This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json) Hash identifier: y3lluBG2w3rJDjmybHRV4Jhu2td/+9qjO9gbdf/1rl4= Subject key identifier: 9B:30:63:6D:6A:DD:C3:1D:46:DE:03:AA:1B:E2:43:2C:40:3D:3D:0C Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc Certificate serial: 019AF1D2318C8119EF094E303043420E8123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft Manifest number: 054B Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: EzWGkfT+n6C+7dBnj25mnFu8uS2ZA5n/cyd0obm/0Sw=) 2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:31:8c:81:19:ef:09:4e:30:30:43:42:0e:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=9b30636d6addc31d46de03aa1be2432c403d3d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:33:f1:74:9e:8a:0c:c9:9c:aa:85:7b:5b:3d: ed:70:4b:a7:30:54:97:23:51:60:ff:08:b8:79:c6: 09:74:04:d0:b7:28:eb:d5:1a:a4:a9:98:58:5f:e3: dc:e9:45:c4:37:a8:91:fc:45:d9:a6:b1:6a:a5:15: 72:06:6d:fa:99:dd:e2:cb:12:87:cc:41:27:5f:7f: 44:35:8f:dc:7c:a8:20:46:bc:8a:cb:f6:ff:0c:6f: c2:43:d8:24:da:26:83:97:63:19:52:f2:91:12:0f: 5f:a9:39:f2:7f:42:a2:c9:3a:94:2c:e2:23:2b:0d: 03:04:15:18:89:fd:95:e4:e2:de:60:51:83:da:8e: a3:ca:1e:05:f6:2e:f6:a7:8a:ee:7f:a8:14:cd:da: 88:68:19:e1:24:8f:bc:11:33:81:f6:07:42:ea:f1: fb:8a:c9:77:01:c3:82:d4:21:a1:cd:dd:bb:04:4b: 0a:73:ca:02:d1:70:11:8a:60:31:6a:1d:89:ba:27: ac:b6:4b:7f:73:fb:a0:e4:4c:b5:bc:66:05:0d:fc: d0:b3:e7:3e:b0:3f:b8:16:68:bf:85:79:be:05:26: ab:9c:c7:6d:67:98:24:9c:8d:30:34:6c:f4:18:a7: 08:97:d0:e7:13:66:a3:ba:73:3f:bc:9a:89:b3:a7: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:63:6D:6A:DD:C3:1D:46:DE:03:AA:1B:E2:43:2C:40:3D:3D:0C X509v3 Authority Key Identifier: keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:91:b8:fd:3c:11:1f:de:6f:b3:5f:c4:22:c5:cd:c3:1d:c5: df:8e:90:00:4e:93:88:be:ce:d2:92:c4:d9:7e:81:d8:45:07: 35:e1:97:11:2b:f4:c6:a0:a7:a7:14:1d:c0:f0:51:f2:83:73: 90:63:32:73:35:ad:2f:2f:0a:5e:be:b0:35:b6:3b:64:b1:cc: 4a:d4:59:e4:6e:98:f8:49:c4:3f:31:e8:7f:38:80:73:65:62: 10:bb:6f:77:aa:8a:20:56:9f:85:3e:6e:31:ad:39:74:ea:92: f5:43:27:66:f3:3d:57:6c:2d:cb:f0:39:41:1f:f9:16:5a:26: 74:1b:bb:e8:65:ec:26:53:31:3a:c4:5a:f5:43:3b:38:0e:fc: 00:cd:c2:8d:6e:e1:00:80:e6:5c:5d:ff:2c:31:e2:3d:d7:55: bf:5a:33:d2:15:c6:55:bf:e5:5b:93:c4:96:68:2e:ba:90:5b: 01:36:6b:f1:57:74:3f:d4:b4:47:10:99:65:d2:00:7e:dc:51: 56:99:8c:e2:21:a9:5b:21:d7:a0:09:f4:f5:44:f1:23:d1:fd: 0e:a7:f5:1a:dc:f2:a6:16:20:e3:0e:ec:5f:b1:c8:12:db:0b: 80:0e:ca:b4:a4:01:2b:59:87:aa:fa:3f:09:8c:aa:ef:61:47: 29:f0:99:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jGMgRnvCU4wMENCDoEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2FjNzIwYTExN2I3NGQ0ZDEzYzI2M2Y3OTQ3NzkyOWVk YmI0YmMwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg5YjMwNjM2ZDZhZGRjMzFkNDZkZTAzYWExYmUyNDMyYzQwM2QzZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTPxdJ6KDMmcqoV7Wz3tcEunMFSX I1Fg/wi4ecYJdATQtyjr1RqkqZhYX+Pc6UXEN6iR/EXZprFqpRVyBm36md3iyxKH zEEnX39ENY/cfKggRryKy/b/DG/CQ9gk2iaDl2MZUvKREg9fqTnyf0KiyTqULOIj Kw0DBBUYif2V5OLeYFGD2o6jyh4F9i72p4ruf6gUzdqIaBnhJI+8ETOB9gdC6vH7 isl3AcOC1CGhzd27BEsKc8oC0XARimAxah2Juiestkt/c/ug5Ey1vGYFDfzQs+c+ sD+4Fmi/hXm+BSarnMdtZ5gknI0wNGz0GKcIl9DnE2ajunM/vJqJs6f4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJswY21q3cMdRt4DqhviQyxAPT0MMB8GA1UdIwQY MBaAFL86xyChF7dNTRPCY/eUd5Ke27S8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjVmNWUtN2I3ZC00YjI4LWE5YjMt MGFjMWJiZDQzNGQwLzEvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjVmNWUtN2I3ZC00YjI4LWE5YjMtMGFjMWJiZDQzNGQw LzEvdnpySElLRVh0MDFORThKajk1UjNrcDdidEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZG4/TwR H95vs1/EIsXNwx3F346QAE6TiL7O0pLE2X6B2EUHNeGXESv0xqCnpxQdwPBR8oNz kGMyczWtLy8KXr6wNbY7ZLHMStRZ5G6Y+EnEPzHofziAc2ViELtvd6qKIFafhT5u Ma05dOqS9UMnZvM9V2wty/A5QR/5FlomdBu76GXsJlMxOsRa9UM7OA78AM3CjW7h AIDmXF3/LDHiPddVv1oz0hXGVb/lW5PElmguupBbATZr8Vd0P9S0RxCZZdIAftxR VpmM4iGpWyHXoAn09UTxI9H9Dqf1GtzyphYg4w7sX7HIEtsLgA7KtKQBK1mHqvo/ CYyq72FHKfCZ9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:17 2025 by rpki-client