This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json) Hash identifier: B5pR3TEgOZwjib5vq4LurZNBjt33F5JW12634/YIYXM= Subject key identifier: 3A:9C:0D:D0:A2:84:84:53:C7:9B:6F:D4:3A:93:FB:79:7E:95:23:2B Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0 Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0 Certificate serial: 019B7291325BBA934A3A16C61D988419C990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft Manifest number: 0DFC Signing time: Wed 31 Dec 2025 04:01:16 +0000 Manifest this update: Wed 31 Dec 2025 04:01:16 +0000 Manifest next update: Thu 01 Jan 2026 04:01:16 +0000 Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: vOX2qIU/dzYpp2jX+99r6FyrG+I/BGSoorncjjQBXME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:32:5b:ba:93:4a:3a:16:c6:1d:98:84:19:c9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0 Validity Not Before: Dec 31 04:01:16 2025 GMT Not After : Jan 1 04:01:16 2026 GMT Subject: CN=3a9c0dd0a2848453c79b6fd43a93fb797e95232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:3f:d6:15:d2:f5:a1:b5:d0:3a:c2:da:37: 83:89:6c:26:57:e5:c0:42:04:7f:0b:b4:ff:7b:8b: 2f:64:53:c4:f3:c1:51:89:bd:2f:92:48:da:78:57: e3:8d:f4:7b:99:3e:6f:e7:4b:98:d6:5f:04:b3:4f: 39:9b:de:e8:99:bd:34:9d:fc:5d:57:b2:0e:b9:fc: 68:26:40:1f:08:70:13:e5:6e:7c:93:81:bb:d2:48: 38:0e:c4:cb:58:ae:c6:bd:7d:7d:3d:69:f5:e5:b5: 6b:de:ac:d9:bb:5f:72:c7:21:ec:12:1a:21:11:95: 2e:09:73:f3:1c:44:2f:31:fb:cb:6a:44:ff:38:32: b5:3f:dd:3a:52:2b:7e:0f:03:01:4f:ac:83:bc:41: 2e:4d:78:f1:70:f5:28:b2:4c:1f:d5:a9:77:03:e0: 56:c2:cc:1b:34:4c:55:8d:c4:9c:5e:7d:56:93:d2: 40:ca:a3:6d:64:db:95:0b:10:52:72:4e:5d:92:ea: e5:22:fb:f5:72:54:c6:e6:2b:87:5a:59:64:f2:13: 15:95:88:67:0f:39:61:2a:e7:d7:90:d6:50:80:4b: ae:77:d4:e6:c6:26:ae:37:23:e2:20:95:ec:a8:11: b2:24:f7:5e:71:27:c0:5f:54:af:33:c9:2b:f7:fc: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9C:0D:D0:A2:84:84:53:C7:9B:6F:D4:3A:93:FB:79:7E:95:23:2B X509v3 Authority Key Identifier: keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e1:1e:a5:4c:09:29:a5:8b:a1:53:0a:8b:4f:ac:36:cf:e4: a2:f1:e0:61:80:28:1d:88:8c:9b:5f:ee:f6:a7:77:df:51:86: 70:e2:82:e4:38:32:6b:77:db:a9:e5:99:c5:9c:57:8d:17:d3: a6:c4:a7:18:52:b6:84:8b:24:77:3d:7a:77:d7:ef:40:75:fb: c4:df:6e:01:21:7f:3c:eb:11:e3:ac:18:20:56:21:73:c5:e9: 2e:52:48:b1:00:7a:64:e1:47:76:bb:6e:8e:3a:79:1e:f0:d3: df:49:1a:59:6a:c4:f9:85:cd:1f:5e:c2:2f:0b:6f:ba:cc:cd: 69:bf:15:ae:ac:a6:bf:4d:b3:c8:06:2d:53:82:12:99:f3:16: c4:a3:04:60:99:6c:89:5c:8b:c0:f0:40:bf:60:00:1a:df:a5: 2f:53:e1:95:b1:1e:b0:f4:2f:05:0e:8b:20:fe:99:1d:8d:a0: ef:19:fa:5d:0f:d8:6d:01:2a:39:ab:a8:0f:32:3a:a8:e9:6d: 7f:09:fb:f1:5a:1c:21:88:84:12:0a:97:64:00:ed:03:dd:6f: 50:37:1a:87:78:94:d7:7d:aa:bd:fc:19:12:04:41:d9:ac:4c: d7:7e:99:da:8c:5c:7d:76:33:59:04:44:df:40:aa:76:53:32: 68:64:14:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykTJbupNKOhbGHZiEGcmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgxY2QwOTljODViZTcxYTIyMzUwY2IxM2YwNDgyNWMw MWY4ZjAwHhcNMjUxMjMxMDQwMTE2WhcNMjYwMTAxMDQwMTE2WjAzMTEwLwYDVQQD EygzYTljMGRkMGEyODQ4NDUzYzc5YjZmZDQzYTkzZmI3OTdlOTUyMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojI/1hXS9aG10DrC2jeDiWwmV+XA QgR/C7T/e4svZFPE88FRib0vkkjaeFfjjfR7mT5v50uY1l8Es085m97omb00nfxd V7IOufxoJkAfCHAT5W58k4G70kg4DsTLWK7GvX19PWn15bVr3qzZu19yxyHsEhoh EZUuCXPzHEQvMfvLakT/ODK1P906Uit+DwMBT6yDvEEuTXjxcPUoskwf1al3A+BW wswbNExVjcScXn1Wk9JAyqNtZNuVCxBSck5dkurlIvv1clTG5iuHWllk8hMVlYhn DzlhKufXkNZQgEuud9TmxiauNyPiIJXsqBGyJPdecSfAX1SvM8kr9/wUfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqcDdCihIRTx5tv1DqT+3l+lSMrMB8GA1UdIwQY MBaAFFRoHNCZyFvnGiI1DLE/BIJcAfjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wODUwMTMtZGQzZC00Y2E3LWJhNzkt Yzg4MjgzZjhmMTE3LzEvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wODUwMTMtZGQzZC00Y2E3LWJhNzktYzg4MjgzZjhmMTE3 LzEvVkdnYzBKbklXLWNhSWpVTXNUOEVnbHdCLVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+EepUwJ KaWLoVMKi0+sNs/kovHgYYAoHYiMm1/u9qd331GGcOKC5Dgya3fbqeWZxZxXjRfT psSnGFK2hIskdz16d9fvQHX7xN9uASF/POsR46wYIFYhc8XpLlJIsQB6ZOFHdrtu jjp5HvDT30kaWWrE+YXNH17CLwtvuszNab8Vrqymv02zyAYtU4ISmfMWxKMEYJls iVyLwPBAv2AAGt+lL1PhlbEesPQvBQ6LIP6ZHY2g7xn6XQ/YbQEqOauoDzI6qOlt fwn78VocIYiEEgqXZADtA91vUDcah3iU132qvfwZEgRB2axM136Z2oxcfXYzWQRE 30CqdlMyaGQUDQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:32 2025 by rpki-client