This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft File: vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json) Hash identifier: Ts8L91zc/FIVyp3lafU+ht9R822QBVhwytqVdRHctFI= Subject key identifier: 2D:F1:71:92:B3:7D:C5:8E:FD:AB:3D:2E:79:30:74:A6:9A:B6:2D:9B Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019B378ED542DD9113391882D7BC490BC517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft Manifest number: 10A2 Signing time: Fri 19 Dec 2025 17:01:06 +0000 Manifest this update: Fri 19 Dec 2025 17:01:06 +0000 Manifest next update: Sat 20 Dec 2025 17:01:06 +0000 Files and hashes: 1: 4_kj9c7eaRMU4u4iUuTYZj576fo.roa (hash: PO5fBF6ObWzUciinbt0VhtAYJ3DoUDA1KwTdUnCJHIU=) 2: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (hash: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=) 3: UPczbud20oB9tgHwFSb2akGSJh4.roa (hash: 4+rja0/RrelXJUDvcZSlg9HpxqQMawG+/C9XB2H3Tfk=) 4: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (hash: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=) 5: nKWeM_CH9-9zmDpDZswtnyydpVE.roa (hash: KvDVuK8tbyCYd/evgrfJE5X1yTC3BOlJ7Aj6N3EgX7Y=) 6: tn0vzIzUKvR4QDUVTfzGnbr56Zw.roa (hash: orJlZ9N3WJfEobcKgJS3DRi9EsasmDaNr36Kkpxuc5o=) 7: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: pbsC4ZUAzTlQSe12nnCle8sKoQCB0F22/gFmnzPyo6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d5:42:dd:91:13:39:18:82:d7:bc:49:0b:c5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Dec 19 17:01:06 2025 GMT Not After : Dec 20 17:01:06 2025 GMT Subject: CN=2df17192b37dc58efdab3d2e793074a69ab62d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:30:a9:fb:46:71:35:0f:fc:bc:61:dc:2b: 81:2b:55:8c:92:ce:01:ac:36:5f:37:92:7b:fc:dc: e9:b5:8d:cd:47:1c:07:9d:4b:31:aa:4c:9d:03:51: 3c:4d:1a:67:71:44:c2:22:07:2d:6e:92:58:ed:98: 87:b0:12:0d:2c:89:ec:fa:93:dd:56:60:42:99:24: fc:9d:4f:b0:f1:15:91:1a:f1:2b:a0:dc:0c:6c:1a: 34:08:d1:d8:74:30:75:d7:43:35:70:cb:67:c0:58: 29:9e:c0:f0:0a:a8:bc:be:f0:27:00:8a:e1:3e:18: 77:ef:0b:3e:f2:43:8d:91:f5:c4:8f:db:13:bc:d1: 0c:24:65:ef:f9:d2:88:05:c5:9b:26:a9:00:f1:84: 22:b2:93:50:a6:de:b7:3b:b1:d4:66:25:3e:1c:dc: b3:f9:c2:5b:5d:54:a4:1c:4b:ae:de:1b:44:b3:9e: e9:44:9b:5f:13:75:e3:f7:c0:a5:5c:2e:a3:c2:7a: 7d:85:e7:49:12:7e:b2:cf:56:65:f6:ad:ac:63:71: 6a:80:22:ea:3f:a3:c4:69:b1:91:65:5e:6a:cb:0f: e8:be:fa:05:dd:65:4b:67:25:93:b8:6e:6a:21:9e: 1f:de:bd:ef:17:04:b1:c6:29:a0:db:2f:e2:d2:1c: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F1:71:92:B3:7D:C5:8E:FD:AB:3D:2E:79:30:74:A6:9A:B6:2D:9B X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:13:89:b5:91:35:2d:a8:52:17:db:df:db:df:ae:dc:64:7a: 72:52:93:7a:bc:65:da:8e:b9:52:7d:72:7e:67:db:f6:ba:d1: a5:29:74:78:55:f7:ac:d1:95:40:e5:40:dd:06:fa:0f:d8:52: 54:d7:4e:e9:ea:be:0e:01:97:33:1b:55:81:37:7c:ec:a5:ac: 66:41:ee:1c:b0:cc:36:fb:ef:e1:a2:c0:65:17:b9:80:de:0a: 38:98:61:db:c3:db:80:66:0b:87:89:21:77:3f:8c:d5:21:60: 55:70:ea:64:f5:28:ff:ef:9a:73:82:f3:b6:94:38:a2:16:92: e6:c6:8b:56:6e:b2:7f:b5:24:71:4e:74:b7:dd:ed:9d:67:7f: 13:5a:8f:7b:05:9c:7c:c2:27:14:ee:96:5a:8e:a6:ac:6f:45: 8d:72:cd:da:67:70:4b:38:11:82:84:b8:bd:07:9a:a9:67:6f: fc:3d:91:85:3a:80:cf:02:fc:ab:8e:2d:9f:00:39:50:a8:2c: 97:0b:25:91:f6:a9:53:dc:dc:44:d0:85:b1:78:6f:df:40:c3: 0a:91:2f:0c:4e:78:06:a2:46:57:c4:18:b9:37:a7:8a:70:b3: f6:84:db:7b:14:ce:f0:da:6c:d2:9b:82:19:ec:31:eb:44:b4: 8c:c4:e4:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtVC3ZETORiC17xJC8UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjUxMjE5MTcwMTA2WhcNMjUxMjIwMTcwMTA2WjAzMTEwLwYDVQQD EygyZGYxNzE5MmIzN2RjNThlZmRhYjNkMmU3OTMwNzRhNjlhYjYyZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMAwqftGcTUP/Lxh3CuBK1WMks4B rDZfN5J7/NzptY3NRxwHnUsxqkydA1E8TRpncUTCIgctbpJY7ZiHsBINLIns+pPd VmBCmST8nU+w8RWRGvEroNwMbBo0CNHYdDB110M1cMtnwFgpnsDwCqi8vvAnAIrh Phh37ws+8kONkfXEj9sTvNEMJGXv+dKIBcWbJqkA8YQispNQpt63O7HUZiU+HNyz +cJbXVSkHEuu3htEs57pRJtfE3Xj98ClXC6jwnp9hedJEn6yz1Zl9q2sY3FqgCLq P6PEabGRZV5qyw/ovvoF3WVLZyWTuG5qIZ4f3r3vFwSxximg2y/i0hxwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3xcZKzfcWO/as9LnkwdKaati2bMB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxOJtZE1 LahSF9vf29+u3GR6clKTerxl2o65Un1yfmfb9rrRpSl0eFX3rNGVQOVA3Qb6D9hS VNdO6eq+DgGXMxtVgTd87KWsZkHuHLDMNvvv4aLAZRe5gN4KOJhh28PbgGYLh4kh dz+M1SFgVXDqZPUo/++ac4LztpQ4ohaS5saLVm6yf7UkcU50t93tnWd/E1qPewWc fMInFO6WWo6mrG9FjXLN2mdwSzgRgoS4vQeaqWdv/D2RhTqAzwL8q44tnwA5UKgs lwslkfapU9zcRNCFsXhv30DDCpEvDE54BqJGV8QYuTeninCz9oTbexTO8Nps0puC Gewx60S0jMTkwA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:44 2025 by rpki-client