This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json) Hash identifier: Ndn6D7mNd7xc9vW4rNB/SrNFYv2VN2S2MG3KPltL3ZY= Subject key identifier: 99:56:ED:7F:B4:A7:0F:37:24:9D:46:72:A5:0D:9D:95:80:D5:FB:DB Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Certificate serial: 019B3B35041F276FC83E1E11F91B7D37E474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 10:01:28 +0000 Manifest this update: Sat 20 Dec 2025 10:01:28 +0000 Manifest next update: Sun 21 Dec 2025 10:01:28 +0000 Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: MOhb3M7XvANKoaan0ukn4YvulnTLs08sqc40kiABo8E=) 2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:04:1f:27:6f:c8:3e:1e:11:f9:1b:7d:37:e4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970 Validity Not Before: Dec 20 10:01:28 2025 GMT Not After : Dec 21 10:01:28 2025 GMT Subject: CN=9956ed7fb4a70f37249d4672a50d9d9580d5fbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:f0:db:45:b2:83:d4:4e:0e:c1:60:4a:2a: 1b:f8:bd:c2:06:04:79:dc:0a:13:84:8b:37:09:e1: 8e:84:40:11:68:ea:0e:dc:7f:59:87:84:79:50:6f: be:e8:e4:1a:5d:6d:94:4b:ad:3f:9c:6a:64:64:34: 65:09:cd:fd:f9:f8:0b:24:cb:cf:37:c2:93:19:c2: 0c:61:3a:23:07:cf:b8:2d:5b:e0:94:11:7c:7b:16: ab:e2:3f:3d:f3:88:5c:bc:ee:bc:67:91:e5:ca:60: b9:73:f8:70:d5:75:09:16:65:13:69:80:45:60:06: 02:4b:46:b0:fc:5c:c3:2c:e7:5d:4d:80:26:8c:19: 7f:e6:9c:ae:a6:f7:e2:60:0f:a5:cc:01:cc:c9:36: 8f:17:4e:e4:f9:94:91:38:39:a8:c5:fc:be:03:a7: f8:a6:58:73:3d:6b:8a:13:d5:0b:04:f1:ee:03:1e: 65:a3:e7:fb:44:32:ef:b4:f4:90:0c:dc:f6:61:5e: 64:4d:09:86:47:8c:b7:5f:17:80:ae:75:2e:c5:c0: 21:09:25:2b:89:b7:98:13:13:08:14:26:ff:92:af: ad:5e:8e:0e:03:03:85:9d:63:43:b4:5b:a9:47:19: 6a:ee:2b:e6:e4:85:90:91:1f:f3:63:b1:c1:4d:c7: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:ED:7F:B4:A7:0F:37:24:9D:46:72:A5:0D:9D:95:80:D5:FB:DB X509v3 Authority Key Identifier: keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ab:63:2b:c5:09:2c:ea:7d:b3:b1:8b:1b:02:08:48:c4:35: 5a:4d:ad:ba:ce:f2:58:97:19:a5:c9:07:4b:f2:9d:3e:8e:b4: c6:59:49:89:6d:2e:7b:d1:02:8f:3e:35:6c:40:9b:44:45:f4: a8:e9:4b:91:30:9a:09:e2:94:ba:38:f3:9f:b9:20:d9:7d:6a: 5d:66:6c:18:ed:c2:ca:91:22:2a:42:d6:5a:35:99:f3:95:ae: 87:25:c0:af:e4:64:50:38:9e:ed:8f:f2:10:82:bb:05:9c:9e: 05:74:be:1a:2b:f2:f6:54:96:82:f3:1c:22:04:1b:e7:64:d0: b3:58:70:28:d2:04:b7:ca:a3:b7:00:d5:86:36:45:56:76:46: 44:c8:87:17:6b:54:0e:a9:16:7a:f0:58:8b:f6:1b:1c:9c:6c: e6:a2:c4:dc:cb:9b:dc:70:30:24:65:07:3d:d0:c9:53:e7:5a: 51:1f:ab:82:48:18:cd:85:9e:35:35:db:c7:ea:1b:73:fb:81: 63:76:74:af:2c:eb:b1:52:7d:6d:95:54:57:f1:c0:df:d8:80: ee:20:c3:02:cd:8c:a9:62:07:70:95:ef:5b:af:00:b2:4e:69: c0:af:54:c1:c7:19:74:a9:cb:24:ec:39:16:8a:75:5a:0c:f3: ff:c0:67:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQQfJ2/IPh4R+Rt9N+R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm ZDQ5NzAwHhcNMjUxMjIwMTAwMTI4WhcNMjUxMjIxMTAwMTI4WjAzMTEwLwYDVQQD Eyg5OTU2ZWQ3ZmI0YTcwZjM3MjQ5ZDQ2NzJhNTBkOWQ5NTgwZDVmYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CXw20Wyg9RODsFgSiob+L3CBgR5 3AoThIs3CeGOhEARaOoO3H9Zh4R5UG++6OQaXW2US60/nGpkZDRlCc39+fgLJMvP N8KTGcIMYTojB8+4LVvglBF8exar4j8984hcvO68Z5HlymC5c/hw1XUJFmUTaYBF YAYCS0aw/FzDLOddTYAmjBl/5pyupvfiYA+lzAHMyTaPF07k+ZSRODmoxfy+A6f4 plhzPWuKE9ULBPHuAx5lo+f7RDLvtPSQDNz2YV5kTQmGR4y3XxeArnUuxcAhCSUr ibeYExMIFCb/kq+tXo4OAwOFnWNDtFupRxlq7ivm5IWQkR/zY7HBTcfRDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlW7X+0pw83JJ1GcqUNnZWA1fvbMB8GA1UdIwQY MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1 LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqtjK8UJ LOp9s7GLGwIISMQ1Wk2tus7yWJcZpckHS/KdPo60xllJiW0ue9ECjz41bECbREX0 qOlLkTCaCeKUujjzn7kg2X1qXWZsGO3CypEiKkLWWjWZ85WuhyXAr+RkUDie7Y/y EIK7BZyeBXS+Givy9lSWgvMcIgQb52TQs1hwKNIEt8qjtwDVhjZFVnZGRMiHF2tU DqkWevBYi/YbHJxs5qLE3Mub3HAwJGUHPdDJU+daUR+rgkgYzYWeNTXbx+obc/uB Y3Z0ryzrsVJ9bZVUV/HA39iA7iDDAs2MqWIHcJXvW68Ask5pwK9UwccZdKnLJOw5 Fop1Wgzz/8BnWA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:08 2025 by rpki-client