This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json) Hash identifier: 6VuEiz4T6j/yjOuspMSNXvQ+76jVGNpnZSPeQy1+Cus= Subject key identifier: 8E:5A:DC:B2:3E:93:C3:25:78:D6:62:88:2A:60:7A:F8:89:B8:C7:94 Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94 Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94 Certificate serial: 019AF31D35FE0454E4F29902C383E04DC1D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft Manifest number: 0645 Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: m2kRX7YAIdNu/LZEQAzla85AZD2Q70pYaVP/la8zAQU=) 2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:35:fe:04:54:e4:f2:99:02:c3:83:e0:4d:c1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94 Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=8e5adcb23e93c32578d662882a607af889b8c794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:b0:c8:e5:fc:90:42:06:25:50:37:cf:6e: 3d:9c:ba:a4:8c:a3:1c:90:6a:d4:a8:ca:3e:45:36: d1:84:9b:70:fc:bc:dc:49:cf:28:a0:5b:7b:db:cf: ac:15:41:b3:b4:bc:03:bf:88:24:3b:51:9b:13:f5: 15:4c:cc:19:4a:d2:a5:01:1b:09:47:b4:85:ba:9c: 5d:63:8a:12:61:0f:d4:2b:37:93:fe:cf:38:58:7d: db:fb:80:be:30:e5:0d:dd:eb:1c:e0:5d:32:50:2b: 43:f8:81:5f:6e:0a:43:c4:f4:77:6b:0f:1d:2e:b0: 0f:1c:ca:a3:f1:3e:c2:5c:59:a2:38:42:b4:92:46: 8f:d4:e8:f2:7a:48:b4:df:dd:38:48:1f:df:35:fc: 4c:2e:61:3c:5e:95:4c:b1:14:24:d1:5c:75:26:2d: 33:f3:87:75:48:c2:fb:48:55:33:d9:c8:76:0e:ef: f8:8d:36:c4:3b:00:c1:86:84:be:a9:48:61:fc:99: 2a:a0:d1:6c:b1:b2:7f:5b:c9:a6:cb:a3:1f:5a:a3: e3:08:d3:0c:14:f9:00:2f:73:0b:ed:4d:c9:38:6f: 3a:55:ad:19:22:22:77:fb:e1:b9:be:69:d4:b9:88: 17:da:1e:1f:ac:fa:f5:4d:33:2c:58:bf:08:12:d5: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5A:DC:B2:3E:93:C3:25:78:D6:62:88:2A:60:7A:F8:89:B8:C7:94 X509v3 Authority Key Identifier: keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:51:26:08:6b:fe:47:17:78:ea:17:82:76:cc:4b:12:e8:40: 17:ba:50:b6:71:64:1f:39:40:02:2b:b1:3e:d4:da:aa:c1:9a: 0b:b2:9e:3f:52:3a:d6:f3:73:c2:17:bb:a7:09:c7:6e:cd:0d: 40:67:f1:5b:8c:27:13:13:aa:47:17:14:4c:50:1c:25:21:6f: 46:29:3a:26:e8:37:90:e8:d7:0e:c0:9f:cf:79:f4:e0:6c:0d: 9a:a2:b7:c0:70:44:50:f0:35:fb:c5:ce:04:f9:cc:c4:e4:c6: 95:d6:63:95:bf:b0:c7:75:29:b5:79:a4:53:1c:9b:51:9b:92: 19:7c:ab:e8:6c:58:64:45:71:df:30:7e:d5:0a:d4:31:05:7f: bf:1d:65:7f:0a:53:06:22:36:9e:ff:5e:bc:2b:07:c7:f9:fb: 38:c6:4d:59:63:f7:9a:dd:e2:17:59:24:98:91:19:75:1a:f5: 56:e4:6e:fb:2c:a5:27:6b:d0:88:d2:ee:cb:31:c1:db:33:96: 1c:24:5a:d1:0b:a1:85:b5:cc:91:29:00:74:50:82:98:7a:82: c5:82:df:1d:ee:bf:17:26:45:65:5c:15:fb:9b:5b:bd:cb:8f: 85:6c:e9:7b:b3:f2:e7:d3:da:19:a2:a5:37:09:28:49:d2:08: 3c:4f:66:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTX+BFTk8pkCw4PgTcHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OWE3Njk0MTJkMmQ5NjNiNDkxZWJlMzFkNDQxMTFkY2Fm Y2NjOTQwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD Eyg4ZTVhZGNiMjNlOTNjMzI1NzhkNjYyODgyYTYwN2FmODg5YjhjNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrWwyOX8kEIGJVA3z249nLqkjKMc kGrUqMo+RTbRhJtw/LzcSc8ooFt728+sFUGztLwDv4gkO1GbE/UVTMwZStKlARsJ R7SFupxdY4oSYQ/UKzeT/s84WH3b+4C+MOUN3esc4F0yUCtD+IFfbgpDxPR3aw8d LrAPHMqj8T7CXFmiOEK0kkaP1Ojyeki03904SB/fNfxMLmE8XpVMsRQk0Vx1Ji0z 84d1SML7SFUz2ch2Du/4jTbEOwDBhoS+qUhh/JkqoNFssbJ/W8mmy6MfWqPjCNMM FPkAL3ML7U3JOG86Va0ZIiJ3++G5vmnUuYgX2h4frPr1TTMsWL8IEtVqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5a3LI+k8MleNZiiCpgeviJuMeUMB8GA1UdIwQY MBaAFFWadpQS0tljtJHr4x1EER3K/MyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYt N2UyNTNlNjM5OGU1LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYtN2UyNTNlNjM5OGU1 LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVEmCGv+ Rxd46heCdsxLEuhAF7pQtnFkHzlAAiuxPtTaqsGaC7KeP1I61vNzwhe7pwnHbs0N QGfxW4wnExOqRxcUTFAcJSFvRik6Jug3kOjXDsCfz3n04GwNmqK3wHBEUPA1+8XO BPnMxOTGldZjlb+wx3UptXmkUxybUZuSGXyr6GxYZEVx3zB+1QrUMQV/vx1lfwpT BiI2nv9evCsHx/n7OMZNWWP3mt3iF1kkmJEZdRr1VuRu+yylJ2vQiNLuyzHB2zOW HCRa0QuhhbXMkSkAdFCCmHqCxYLfHe6/FyZFZVwV+5tbvcuPhWzpe7Py59PaGaKl NwkoSdIIPE9mpg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:17 2025 by rpki-client