This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json) Hash identifier: fuuMAlWzJe8G6Y7w0wAcwX5Ck1qObQEx4lTtTb0NGEM= Subject key identifier: 69:C2:66:1A:40:19:BA:90:EA:59:5F:F9:AF:9C:25:0E:99:0E:01:01 Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Certificate serial: 019AF12D0C5C742C66DE22BDD99B579EEE7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft Manifest number: 0BC1 Signing time: Sat 06 Dec 2025 01:00:52 +0000 Manifest this update: Sat 06 Dec 2025 01:00:52 +0000 Manifest next update: Sun 07 Dec 2025 01:00:52 +0000 Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: n8AROSOkePpso80ANElON7xy8vWVdJ+tmz9mdWILiPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0c:5c:74:2c:66:de:22:bd:d9:9b:57:9e:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Validity Not Before: Dec 6 01:00:52 2025 GMT Not After : Dec 7 01:00:52 2025 GMT Subject: CN=69c2661a4019ba90ea595ff9af9c250e990e0101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:00:b7:08:54:58:5e:8b:73:51:84:f1:a1: da:59:72:a4:45:19:11:e1:ee:39:8c:c3:61:c4:52: 0c:b6:36:71:89:e5:74:a8:2e:40:33:2e:37:67:46: c3:1d:b1:1c:39:be:0f:10:51:91:3d:e7:60:f7:12: b6:cd:02:5d:00:69:c5:22:56:1a:18:ec:d1:00:47: 0d:5b:68:81:ed:4a:f5:9e:7a:c4:a0:39:01:b3:d7: 6d:36:50:b5:ae:8b:03:7e:3a:fa:b7:70:1d:8b:d3: 4e:b7:1c:76:fa:c4:1f:a4:29:e7:ca:4c:f1:7c:87: 3a:08:c6:2a:14:86:0a:f7:21:d1:d2:83:de:9a:4b: 99:a4:c6:b8:4c:b4:ed:aa:5f:c1:bb:63:7e:13:32: 30:18:25:0c:46:45:4a:9e:52:38:f5:31:91:19:69: 10:0f:4c:e9:25:9d:2f:e7:b0:60:0c:81:97:a0:7f: eb:bc:8f:dd:ff:e5:01:90:4c:9b:5a:84:c6:31:be: 6b:64:91:ef:97:0b:53:cc:e6:b8:30:86:18:97:a9: 05:71:97:e5:b3:0f:b2:d1:32:71:d0:a4:1e:07:fb: ea:ae:19:a6:69:73:1e:18:df:b1:51:87:34:16:4b: 6d:5c:d5:ac:b3:7a:cd:94:6a:7b:ca:57:77:fc:44: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:66:1A:40:19:BA:90:EA:59:5F:F9:AF:9C:25:0E:99:0E:01:01 X509v3 Authority Key Identifier: keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:46:02:ca:50:1e:b0:ae:0d:5a:70:72:d1:a8:9e:c3:68:4f: 7c:f5:d5:c9:09:c6:3e:d5:d4:76:4c:e8:41:e8:1b:5f:14:42: 0f:4f:eb:fa:d4:78:b3:57:98:10:b1:bf:4d:90:f9:51:a6:9e: 02:11:02:af:2d:13:8e:59:4b:e5:f9:5c:8c:2c:8c:41:c3:16: 2b:3f:00:d0:61:39:31:bb:96:71:cd:cd:3e:b0:be:1f:90:c7: 9d:e2:0a:55:92:19:d5:f3:02:26:83:c7:a1:68:ae:39:f9:44: dc:08:28:23:0a:f4:d1:c2:76:75:f5:b6:b9:18:f6:c8:a9:73: f8:86:29:5c:b2:de:f4:4b:8a:06:88:8c:e5:ec:a7:b6:e8:1f: a3:79:a9:1c:6e:cc:6c:ee:af:9c:d9:18:16:ea:84:a4:b8:b6: 4d:a9:28:bc:32:8a:14:c6:c9:09:db:80:58:74:2a:30:c5:14: 44:3d:d4:49:ea:e6:3e:bf:2e:4d:cf:99:17:88:09:91:b0:d2: af:0d:56:2c:c4:26:76:d3:f0:7b:b0:bc:88:8b:d3:ca:ee:60: fb:33:fe:bc:0a:79:de:8f:7c:20:7e:8f:37:9d:4d:3a:ce:64: af:91:8e:17:7a:bf:c3:9e:aa:64:a7:99:5d:3d:9b:f9:0d:e6: d3:3a:7f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQxcdCxm3iK92ZtXnu58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx YzdlNGUwHhcNMjUxMjA2MDEwMDUyWhcNMjUxMjA3MDEwMDUyWjAzMTEwLwYDVQQD Eyg2OWMyNjYxYTQwMTliYTkwZWE1OTVmZjlhZjljMjUwZTk5MGUwMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmAAtwhUWF6Lc1GE8aHaWXKkRRkR 4e45jMNhxFIMtjZxieV0qC5AMy43Z0bDHbEcOb4PEFGRPedg9xK2zQJdAGnFIlYa GOzRAEcNW2iB7Ur1nnrEoDkBs9dtNlC1rosDfjr6t3Adi9NOtxx2+sQfpCnnykzx fIc6CMYqFIYK9yHR0oPemkuZpMa4TLTtql/Bu2N+EzIwGCUMRkVKnlI49TGRGWkQ D0zpJZ0v57BgDIGXoH/rvI/d/+UBkEybWoTGMb5rZJHvlwtTzOa4MIYYl6kFcZfl sw+y0TJx0KQeB/vqrhmmaXMeGN+xUYc0FkttXNWss3rNlGp7yld3/ETKlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnCZhpAGbqQ6llf+a+cJQ6ZDgEBMB8GA1UdIwQY MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkYCylAe sK4NWnBy0aiew2hPfPXVyQnGPtXUdkzoQegbXxRCD0/r+tR4s1eYELG/TZD5Uaae AhECry0TjllL5flcjCyMQcMWKz8A0GE5MbuWcc3NPrC+H5DHneIKVZIZ1fMCJoPH oWiuOflE3AgoIwr00cJ2dfW2uRj2yKlz+IYpXLLe9EuKBoiM5eyntugfo3mpHG7M bO6vnNkYFuqEpLi2TakovDKKFMbJCduAWHQqMMUURD3USermPr8uTc+ZF4gJkbDS rw1WLMQmdtPwe7C8iIvTyu5g+zP+vAp53o98IH6PN51NOs5kr5GOF3q/w56qZKeZ XT2b+Q3m0zp/fA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:34 2025 by rpki-client