This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json) Hash identifier: 4kFJa3PabIamcFs5lqV7qFQQDWp1LOWFq7NHodInnXA= Subject key identifier: 35:B8:65:FE:0E:9A:E6:21:7F:2E:54:30:CF:1E:AF:E4:1E:32:A7:8C Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Certificate serial: 019B5A5194038548C7E13DBC759019861735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft Manifest number: 0879 Signing time: Fri 26 Dec 2025 11:00:54 +0000 Manifest this update: Fri 26 Dec 2025 11:00:54 +0000 Manifest next update: Sat 27 Dec 2025 11:00:54 +0000 Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: a6nzxpg5Z2zHQdh0ASzEk5DDac9EmKctAoc3mHsWYvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:94:03:85:48:c7:e1:3d:bc:75:90:19:86:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Validity Not Before: Dec 26 11:00:54 2025 GMT Not After : Dec 27 11:00:54 2025 GMT Subject: CN=35b865fe0e9ae6217f2e5430cf1eafe41e32a78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:65:d6:9b:8a:c4:86:06:fb:f4:c1:87:05: fc:bc:20:78:18:f7:56:6a:3b:b8:07:2f:be:c3:4d: c9:c6:48:af:d2:14:ae:ca:d7:44:d2:5a:cb:5c:f3: a5:26:bd:80:c1:00:27:28:ba:49:ae:2d:9b:ae:a5: fa:5b:86:4b:87:da:8e:9c:8e:8a:25:40:7a:e2:35: a0:02:ca:c9:3b:3a:8d:5e:3c:4c:dc:69:4e:bc:b4: 15:9f:b4:7f:23:6e:a9:1f:44:11:09:f6:35:32:e2: be:c4:f8:a7:21:b3:1f:f1:7f:ef:2f:12:74:d0:14: 8c:96:1d:3e:b8:53:55:f7:86:18:8b:ab:bd:4c:50: b0:84:b3:2b:f9:5e:5a:b1:af:0c:c6:4e:fe:f2:5c: 05:8c:b3:8e:b8:ae:a0:85:40:ce:56:87:b9:ec:99: ab:6c:66:60:81:9a:d7:39:5b:00:f1:bb:e8:cc:79: 3e:86:6d:e8:04:4e:96:47:7b:2f:99:76:ab:aa:6a: b1:6c:8e:94:18:f3:5b:1c:d7:2a:0c:5c:db:79:a8: 5e:5e:39:f0:b2:cb:e1:1e:f9:0a:18:9c:f4:e3:fe: 90:75:07:b6:80:07:5d:4a:ab:01:94:4d:89:55:13: 53:b0:70:62:3d:d9:f3:13:90:eb:6f:ed:21:b6:4b: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:65:FE:0E:9A:E6:21:7F:2E:54:30:CF:1E:AF:E4:1E:32:A7:8C X509v3 Authority Key Identifier: keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e7:07:83:43:99:a8:98:c0:1f:54:7f:86:de:7d:4f:fe:96: 92:fd:a8:17:d7:50:66:02:23:31:bb:03:d4:2f:e8:df:84:05: cb:dc:09:f3:db:74:f2:8a:e7:5e:5e:8e:28:65:13:5a:5f:b7: 2e:d9:74:e4:a2:98:87:47:cf:e2:78:16:28:46:d3:25:2e:b9: 18:de:7d:cd:c0:39:3e:75:44:b7:47:d6:ca:c0:1b:9b:9d:78: 1b:54:df:c1:07:b2:36:f7:7c:6d:c0:8e:8a:19:f7:35:c4:90: 1d:84:20:32:ab:6e:43:95:10:a2:d8:08:1e:5b:c1:90:2d:82: 05:e8:b0:4c:23:a6:89:57:8e:8b:13:de:c7:c4:87:b6:71:9e: 20:1a:89:ae:ce:7d:0c:00:ef:52:73:f2:5a:b2:33:10:fa:29: c8:05:5a:66:15:b8:de:f5:1c:ed:34:11:d6:b6:e7:f1:fd:f3: ae:50:62:c2:a5:8c:aa:2d:47:d0:e8:3f:42:ec:72:73:67:c1: bc:11:51:e7:1a:28:8d:1a:e7:16:d0:87:b7:64:77:8f:d4:fc: 60:c1:78:50:f2:a9:1c:f2:62:61:db:d9:3f:94:5d:40:53:49: 9a:fb:0c:29:b4:63:35:03:c3:23:d2:b2:16:32:d9:1f:aa:35: 21:48:ad:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZQDhUjH4T28dZAZhhc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDVlYWM3YzNhZjUzNTUxYzllNjIzNjUzZGQzYWQ3ZGYx NTU0YmIwHhcNMjUxMjI2MTEwMDU0WhcNMjUxMjI3MTEwMDU0WjAzMTEwLwYDVQQD EygzNWI4NjVmZTBlOWFlNjIxN2YyZTU0MzBjZjFlYWZlNDFlMzJhNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oVl1puKxIYG+/TBhwX8vCB4GPdW aju4By++w03Jxkiv0hSuytdE0lrLXPOlJr2AwQAnKLpJri2brqX6W4ZLh9qOnI6K JUB64jWgAsrJOzqNXjxM3GlOvLQVn7R/I26pH0QRCfY1MuK+xPinIbMf8X/vLxJ0 0BSMlh0+uFNV94YYi6u9TFCwhLMr+V5asa8Mxk7+8lwFjLOOuK6ghUDOVoe57Jmr bGZggZrXOVsA8bvozHk+hm3oBE6WR3svmXarqmqxbI6UGPNbHNcqDFzbeaheXjnw ssvhHvkKGJz04/6QdQe2gAddSqsBlE2JVRNTsHBiPdnzE5Drb+0htktNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW4Zf4OmuYhfy5UMM8er+QeMqeMMB8GA1UdIwQY MBaAFL4F6sfDr1NVHJ5iNlPdOtffFVS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTkt Y2ZkYWFjMGE2MmRiLzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTktY2ZkYWFjMGE2MmRi LzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOcHg0OZ qJjAH1R/ht59T/6Wkv2oF9dQZgIjMbsD1C/o34QFy9wJ89t08ornXl6OKGUTWl+3 Ltl05KKYh0fP4ngWKEbTJS65GN59zcA5PnVEt0fWysAbm514G1TfwQeyNvd8bcCO ihn3NcSQHYQgMqtuQ5UQotgIHlvBkC2CBeiwTCOmiVeOixPex8SHtnGeIBqJrs59 DADvUnPyWrIzEPopyAVaZhW43vUc7TQR1rbn8f3zrlBiwqWMqi1H0Og/Quxyc2fB vBFR5xoojRrnFtCHt2R3j9T8YMF4UPKpHPJiYdvZP5RdQFNJmvsMKbRjNQPDI9Ky FjLZH6o1IUitgg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client