This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json) Hash identifier: BuTcB7R2rKWrBZo/1iCw5kqshMiGdBX7vUayvZPYRdQ= Subject key identifier: 43:27:92:C1:E2:7B:B1:08:A7:20:45:10:59:05:AC:EF:31:E8:DB:FC Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e Certificate serial: 019AF1D250265FCC113227669F05CFF4FE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft Manifest number: 12F9 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: lwqzTvWOtDY24wPLUxObuRzQfIySNZLOfDnfBly0CQs=) 2: kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa (hash: VKlodJ8xjH2Yq58gYH0eZlUzy+prTwBQnlcgP5DbpSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:50:26:5f:cc:11:32:27:66:9f:05:cf:f4:fe:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=432792c1e27bb108a72045105905acef31e8dbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:22:24:61:3d:b0:95:24:5b:50:84:2e:8d: c4:60:b1:81:dd:04:b3:65:5d:48:90:7a:0f:16:06: 97:22:33:d2:ce:19:86:56:73:b2:6f:bd:f1:17:10: a9:ae:98:48:7f:02:d7:5c:6f:1c:f6:08:20:60:05: f2:fe:ae:98:af:65:43:0d:6d:36:af:65:d9:c8:91: eb:9b:65:76:64:4b:bf:1f:84:df:55:cf:8f:9a:19: e0:88:3e:d6:78:1c:e7:0c:c9:7f:0c:c4:40:f2:b1: 07:06:73:29:b5:d6:73:91:e8:33:3f:67:bc:aa:9e: fb:82:ba:c9:06:3a:8f:e4:f1:c1:fd:f2:66:94:bb: 6d:ba:dc:4a:07:ba:d8:19:c2:d1:be:76:a8:69:35: 46:71:bf:4c:ee:4b:21:2e:3d:27:2c:68:97:17:5b: 58:b6:18:e7:07:18:84:b9:a4:e7:9f:92:eb:77:4c: 01:41:9d:8c:40:0a:a8:ee:00:04:03:78:5e:4f:77: 5f:62:8a:0a:36:34:32:8a:51:1c:fd:7d:45:34:e3: f1:83:ea:a3:ae:3d:09:25:eb:7d:91:50:75:4f:40: 6b:33:eb:b3:36:52:12:da:8c:f2:84:a4:3a:28:03: 1f:d3:27:58:b5:84:1c:bc:7f:cb:43:6a:96:6e:c3: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:92:C1:E2:7B:B1:08:A7:20:45:10:59:05:AC:EF:31:E8:DB:FC X509v3 Authority Key Identifier: keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e7:3b:fe:8b:eb:11:b8:ae:a9:af:d0:56:5b:8d:b1:8a:cd: 52:e4:ac:53:ef:76:80:0e:46:b7:f4:86:3f:b0:e6:6c:95:09: 96:62:4f:05:85:2e:3b:0b:5d:56:56:b3:10:90:30:f9:4d:8f: 35:f2:31:6e:3e:2a:87:18:fa:6f:1f:a7:95:29:ea:50:a8:b9: 1b:0f:1c:5c:95:75:8d:29:ad:c2:8c:81:47:d4:6e:93:e9:08: 81:81:75:4f:15:1d:e1:99:cc:07:5e:9a:28:8b:8d:8e:fc:2d: 6a:a5:bc:9a:03:68:2f:e1:da:16:13:1c:5c:a8:47:1f:8c:4a: 1b:c4:b6:a9:b3:73:43:d9:49:11:1c:2f:2b:4e:c3:9a:a3:93: 33:cc:9f:eb:fa:8e:b1:16:d3:87:8f:33:42:24:00:86:06:46: 09:e1:1c:10:de:1d:14:10:ff:82:e7:ac:e7:05:59:91:04:67: 6e:69:c9:89:d9:70:60:19:ef:c6:f8:71:92:88:02:f2:57:49: f7:f8:26:ec:b6:c9:0c:4b:a4:e3:97:63:85:47:be:d9:ad:77: 48:bb:65:24:bd:a5:73:af:12:07:6e:64:4f:2f:3a:58:a2:11: ba:3b:34:97:34:c5:f5:09:5c:c8:58:6c:b3:54:dd:84:01:fd: 77:6c:fe:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lAmX8wRMidmnwXP9P4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OWM2NGE2YWM0YzQ5NzZhZDM2MjE0MTJhMTM3NDU5ZTY0 OWFiOWUwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD Eyg0MzI3OTJjMWUyN2JiMTA4YTcyMDQ1MTA1OTA1YWNlZjMxZThkYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQiJGE9sJUkW1CELo3EYLGB3QSz ZV1IkHoPFgaXIjPSzhmGVnOyb73xFxCprphIfwLXXG8c9gggYAXy/q6Yr2VDDW02 r2XZyJHrm2V2ZEu/H4TfVc+PmhngiD7WeBznDMl/DMRA8rEHBnMptdZzkegzP2e8 qp77grrJBjqP5PHB/fJmlLttutxKB7rYGcLRvnaoaTVGcb9M7kshLj0nLGiXF1tY thjnBxiEuaTnn5Lrd0wBQZ2MQAqo7gAEA3heT3dfYooKNjQyilEc/X1FNOPxg+qj rj0JJet9kVB1T0BrM+uzNlIS2ozyhKQ6KAMf0ydYtYQcvH/LQ2qWbsMexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMnksHie7EIpyBFEFkFrO8x6Nv8MB8GA1UdIwQY MBaAFFWcZKasTEl2rTYhQSoTdFnmSaueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjIt ZjMxNTEwNzcxMTg1LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjItZjMxNTEwNzcxMTg1 LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+c7/ovr Ebiuqa/QVluNsYrNUuSsU+92gA5Gt/SGP7DmbJUJlmJPBYUuOwtdVlazEJAw+U2P NfIxbj4qhxj6bx+nlSnqUKi5Gw8cXJV1jSmtwoyBR9Ruk+kIgYF1TxUd4ZnMB16a KIuNjvwtaqW8mgNoL+HaFhMcXKhHH4xKG8S2qbNzQ9lJERwvK07DmqOTM8yf6/qO sRbTh48zQiQAhgZGCeEcEN4dFBD/gues5wVZkQRnbmnJidlwYBnvxvhxkogC8ldJ 9/gm7LbJDEuk45djhUe+2a13SLtlJL2lc68SB25kTy86WKIRujs0lzTF9QlcyFhs s1TdhAH9d2z+Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:15 2025 by rpki-client