This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json) Hash identifier: XsTxtiFx740C6nvntr3cMA4XrsX5EcwoRtAMs3HIF30= Subject key identifier: DC:DC:65:6F:6E:CB:8D:BB:DA:EC:6B:50:97:A7:5B:5F:04:AD:CC:1C Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72 Certificate serial: 019AE671FD55B94362D3B1343729A74C8CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft Manifest number: 1032 Signing time: Wed 03 Dec 2025 23:00:21 +0000 Manifest this update: Wed 03 Dec 2025 23:00:21 +0000 Manifest next update: Thu 04 Dec 2025 23:00:21 +0000 Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=) 2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: xrfuCFEc9ljcokD7Q4Wgulw7Chr+Andd6vbYYnFTfrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:71:fd:55:b9:43:62:d3:b1:34:37:29:a7:4c:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72 Validity Not Before: Dec 3 23:00:21 2025 GMT Not After : Dec 4 23:00:21 2025 GMT Subject: CN=dcdc656f6ecb8dbbdaec6b5097a75b5f04adcc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:9c:b7:16:d2:55:0b:ad:fb:b2:a1:cc:ca: fe:2a:d7:4c:d8:54:41:71:90:4e:e8:13:7c:41:89: a4:bf:60:fd:2b:92:e1:11:f6:94:68:4d:8b:0f:86: 37:7b:e4:8b:c0:b0:c9:a1:b5:30:be:aa:4e:39:be: c0:90:44:57:c4:b5:91:b1:a8:0a:fe:e9:45:eb:ec: 79:46:58:cb:e3:dc:5f:f7:fc:ac:6e:1f:1e:f6:83: f0:b3:6f:2c:6b:2b:6d:49:9c:92:a4:83:a9:76:2c: 92:e9:49:4d:35:29:d0:08:5e:4d:fe:27:1c:0c:16: 74:b7:03:68:38:6c:f1:08:a8:0e:c7:87:b6:f8:4d: 2b:e1:37:fd:77:5b:4d:04:96:a5:15:f1:de:de:30: bb:1e:fc:9d:1c:31:ce:08:c6:27:16:23:71:59:71: 02:fd:e7:c4:fd:b4:f2:4d:d3:bf:60:0f:63:16:9d: 4f:57:e9:cb:39:8a:ae:43:69:d2:af:8c:f8:88:ca: 07:11:17:4c:ed:91:99:be:cd:19:76:e2:60:39:16: 23:e7:c8:06:cb:e3:b6:7e:a8:30:f8:66:b3:d2:5f: e1:af:9d:4c:0f:0f:13:fc:9c:66:f7:2c:52:e5:cc: 4b:d7:f5:d4:e4:e0:12:8f:b0:12:70:7f:39:d5:f9: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:65:6F:6E:CB:8D:BB:DA:EC:6B:50:97:A7:5B:5F:04:AD:CC:1C X509v3 Authority Key Identifier: keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:31:ea:e5:27:d8:bd:2a:b7:14:16:bd:f3:75:14:ee:ce:81: 05:7a:dd:22:48:fa:a9:c8:2c:11:d3:73:47:27:cf:65:b9:55: 65:96:0e:0a:9b:e2:05:e9:a6:d5:31:22:63:26:2a:21:64:0d: 9d:d6:7a:15:d7:12:db:1c:11:9d:53:35:65:37:e6:9c:9b:7f: 1a:48:8a:52:4f:17:d1:c4:d1:41:0d:d4:a0:dc:c1:f1:b9:f0: 19:4e:6d:59:24:a6:fa:16:5c:55:ed:e3:6e:cf:48:de:4b:74: 43:4d:da:00:27:57:6a:f2:fc:d0:c9:79:d6:ca:2a:0d:a1:cd: 27:49:57:b2:30:b6:69:5a:53:a0:27:f0:10:69:12:c6:5a:29: f6:c3:32:51:c8:bf:0c:74:91:03:70:a4:a2:23:a7:89:e4:b7: 3f:8c:3a:95:67:d3:df:00:a2:b2:ef:77:ac:5e:58:8f:e5:d8: a0:c5:25:ba:ab:08:87:e9:7c:25:46:d8:88:58:39:40:a0:24: f5:c2:66:55:85:63:a7:aa:fc:fb:7c:14:30:b2:f1:74:35:cf: 78:38:21:e4:f2:69:20:2b:6a:f9:88:7a:69:f8:0f:ae:55:ed: c3:52:eb:05:b0:67:14:7a:3a:64:ad:78:c5:34:69:fe:e1:2a: d5:00:da:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmcf1VuUNi07E0NymnTIzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl NDNlNzIwHhcNMjUxMjAzMjMwMDIxWhcNMjUxMjA0MjMwMDIxWjAzMTEwLwYDVQQD EyhkY2RjNjU2ZjZlY2I4ZGJiZGFlYzZiNTA5N2E3NWI1ZjA0YWRjYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh6ctxbSVQut+7KhzMr+KtdM2FRB cZBO6BN8QYmkv2D9K5LhEfaUaE2LD4Y3e+SLwLDJobUwvqpOOb7AkERXxLWRsagK /ulF6+x5RljL49xf9/ysbh8e9oPws28sayttSZySpIOpdiyS6UlNNSnQCF5N/icc DBZ0twNoOGzxCKgOx4e2+E0r4Tf9d1tNBJalFfHe3jC7HvydHDHOCMYnFiNxWXEC /efE/bTyTdO/YA9jFp1PV+nLOYquQ2nSr4z4iMoHERdM7ZGZvs0ZduJgORYj58gG y+O2fqgw+Gaz0l/hr51MDw8T/Jxm9yxS5cxL1/XU5OASj7AScH851fnyEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzcZW9uy4272uxrUJenW18ErcwcMB8GA1UdIwQY MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDHq5SfY vSq3FBa983UU7s6BBXrdIkj6qcgsEdNzRyfPZblVZZYOCpviBemm1TEiYyYqIWQN ndZ6FdcS2xwRnVM1ZTfmnJt/GkiKUk8X0cTRQQ3UoNzB8bnwGU5tWSSm+hZcVe3j bs9I3kt0Q03aACdXavL80Ml51soqDaHNJ0lXsjC2aVpToCfwEGkSxlop9sMyUci/ DHSRA3CkoiOnieS3P4w6lWfT3wCisu93rF5Yj+XYoMUluqsIh+l8JUbYiFg5QKAk 9cJmVYVjp6r8+3wUMLLxdDXPeDgh5PJpICtq+Yh6afgPrlXtw1LrBbBnFHo6ZK14 xTRp/uEq1QDa8w== -----END CERTIFICATE-----Generated at Thu Dec 4 08:29:54 2025 by rpki-client