This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json) Hash identifier: jseNlmm7Es1SIHz/V9UO/x//GgX71FvhmN+/2c6tAbc= Subject key identifier: F9:54:91:DB:9B:5E:E6:C9:D3:AF:5A:DB:37:89:AD:DA:7B:C3:35:D8 Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24 Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24 Certificate serial: 019B80155DC725C9E052C5157BB89710A450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft Manifest number: 17A7 Signing time: Fri 02 Jan 2026 19:00:42 +0000 Manifest this update: Fri 02 Jan 2026 19:00:42 +0000 Manifest next update: Sat 03 Jan 2026 19:00:42 +0000 Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: zqLzZZGLPnlM/+7ZCiyTwaxHUMIofOSejMMr5MvJTFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:15:5d:c7:25:c9:e0:52:c5:15:7b:b8:97:10:a4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24 Validity Not Before: Jan 2 19:00:42 2026 GMT Not After : Jan 3 19:00:42 2026 GMT Subject: CN=f95491db9b5ee6c9d3af5adb3789adda7bc335d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:a9:b6:84:72:5b:d6:c2:ae:19:51:f0:59: fe:92:e8:99:dc:16:05:a5:92:6e:82:db:f2:11:4f: c0:20:35:d7:0a:09:b4:3d:2d:b1:9c:d1:58:e6:c6: 45:cc:53:54:e2:02:72:a6:5d:b1:0d:23:50:68:63: ad:a9:74:b9:9a:a4:44:2f:6d:bf:a6:81:d4:a2:14: c9:34:c7:b2:c5:02:5a:3c:a8:bc:5e:60:20:18:27: 75:f3:d8:8e:9b:29:8a:88:7e:ad:b8:4b:b3:80:0c: 1f:2e:f4:76:17:de:9f:fb:57:ef:40:7a:24:de:16: a6:1f:15:0d:55:47:b4:79:f0:ad:a8:7e:2c:4f:61: 62:88:9f:cd:61:8b:1c:44:47:e8:04:1c:32:9b:3c: e3:21:e7:10:c2:82:8b:77:b4:db:16:2d:37:22:a9: 89:f2:c3:36:05:55:80:92:0b:e0:93:d0:ee:79:51: c3:a9:a7:7e:20:63:2a:a3:2f:16:39:58:b7:a2:fe: be:12:fb:4a:99:84:23:39:6c:ca:c5:02:38:49:70: 1a:5b:f5:ca:41:88:71:1d:ca:e2:fa:ce:dc:6f:a1: e0:22:eb:e7:7c:e1:ea:ea:59:e7:5d:0d:8c:a6:3c: f4:e0:e6:01:1a:2c:e0:51:c7:4c:a9:a0:37:a0:36: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:91:DB:9B:5E:E6:C9:D3:AF:5A:DB:37:89:AD:DA:7B:C3:35:D8 X509v3 Authority Key Identifier: keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5a:9c:84:69:f3:9f:42:05:35:b2:12:6b:29:6c:da:4b:1c: 86:a0:4b:0b:11:50:cc:56:92:e4:33:84:fb:4d:27:5e:c4:e7: 40:a6:02:ce:57:01:6e:92:c8:9d:cf:c5:33:4b:bd:d8:f2:e7: 5a:bd:9b:c2:63:6e:fa:1a:cf:85:0a:55:46:d2:e6:45:03:1d: e3:6e:ad:dc:23:cc:c6:82:ba:a2:ba:a8:bb:d8:be:a4:33:eb: 18:fb:64:2f:8b:b1:8a:cb:22:f4:91:fb:ae:40:02:ae:b0:a6: 32:c5:f5:35:2c:05:9c:3e:a7:9b:c6:c5:0a:a6:5a:80:69:4e: d0:d8:0e:c2:e6:04:39:1f:ba:1a:23:34:bd:e4:0c:54:66:da: 1d:fb:1c:c0:9c:54:75:05:c3:7c:ad:03:fe:5d:ca:9f:a4:6c: 51:36:23:8b:79:77:16:c5:eb:f9:1b:ab:eb:49:87:70:e5:6c: 4a:8c:4d:a6:21:37:6b:29:80:33:70:6d:f4:ca:1c:4a:ae:72: 80:82:56:29:29:90:ae:e9:be:f8:0f:87:eb:0f:ea:7a:f6:e9: e3:4e:78:1c:38:71:e3:31:01:02:ec:95:d2:10:00:8c:dc:a8: 89:90:f0:fc:77:4d:17:57:55:1c:bc:b2:5e:83:9d:98:10:a9: 1f:b7:bd:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAFV3HJcngUsUVe7iXEKRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi ZTBhMjQwHhcNMjYwMTAyMTkwMDQyWhcNMjYwMTAzMTkwMDQyWjAzMTEwLwYDVQQD EyhmOTU0OTFkYjliNWVlNmM5ZDNhZjVhZGIzNzg5YWRkYTdiYzMzNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00WptoRyW9bCrhlR8Fn+kuiZ3BYF pZJugtvyEU/AIDXXCgm0PS2xnNFY5sZFzFNU4gJypl2xDSNQaGOtqXS5mqREL22/ poHUohTJNMeyxQJaPKi8XmAgGCd189iOmymKiH6tuEuzgAwfLvR2F96f+1fvQHok 3hamHxUNVUe0efCtqH4sT2FiiJ/NYYscREfoBBwymzzjIecQwoKLd7TbFi03IqmJ 8sM2BVWAkgvgk9DueVHDqad+IGMqoy8WOVi3ov6+EvtKmYQjOWzKxQI4SXAaW/XK QYhxHcri+s7cb6HgIuvnfOHq6lnnXQ2Mpjz04OYBGizgUcdMqaA3oDbanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlUkdubXubJ069a2zeJrdp7wzXYMB8GA1UdIwQY MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolqchGnz n0IFNbISayls2kschqBLCxFQzFaS5DOE+00nXsTnQKYCzlcBbpLInc/FM0u92PLn Wr2bwmNu+hrPhQpVRtLmRQMd426t3CPMxoK6orqou9i+pDPrGPtkL4uxissi9JH7 rkACrrCmMsX1NSwFnD6nm8bFCqZagGlO0NgOwuYEOR+6GiM0veQMVGbaHfscwJxU dQXDfK0D/l3Kn6RsUTYji3l3FsXr+Rur60mHcOVsSoxNpiE3aymAM3Bt9MocSq5y gIJWKSmQrum++A+H6w/qevbp4054HDhx4zEBAuyV0hAAjNyoiZDw/HdNF1dVHLyy XoOdmBCpH7e9Og== -----END CERTIFICATE-----Generated at Sat Jan 3 04:16:51 2026 by rpki-client