This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json) Hash identifier: SvCkvr02trqclBifqpxdT7su/Y66PTm3oDbkRLj88ns= Subject key identifier: 2A:28:AD:7A:69:55:B1:B2:EE:C7:7A:BF:6F:0E:E6:10:6B:6C:7A:36 Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162 Certificate serial: 019AF19ABE93E258E5AE35564EB71F84F8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=) 2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: Ioqvs6/xNfvLjaMdMeH7+F/eYqrNyZVF8rgxD5m48IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:be:93:e2:58:e5:ae:35:56:4e:b7:1f:84:f8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd92eae9e11699e4ce710580519776c300296162 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=2a28ad7a6955b1b2eec77abf6f0ee6106b6c7a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:be:33:d0:82:02:6d:15:2f:cd:90:a5:1c: a5:81:ad:87:8b:3c:06:ac:6b:a8:2d:24:5f:c1:eb: a6:a6:48:3e:7f:d4:77:14:d0:89:02:58:bc:4b:a9: bd:cd:8a:88:e0:ca:2a:81:03:98:3e:d0:87:93:85: 53:6b:c3:8f:85:f3:8d:32:5d:51:97:ec:52:24:c7: a8:f6:49:f4:d1:71:b4:41:14:e8:de:f8:1d:59:1c: ec:4f:25:55:cb:04:02:20:cc:e7:73:25:61:e7:47: 41:a6:52:8d:68:68:36:e6:7f:03:ec:d0:43:de:e0: 94:1e:33:74:50:fc:e9:6c:53:ec:e4:7b:45:af:13: b6:3b:e5:0d:80:2c:5e:08:13:73:3b:f7:1b:34:f5: e2:7d:ec:c3:a6:c9:a2:2c:cb:ac:5b:c6:11:ba:7c: de:fa:44:1e:28:a1:9a:43:fc:32:ff:f5:5c:d0:72: 87:d4:2d:ff:50:44:7f:45:84:20:64:aa:64:a2:4a: d7:ea:ac:47:ee:4a:82:e4:3d:9d:33:22:72:09:bc: c5:1e:43:16:e8:11:a7:83:56:e8:6c:7d:6f:50:2e: 9c:c0:66:31:d8:8b:29:f7:c7:69:8e:61:7e:76:57: 70:12:f0:47:1b:4e:83:68:db:96:5d:5e:1f:8a:b5: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:28:AD:7A:69:55:B1:B2:EE:C7:7A:BF:6F:0E:E6:10:6B:6C:7A:36 X509v3 Authority Key Identifier: keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7d:9a:71:5d:05:2a:cf:af:d1:0d:fa:da:eb:e8:5c:92:1b: 93:55:44:77:37:10:eb:d0:8b:d4:29:01:77:33:53:7a:d3:14: 0a:b3:61:16:8e:75:be:d0:8b:e5:a7:9f:86:f2:ff:7b:59:95: 6e:09:9e:ff:c0:26:cb:71:25:a0:65:25:12:b1:d4:56:9c:c5: 4f:cd:57:c2:4b:8b:6a:f6:88:8e:b6:0a:66:9e:44:0c:92:d3: be:71:4b:c2:69:ca:11:9d:f0:9c:75:af:5e:32:6c:79:67:28: 8b:f0:fb:c3:f7:51:95:de:75:cb:ec:39:ec:c3:46:32:54:41: 61:f0:83:16:e6:bf:38:ab:b1:15:a2:68:9d:b8:1f:24:7b:dc: 2a:62:0c:cb:d7:44:5a:d4:0f:dd:d9:9c:25:8b:1f:85:fd:a1: 53:7d:b5:b1:09:67:3d:8f:d3:67:d5:50:ea:1c:5d:7a:5e:95: a6:7a:e4:71:de:14:ca:31:31:73:f3:34:80:c4:34:31:dd:5a: f6:30:d3:48:a9:b5:6f:15:44:a2:f7:a8:bb:8a:1f:15:fe:c2: 3e:2a:db:1d:04:df:4f:d4:3e:f1:ab:3f:79:ec:ef:cf:53:93: 1a:54:27:9b:78:50:fb:cf:ff:32:b8:df:e1:1d:21:67:58:f7: 50:2d:83:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr6T4ljlrjVWTrcfhPj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy OTYxNjIwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EygyYTI4YWQ3YTY5NTViMWIyZWVjNzdhYmY2ZjBlZTYxMDZiNmM3YTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03++M9CCAm0VL82QpRylga2HizwG rGuoLSRfweumpkg+f9R3FNCJAli8S6m9zYqI4MoqgQOYPtCHk4VTa8OPhfONMl1R l+xSJMeo9kn00XG0QRTo3vgdWRzsTyVVywQCIMzncyVh50dBplKNaGg25n8D7NBD 3uCUHjN0UPzpbFPs5HtFrxO2O+UNgCxeCBNzO/cbNPXifezDpsmiLMusW8YRunze +kQeKKGaQ/wy//Vc0HKH1C3/UER/RYQgZKpkokrX6qxH7kqC5D2dMyJyCbzFHkMW 6BGng1bobH1vUC6cwGYx2Isp98dpjmF+dldwEvBHG06DaNuWXV4firUMdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoorXppVbGy7sd6v28O5hBrbHo2MB8GA1UdIwQY MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5 LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG32acV0F Ks+v0Q362uvoXJIbk1VEdzcQ69CL1CkBdzNTetMUCrNhFo51vtCL5aefhvL/e1mV bgme/8Amy3EloGUlErHUVpzFT81XwkuLavaIjrYKZp5EDJLTvnFLwmnKEZ3wnHWv XjJseWcoi/D7w/dRld51y+w57MNGMlRBYfCDFua/OKuxFaJonbgfJHvcKmIMy9dE WtQP3dmcJYsfhf2hU321sQlnPY/TZ9VQ6hxdel6Vpnrkcd4UyjExc/M0gMQ0Md1a 9jDTSKm1bxVEoveou4ofFf7CPirbHQTfT9Q+8as/eezvz1OTGlQnm3hQ+8//Mrjf 4R0hZ1j3UC2DIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:11 2025 by rpki-client