7c:a2:92:c3: 40:a1:c5:af:85:1d:93:cc:0c:71:ec:75:51:2a:3d: 4a:4c:b4:f0:2f:63:4c:7a:b0:68:5b:dd:62:f6:70: 20:68:0e:75:eb:c0:17:23:ce:a6:29:e8:2f:58:98: 48:0c:22:50:d5:5a:f4:d6:23:d1:a1:3f:34:6b:6d: 7b:e9:7c:ad:dc:22:e2:02:82:ab:b2:b9:93:68:36: 9f:bb:5d:ec:93:36:c2:a0:0b:19:1f:c8:d9:60:fc: a0:c3:37:87:f1:fd:48:53:4c:54:33:e7:28:b7:70: ed:06:b7:72:4e:2f:04:8f:ad:24:80:78:c5:3b:ec: 15:60:e0:5a:56:61:1c:0e:03:b7:1e:73:5c:e0:2a: be:b6:60:1a:23:58:67:b0:91:83:18:7c:33:61:b0: 92:f0:8c:d5:d5:4e:bb:a4:b2:c4:ab:af:79:e3:54: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:14:B9:D1:F0:E0:AE:8C:F6:5C:75:8A:A8:C9:C6:9F:30:15:58 X509v3 Authority Key Identifier: keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:23:4a:d6:7f:f4:3e:45:a9:99:6b:00:57:e8:15:f1:4a:62: a7:65:3f:13:94:9a:fb:4b:ea:57:77:87:5d:27:a3:59:d7:4e: 26:e8:cd:17:80:de:d9:97:b3:53:18:fd:cc:7d:8a:93:a0:cc: e6:e3:18:81:9d:4b:da:dc:5e:ed:e4:71:0c:92:42:ef:60:a3: a3:82:34:de:12:ab:f9:6d:6a:54:a2:5a:6c:88:e2:91:45:91: 95:57:2a:4d:28:d5:bb:bb:4a:04:23:0a:9e:f6:75:a8:f6:bb: 84:f0:6b:80:70:4d:2a:be:f0:9f:7f:77:9c:4a:8e:e6:e9:d3: 41:74:6f:7f:5e:d5:09:7f:16:ae:13:69:e1:66:b0:72:99:90: 5b:5d:4d:98:97:db:70:82:37:50:52:cf:d4:32:74:20:bf:36: 8c:51:96:6e:e3:a9:b8:17:3f:c3:7a:78:89:a8:f3:6c:73:e4: b2:57:cf:51:cd:be:44:13:86:cf:33:44:5b:a9:04:f9:a3:dd: ac:bc:3c:ef:dc:0d:df:d1:07:69:e1:68:ef:d8:e6:cf:1d:18: 43:bc:99:1b:e3:7e:dc:3e:bc:85:75:f8:e8:c2:ba:fd:00:fe: 05:28:a9:36:c7:75:29:e5:c7:1e:13:d3:75:35:26:4a:8f:00: f1:bb:32:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKOefC0W608AM44M2yfIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MDgwNWI3MzAxODcxMTY5YmQwOWI4ODY1NjlkMWY2OWRj MTliNTcwHhcNMjUxMjE0MDAwMDQ2WhcNMjUxMjE1MDAwMDQ2WjAzMTEwLwYDVQQD Eyg5MjhkMTRiOWQxZjBlMGFlOGNmNjVjNzU4YWE4YzljNjlmMzAxNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVzLVuWK51Szb/SR8YeHmul5RhQz 2Jqmzd/QcwZjezahAQ5UW06173p3rwcKttFzUYabwnb26OFxdkFb54wPJQifZ9hM YvklzbFG/bm6ZJfS86vVn3yiksNAocWvhR2TzAxx7HVRKj1KTLTwL2NMerBoW91i 9nAgaA5168AXI86mKegvWJhIDCJQ1Vr01iPRoT80a2176Xyt3CLiAoKrsrmTaDaf u13skzbCoAsZH8jZYPygwzeH8f1IU0xUM+cot3DtBrdyTi8Ej60kgHjFO+wVYOBa VmEcDgO3HnNc4Cq+tmAaI1hnsJGDGHwzYbCS8IzV1U67pLLEq69541SSdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKNFLnR8OCujPZcdYqoycafMBVYMB8GA1UdIwQY MBaAFFYIBbcwGHEWm9CbiGVp0fadwZtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUt MDhkYTQyMGYyOGM4LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83Y2NkMmMtMmMwNS00NTNhLWI3YmUtMDhkYTQyMGYyOGM4 LzEvVmdnRnR6QVljUmFiMEp1SVpXblI5cDNCbTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyNK1n/0 PkWpmWsAV+gV8Upip2U/E5Sa+0vqV3eHXSejWddOJujNF4De2ZezUxj9zH2Kk6DM 5uMYgZ1L2txe7eRxDJJC72Cjo4I03hKr+W1qVKJabIjikUWRlVcqTSjVu7tKBCMK nvZ1qPa7hPBrgHBNKr7wn393nEqO5unTQXRvf17VCX8WrhNp4WawcpmQW11NmJfb cII3UFLP1DJ0IL82jFGWbuOpuBc/w3p4iajzbHPkslfPUc2+RBOGzzNEW6kE+aPd rLw879wN39EHaeFo79jmzx0YQ7yZG+N+3D68hXX46MK6/QD+BSipNsd1KeXHHhPT dTUmSo8A8bsyTQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:11 2025 by rpki-client