This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json) Hash identifier: 6mDrX0Hx1KONip4+mMBoGf3xuPh82YPowX1XabxpC7k= Subject key identifier: 06:70:31:78:4D:0F:C5:8B:45:C8:F1:0A:EA:48:94:4C:9D:45:49:CF Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6 Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6 Certificate serial: 019AF088B5A626CAE207367B4CB6298AEEAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft Manifest number: 0A0F Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=) 2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: WV3JUL2OqGFFerDNudvw4kbSzN+IeqkGTtwRTOLDbwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b5:a6:26:ca:e2:07:36:7b:4c:b6:29:8a:ee:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6 Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=067031784d0fc58b45c8f10aea48944c9d4549cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:ec:cc:46:ec:75:ac:82:38:f7:8c:84:e7: 19:b2:93:b7:bd:41:71:d7:32:01:87:8b:26:f7:8d: a5:fb:f6:2f:78:c4:7c:11:82:1c:76:b5:1c:17:1d: 49:ab:8a:26:3a:8f:f5:92:66:9c:d6:a6:81:9a:f0: 2c:df:1d:35:2e:92:e3:9c:58:3e:f2:d1:da:8e:42: 14:0a:31:4b:85:21:fd:ff:bf:0e:bb:b3:90:5f:17: 85:eb:b1:f8:de:ee:a2:92:73:e0:5b:1f:ea:11:6c: 1a:a0:92:64:d1:95:92:b3:cf:43:09:09:ac:f9:9a: f2:1d:d9:ea:28:0b:39:c4:5f:31:5c:02:db:36:77: d4:ce:6f:d9:0c:36:1e:fb:a1:b0:eb:df:f1:f8:f9: e1:6d:09:d5:96:d3:5c:f7:8c:b3:cc:6e:e7:3f:c0: 2d:6b:9f:cd:f2:20:92:30:c2:10:76:d5:2d:b1:0d: 7c:16:23:42:8e:98:88:57:07:85:e5:1e:a4:3c:9d: 3c:45:f5:51:2b:59:bd:f5:e4:e7:ae:75:ca:f3:a3: ff:cb:00:3f:a7:89:b8:71:9a:6b:0b:f8:cc:d0:d8: 6f:38:8e:ea:e1:b9:16:a2:d0:04:a5:fb:41:53:67: c1:db:b1:ef:0f:6f:54:15:0d:e7:82:03:78:84:52: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:70:31:78:4D:0F:C5:8B:45:C8:F1:0A:EA:48:94:4C:9D:45:49:CF X509v3 Authority Key Identifier: keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:49:55:d2:99:c4:b5:74:0a:c6:49:be:6a:f8:76:dd:1a:9c: 0a:ac:c5:49:f2:56:ba:c9:a5:df:b3:2c:f9:23:ec:b8:1a:29: c0:98:27:91:c8:db:69:50:cc:d6:be:12:9b:42:95:f3:20:f3: e8:a3:db:80:07:d5:c3:31:cb:17:5a:9b:94:f1:1c:a7:47:99: 25:b5:f9:d3:a7:46:4a:50:fc:15:f7:95:6e:b7:6e:0a:55:07: ac:e0:76:97:ca:cc:d4:98:48:b6:0c:ea:21:cb:c4:de:f3:98: b8:ed:32:8d:52:14:79:f8:c8:8d:29:38:86:2e:26:2b:41:96: cf:37:f1:26:bb:0b:a0:ee:32:fd:8b:17:41:b9:e0:31:37:a9: c5:3f:9a:dc:60:ae:09:4b:c7:99:f9:91:20:4a:76:04:78:6d: c6:13:d2:eb:89:07:f5:d0:66:9f:fe:9e:d9:bd:74:6f:16:79: 24:e0:85:b4:66:e3:61:97:3b:09:fb:45:1d:d5:e9:19:0a:aa: a9:03:26:15:a2:06:e1:b3:ba:25:63:12:49:8a:c8:e1:2e:78: 34:5a:68:2e:54:78:e8:4e:a2:04:c0:62:00:c6:02:af:19:a9: f7:12:4a:b2:71:4f:07:dd:98:f4:5b:ce:71:b0:e3:37:f1:b2: fd:e0:26:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLWmJsriBzZ7TLYpiu6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBhMzJmMzE2MjQ2Y2UwYjE0N2JiODk1ZThjZGYwYWVk NDNlZDYwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD EygwNjcwMzE3ODRkMGZjNThiNDVjOGYxMGFlYTQ4OTQ0YzlkNDU0OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5LszEbsdayCOPeMhOcZspO3vUFx 1zIBh4sm942l+/YveMR8EYIcdrUcFx1Jq4omOo/1kmac1qaBmvAs3x01LpLjnFg+ 8tHajkIUCjFLhSH9/78Ou7OQXxeF67H43u6iknPgWx/qEWwaoJJk0ZWSs89DCQms +ZryHdnqKAs5xF8xXALbNnfUzm/ZDDYe+6Gw69/x+PnhbQnVltNc94yzzG7nP8At a5/N8iCSMMIQdtUtsQ18FiNCjpiIVweF5R6kPJ08RfVRK1m99eTnrnXK86P/ywA/ p4m4cZprC/jM0NhvOI7q4bkWotAEpftBU2fB27HvD29UFQ3nggN4hFI9rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZwMXhND8WLRcjxCupIlEydRUnPMB8GA1UdIwQY MBaAFFcwoy8xYkbOCxR7uJXozfCu1D7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgt YzkzOTg5Y2M5YjY3LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgtYzkzOTg5Y2M5YjY3 LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUlV0pnE tXQKxkm+avh23RqcCqzFSfJWusml37Ms+SPsuBopwJgnkcjbaVDM1r4Sm0KV8yDz 6KPbgAfVwzHLF1qblPEcp0eZJbX506dGSlD8FfeVbrduClUHrOB2l8rM1JhItgzq IcvE3vOYuO0yjVIUefjIjSk4hi4mK0GWzzfxJrsLoO4y/YsXQbngMTepxT+a3GCu CUvHmfmRIEp2BHhtxhPS64kH9dBmn/6e2b10bxZ5JOCFtGbjYZc7CftFHdXpGQqq qQMmFaIG4bO6JWMSSYrI4S54NFpoLlR46E6iBMBiAMYCrxmp9xJKsnFPB92Y9FvO cbDjN/Gy/eAmcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:16 2025 by rpki-client