This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json) Hash identifier: SAk1j3GD32ObthDxMQilaLOv1B5IjDpCOtGli05SiOE= Subject key identifier: 08:86:FA:ED:A5:55:D7:76:AC:AB:73:4A:AA:DE:5C:F2:AF:27:68:B4 Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Certificate serial: 019AF163E1199ED921A3FC24BDF3A6BE7AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft Manifest number: 15B8 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=) 2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: Ym8bgn1NDUl5/9/WjPPDO/u52XMR5OFOi6W6HbEl+lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e1:19:9e:d9:21:a3:fc:24:bd:f3:a6:be:7a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=0886faeda555d776acab734aaade5cf2af2768b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:27:a3:32:db:35:54:ef:3e:ca:77:05:eb: 7c:f7:05:a7:37:82:dc:15:01:1e:47:45:5c:68:b5: 51:fb:9c:9c:42:3b:b3:ab:4c:a5:3c:2c:19:ac:b5: 66:fa:1c:d4:a2:cd:a9:3b:c0:86:db:6f:5d:8d:9d: c8:8c:a4:95:90:c6:b0:ae:5e:c1:36:bc:a9:44:fc: 66:77:92:20:1a:74:f7:e5:80:ba:ba:26:30:01:76: 79:ba:2a:8f:00:33:d9:42:fd:8b:9c:20:b5:24:c2: be:7d:58:f3:d7:d2:5a:07:93:f1:9d:d4:63:7e:a5: 2a:34:5e:e7:5f:e7:a2:77:76:c8:99:80:43:d1:c6: 57:a1:f5:9a:a6:21:f2:83:97:1c:84:14:c4:d9:7c: e0:ec:40:f9:d7:a3:0a:5e:46:2b:1d:07:e3:9a:18: 19:dd:02:77:f0:c0:16:98:35:e3:17:40:68:91:96: 11:d5:13:df:a7:27:a3:c7:f1:18:cb:ec:80:04:14: 80:85:cc:ac:d0:6c:bf:af:40:33:65:e7:24:86:9e: 37:88:06:81:f8:60:c3:e8:7b:b7:c8:05:c2:6b:96: 73:90:f3:ff:83:cc:bc:5a:e3:b1:be:3b:39:db:5e: 8f:1b:93:89:6d:70:fe:a3:36:42:58:13:01:34:97: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:86:FA:ED:A5:55:D7:76:AC:AB:73:4A:AA:DE:5C:F2:AF:27:68:B4 X509v3 Authority Key Identifier: keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:82:55:74:a7:8f:3e:2f:41:b5:0e:cb:1f:33:8a:1a:3a: db:78:95:7a:75:df:5d:c1:76:76:e6:8e:c6:1c:0c:57:03:70: 4d:60:fe:31:53:e2:1d:7f:51:c5:21:38:7c:dd:83:a0:76:73: 27:f2:61:bf:98:81:26:18:f8:a8:60:f7:fb:77:14:9f:1c:5b: 01:c5:4b:3e:f2:67:32:11:40:30:ce:06:39:b3:77:5b:64:a9: 81:7f:27:ca:02:b7:4b:78:20:10:cc:fb:11:64:95:14:32:89: 08:62:d4:1e:41:da:0f:84:1c:13:81:45:da:1c:9f:d3:02:cf: bb:27:44:fc:97:10:48:af:2f:5c:4c:2d:85:f4:79:a2:02:ed: a4:93:36:1f:81:20:82:a5:c4:5d:c5:75:40:dd:6b:b5:c6:c0: 8c:b2:76:9f:bf:b3:0c:41:97:69:be:ad:56:8a:fc:30:b6:da: a7:41:30:6b:66:64:6d:ba:a1:cd:56:b5:98:0a:25:e4:55:45: 94:9f:7c:27:e5:8a:8f:19:02:39:a1:74:2b:4a:df:47:b9:8f: 16:85:73:ff:68:45:8d:99:84:a6:37:f2:07:98:6f:3b:16:3f: 7e:b9:9f:a1:0a:57:0e:84:fd:b9:8d:dd:b2:ff:1c:fc:49:fd: f8:b3:41:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+EZntkho/wkvfOmvnqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4 N2E4ZDMwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygwODg2ZmFlZGE1NTVkNzc2YWNhYjczNGFhYWRlNWNmMmFmMjc2OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgnozLbNVTvPsp3Bet89wWnN4Lc FQEeR0VcaLVR+5ycQjuzq0ylPCwZrLVm+hzUos2pO8CG229djZ3IjKSVkMawrl7B NrypRPxmd5IgGnT35YC6uiYwAXZ5uiqPADPZQv2LnCC1JMK+fVjz19JaB5PxndRj fqUqNF7nX+eid3bImYBD0cZXofWapiHyg5cchBTE2Xzg7ED516MKXkYrHQfjmhgZ 3QJ38MAWmDXjF0BokZYR1RPfpyejx/EYy+yABBSAhcys0Gy/r0AzZeckhp43iAaB +GDD6Hu3yAXCa5ZzkPP/g8y8WuOxvjs5216PG5OJbXD+ozZCWBMBNJfiuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiG+u2lVdd2rKtzSqreXPKvJ2i0MB8GA1UdIwQY MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn+CVXSn jz4vQbUOyx8ziho623iVenXfXcF2duaOxhwMVwNwTWD+MVPiHX9RxSE4fN2DoHZz J/Jhv5iBJhj4qGD3+3cUnxxbAcVLPvJnMhFAMM4GObN3W2SpgX8nygK3S3ggEMz7 EWSVFDKJCGLUHkHaD4QcE4FF2hyf0wLPuydE/JcQSK8vXEwthfR5ogLtpJM2H4Eg gqXEXcV1QN1rtcbAjLJ2n7+zDEGXab6tVor8MLbap0Ewa2ZkbbqhzVa1mAol5FVF lJ98J+WKjxkCOaF0K0rfR7mPFoVz/2hFjZmEpjfyB5hvOxY/frmfoQpXDoT9uY3d sv8c/En9+LNBXg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:46 2025 by rpki-client