This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json) Hash identifier: h93WjIuMoHU7ej4ValSSY5SV03H5YPrquuQOT90i4bo= Subject key identifier: 6D:41:93:F6:CD:D1:9D:AA:51:5E:03:35:2C:2E:A6:D2:62:E3:36:CD Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e Certificate serial: 019AF12DFE301CE404E0B55C70AAB1A1B17E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft Manifest number: 09F9 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: xfXC+neLwXSgUN0CWAAaDZ92AZHaYjwLtK+v+zBjXws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fe:30:1c:e4:04:e0:b5:5c:70:aa:b1:a1:b1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=6d4193f6cdd19daa515e03352c2ea6d262e336cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:84:05:7f:eb:02:fa:42:51:74:f2:35:77:75: db:b0:31:71:2e:50:c8:d9:31:e7:1e:3b:38:35:fc: 01:9e:bc:71:0f:f9:ec:12:28:71:cc:11:d3:d0:ff: da:aa:c3:16:aa:c6:67:b9:7c:9e:c1:cf:f2:4c:00: 71:d7:e3:a2:39:40:bf:3c:95:50:f5:33:53:f7:dc: 8a:d4:2b:bb:28:96:57:14:86:e3:d6:24:12:1a:cc: e4:19:fc:60:09:05:68:9e:27:8b:e0:4f:82:03:ae: 66:77:01:3f:64:a0:3a:28:6f:11:3e:b8:6a:89:fd: 15:7e:6c:3f:26:6f:a2:07:44:f6:ad:09:aa:db:0b: f3:e0:0d:01:f4:a0:d5:2a:4a:32:e5:c6:50:c7:d5: 70:0e:43:ce:09:e2:93:68:4c:af:87:39:e0:38:1f: 31:48:e2:bf:11:ad:58:a2:39:09:f3:40:93:b6:54: 74:f6:f5:2b:5c:d0:48:9f:b0:8b:df:12:32:98:77: 10:da:6c:d5:f6:ef:d8:32:4b:59:ee:22:3d:77:e8: 9a:4d:cc:6e:7e:81:8e:fb:ab:e3:fc:b7:98:8a:e5: da:8f:1a:a8:d0:ce:4f:d9:4a:35:4c:16:42:40:a7: 39:40:71:87:07:a8:05:47:a9:97:2e:f9:53:97:a9: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:41:93:F6:CD:D1:9D:AA:51:5E:03:35:2C:2E:A6:D2:62:E3:36:CD X509v3 Authority Key Identifier: keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:69:70:8a:a1:37:f8:4a:66:5b:95:12:5c:ae:3c:b2:77: 79:e6:11:4d:bc:3a:80:df:c2:4e:d0:93:9c:d2:5a:ca:fb:91: 19:21:00:b1:62:46:0b:06:85:fd:bb:f3:88:b5:a8:d1:d8:4f: e8:a7:8d:7c:fe:86:e4:fd:28:0c:b5:d3:33:b7:aa:53:bd:57: 68:33:0c:dc:30:64:16:26:33:30:58:30:f7:d4:74:e1:fa:ea: 5f:f9:7e:91:76:2e:e4:d9:fc:d3:24:37:87:cd:07:40:e1:25: 34:18:35:51:e1:0c:02:2a:3b:78:13:aa:72:c7:0c:2e:ee:54: 3d:2c:d3:f0:da:bd:ff:65:41:c1:1c:50:3e:42:ca:72:da:b6: 23:39:d1:78:af:64:3d:a6:28:7a:b0:45:63:25:ba:04:cd:56: 1e:ee:45:f8:dc:b8:23:39:65:65:ac:89:c8:db:04:22:16:e3: f4:b4:ff:17:52:c6:12:b0:b1:9f:3f:fc:90:af:96:d6:4d:6c: de:3e:2b:9c:14:dc:99:f4:ff:a7:39:21:dd:4b:e6:e8:e8:f1: 21:8a:45:55:52:fe:1b:e0:e9:f8:77:3b:7a:c3:6a:ac:0e:21: 4e:b2:6e:2e:64:c6:30:95:c5:67:9b:ac:53:a6:8c:d0:0e:04: b1:3b:6c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf4wHOQE4LVccKqxobF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTlmZmNmYjRjNjliNzlkOWFjZGNiZTZhOTRkYjg5ZDUy MzYwOGUwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD Eyg2ZDQxOTNmNmNkZDE5ZGFhNTE1ZTAzMzUyYzJlYTZkMjYyZTMzNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IQFf+sC+kJRdPI1d3XbsDFxLlDI 2THnHjs4NfwBnrxxD/nsEihxzBHT0P/aqsMWqsZnuXyewc/yTABx1+OiOUC/PJVQ 9TNT99yK1Cu7KJZXFIbj1iQSGszkGfxgCQVonieL4E+CA65mdwE/ZKA6KG8RPrhq if0Vfmw/Jm+iB0T2rQmq2wvz4A0B9KDVKkoy5cZQx9VwDkPOCeKTaEyvhzngOB8x SOK/Ea1YojkJ80CTtlR09vUrXNBIn7CL3xIymHcQ2mzV9u/YMktZ7iI9d+iaTcxu foGO+6vj/LeYiuXajxqo0M5P2Uo1TBZCQKc5QHGHB6gFR6mXLvlTl6nhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1Bk/bN0Z2qUV4DNSwuptJi4zbNMB8GA1UdIwQY MBaAFL5Z/8+0xpt52azcvmqU24nVI2COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2Et OWI2YTBmMzY5YmNkLzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2EtOWI2YTBmMzY5YmNk LzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyNpcIqh N/hKZluVElyuPLJ3eeYRTbw6gN/CTtCTnNJayvuRGSEAsWJGCwaF/bvziLWo0dhP 6KeNfP6G5P0oDLXTM7eqU71XaDMM3DBkFiYzMFgw99R04frqX/l+kXYu5Nn80yQ3 h80HQOElNBg1UeEMAio7eBOqcscMLu5UPSzT8Nq9/2VBwRxQPkLKctq2IznReK9k PaYoerBFYyW6BM1WHu5F+Ny4IzllZayJyNsEIhbj9LT/F1LGErCxnz/8kK+W1k1s 3j4rnBTcmfT/pzkh3Uvm6OjxIYpFVVL+G+Dp+Hc7esNqrA4hTrJuLmTGMJXFZ5us U6aM0A4EsTtsXA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:28 2025 by rpki-client