This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json) Hash identifier: BQKW43DkG1lxAxnCTpR/WiIRC1mVyQr0CbAVstE6G8o= Subject key identifier: 49:84:90:C5:20:78:8F:B4:43:26:F5:92:10:F4:C2:CC:9B:AC:36:86 Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Certificate serial: 019B796E791535CF33545C35109BE4E1C857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft Manifest number: 04AE Signing time: Thu 01 Jan 2026 12:00:41 +0000 Manifest this update: Thu 01 Jan 2026 12:00:41 +0000 Manifest next update: Fri 02 Jan 2026 12:00:41 +0000 Files and hashes: 1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=) 2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: MgzVELm3QXI/utJX7BrikNpiBW/qBcCFOTCZZ87wVEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:79:15:35:cf:33:54:5c:35:10:9b:e4:e1:c8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec Validity Not Before: Jan 1 12:00:41 2026 GMT Not After : Jan 2 12:00:41 2026 GMT Subject: CN=498490c520788fb44326f59210f4c2cc9bac3686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:20:8a:52:4d:ef:96:e5:c7:9a:b1:86:72: f9:e1:19:18:f9:b6:2c:15:32:9d:70:99:e6:b3:55: ec:31:0e:aa:70:54:34:87:88:c8:60:12:cb:31:22: 6c:84:06:66:08:27:46:8b:bf:19:5f:09:4a:98:03: 47:19:0b:bc:c1:44:6f:54:3a:14:25:3c:97:55:02: a2:03:7f:9e:5f:7a:1e:db:e8:52:8f:82:37:6e:36: 8d:13:46:99:8f:04:8c:d8:df:f0:3f:4e:d9:8b:71: 11:56:63:de:af:68:e4:02:ca:af:0e:bc:26:b7:bf: 90:94:21:e8:2f:96:25:46:31:cc:dd:45:e0:92:43: 51:08:3a:5f:75:85:cd:ae:8f:2b:7b:e3:02:43:0c: dd:50:d4:cf:2d:10:e0:4a:17:d9:58:cd:c3:63:fa: 8a:a7:fa:7b:01:92:6b:b2:1e:8c:20:3a:27:af:f9: 3a:ec:f1:88:5a:c7:5b:6a:2f:c4:74:1d:16:98:62: d0:ce:57:0b:2f:87:92:eb:cf:7d:8e:a8:fc:dc:3a: 6f:fc:78:70:bd:48:b4:90:7c:f1:8f:78:b2:e9:17: 7a:f3:7d:e1:0f:1c:9b:da:1d:cb:0c:59:07:cc:d7: d3:06:07:d7:6d:65:8a:61:14:26:31:3f:75:12:ce: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:84:90:C5:20:78:8F:B4:43:26:F5:92:10:F4:C2:CC:9B:AC:36:86 X509v3 Authority Key Identifier: keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:44:ac:2e:61:7a:d1:be:35:8d:c3:52:bc:61:77:fe:7f:4b: 74:65:2b:1d:66:45:ce:51:d0:10:6d:7c:b9:a9:b1:f6:9d:65: 75:bc:f5:41:af:30:53:ca:11:e0:e4:a2:03:e2:7d:c8:e5:38: 00:b4:f7:cf:dc:09:2e:01:f4:32:00:a7:bb:fe:0b:05:03:06: f3:98:6a:5d:37:24:44:6e:9e:67:87:31:07:1e:61:37:7a:11: f8:3f:ca:10:6f:69:2b:56:62:35:be:be:92:8b:55:0a:66:f2: 8d:38:3e:ed:80:2c:c7:08:50:fe:96:a9:bd:c2:55:6b:9e:87: af:29:03:fb:e7:0f:e1:fe:a4:af:e0:a3:9c:e4:05:e1:14:9e: fd:d3:04:d4:87:17:0f:25:e7:0c:a6:26:26:6c:ba:67:c0:0d: 77:34:f5:ba:9d:d0:de:6e:b7:5c:21:72:7a:8e:46:36:3c:f7: 57:67:f4:0c:73:44:e2:9f:66:be:68:4e:c6:b5:b6:61:5b:12: 90:0e:77:c5:99:ed:a8:ca:a2:9f:cf:5e:93:c2:b9:6c:f1:51: 7c:bb:d9:fd:6d:18:a1:25:6a:93:44:e3:b6:e0:b8:ec:2d:a8: 58:5c:49:8f:8b:1c:da:e6:70:9e:5b:c9:7d:59:3e:b2:6e:2f: e0:94:21:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bnkVNc8zVFw1EJvk4chXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1 ZDE0ZWMwHhcNMjYwMTAxMTIwMDQxWhcNMjYwMTAyMTIwMDQxWjAzMTEwLwYDVQQD Eyg0OTg0OTBjNTIwNzg4ZmI0NDMyNmY1OTIxMGY0YzJjYzliYWMzNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb0gilJN75blx5qxhnL54RkY+bYs FTKdcJnms1XsMQ6qcFQ0h4jIYBLLMSJshAZmCCdGi78ZXwlKmANHGQu8wURvVDoU JTyXVQKiA3+eX3oe2+hSj4I3bjaNE0aZjwSM2N/wP07Zi3ERVmPer2jkAsqvDrwm t7+QlCHoL5YlRjHM3UXgkkNRCDpfdYXNro8re+MCQwzdUNTPLRDgShfZWM3DY/qK p/p7AZJrsh6MIDonr/k67PGIWsdbai/EdB0WmGLQzlcLL4eS6899jqj83Dpv/Hhw vUi0kHzxj3iy6Rd6833hDxyb2h3LDFkHzNfTBgfXbWWKYRQmMT91Es6hFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmEkMUgeI+0Qyb1khD0wsybrDaGMB8GA1UdIwQY MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkSsLmF6 0b41jcNSvGF3/n9LdGUrHWZFzlHQEG18uamx9p1ldbz1Qa8wU8oR4OSiA+J9yOU4 ALT3z9wJLgH0MgCnu/4LBQMG85hqXTckRG6eZ4cxBx5hN3oR+D/KEG9pK1ZiNb6+ kotVCmbyjTg+7YAsxwhQ/papvcJVa56HrykD++cP4f6kr+CjnOQF4RSe/dME1IcX DyXnDKYmJmy6Z8ANdzT1up3Q3m63XCFyeo5GNjz3V2f0DHNE4p9mvmhOxrW2YVsS kA53xZntqMqin89ek8K5bPFRfLvZ/W0YoSVqk0TjtuC47C2oWFxJj4sc2uZwnlvJ fVk+sm4v4JQhpg== -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:11 2026 by rpki-client