This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json) Hash identifier: ZJKAUdkVG8I+hSw08v8efjj3HYyvbXRsIXsyCU3ndi8= Subject key identifier: 46:A4:9C:08:C8:09:C3:73:B0:A7:E4:83:02:0B:4C:E0:66:2C:9A:D7 Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c Certificate serial: 019B5DF7715D8EA664D7477C2B27FD42420B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 04:00:55 +0000 Manifest this update: Sat 27 Dec 2025 04:00:55 +0000 Manifest next update: Sun 28 Dec 2025 04:00:55 +0000 Files and hashes: 1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: SBJrN59qiq7Av9e1P2DNqbiVlV84Em9BXgGwTtCMwsI=) 2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:71:5d:8e:a6:64:d7:47:7c:2b:27:fd:42:42:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c Validity Not Before: Dec 27 04:00:55 2025 GMT Not After : Dec 28 04:00:55 2025 GMT Subject: CN=46a49c08c809c373b0a7e483020b4ce0662c9ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:77:4c:81:5c:43:ed:cc:64:d8:66:2f:b5: 95:af:3a:aa:9f:08:9c:ea:4a:c1:ae:81:20:af:ca: 67:4e:02:9b:e1:ad:1c:13:c5:8d:14:c0:60:5c:57: d2:bb:2e:e2:a9:5d:77:30:3e:fa:e1:fa:4f:3d:6c: fd:b6:2f:40:b2:f0:15:73:79:80:00:fb:23:0e:52: 2c:c4:f6:9c:47:ff:8e:4a:d8:1c:fe:86:6e:db:83: 6b:57:ee:77:7a:b3:d5:ff:08:04:cf:1f:1b:f7:e2: 5a:c5:f7:49:a7:72:c9:ac:b6:c6:9b:a1:26:16:cf: 57:72:ec:33:a4:c9:7d:01:a1:cc:0a:8c:5f:68:96: 0c:7c:17:f4:bd:82:ff:1f:9b:4d:16:77:7e:26:ef: c9:58:95:24:65:00:aa:8b:b3:67:9e:5d:86:82:ff: 48:14:b8:f0:99:19:63:b5:a6:6f:55:10:03:d6:5f: d4:62:d3:f0:da:69:53:f4:37:72:15:22:91:f0:c5: ff:e8:ae:2a:36:5b:8b:d9:6b:63:57:16:4d:b3:4d: b7:9c:80:ac:05:c9:ec:a9:af:e3:bb:15:6e:dd:0b: bd:b5:54:d8:1f:d4:27:06:41:ad:ce:a0:0d:af:04: af:e3:0b:47:ce:c5:22:b6:2a:ca:f2:de:69:e0:d1: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A4:9C:08:C8:09:C3:73:B0:A7:E4:83:02:0B:4C:E0:66:2C:9A:D7 X509v3 Authority Key Identifier: keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ee:0d:8f:0e:1e:0c:e1:40:c3:54:6f:8e:0f:05:90:58:48: a7:90:67:ce:b2:21:b7:e5:54:b7:87:4f:69:c0:80:ff:48:8c: 60:76:2e:ef:1a:26:32:8a:71:18:3b:8c:60:cd:e9:23:90:34: c1:e1:81:7b:e9:95:e2:59:2c:40:90:3c:0e:58:b4:0f:39:93: 40:66:6f:b9:97:f8:17:36:f2:00:a2:73:21:64:07:68:9d:44: 69:cd:83:40:b8:4b:19:4f:1a:e1:ec:16:b5:96:d8:88:f4:1e: 66:f9:4f:11:08:fd:6f:0e:e3:23:77:f3:41:97:35:0c:19:17: 22:54:c0:f0:16:c5:d0:a9:30:8e:48:97:99:da:ae:7d:e4:c3: fc:83:f4:31:a4:58:55:06:f3:9f:21:e4:80:13:30:9b:b6:74: 65:ff:3f:46:97:61:08:aa:04:d3:24:95:27:0f:c8:71:28:00: 2f:9c:8b:18:9a:7b:b9:e5:a2:2c:36:95:7b:5f:2b:16:30:05: 48:48:ca:b2:b6:ff:54:ae:3e:df:6e:f6:d2:53:b2:39:cc:ba: 88:46:14:69:ec:a6:5c:1a:7a:49:70:9a:ca:7d:0e:cb:52:bf: f9:03:a9:9e:a6:41:41:f6:1c:25:49:44:90:37:37:48:0c:eb: 9e:31:b2:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd93FdjqZk10d8Kyf9QkILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODgyYjE0MTMyMjFlOWI1ZDNiYzhhNzMyOWI3NjQ5Zjli MWVjMmMwHhcNMjUxMjI3MDQwMDU1WhcNMjUxMjI4MDQwMDU1WjAzMTEwLwYDVQQD Eyg0NmE0OWMwOGM4MDljMzczYjBhN2U0ODMwMjBiNGNlMDY2MmM5YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZ3TIFcQ+3MZNhmL7WVrzqqnwic 6krBroEgr8pnTgKb4a0cE8WNFMBgXFfSuy7iqV13MD764fpPPWz9ti9AsvAVc3mA APsjDlIsxPacR/+OStgc/oZu24NrV+53erPV/wgEzx8b9+JaxfdJp3LJrLbGm6Em Fs9XcuwzpMl9AaHMCoxfaJYMfBf0vYL/H5tNFnd+Ju/JWJUkZQCqi7Nnnl2Ggv9I FLjwmRljtaZvVRAD1l/UYtPw2mlT9DdyFSKR8MX/6K4qNluL2WtjVxZNs023nICs Bcnsqa/juxVu3Qu9tVTYH9QnBkGtzqANrwSv4wtHzsUitirK8t5p4NF9zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaknAjICcNzsKfkgwILTOBmLJrXMB8GA1UdIwQY MBaAFFSIKxQTIh6bXTvIpzKbdkn5sewsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTIt NGJkNThkYjEwZWQyLzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTItNGJkNThkYjEwZWQy LzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO4Njw4e DOFAw1Rvjg8FkFhIp5BnzrIht+VUt4dPacCA/0iMYHYu7xomMopxGDuMYM3pI5A0 weGBe+mV4lksQJA8Dli0DzmTQGZvuZf4FzbyAKJzIWQHaJ1Eac2DQLhLGU8a4ewW tZbYiPQeZvlPEQj9bw7jI3fzQZc1DBkXIlTA8BbF0KkwjkiXmdqufeTD/IP0MaRY VQbznyHkgBMwm7Z0Zf8/RpdhCKoE0ySVJw/IcSgAL5yLGJp7ueWiLDaVe18rFjAF SEjKsrb/VK4+32720lOyOcy6iEYUaeymXBp6SXCayn0Oy1K/+QOpnqZBQfYcJUlE kDc3SAzrnjGyog== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:38 2025 by rpki-client