This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json) Hash identifier: nFAYaBOY9gDyqE7/HdLUmV2F2Vz0mvKGJaZtQq5LSNI= Subject key identifier: 87:44:E8:52:C6:57:BB:B4:D4:7A:36:CF:09:18:C0:AF:2B:EE:29:E7 Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24 Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24 Certificate serial: 019B66FC0CFB32D43755F337198C78A37B67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft Manifest number: 179A Signing time: Sun 28 Dec 2025 22:02:32 +0000 Manifest this update: Sun 28 Dec 2025 22:02:32 +0000 Manifest next update: Mon 29 Dec 2025 22:02:32 +0000 Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: srx96XW4bWgMQIEekRmhxJJh2V18/PT6382BzZjA/gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:0c:fb:32:d4:37:55:f3:37:19:8c:78:a3:7b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24 Validity Not Before: Dec 28 22:02:32 2025 GMT Not After : Dec 29 22:02:32 2025 GMT Subject: CN=8744e852c657bbb4d47a36cf0918c0af2bee29e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:56:50:98:77:de:25:a8:96:df:8c:5f:aa: d8:3d:59:12:de:d7:a3:a1:ad:70:3e:b3:3a:41:7c: 0e:ca:54:44:28:47:97:87:55:93:21:4e:ac:c0:0e: 05:08:ec:20:77:30:7f:7d:49:4a:32:fe:a9:b5:c9: 40:ac:3b:91:23:3c:e3:a8:5b:38:0a:bc:e2:ad:b4: 71:14:22:ec:de:09:6b:c0:e0:95:82:1a:80:55:cd: cb:cb:ce:cc:a6:9a:59:28:40:a0:a0:f7:fe:18:74: cf:80:56:68:38:5c:6c:95:4e:f2:36:fc:b6:17:8f: 01:c7:66:f2:f5:e3:92:21:95:ff:3c:a5:00:73:67: e3:20:23:04:7c:8b:47:ea:6a:c6:bd:e8:9f:e8:ce: 11:d7:29:79:25:24:10:52:9e:67:85:af:ce:02:32: f9:d3:31:cc:96:b1:8b:95:c9:9b:6a:21:d6:41:c1: 55:1d:26:0e:01:7c:21:04:37:b1:5e:ca:86:6e:6b: 0d:7d:7a:eb:54:e4:dd:4a:a8:af:6c:50:d0:be:74: ea:5a:e1:69:27:1b:06:54:82:70:46:20:54:c9:13: 77:52:8f:e1:8d:8b:a7:d7:2b:59:52:d3:9f:ad:70: 90:c5:00:b2:f1:75:e0:aa:c8:d8:25:f4:86:0b:77: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:E8:52:C6:57:BB:B4:D4:7A:36:CF:09:18:C0:AF:2B:EE:29:E7 X509v3 Authority Key Identifier: keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:2c:ed:58:9f:45:4c:76:1b:8e:37:0d:35:2d:6c:0f:4a: ce:f7:09:68:6d:2c:d5:8f:ad:de:17:5a:8a:78:96:51:8f:fc: 68:0b:d4:e6:43:b2:67:e3:b6:ac:20:6a:44:88:7a:d8:36:37: 3a:63:2a:ed:82:f9:1b:55:35:c5:bd:db:0c:9f:9a:b5:ce:48: a5:20:12:ae:dd:1c:26:56:4e:08:66:24:df:a3:c8:ed:1d:8c: 7a:f2:dd:01:4d:32:c1:a9:59:84:6f:92:60:11:fd:c8:81:d0: 53:f2:ff:4a:02:21:b4:15:b8:fe:bc:a5:24:fe:5c:95:8e:2d: 30:fe:6d:bc:e1:57:e7:17:94:40:ae:c6:d3:37:9c:a3:ef:a5: 64:4e:91:e8:c7:71:f9:b5:85:31:16:2c:fa:66:fa:10:70:d8: 81:9a:13:e9:9e:a7:84:a6:94:fd:2f:20:95:3d:c7:e0:2f:41: a7:9b:18:16:89:d8:5b:dc:87:7e:b4:a6:e8:77:d2:7c:88:87: 54:12:90:68:9c:68:36:2a:b9:c5:2b:e4:36:d9:fa:b9:b8:f5: 3c:5f:a0:82:67:c8:25:82:e2:56:e1:d0:2b:5d:02:ed:c5:7b: 05:9a:28:fb:ce:84:42:cc:a3:cf:b6:f4:7a:de:6e:10:36:84: 36:7f:b2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/Az7MtQ3VfM3GYx4o3tnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi ZTBhMjQwHhcNMjUxMjI4MjIwMjMyWhcNMjUxMjI5MjIwMjMyWjAzMTEwLwYDVQQD Eyg4NzQ0ZTg1MmM2NTdiYmI0ZDQ3YTM2Y2YwOTE4YzBhZjJiZWUyOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl75WUJh33iWolt+MX6rYPVkS3tej oa1wPrM6QXwOylREKEeXh1WTIU6swA4FCOwgdzB/fUlKMv6ptclArDuRIzzjqFs4 CrzirbRxFCLs3glrwOCVghqAVc3Ly87MpppZKECgoPf+GHTPgFZoOFxslU7yNvy2 F48Bx2by9eOSIZX/PKUAc2fjICMEfItH6mrGveif6M4R1yl5JSQQUp5nha/OAjL5 0zHMlrGLlcmbaiHWQcFVHSYOAXwhBDexXsqGbmsNfXrrVOTdSqivbFDQvnTqWuFp JxsGVIJwRiBUyRN3Uo/hjYun1ytZUtOfrXCQxQCy8XXgqsjYJfSGC3e1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdE6FLGV7u01Ho2zwkYwK8r7innMB8GA1UdIwQY MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWQs7Vif RUx2G443DTUtbA9KzvcJaG0s1Y+t3hdainiWUY/8aAvU5kOyZ+O2rCBqRIh62DY3 OmMq7YL5G1U1xb3bDJ+atc5IpSASrt0cJlZOCGYk36PI7R2MevLdAU0ywalZhG+S YBH9yIHQU/L/SgIhtBW4/rylJP5clY4tMP5tvOFX5xeUQK7G0zeco++lZE6R6Mdx +bWFMRYs+mb6EHDYgZoT6Z6nhKaU/S8glT3H4C9Bp5sYFonYW9yHfrSm6HfSfIiH VBKQaJxoNiq5xSvkNtn6ubj1PF+ggmfIJYLiVuHQK10C7cV7BZoo+86EQsyjz7b0 et5uEDaENn+yBg== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:19 2025 by rpki-client