This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft File: VzBZUuVZXOl-QzVLLv3cewc72ck.mft (raw, json) Hash identifier: SfBwe/o4pJWJMX1Me5u+7d+7f7cOlJl3o+kmRoJwsp4= Subject key identifier: B8:94:22:D2:AB:9E:20:C0:28:A5:93:5E:F6:EB:BB:84:A7:C0:25:57 Authority key identifier: 57:30:59:52:E5:59:5C:E9:7E:43:35:4B:2E:FD:DC:7B:07:3B:D9:C9 Certificate issuer: /CN=57305952e5595ce97e43354b2efddc7b073bd9c9 Certificate serial: 019AF2400537FD96F68414E08A53919D77E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft Manifest number: 7B Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: VzBZUuVZXOl-QzVLLv3cewc72ck.crl (hash: 5NkkFQdWxI/Ez2T2Tx5rgqmh7tnvWZ1dqbZGZ8iMDBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:37:fd:96:f6:84:14:e0:8a:53:91:9d:77:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57305952e5595ce97e43354b2efddc7b073bd9c9 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=b89422d2ab9e20c028a5935ef6ebbb84a7c02557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:55:10:93:74:7c:8c:88:38:0c:73:7a:2d: 11:1d:65:a1:e4:fd:2c:5e:1d:a0:37:06:49:3a:cd: ed:09:ac:51:6d:c4:82:e3:ae:28:b3:62:d9:c4:ef: 41:24:ec:e8:6e:78:ae:94:03:ed:8c:22:2a:98:94: 5a:13:0a:c0:c2:56:a1:aa:9f:56:3b:55:78:6d:0d: 6c:7c:68:ae:8f:c8:fe:5d:fa:44:1b:a9:6e:e5:43: 21:16:92:6a:98:fc:00:f4:88:46:03:bf:1a:92:5d: 64:4e:6c:3b:26:a0:f3:bc:6c:4c:70:69:9e:42:03: 99:56:0f:98:56:75:d5:88:5b:93:d4:97:01:87:42: 26:c6:5d:82:28:e4:19:47:75:72:20:bc:00:64:99: 5d:d6:4b:6a:85:11:fb:a7:f7:1b:99:22:c5:68:7f: a9:04:a8:5c:f6:6c:b6:d8:51:a3:c8:83:92:49:13: 53:9a:de:e2:a5:a4:95:0e:a0:84:ad:2f:4c:62:c2: 5f:24:ce:74:5b:ff:a6:f8:25:f4:d3:de:9d:84:27: e4:33:cd:16:31:32:06:49:e2:c2:58:86:8d:1d:1b: bd:21:f6:95:5b:c5:be:57:e8:b4:c1:45:fc:8c:7e: 93:43:7d:80:29:fa:52:02:b6:31:c5:40:3f:2d:43: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:22:D2:AB:9E:20:C0:28:A5:93:5E:F6:EB:BB:84:A7:C0:25:57 X509v3 Authority Key Identifier: keyid:57:30:59:52:E5:59:5C:E9:7E:43:35:4B:2E:FD:DC:7B:07:3B:D9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzBZUuVZXOl-QzVLLv3cewc72ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b945c0-4e29-4a15-bdf6-2f3be062858d/1/VzBZUuVZXOl-QzVLLv3cewc72ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e0:8a:a3:61:e7:44:06:ed:ef:16:a9:2e:e6:e2:6c:3e:a7: 63:83:e4:e5:9b:73:7a:fc:d2:d2:9e:cb:82:b7:59:30:3c:9b: de:1f:c3:3f:7e:01:be:af:b1:e1:e0:f6:77:83:a6:8b:94:0e: 6c:e6:0e:5d:d4:18:dc:6c:55:6e:75:57:ab:71:47:45:7f:f0: a1:63:f1:2a:43:04:c5:c2:6c:b7:71:0d:56:f4:6e:02:5d:36: e4:07:4c:32:2e:0e:ac:73:28:75:59:29:45:65:7a:33:b3:47: 12:51:18:c2:60:68:8f:d8:b4:1c:2c:24:94:b9:6a:d1:8d:f3: e1:6c:f3:28:f1:37:a8:34:75:2b:ea:4f:3d:bf:58:63:47:a8: 5b:bd:cf:c1:91:86:19:06:59:86:50:87:f3:5c:f3:2f:af:36: 3d:d6:19:b6:0e:40:10:3c:d0:96:91:62:66:ba:86:71:60:f3: 52:e9:7f:c6:e3:54:f6:a2:1d:ba:1a:4b:37:fd:6f:01:3b:da: 90:f9:b1:c0:53:d1:24:59:1c:ed:8e:8a:e2:ac:b9:fd:2b:e8: 79:49:0e:d1:64:67:b0:fa:3b:5b:d4:ff:1d:11:b2:c8:7f:98: e9:f1:e9:22:d1:72:4f:ba:2a:98:85:7a:74:66:d2:eb:04:6e: db:05:40:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAU3/Zb2hBTgilORnXfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzA1OTUyZTU1OTVjZTk3ZTQzMzU0YjJlZmRkYzdiMDcz YmQ5YzkwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhiODk0MjJkMmFiOWUyMGMwMjhhNTkzNWVmNmViYmI4NGE3YzAyNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRlVEJN0fIyIOAxzei0RHWWh5P0s Xh2gNwZJOs3tCaxRbcSC464os2LZxO9BJOzobniulAPtjCIqmJRaEwrAwlahqp9W O1V4bQ1sfGiuj8j+XfpEG6lu5UMhFpJqmPwA9IhGA78akl1kTmw7JqDzvGxMcGme QgOZVg+YVnXViFuT1JcBh0Imxl2CKOQZR3VyILwAZJld1ktqhRH7p/cbmSLFaH+p BKhc9my22FGjyIOSSRNTmt7ipaSVDqCErS9MYsJfJM50W/+m+CX0096dhCfkM80W MTIGSeLCWIaNHRu9IfaVW8W+V+i0wUX8jH6TQ32AKfpSArYxxUA/LUPyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiUItKrniDAKKWTXvbru4SnwCVXMB8GA1UdIwQY MBaAFFcwWVLlWVzpfkM1Sy793HsHO9nJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iOTQ1YzAtNGUyOS00YTE1LWJkZjYt MmYzYmUwNjI4NThkLzEvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iOTQ1YzAtNGUyOS00YTE1LWJkZjYtMmYzYmUwNjI4NThk LzEvVnpCWlV1VlpYT2wtUXpWTEx2M2Nld2M3MmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOCKo2Hn RAbt7xapLubibD6nY4Pk5ZtzevzS0p7LgrdZMDyb3h/DP34Bvq+x4eD2d4Omi5QO bOYOXdQY3GxVbnVXq3FHRX/woWPxKkMExcJst3ENVvRuAl025AdMMi4OrHModVkp RWV6M7NHElEYwmBoj9i0HCwklLlq0Y3z4WzzKPE3qDR1K+pPPb9YY0eoW73PwZGG GQZZhlCH81zzL682PdYZtg5AEDzQlpFiZrqGcWDzUul/xuNU9qIduhpLN/1vATva kPmxwFPRJFkc7Y6K4qy5/SvoeUkO0WRnsPo7W9T/HRGyyH+Y6fHpItFyT7oqmIV6 dGbS6wRu2wVAlg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:45 2025 by rpki-client