This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json) Hash identifier: wzE2NvasKiMFwmQPcc0UQZ5ScYwhzBRkbsvpivETrmY= Subject key identifier: DD:F7:B2:CD:FB:05:B0:5F:76:D7:99:93:40:B3:07:EB:7D:BE:40:31 Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b Certificate serial: 019B75C924996B612C6D6B2A76AE95E4D4DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft Manifest number: 17A8 Signing time: Wed 31 Dec 2025 19:01:14 +0000 Manifest this update: Wed 31 Dec 2025 19:01:14 +0000 Manifest next update: Thu 01 Jan 2026 19:01:14 +0000 Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=) 2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: xv0SBxO2270qrozllVGM1By2EQF2tpfGvI03mrrGvxM=) 3: uftLeQkfqcKXo03jKUeL_D8WtaM.roa (hash: eP3V2NYa/TWTuM8OXhJAO5sPx82m7ITWPPP4AAlDAZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c9:24:99:6b:61:2c:6d:6b:2a:76:ae:95:e4:d4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b Validity Not Before: Dec 31 19:01:14 2025 GMT Not After : Jan 1 19:01:14 2026 GMT Subject: CN=ddf7b2cdfb05b05f76d7999340b307eb7dbe4031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:70:cb:b2:6e:2c:48:70:51:42:bd:f4:46: d9:88:44:8b:b6:67:f3:29:06:e7:07:b8:0f:16:21: ae:c6:a9:ad:c3:18:94:4b:9a:41:7c:60:6f:cb:2b: a7:47:fe:7c:2b:b7:45:c2:6e:7c:b2:76:dc:42:c6: 3f:db:2b:c9:fe:8d:9c:e8:97:d3:3a:c4:d3:ef:2e: c6:4a:3f:7c:2a:d4:9d:10:44:86:61:fc:08:9d:cd: 61:c9:9d:ab:f4:6b:6d:8f:07:32:53:67:b0:75:64: b3:1b:29:f8:23:88:08:d1:54:b4:b6:e5:21:fe:6c: 1b:dd:a1:6e:59:cc:dd:0a:b2:5e:7f:54:47:c9:7b: 5c:6e:02:9b:eb:61:d5:77:60:06:0f:09:da:be:d8: bc:76:a4:b4:a7:41:2d:31:5b:09:6d:e1:f4:c2:87: 1f:12:03:5b:40:3e:29:8e:9f:b9:24:40:be:bb:61: 02:96:aa:27:4f:a0:d3:7d:32:a8:94:1e:9b:16:36: 11:5b:91:15:a3:02:ec:de:4d:7b:b3:31:4f:88:39: 10:69:4f:d2:1d:0b:7c:67:60:7c:20:4f:1a:f8:57: c8:cd:48:27:58:f9:18:f2:6c:62:22:c2:7b:2d:09: db:98:5d:c2:bd:a0:ae:34:c5:fc:9e:d5:50:a7:9d: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F7:B2:CD:FB:05:B0:5F:76:D7:99:93:40:B3:07:EB:7D:BE:40:31 X509v3 Authority Key Identifier: keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:35:3b:3c:a6:0d:b1:bb:0d:cf:f7:d4:08:f6:07:d9:5a:33: b9:a1:6a:d6:43:d5:e4:92:30:aa:e8:6d:d3:cd:e7:7b:3f:33: 24:70:aa:fa:23:f8:9e:cb:e0:07:40:60:2b:9c:2f:dd:76:77: e1:e8:29:c4:b7:39:f8:40:2c:56:5e:26:8c:ee:d9:b6:a7:94: 45:17:fe:2b:38:96:ec:1f:81:6a:d9:9e:f7:47:42:98:93:84: 0f:15:20:0f:8b:70:3b:30:1e:25:ff:86:6a:b9:8d:03:9d:61: ac:de:84:16:02:3b:d3:39:38:8b:63:d9:90:65:8e:1d:33:92: 82:87:e3:b6:96:49:9c:fe:0f:88:dc:7e:22:11:42:68:8f:25: 60:f2:ab:ae:b3:d8:fd:02:be:0c:95:52:21:1e:f2:50:fb:a5: d4:7d:85:92:80:d9:1e:bf:41:7d:76:52:d3:5d:d2:4a:b8:4f: de:e3:77:37:7a:23:5f:24:73:9b:7e:4b:bb:8b:5b:b6:8f:94: 98:f7:0b:aa:af:fe:52:18:85:aa:28:d8:24:f4:2a:96:da:c5: 58:e5:22:1f:3f:44:03:02:a3:5c:58:02:67:03:df:19:5a:83: fb:d9:c9:0a:8b:27:25:48:74:9e:37:e1:92:da:bb:43:32:fc: e0:6f:68:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1ySSZa2EsbWsqdq6V5NTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj MzYyMmIwHhcNMjUxMjMxMTkwMTE0WhcNMjYwMTAxMTkwMTE0WjAzMTEwLwYDVQQD EyhkZGY3YjJjZGZiMDViMDVmNzZkNzk5OTM0MGIzMDdlYjdkYmU0MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns1wy7JuLEhwUUK99EbZiESLtmfz KQbnB7gPFiGuxqmtwxiUS5pBfGBvyyunR/58K7dFwm58snbcQsY/2yvJ/o2c6JfT OsTT7y7GSj98KtSdEESGYfwInc1hyZ2r9GttjwcyU2ewdWSzGyn4I4gI0VS0tuUh /mwb3aFuWczdCrJef1RHyXtcbgKb62HVd2AGDwnavti8dqS0p0EtMVsJbeH0wocf EgNbQD4pjp+5JEC+u2EClqonT6DTfTKolB6bFjYRW5EVowLs3k17szFPiDkQaU/S HQt8Z2B8IE8a+FfIzUgnWPkY8mxiIsJ7LQnbmF3CvaCuNMX8ntVQp52xJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN33ss37BbBfdteZk0CzB+t9vkAxMB8GA1UdIwQY MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt ZWYwNjNlNzg2ZTU0LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0 LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDU7PKYN sbsNz/fUCPYH2VozuaFq1kPV5JIwquht083nez8zJHCq+iP4nsvgB0BgK5wv3XZ3 4egpxLc5+EAsVl4mjO7ZtqeURRf+KziW7B+Batme90dCmJOEDxUgD4twOzAeJf+G armNA51hrN6EFgI70zk4i2PZkGWOHTOSgofjtpZJnP4PiNx+IhFCaI8lYPKrrrPY /QK+DJVSIR7yUPul1H2FkoDZHr9BfXZS013SSrhP3uN3N3ojXyRzm35Lu4tbto+U mPcLqq/+UhiFqijYJPQqltrFWOUiHz9EAwKjXFgCZwPfGVqD+9nJCosnJUh0njfh ktq7QzL84G9o3Q== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:34 2026 by rpki-client