This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json) Hash identifier: Wr+PYsec3ogpqMG4bP4X4DuggudJegzsO/g8RB/bhDI= Subject key identifier: A5:F5:55:8F:D2:41:6F:F6:F0:83:D8:64:D2:AB:00:98:71:21:01:F5 Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13 Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713 Certificate serial: 019AF19A97F66C000C475DCEA46DE3967243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft Manifest number: 0890 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: 48I4DwJP4yIbkSl4ygl5LZLgvgj2YOEwGKbTuO+Vtoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:97:f6:6c:00:0c:47:5d:ce:a4:6d:e3:96:72:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=a5f5558fd2416ff6f083d864d2ab0098712101f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:99:06:e3:81:ff:28:56:03:06:3c:f3:01: f3:a5:94:e0:db:68:b5:7d:b7:46:7f:e5:40:32:7e: be:e0:f0:33:eb:44:34:06:2d:00:2a:48:9a:15:b8: bc:7c:d3:e6:0e:65:d7:ba:9a:35:93:1e:4d:ee:1e: 50:23:d4:e0:d6:aa:f4:c0:56:ce:dd:ff:8c:31:7b: b4:7d:24:8a:38:ad:45:6b:8d:11:05:7f:8c:55:84: 76:c9:5a:c7:da:99:4b:d0:35:9b:56:da:48:ea:5f: fd:05:69:d8:cc:57:c7:68:f4:0b:dc:93:6b:f1:61: 81:f3:45:5d:86:57:8f:5f:59:f0:9b:af:0f:ab:14: 2a:70:81:db:b4:76:5b:37:4c:e7:ec:33:e9:39:9b: 67:96:53:2a:eb:1b:c5:08:d4:ad:e3:e9:49:b5:5c: a4:4a:2d:89:fa:60:1e:29:ef:16:c8:ad:f9:c1:52: 2c:d1:da:cf:43:ae:6c:6c:a9:e9:18:13:1d:13:0f: d3:cb:51:46:44:68:cd:9f:d5:60:c3:95:8a:32:f5: 44:2e:3d:b2:86:83:80:90:21:42:02:d2:7c:26:bf: f9:1f:f2:3a:0e:e6:5d:6d:75:23:2c:af:a4:09:22: 29:aa:63:ea:bb:b6:d9:fb:12:e1:a1:57:13:bf:c2: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:55:8F:D2:41:6F:F6:F0:83:D8:64:D2:AB:00:98:71:21:01:F5 X509v3 Authority Key Identifier: keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:3d:46:50:34:cc:a8:8d:af:2f:27:de:0c:64:9e:5c:d1: fa:b7:1a:99:5e:73:00:98:74:e5:dd:c0:b4:43:13:f2:84:4c: 89:47:76:5f:44:ae:9b:56:e2:e8:40:2f:a8:9d:26:79:39:7c: 8d:84:02:c0:97:df:a5:96:ce:41:44:14:74:ff:99:26:d3:78: e4:7a:51:58:bd:8a:a1:b7:1f:63:11:dd:2f:62:61:18:d1:86: 6d:28:f0:ce:1d:20:84:05:35:5d:41:20:99:92:3c:43:d1:cf: 42:ab:75:a2:e0:d8:b9:fe:20:2d:8d:dd:4c:b0:cd:ab:6e:3d: 2b:0c:57:a6:00:92:e0:e9:38:25:76:20:41:d5:cf:8c:60:b2: 48:6e:d8:c4:df:c4:92:cc:fe:95:f8:e5:ac:94:7a:8e:9c:a2: 85:69:a4:27:d5:f6:a3:30:d4:46:24:26:d5:20:60:b6:27:e9: d1:d2:d0:37:ce:6f:86:5f:9a:d6:52:ee:68:ab:aa:8a:64:25: 82:d8:5f:40:2b:ca:74:3e:8d:22:d1:15:10:e6:f7:9b:b3:c8: 4a:6b:a0:67:c9:25:e1:5b:1b:ba:e4:8e:71:e7:39:d4:08:97: 05:f1:fe:09:89:5b:ed:b4:d3:b3:57:0b:4f:4e:5d:72:8e:d1: bf:1e:5b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpf2bAAMR13OpG3jlnJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTg2MmFkMTM5MGU0ZGJmODgyYjUyMjdiYzkzMzUwZjJk ODA3MTMwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhhNWY1NTU4ZmQyNDE2ZmY2ZjA4M2Q4NjRkMmFiMDA5ODcxMjEwMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9yZBuOB/yhWAwY88wHzpZTg22i1 fbdGf+VAMn6+4PAz60Q0Bi0AKkiaFbi8fNPmDmXXupo1kx5N7h5QI9Tg1qr0wFbO 3f+MMXu0fSSKOK1Fa40RBX+MVYR2yVrH2plL0DWbVtpI6l/9BWnYzFfHaPQL3JNr 8WGB80VdhlePX1nwm68PqxQqcIHbtHZbN0zn7DPpOZtnllMq6xvFCNSt4+lJtVyk Si2J+mAeKe8WyK35wVIs0drPQ65sbKnpGBMdEw/Ty1FGRGjNn9Vgw5WKMvVELj2y hoOAkCFCAtJ8Jr/5H/I6DuZdbXUjLK+kCSIpqmPqu7bZ+xLhoVcTv8LxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX1VY/SQW/28IPYZNKrAJhxIQH1MB8GA1UdIwQY MBaAFFWYYq0TkOTb+IK1InvJM1Dy2AcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUt MDcxZmIxZjNiOTg1LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82MmVkMGYtYTgxZi00MzRmLWI5NzUtMDcxZmIxZjNiOTg1 LzEvVlpoaXJST1E1TnY0Z3JVaWU4a3pVUExZQnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6A9RlA0 zKiNry8n3gxknlzR+rcamV5zAJh05d3AtEMT8oRMiUd2X0Sum1bi6EAvqJ0meTl8 jYQCwJffpZbOQUQUdP+ZJtN45HpRWL2KobcfYxHdL2JhGNGGbSjwzh0ghAU1XUEg mZI8Q9HPQqt1ouDYuf4gLY3dTLDNq249KwxXpgCS4Ok4JXYgQdXPjGCySG7YxN/E ksz+lfjlrJR6jpyihWmkJ9X2ozDURiQm1SBgtifp0dLQN85vhl+a1lLuaKuqimQl gthfQCvKdD6NItEVEOb3m7PISmugZ8kl4VsbuuSOcec51AiXBfH+CYlb7bTTs1cL T05dco7Rvx5b2g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:59 2025 by rpki-client