This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json) Hash identifier: IAIxsbCMJLnj6YJAUkiwJiNGXyI7xNtrlmb/+oVMruk= Subject key identifier: 59:94:03:72:FC:51:EA:1C:33:9F:BA:58:F1:6D:E0:71:64:A2:91:9B Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Certificate serial: 019B3EDABF718379FF2EC85FBA7882C6D5DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft Manifest number: 0C68 Signing time: Sun 21 Dec 2025 03:01:21 +0000 Manifest this update: Sun 21 Dec 2025 03:01:21 +0000 Manifest next update: Mon 22 Dec 2025 03:01:21 +0000 Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: ivjcj519zmTWXVfXgN3AkV2fAoBLoReOziLjqwW7MdA=) 2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:bf:71:83:79:ff:2e:c8:5f:ba:78:82:c6:d5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d Validity Not Before: Dec 21 03:01:21 2025 GMT Not After : Dec 22 03:01:21 2025 GMT Subject: CN=59940372fc51ea1c339fba58f16de07164a2919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:67:01:bf:93:ab:ce:23:d8:b4:e9:f8:c8: 90:19:39:20:eb:cd:cf:14:67:56:1c:d5:0f:ed:d4: b7:c9:b9:bb:e6:d2:cb:52:2c:92:5c:4a:0d:31:ca: fc:40:89:1d:96:fd:34:1c:1a:66:06:dc:dc:41:4d: 1f:2d:e0:5d:5c:ac:a4:9b:7f:09:dd:83:2c:32:4d: 3a:27:52:0a:eb:bf:f1:ee:a0:97:c5:02:2a:df:16: be:de:2d:07:28:45:a2:0b:e1:e3:d2:80:0b:8c:1e: 26:53:80:18:31:9e:83:aa:0d:b4:ae:61:d9:ba:7d: 57:ed:c9:16:ef:88:26:5a:37:ef:b3:af:17:aa:9f: 33:1f:be:99:98:c7:e3:c7:02:c7:b2:49:4d:9d:ec: 6f:86:b4:6d:f1:f8:55:4a:3b:10:7d:85:c9:d0:d9: 3c:2e:37:1b:c1:4f:f3:af:21:12:6c:f3:60:a1:de: e9:fd:d1:f8:0c:75:42:49:b8:83:6a:10:d3:3e:80: 6e:c0:f5:34:44:0e:69:57:59:8f:ce:3b:f1:0a:04: 98:ed:b4:f6:0b:32:94:0d:c5:39:b3:96:50:f2:41: c9:ed:45:68:b1:35:e9:fc:b0:f6:df:2e:b3:e6:d0: 29:e1:f5:ff:cc:6f:e5:e4:f0:4f:5b:57:6f:fe:9b: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:94:03:72:FC:51:EA:1C:33:9F:BA:58:F1:6D:E0:71:64:A2:91:9B X509v3 Authority Key Identifier: keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:9c:af:18:72:07:4e:1e:50:d1:59:a5:cf:ea:7f:d1:cb:8e: 62:09:2c:53:cb:10:68:ec:9e:32:f3:7f:6d:01:2e:81:50:1f: b8:55:c3:9f:52:f2:3a:1f:f7:74:51:1d:d1:46:41:4c:1e:af: e4:bc:4f:a8:ca:fe:f8:ad:af:70:f5:48:03:dd:82:98:62:78: ec:06:bf:a0:70:4d:68:72:e3:bb:bf:f9:e2:7e:bc:1f:16:5f: 8b:9a:f5:9c:2e:4d:c8:f7:4f:2d:ad:7c:e8:24:2e:9f:74:f8: be:3a:f2:f4:0a:03:51:3a:72:51:1e:90:e8:d1:62:81:3e:f0: 96:62:c2:79:cb:28:0f:54:95:a8:35:8a:54:a3:32:23:39:67: 34:66:ec:af:e3:1a:c4:31:3c:1a:7e:e6:84:df:d1:43:36:32: e7:33:2c:83:5d:22:c8:82:cc:ee:b0:da:9a:d7:a0:f3:c2:c4: f1:b0:fd:b2:df:5c:f9:45:8b:35:14:05:68:a5:15:98:80:8b: a4:ea:04:3a:da:12:24:e7:8b:2a:6e:0e:d4:e9:eb:d9:b7:d0: 31:fc:b0:ba:a8:fc:06:bc:bf:f6:8d:20:1e:2b:7f:30:c7:a7: af:31:9f:14:2a:c2:3f:06:8e:92:f7:81:a1:9b:b3:4d:59:34: 74:07:81:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2r9xg3n/LshfuniCxtXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmVjMjE3ZTliMTI5MzE2YzIzYTZmYTlmOWE3MjFmMTBj MmQ5NWQwHhcNMjUxMjIxMDMwMTIxWhcNMjUxMjIyMDMwMTIxWjAzMTEwLwYDVQQD Eyg1OTk0MDM3MmZjNTFlYTFjMzM5ZmJhNThmMTZkZTA3MTY0YTI5MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk5nAb+Tq84j2LTp+MiQGTkg683P FGdWHNUP7dS3ybm75tLLUiySXEoNMcr8QIkdlv00HBpmBtzcQU0fLeBdXKykm38J 3YMsMk06J1IK67/x7qCXxQIq3xa+3i0HKEWiC+Hj0oALjB4mU4AYMZ6Dqg20rmHZ un1X7ckW74gmWjfvs68Xqp8zH76ZmMfjxwLHsklNnexvhrRt8fhVSjsQfYXJ0Nk8 LjcbwU/zryESbPNgod7p/dH4DHVCSbiDahDTPoBuwPU0RA5pV1mPzjvxCgSY7bT2 CzKUDcU5s5ZQ8kHJ7UVosTXp/LD23y6z5tAp4fX/zG/l5PBPW1dv/psIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmUA3L8UeocM5+6WPFt4HFkopGbMB8GA1UdIwQY MBaAFFRuwhfpsSkxbCOm+p+ach8QwtldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQt YzQ3YzI2ZmE2OGFmLzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQtYzQ3YzI2ZmE2OGFm LzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZyvGHIH Th5Q0Vmlz+p/0cuOYgksU8sQaOyeMvN/bQEugVAfuFXDn1LyOh/3dFEd0UZBTB6v 5LxPqMr++K2vcPVIA92CmGJ47Aa/oHBNaHLju7/54n68HxZfi5r1nC5NyPdPLa18 6CQun3T4vjry9AoDUTpyUR6Q6NFigT7wlmLCecsoD1SVqDWKVKMyIzlnNGbsr+Ma xDE8Gn7mhN/RQzYy5zMsg10iyILM7rDamteg88LE8bD9st9c+UWLNRQFaKUVmICL pOoEOtoSJOeLKm4O1Onr2bfQMfywuqj8Bry/9o0gHit/MMenrzGfFCrCPwaOkveB oZuzTVk0dAeB2w== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:40 2025 by rpki-client