This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft File: vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json) Hash identifier: ru+3Hc1e0cUbwVjg2wUaGmV/TnUhOCl2rU/7LrHFaJs= Subject key identifier: 69:F9:77:DA:2E:F8:B0:3D:EB:C0:EB:31:15:74:4B:D1:C1:95:62:40 Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB Certificate issuer: /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Certificate serial: 019B3042C7BDFECBC23AA74620A4F6DBC369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft Manifest number: 0440 Signing time: Thu 18 Dec 2025 07:00:41 +0000 Manifest this update: Thu 18 Dec 2025 07:00:41 +0000 Manifest next update: Fri 19 Dec 2025 07:00:41 +0000 Files and hashes: 1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=) 2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: sqFf1xSOYnuM4R+wN8vmN+HT+URokKFMMm1fGQV32f0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:c7:bd:fe:cb:c2:3a:a7:46:20:a4:f6:db:c3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Validity Not Before: Dec 18 07:00:41 2025 GMT Not After : Dec 19 07:00:41 2025 GMT Subject: CN=69f977da2ef8b03debc0eb3115744bd1c1956240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:40:7d:bf:e8:ae:9f:f7:ee:49:51:79:98: 46:c9:d4:02:fc:e8:ca:39:05:b6:75:45:2f:d5:4f: 9f:ee:d0:14:48:19:4c:c1:b6:92:e7:a8:ae:1e:9a: 6b:ba:09:83:4a:20:99:1a:8c:ec:d5:91:79:e4:2d: 3d:be:7b:a6:d3:02:04:f8:7a:12:d8:16:f6:29:90: 2f:b7:20:9e:88:26:be:38:4f:88:47:a1:2e:57:28: 4a:bb:a9:e0:7f:6b:bd:01:d4:05:f5:90:f3:7b:46: c9:36:cb:33:07:20:1d:9b:d2:0c:33:0e:2a:ce:f0: 1f:91:35:a4:ea:6a:ba:72:2e:63:23:e6:2f:84:22: e0:ec:66:4e:00:37:b3:47:b2:b2:b1:de:05:19:b1: 95:2d:93:f9:a4:15:cf:ba:7f:06:49:10:a4:f6:2e: 14:17:f0:1e:ce:69:f5:21:65:fa:41:3e:88:4c:d3: 99:3f:4d:69:b3:fb:f3:e7:9e:cd:df:c0:d1:0f:26: 73:66:d0:b9:09:09:7e:24:33:e8:75:53:44:8f:20: 10:9c:50:f1:11:a6:d7:c2:ee:21:9c:6e:39:04:70: 48:9e:97:ec:4e:58:a7:80:01:21:f1:c7:49:88:4e: f4:a5:5a:d4:72:d4:83:5c:09:ac:56:c8:8a:73:4d: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:77:DA:2E:F8:B0:3D:EB:C0:EB:31:15:74:4B:D1:C1:95:62:40 X509v3 Authority Key Identifier: keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:46:19:ef:c4:de:45:1b:fb:03:3e:9f:4d:0f:69:81:9f: d7:85:7e:13:29:ba:00:51:1c:09:9f:f4:5c:70:fb:a7:d2:87: 8d:ec:45:0f:ac:ad:6c:cc:5a:79:44:0a:5c:d6:b5:ec:93:0b: aa:d5:89:b1:70:e8:75:b6:2b:bf:95:bf:2d:ae:4a:6d:89:da: b9:d8:81:f3:be:1e:3e:1b:f0:54:30:20:00:76:46:32:ec:9d: 06:32:ad:bc:d6:cc:4e:9c:15:1e:e1:90:b2:56:98:7a:f9:96: 36:d3:b5:78:fa:dd:2c:0b:2c:e6:d2:cc:50:d7:04:f4:cb:cc: a3:d6:63:51:e9:2f:12:5b:09:3d:3c:97:c0:63:be:cf:0f:08: c7:8d:70:e1:57:6a:1b:ec:41:d1:75:83:87:04:fc:c9:1c:b9: 12:2b:5f:ce:64:8a:f5:e9:24:c8:12:4e:cb:e6:3e:13:ae:58: af:fd:43:65:ba:06:4f:09:cf:55:a6:40:1d:54:d2:8b:be:95: 84:18:9b:38:f5:ad:8b:27:42:4e:97:7a:50:52:59:68:36:dc: 25:d5:4c:5d:9a:58:c6:69:dc:ed:52:9e:21:ef:ad:6c:05:11: 29:f3:b5:e3:ef:dd:06:06:80:57:60:96:91:06:68:80:8e:57: 32:ac:77:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQse9/svCOqdGIKT228NpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlN2M3OWU5YTIxZGIyNmJkNmFlMDc1MDI3NmRiMWIwYWZh N2VjZGIwHhcNMjUxMjE4MDcwMDQxWhcNMjUxMjE5MDcwMDQxWjAzMTEwLwYDVQQD Eyg2OWY5NzdkYTJlZjhiMDNkZWJjMGViMzExNTc0NGJkMWMxOTU2MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1Afb/orp/37klReZhGydQC/OjK OQW2dUUv1U+f7tAUSBlMwbaS56iuHpprugmDSiCZGozs1ZF55C09vnum0wIE+HoS 2Bb2KZAvtyCeiCa+OE+IR6EuVyhKu6ngf2u9AdQF9ZDze0bJNsszByAdm9IMMw4q zvAfkTWk6mq6ci5jI+YvhCLg7GZOADezR7Kysd4FGbGVLZP5pBXPun8GSRCk9i4U F/Aezmn1IWX6QT6ITNOZP01ps/vz557N38DRDyZzZtC5CQl+JDPodVNEjyAQnFDx EabXwu4hnG45BHBInpfsTlingAEh8cdJiE70pVrUctSDXAmsVsiKc02JaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn5d9ou+LA968DrMRV0S9HBlWJAMB8GA1UdIwQY MBaAFL58eemiHbJr1q4HUCdtsbCvp+zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMt Y2ZlMmM3ZmYwMThiLzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMtY2ZlMmM3ZmYwMThi LzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZNGGe/E 3kUb+wM+n00PaYGf14V+Eym6AFEcCZ/0XHD7p9KHjexFD6ytbMxaeUQKXNa17JML qtWJsXDodbYrv5W/La5KbYnaudiB874ePhvwVDAgAHZGMuydBjKtvNbMTpwVHuGQ slaYevmWNtO1ePrdLAss5tLMUNcE9MvMo9ZjUekvElsJPTyXwGO+zw8Ix41w4Vdq G+xB0XWDhwT8yRy5EitfzmSK9ekkyBJOy+Y+E65Yr/1DZboGTwnPVaZAHVTSi76V hBibOPWtiydCTpd6UFJZaDbcJdVMXZpYxmnc7VKeIe+tbAURKfO14+/dBgaAV2CW kQZogI5XMqx3cQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:20:04 2025 by rpki-client