This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft File: vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json) Hash identifier: fEUyU1Ot70aT6e7ol5R+Qs7h8lPUyhGzRJSgVeN4Cps= Subject key identifier: 04:42:60:CC:E4:D7:02:7E:69:D5:55:F7:3D:BD:00:5D:E8:B9:13:E4 Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB Certificate issuer: /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Certificate serial: 019AF277053080E5157599D21CDD002EE8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft Manifest number: 0420 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=) 2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: Umf3RFAE+/bbWwn1wT9nDPT6UHRoV3Z8nwyKtbJUg2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:05:30:80:e5:15:75:99:d2:1c:dd:00:2e:e8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=044260cce4d7027e69d555f73dbd005de8b913e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:a2:aa:e6:b6:76:5d:33:3b:ea:8a:60:79: ca:f1:66:7f:e8:21:5f:c5:15:85:f8:47:45:46:e9: e2:1b:70:ac:e1:cc:2f:a5:42:94:b3:03:bf:95:88: 6d:5d:0c:7a:e5:13:73:a4:b8:b6:a2:f6:0f:80:b6: 1d:8d:89:79:9a:51:1d:0d:a3:b3:63:a1:60:52:37: e1:cb:04:03:eb:2c:0a:16:c3:b2:ae:07:d0:bd:4e: 72:13:fb:e2:23:c7:38:66:aa:75:50:40:d4:36:6d: c5:ba:1e:bc:84:7d:69:61:87:1b:dc:ef:4f:13:e3: 89:2b:ca:22:6e:96:ae:e7:79:ad:61:fe:82:bc:f6: 02:6a:97:e1:62:8d:cd:f2:0b:bf:ef:3d:31:9f:5e: 66:95:52:2b:57:6b:3b:41:8d:b5:8f:fb:44:f6:06: 71:4c:ab:32:8d:5a:f1:c2:17:b0:4b:91:f5:f2:8a: fc:d2:87:58:0e:b4:33:28:3d:5b:ef:7a:52:f1:ab: 79:db:bc:1b:ce:34:55:d5:8e:14:c0:51:41:65:6a: 0f:08:da:52:38:d5:df:f5:08:12:d6:a3:aa:93:ca: 89:52:b9:d7:a2:5c:53:e2:4b:82:8f:e5:d6:1f:00: 47:ec:a2:4d:6d:e4:93:37:9b:2c:5f:13:a1:ad:27: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:60:CC:E4:D7:02:7E:69:D5:55:F7:3D:BD:00:5D:E8:B9:13:E4 X509v3 Authority Key Identifier: keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:25:dc:42:df:fc:bf:2a:b0:09:09:36:cc:38:bd:57:cd:79: 64:8a:ea:7d:0c:3d:ca:24:c5:eb:4d:2c:ea:f4:be:28:0d:77: 98:77:c6:df:f9:5a:13:f7:f7:e9:5f:83:ea:7c:bb:86:1d:7e: b8:1d:1e:2c:44:73:86:fd:d6:25:88:8b:61:c6:ca:da:4a:f4: 55:4f:bf:cd:b1:e7:b4:7f:b1:ca:bd:0b:46:71:6b:35:dd:f9: b7:a0:6e:4f:85:cd:e4:3e:57:04:eb:37:66:8a:fa:9f:68:73: 05:53:7b:c0:12:9c:b4:26:35:3b:27:1d:fc:b5:f8:c0:21:9a: 61:1f:b2:79:b2:22:25:ee:f3:fe:7b:89:9e:c9:62:2f:8b:b7: 21:83:72:7f:e0:16:7c:c7:96:2a:e4:49:d0:08:60:0f:d8:b4: e3:03:66:52:f2:bf:57:b8:99:d6:c0:66:21:ed:a2:7f:bf:ef: 9b:f2:6d:e4:c1:8b:36:84:ee:9b:34:27:f8:e5:a7:6a:6d:7e: ac:ba:d3:42:50:f5:10:41:ff:95:e7:8a:f8:fc:2f:f4:1d:59: 03:f9:ee:39:00:89:62:75:6b:4f:f9:13:0e:04:12:81:ff:0b: 9d:bd:66:bd:4f:77:75:42:9f:b1:d1:c2:e6:0b:94:38:8b:ac: 93:d1:ea:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwUwgOUVdZnSHN0ALujnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlN2M3OWU5YTIxZGIyNmJkNmFlMDc1MDI3NmRiMWIwYWZh N2VjZGIwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EygwNDQyNjBjY2U0ZDcwMjdlNjlkNTU1ZjczZGJkMDA1ZGU4YjkxM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cqiqua2dl0zO+qKYHnK8WZ/6CFf xRWF+EdFRuniG3Cs4cwvpUKUswO/lYhtXQx65RNzpLi2ovYPgLYdjYl5mlEdDaOz Y6FgUjfhywQD6ywKFsOyrgfQvU5yE/viI8c4Zqp1UEDUNm3Fuh68hH1pYYcb3O9P E+OJK8oibpau53mtYf6CvPYCapfhYo3N8gu/7z0xn15mlVIrV2s7QY21j/tE9gZx TKsyjVrxwhewS5H18or80odYDrQzKD1b73pS8at527wbzjRV1Y4UwFFBZWoPCNpS ONXf9QgS1qOqk8qJUrnXolxT4kuCj+XWHwBH7KJNbeSTN5ssXxOhrSdhowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARCYMzk1wJ+adVV9z29AF3ouRPkMB8GA1UdIwQY MBaAFL58eemiHbJr1q4HUCdtsbCvp+zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMt Y2ZlMmM3ZmYwMThiLzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMtY2ZlMmM3ZmYwMThi LzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSXcQt/8 vyqwCQk2zDi9V815ZIrqfQw9yiTF600s6vS+KA13mHfG3/laE/f36V+D6ny7hh1+ uB0eLERzhv3WJYiLYcbK2kr0VU+/zbHntH+xyr0LRnFrNd35t6BuT4XN5D5XBOs3 Zor6n2hzBVN7wBKctCY1Oycd/LX4wCGaYR+yebIiJe7z/nuJnsliL4u3IYNyf+AW fMeWKuRJ0AhgD9i04wNmUvK/V7iZ1sBmIe2if7/vm/Jt5MGLNoTumzQn+OWnam1+ rLrTQlD1EEH/leeK+Pwv9B1ZA/nuOQCJYnVrT/kTDgQSgf8Lnb1mvU93dUKfsdHC 5guUOIusk9HqKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:04 2025 by rpki-client