This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json) Hash identifier: aKFjS13/ltiyYHa0sHHk8ybAV2LYuswvy5bF459o618= Subject key identifier: 01:05:65:1F:5C:C6:44:7E:AA:72:2C:8F:D3:3F:82:D3:34:1D:1F:AA Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Certificate serial: 019B3F1118C78D1E9AA48D36F01F31078D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft Manifest number: 0D7A Signing time: Sun 21 Dec 2025 04:00:43 +0000 Manifest this update: Sun 21 Dec 2025 04:00:43 +0000 Manifest next update: Mon 22 Dec 2025 04:00:43 +0000 Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: bVAuMd1DxGorc+oyNAcKUwfPWD3sH7by+MHd8s/hrIk=) 2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:18:c7:8d:1e:9a:a4:8d:36:f0:1f:31:07:8d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3 Validity Not Before: Dec 21 04:00:43 2025 GMT Not After : Dec 22 04:00:43 2025 GMT Subject: CN=0105651f5cc6447eaa722c8fd33f82d3341d1faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:b7:17:94:e1:50:77:83:53:55:ed:6d:26: 1d:0b:bd:c8:2f:82:76:8d:5f:24:4f:d4:db:6a:c8: bc:7c:2e:3e:e6:ba:6a:b5:1c:1b:2c:cf:62:5b:bc: 6e:e1:a4:88:30:91:22:41:0e:6c:45:d5:77:7e:52: 9e:fa:08:87:41:42:cc:40:e3:9a:89:d8:97:ff:56: 08:d4:4c:0c:7e:2b:0e:02:fe:93:52:67:05:b9:92: 18:25:7f:f7:cd:9e:2e:30:49:a6:37:99:71:ef:bd: 41:1c:d8:a4:ad:d5:75:c5:9a:e1:94:f6:5f:7f:20: 01:df:bf:83:ad:c8:84:00:51:9a:a9:ca:82:48:2c: 62:47:f3:ca:65:02:d6:63:74:0e:3f:45:9e:d4:4e: 43:c2:cd:3e:78:16:1a:ad:7b:fa:28:60:d6:6f:fe: 0d:e0:2d:84:5f:10:7c:14:60:c0:65:5a:20:53:f0: 39:d2:3c:b9:b8:e2:6f:43:0e:c8:76:9c:e6:bc:26: 09:4c:8b:c1:1b:ed:1a:6e:16:5c:e1:a2:e9:c0:90: e7:d9:16:5a:5f:61:69:e2:34:1c:b2:39:99:fc:5f: 8c:a1:1e:79:2e:5e:c6:e3:d5:af:cc:a9:c2:89:b1: fa:28:66:a1:0c:52:3a:18:cc:c8:2d:99:fa:f5:57: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:05:65:1F:5C:C6:44:7E:AA:72:2C:8F:D3:3F:82:D3:34:1D:1F:AA X509v3 Authority Key Identifier: keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b5:17:a0:bd:18:e8:91:ae:d0:45:55:0e:54:41:f6:c1:fa: 35:d1:f8:2a:79:a6:72:c8:fd:0c:a1:18:16:e1:6b:6c:52:db: 6c:a9:23:c5:18:e5:46:b9:b4:eb:9b:3f:e3:a0:12:09:69:62: 06:76:86:ea:df:28:68:5b:83:3e:4e:dd:57:c1:04:67:3e:55: 26:2c:b1:8f:ec:a3:94:d4:58:fe:c6:dc:b1:eb:79:03:85:41: f3:6d:b7:bd:e0:01:d0:59:38:38:a7:19:65:96:03:6a:fe:f6: 40:27:2d:70:4e:06:4f:67:0b:be:38:e2:11:2e:8c:bd:fd:bb: 41:99:0b:d3:9a:45:14:08:07:97:ee:64:83:95:59:e0:90:13: 2f:ea:6c:84:f0:13:1f:49:bc:b9:b1:ef:22:56:c0:7e:a9:ee: fd:c2:f2:87:2e:5d:90:39:f4:4c:9f:77:e7:9d:9e:3f:e8:18: 26:c0:78:e2:cf:e6:9e:4b:c0:03:b2:9b:f9:97:fc:f6:7e:68: 98:95:66:9a:e3:f4:76:e9:6f:20:cf:8f:3d:41:19:c2:71:3a: 63:56:f1:38:54:5c:a9:8d:9d:a2:c2:b5:94:c7:c7:17:3a:04: a3:95:c8:b8:7e:62:98:b6:2f:fa:dd:32:5b:b5:b4:35:89:b4: 0e:d4:04:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERjHjR6apI028B8xB40CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm MjQ0ZDMwHhcNMjUxMjIxMDQwMDQzWhcNMjUxMjIyMDQwMDQzWjAzMTEwLwYDVQQD EygwMTA1NjUxZjVjYzY0NDdlYWE3MjJjOGZkMzNmODJkMzM0MWQxZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qy3F5ThUHeDU1XtbSYdC73IL4J2 jV8kT9Tbasi8fC4+5rpqtRwbLM9iW7xu4aSIMJEiQQ5sRdV3flKe+giHQULMQOOa idiX/1YI1EwMfisOAv6TUmcFuZIYJX/3zZ4uMEmmN5lx771BHNikrdV1xZrhlPZf fyAB37+DrciEAFGaqcqCSCxiR/PKZQLWY3QOP0We1E5Dws0+eBYarXv6KGDWb/4N 4C2EXxB8FGDAZVogU/A50jy5uOJvQw7IdpzmvCYJTIvBG+0abhZc4aLpwJDn2RZa X2Fp4jQcsjmZ/F+MoR55Ll7G49WvzKnCibH6KGahDFI6GMzILZn69VdF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEFZR9cxkR+qnIsj9M/gtM0HR+qMB8GA1UdIwQY MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1 LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLUXoL0Y 6JGu0EVVDlRB9sH6NdH4Knmmcsj9DKEYFuFrbFLbbKkjxRjlRrm065s/46ASCWli BnaG6t8oaFuDPk7dV8EEZz5VJiyxj+yjlNRY/sbcset5A4VB8223veAB0Fk4OKcZ ZZYDav72QCctcE4GT2cLvjjiES6Mvf27QZkL05pFFAgHl+5kg5VZ4JATL+pshPAT H0m8ubHvIlbAfqnu/cLyhy5dkDn0TJ93552eP+gYJsB44s/mnkvAA7Kb+Zf89n5o mJVmmuP0dulvIM+PPUEZwnE6Y1bxOFRcqY2dosK1lMfHFzoEo5XIuH5imLYv+t0y W7W0NYm0DtQEfw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:57:52 2025 by rpki-client