This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json) Hash identifier: jBIrPvMSL0wKeSWZnDnNFYmAyDS0juYl7ciRywz3eD4= Subject key identifier: 46:80:92:42:64:42:9C:6F:BF:EC:07:4D:08:7F:D1:20:BB:38:07:2F Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Certificate serial: 019B3CEC3ED620309F27AE0A37D9AB832938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft Manifest number: 0E5E Signing time: Sat 20 Dec 2025 18:01:14 +0000 Manifest this update: Sat 20 Dec 2025 18:01:14 +0000 Manifest next update: Sun 21 Dec 2025 18:01:14 +0000 Files and hashes: 1: olc2Y8iylqMSKyCyshdN5SCe0vI.roa (hash: UAcPq7niB1CGXkTFu0WQUaf9we2Qrdpi5zBQPRcbjno=) 2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: Pk3pSRfRH+rSh8sYcVXWGq32qWjad1I8Lg9cgpctkSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:3e:d6:20:30:9f:27:ae:0a:37:d9:ab:83:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Validity Not Before: Dec 20 18:01:14 2025 GMT Not After : Dec 21 18:01:14 2025 GMT Subject: CN=4680924264429c6fbfec074d087fd120bb38072f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:1d:ae:5b:af:36:ac:08:76:9f:e8:4b:76: e8:da:cc:f5:33:d2:26:35:e6:e2:a2:39:02:e0:59: 2d:ee:64:e6:d6:40:f3:e1:80:2f:d4:8c:d0:bf:3e: ce:a4:09:f9:80:d8:16:01:39:d4:76:fd:c8:5c:19: b2:66:ad:48:80:ef:a9:aa:52:61:0e:6f:b3:66:c5: 30:c0:f2:29:ca:ea:7c:5c:56:e0:73:ac:30:a7:f5: cb:43:58:69:54:d6:2c:07:2b:22:d8:3c:81:fa:5a: 5f:93:f4:05:1f:ef:9b:21:3a:4c:97:50:7a:70:6f: c1:db:b4:e5:c5:d0:e4:d3:f2:5f:a7:78:a1:de:e5: 21:19:4d:ec:81:f0:de:9d:1a:a7:35:21:90:97:39: e2:86:b2:b1:61:0b:75:34:b0:b6:9b:c2:5c:8b:6c: 5a:71:1b:29:cd:51:3b:3c:e5:91:d2:74:4a:29:f8: ec:e8:cb:c8:36:0c:54:1e:9e:a7:d3:88:c8:e0:52: d9:8b:c2:98:5d:70:8a:ba:64:40:a1:0f:d9:ab:7d: a3:e0:1c:16:f6:8e:c2:bd:b9:0d:e6:9c:e6:a7:a2: ee:9a:19:5e:9d:0d:1b:8d:81:82:64:00:90:74:05: d8:e1:b4:c0:f0:f3:6c:83:96:c5:a9:76:fd:95:6a: 09:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:92:42:64:42:9C:6F:BF:EC:07:4D:08:7F:D1:20:BB:38:07:2F X509v3 Authority Key Identifier: keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:35:f9:6d:69:2c:9d:4e:91:77:e5:fa:59:22:27:f5:da: d3:58:27:f1:a2:90:2d:c7:0c:7d:01:94:55:d5:de:ca:d1:88: 64:bc:38:ff:0a:6a:e8:12:b2:0b:b0:f8:b5:fc:c8:81:0d:24: 29:72:ec:f9:08:ce:95:e9:1c:80:3b:3b:bc:61:d5:1d:87:33: 2e:af:e5:4a:18:51:4f:d9:f4:46:8c:c7:14:83:3e:31:68:a0: 1b:ff:b9:a0:5a:53:ee:c3:77:46:4f:68:a6:22:04:a1:11:aa: 6a:2b:0a:08:e4:9f:30:04:f5:d1:0e:10:6f:ec:47:f0:17:c5: da:e4:d7:5f:45:fe:8b:ce:06:39:5a:51:3a:34:21:e6:b2:f5: 02:e1:cd:b4:9f:2e:71:77:54:2c:a4:94:a1:ca:6e:1f:88:82: 7b:79:2f:4b:61:49:97:67:13:7f:cd:3c:5f:d9:35:6f:06:94: 23:2f:82:6c:74:d7:8a:c0:9b:ac:cf:5d:22:b3:4c:f4:9e:cd: 97:4f:dc:93:c9:10:30:64:80:09:44:23:7e:4e:83:f0:26:49: 1f:9d:44:cd:83:5b:8a:6c:e4:48:94:10:4c:0d:4b:40:77:b7: cd:c4:32:7a:4f:0b:49:ed:2c:10:32:10:f0:02:95:98:fc:57: 3c:c7:9f:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87D7WIDCfJ64KN9mrgyk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi MzgzZmEwHhcNMjUxMjIwMTgwMTE0WhcNMjUxMjIxMTgwMTE0WjAzMTEwLwYDVQQD Eyg0NjgwOTI0MjY0NDI5YzZmYmZlYzA3NGQwODdmZDEyMGJiMzgwNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscgdrluvNqwIdp/oS3bo2sz1M9Im NebiojkC4Fkt7mTm1kDz4YAv1IzQvz7OpAn5gNgWATnUdv3IXBmyZq1IgO+pqlJh Dm+zZsUwwPIpyup8XFbgc6wwp/XLQ1hpVNYsBysi2DyB+lpfk/QFH++bITpMl1B6 cG/B27TlxdDk0/Jfp3ih3uUhGU3sgfDenRqnNSGQlznihrKxYQt1NLC2m8Jci2xa cRspzVE7POWR0nRKKfjs6MvINgxUHp6n04jI4FLZi8KYXXCKumRAoQ/Zq32j4BwW 9o7CvbkN5pzmp6LumhlenQ0bjYGCZACQdAXY4bTA8PNsg5bFqXb9lWoJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaAkkJkQpxvv+wHTQh/0SC7OAcvMB8GA1UdIwQY MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2 LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHM1+W1p LJ1OkXfl+lkiJ/Xa01gn8aKQLccMfQGUVdXeytGIZLw4/wpq6BKyC7D4tfzIgQ0k KXLs+QjOlekcgDs7vGHVHYczLq/lShhRT9n0RozHFIM+MWigG/+5oFpT7sN3Rk9o piIEoRGqaisKCOSfMAT10Q4Qb+xH8BfF2uTXX0X+i84GOVpROjQh5rL1AuHNtJ8u cXdULKSUocpuH4iCe3kvS2FJl2cTf808X9k1bwaUIy+CbHTXisCbrM9dIrNM9J7N l0/ck8kQMGSACUQjfk6D8CZJH51EzYNbimzkSJQQTA1LQHe3zcQyek8LSe0sEDIQ 8AKVmPxXPMefng== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:40 2025 by rpki-client