This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft File: vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json) Hash identifier: nGfjxJjiWEzzCon+eKsUP1s+FIVjrmP01rIfN8zwmgg= Subject key identifier: 3F:D3:54:2E:98:5A:D5:C6:D0:15:B1:DB:30:A7:D1:58:E6:4F:5B:50 Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019B0369E81EEA19387269CCEBC2560E5553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft Manifest number: 1087 Signing time: Tue 09 Dec 2025 14:00:30 +0000 Manifest this update: Tue 09 Dec 2025 14:00:30 +0000 Manifest next update: Wed 10 Dec 2025 14:00:30 +0000 Files and hashes: 1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=) 2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=) 3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=) 4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=) 5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=) 6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=) 7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: +vORZcCnJfE/35RlqxTpHChuQzaRsWeQklLyxdHd+Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:69:e8:1e:ea:19:38:72:69:cc:eb:c2:56:0e:55:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Dec 9 14:00:30 2025 GMT Not After : Dec 10 14:00:30 2025 GMT Subject: CN=3fd3542e985ad5c6d015b1db30a7d158e64f5b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:97:fd:d9:2d:b1:5a:f2:03:8f:10:f8:5a: d2:f1:60:2a:5a:7d:9b:f4:cb:72:89:dd:ed:40:e3: ae:80:b6:e9:de:90:db:48:57:19:9c:c7:19:d9:16: e7:c0:15:4b:05:3a:e3:f9:2e:11:26:72:6e:9f:ec: ae:06:57:da:4a:48:10:7d:a3:81:85:bf:23:18:6b: e1:1b:95:99:1c:50:f5:17:41:34:db:30:da:78:e0: b8:27:47:a1:27:35:1c:9d:43:34:5d:90:49:bb:a5: 4f:75:8a:ff:b7:7c:84:42:ba:1f:b0:85:d8:78:4a: 22:42:9a:fb:40:07:a6:a6:30:23:53:9a:1e:ab:42: cf:3f:25:dd:6c:f1:5e:03:25:cc:33:ea:81:31:9b: 0c:9e:0f:48:8c:cb:38:75:95:7b:62:80:35:f2:67: 9b:e6:fe:1c:47:2d:93:b0:d4:d4:2e:5c:e0:1e:d4: 13:bf:bd:cb:80:be:04:b3:49:6c:90:95:f4:55:d5: 0d:cb:80:cc:67:72:f4:91:fa:66:a9:a3:78:e7:2f: 98:dc:9d:2c:da:16:d9:8c:90:c7:de:8d:e2:a3:a8: 2b:7d:4b:88:66:54:6a:b6:c5:cc:fd:06:93:f4:cf: 99:c1:e3:09:c8:cf:4c:b7:cb:dc:79:a3:17:8f:92: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:54:2E:98:5A:D5:C6:D0:15:B1:DB:30:A7:D1:58:E6:4F:5B:50 X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:89:21:a9:ba:23:d2:91:44:02:fe:60:7c:49:ec:c5:73:65: fc:80:cf:11:97:2c:78:67:5c:98:d0:0f:6c:13:fe:64:70:ce: c5:1d:95:4d:6e:ff:4d:5c:25:63:e2:e6:32:14:f1:d3:d6:a1: 95:27:2e:67:ce:54:af:49:07:2e:03:50:92:4a:b1:40:d3:1c: 34:f3:5c:a2:0b:9a:fa:7b:50:2f:8e:9b:e2:22:e4:48:d9:21: 93:51:93:59:9b:ca:75:18:28:26:99:97:89:56:5d:8d:d8:b9: 31:2a:e5:04:79:89:d0:9a:ba:bc:b3:42:32:d9:c1:31:d8:91: 32:11:9a:21:91:21:f8:d2:3f:a5:71:c4:e5:ef:b3:2f:ae:b0: 26:eb:d7:bb:24:54:fd:82:5a:5c:55:0e:53:50:ad:f4:47:1e: 00:7a:75:a2:db:e4:6f:bd:54:66:45:cd:1a:a3:5a:31:3c:64: 75:7e:af:06:ae:d3:eb:c8:93:7d:5b:db:18:87:95:b7:e6:9b: 37:d0:01:7a:ba:ac:82:95:0c:8d:5d:e8:40:db:23:46:91:56: 4f:95:f9:18:b8:e8:35:be:cf:4c:d0:25:f1:63:6c:37:48:9d: 3f:44:62:11:29:fc:28:ce:ee:1f:ac:b4:84:61:ea:7f:5a:4e: 03:66:2d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsDaege6hk4cmnM68JWDlVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjUxMjA5MTQwMDMwWhcNMjUxMjEwMTQwMDMwWjAzMTEwLwYDVQQD EygzZmQzNTQyZTk4NWFkNWM2ZDAxNWIxZGIzMGE3ZDE1OGU2NGY1YjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQGX/dktsVryA48Q+FrS8WAqWn2b 9Mtyid3tQOOugLbp3pDbSFcZnMcZ2RbnwBVLBTrj+S4RJnJun+yuBlfaSkgQfaOB hb8jGGvhG5WZHFD1F0E02zDaeOC4J0ehJzUcnUM0XZBJu6VPdYr/t3yEQrofsIXY eEoiQpr7QAempjAjU5oeq0LPPyXdbPFeAyXMM+qBMZsMng9IjMs4dZV7YoA18meb 5v4cRy2TsNTULlzgHtQTv73LgL4Es0lskJX0VdUNy4DMZ3L0kfpmqaN45y+Y3J0s 2hbZjJDH3o3io6grfUuIZlRqtsXM/QaT9M+ZweMJyM9Mt8vceaMXj5IfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/TVC6YWtXG0BWx2zCn0VjmT1tQMB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4khqboj 0pFEAv5gfEnsxXNl/IDPEZcseGdcmNAPbBP+ZHDOxR2VTW7/TVwlY+LmMhTx09ah lScuZ85Ur0kHLgNQkkqxQNMcNPNcogua+ntQL46b4iLkSNkhk1GTWZvKdRgoJpmX iVZdjdi5MSrlBHmJ0Jq6vLNCMtnBMdiRMhGaIZEh+NI/pXHE5e+zL66wJuvXuyRU /YJaXFUOU1Ct9EceAHp1otvkb71UZkXNGqNaMTxkdX6vBq7T68iTfVvbGIeVt+ab N9ABerqsgpUMjV3oQNsjRpFWT5X5GLjoNb7PTNAl8WNsN0idP0RiESn8KM7uH6y0 hGHqf1pOA2YtSQ== -----END CERTIFICATE-----Generated at Tue Dec 9 21:47:04 2025 by rpki-client