This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json) Hash identifier: ixmLPwAydJOxz9yELiEXpz/KIEAzaS7xJ342u/ikrVo= Subject key identifier: B9:F6:08:C7:54:63:87:97:BB:1D:4C:61:5C:53:39:CC:46:69:4E:39 Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Certificate serial: 019B44DD166749FDF5A92D883497FF7F3E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 07:01:38 +0000 Manifest this update: Mon 22 Dec 2025 07:01:38 +0000 Manifest next update: Tue 23 Dec 2025 07:01:38 +0000 Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: c/xXQkvnXQpf89D6JzLWp+ZqPvki3RgwCOQj6koTPwA=) 2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:16:67:49:fd:f5:a9:2d:88:34:97:ff:7f:3e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Validity Not Before: Dec 22 07:01:38 2025 GMT Not After : Dec 23 07:01:38 2025 GMT Subject: CN=b9f608c754638797bb1d4c615c5339cc46694e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:b1:5e:a8:96:3a:4f:e0:b8:4d:f7:d8:4d: fc:20:87:7b:4e:ce:69:ac:ab:c1:22:7b:ea:37:2f: aa:21:5f:69:8f:10:a9:08:a5:09:4b:a3:f4:cf:d9: be:f6:f8:99:db:23:e5:ba:4a:c3:7b:79:7d:66:fe: c4:04:8c:c3:a1:46:ad:57:bb:f6:bc:71:e2:41:ad: 9d:57:0b:eb:c2:23:9d:cd:26:e4:c9:5a:b6:69:d7: 54:a6:00:5a:ec:e2:36:2e:0e:57:7e:7e:0b:fc:56: 10:0b:e9:21:0e:97:65:c5:6e:d8:df:73:ff:01:6d: 80:f0:b1:df:46:bf:ea:44:76:6e:cf:b6:2d:01:63: 96:d2:02:99:44:fb:71:3f:9f:22:4f:91:97:c3:36: 16:42:40:96:8b:42:64:00:20:0f:d9:a5:12:83:88: 5e:02:d1:e9:21:fb:3b:12:b8:16:10:da:44:6c:bc: a2:21:da:47:cc:60:42:92:cc:19:cc:01:61:ee:fd: 53:a7:00:09:78:30:a0:93:40:41:6e:28:f8:c6:ee: 2f:f2:0d:e2:04:49:85:90:dd:a6:41:4f:55:03:f5: 37:a6:b3:03:37:ab:10:d4:d6:c8:e6:5d:b5:aa:ee: 99:86:88:a3:c3:cd:5b:cf:ca:7a:cf:b4:66:11:47: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F6:08:C7:54:63:87:97:BB:1D:4C:61:5C:53:39:CC:46:69:4E:39 X509v3 Authority Key Identifier: keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:c0:37:3c:de:ab:06:56:66:4c:18:77:89:24:8a:5a:cb: ee:72:7e:de:3f:cd:09:cf:78:1b:17:35:bd:90:7c:20:c7:7c: b4:69:74:b8:b5:5d:e4:a2:b9:5f:2f:b8:7a:c6:08:9a:bd:ad: 65:39:c3:7e:6b:c3:55:3d:5e:a5:66:9c:32:8e:fd:08:82:2e: 45:70:2a:15:af:94:f4:88:4a:7c:dd:3a:5a:20:8a:f1:c0:f3: ae:2b:ba:22:b3:82:cc:7e:7e:a1:ac:b1:00:42:fb:49:fe:30: 7f:dd:a2:e4:bc:78:4f:2e:c5:c7:f5:9d:29:b5:33:85:0f:df: 3e:cc:22:4c:e0:14:20:88:46:f3:b9:e5:67:02:8c:0e:ec:9b: 92:92:14:51:3c:05:bb:fe:08:25:2a:bd:e3:f0:49:f4:67:45: 63:24:35:c4:19:05:cc:5b:28:de:15:1a:fe:6b:74:6e:76:5b: a8:2a:44:ce:dd:84:40:c6:70:c3:fa:2c:7d:12:c8:6d:7e:f4: c4:63:dc:07:46:5d:8e:66:69:5d:57:7c:1a:15:0d:0d:ab:9b: 7f:ea:14:b3:af:9b:52:fb:60:b9:1b:61:24:41:fd:c9:db:2b: 95:44:d9:db:79:c8:a9:ed:0c:d0:ea:eb:5b:f2:11:10:d7:02: f4:10:eb:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3RZnSf31qS2INJf/fz5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm ZDQ5NzAwHhcNMjUxMjIyMDcwMTM4WhcNMjUxMjIzMDcwMTM4WjAzMTEwLwYDVQQD EyhiOWY2MDhjNzU0NjM4Nzk3YmIxZDRjNjE1YzUzMzljYzQ2Njk0ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54CxXqiWOk/guE332E38IId7Ts5p rKvBInvqNy+qIV9pjxCpCKUJS6P0z9m+9viZ2yPlukrDe3l9Zv7EBIzDoUatV7v2 vHHiQa2dVwvrwiOdzSbkyVq2addUpgBa7OI2Lg5Xfn4L/FYQC+khDpdlxW7Y33P/ AW2A8LHfRr/qRHZuz7YtAWOW0gKZRPtxP58iT5GXwzYWQkCWi0JkACAP2aUSg4he AtHpIfs7ErgWENpEbLyiIdpHzGBCkswZzAFh7v1TpwAJeDCgk0BBbij4xu4v8g3i BEmFkN2mQU9VA/U3prMDN6sQ1NbI5l21qu6Zhoijw81bz8p6z7RmEUeV6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn2CMdUY4eXux1MYVxTOcxGaU45MB8GA1UdIwQY MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1 LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJHANzze qwZWZkwYd4kkilrL7nJ+3j/NCc94Gxc1vZB8IMd8tGl0uLVd5KK5Xy+4esYImr2t ZTnDfmvDVT1epWacMo79CIIuRXAqFa+U9IhKfN06WiCK8cDzriu6IrOCzH5+oayx AEL7Sf4wf92i5Lx4Ty7Fx/WdKbUzhQ/fPswiTOAUIIhG87nlZwKMDuybkpIUUTwF u/4IJSq94/BJ9GdFYyQ1xBkFzFso3hUa/mt0bnZbqCpEzt2EQMZww/osfRLIbX70 xGPcB0ZdjmZpXVd8GhUNDaubf+oUs6+bUvtguRthJEH9ydsrlUTZ23nIqe0M0Orr W/IRENcC9BDrLw== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:55 2025 by rpki-client