This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json) Hash identifier: kh34YNq8fkOnKTJX2zvQqwph1X6pkmAu5Iy7c7D9fhs= Subject key identifier: C0:E0:97:BC:9C:4F:6E:43:5B:F0:9A:98:44:56:04:16:75:2B:8C:11 Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83 Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83 Certificate serial: 019AF352782F66F3C9192A5CB9472C28A253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft Manifest number: 0282 Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: TuRcbfOGkoRmP5Do4bfZr9FDESbJ9hQNJmY000DA9Yk=) 2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:78:2f:66:f3:c9:19:2a:5c:b9:47:2c:28:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55973204a369680586de27f946fc81665632aa83 Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=c0e097bc9c4f6e435bf09a9844560416752b8c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:c0:9a:aa:14:c7:d9:20:1f:f4:45:6a:48: b2:f5:3e:cc:ae:06:ab:96:fb:5b:72:1c:1e:06:ef: 93:2d:68:16:c0:0c:2f:1f:2d:c8:ee:45:b7:a5:4d: 9f:f6:f5:f2:e1:46:07:2c:c4:57:6d:b7:e1:e9:c4: aa:59:04:04:bc:9a:57:e2:70:3f:de:8e:fe:ea:0e: 56:25:8b:4d:1c:c8:09:4d:9f:a5:6e:b5:c2:db:37: 92:bb:73:ff:a7:14:5f:3d:a5:b6:13:03:b9:40:de: 0f:be:34:53:2e:fd:eb:fb:4d:1a:5a:39:83:2d:3b: 6b:11:de:7d:dd:0c:74:f0:1f:b1:f4:2a:fa:50:73: 4c:db:6f:82:da:46:4b:dc:11:ba:95:d2:0e:af:12: 7c:6d:5f:45:ff:9a:ab:e0:d6:38:4b:21:58:23:b1: 15:0d:0b:b2:fc:bb:31:b3:38:48:31:85:d7:a2:af: 87:e3:b2:fa:d4:c9:a9:64:65:93:62:ca:03:71:1a: 03:27:a4:da:93:a8:0c:26:ed:59:da:cb:22:b9:29: 02:ea:dd:9f:c3:08:be:93:af:e5:31:04:fe:ca:2c: 7b:cd:84:98:dc:0d:71:93:66:dc:16:c1:a5:9f:01: 46:c5:58:0e:99:d5:5e:a1:2b:56:23:33:da:bc:80: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E0:97:BC:9C:4F:6E:43:5B:F0:9A:98:44:56:04:16:75:2B:8C:11 X509v3 Authority Key Identifier: keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:91:a7:ae:d3:19:fe:b8:f6:44:ef:ad:e8:ae:11:b1:d6:bd: 9e:b4:be:dd:f0:33:74:84:49:9d:74:41:ad:b9:d4:13:a6:6a: 83:86:5c:8d:75:c9:33:0f:4a:d5:61:eb:fc:fd:4c:cb:db:34: 56:8d:e5:4c:84:51:8e:de:ea:b4:d3:3c:0d:9b:38:8d:0d:ba: c4:f8:85:09:fc:4b:87:ec:b0:ac:77:3b:67:d7:51:a9:ea:60: 30:62:55:3f:c4:98:45:3a:ce:a6:65:45:95:5c:7a:0b:fc:59: 7f:de:d0:4f:0c:83:cc:1c:52:23:62:94:f0:b2:0e:90:c4:70: 19:8c:3f:38:6e:34:67:50:09:de:67:5b:da:99:97:a6:9e:6e: ff:9f:3f:26:17:75:1f:bd:d0:d5:64:47:99:fb:1d:4e:fc:80: de:4a:8c:47:52:98:c8:fc:c8:f6:ae:14:24:df:4b:b7:60:59: 10:3e:34:7e:d1:df:e6:c3:26:6e:2b:85:79:e1:25:68:26:04: 49:d6:5e:df:01:2c:2a:ad:e0:49:6c:59:8e:60:36:ee:e9:6c: 29:3b:fe:ff:09:a7:9c:19:ad:1e:1f:79:b4:ee:74:91:81:68: 07:2d:16:b1:96:17:de:a5:84:26:de:af:0d:74:0a:45:15:c5: 81:f3:5a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUngvZvPJGSpcuUcsKKJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTczMjA0YTM2OTY4MDU4NmRlMjdmOTQ2ZmM4MTY2NTYz MmFhODMwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD EyhjMGUwOTdiYzljNGY2ZTQzNWJmMDlhOTg0NDU2MDQxNjc1MmI4YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOjAmqoUx9kgH/RFakiy9T7Mrgar lvtbchweBu+TLWgWwAwvHy3I7kW3pU2f9vXy4UYHLMRXbbfh6cSqWQQEvJpX4nA/ 3o7+6g5WJYtNHMgJTZ+lbrXC2zeSu3P/pxRfPaW2EwO5QN4PvjRTLv3r+00aWjmD LTtrEd593Qx08B+x9Cr6UHNM22+C2kZL3BG6ldIOrxJ8bV9F/5qr4NY4SyFYI7EV DQuy/LsxszhIMYXXoq+H47L61MmpZGWTYsoDcRoDJ6Tak6gMJu1Z2ssiuSkC6t2f wwi+k6/lMQT+yix7zYSY3A1xk2bcFsGlnwFGxVgOmdVeoStWIzPavICVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDgl7ycT25DW/CamERWBBZ1K4wRMB8GA1UdIwQY MBaAFFWXMgSjaWgFht4n+Ub8gWZWMqqDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iMzcyMTYtM2VhNi00ZjkwLTk4M2It MDljODE0OGJkMjNmLzEvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iMzcyMTYtM2VhNi00ZjkwLTk4M2ItMDljODE0OGJkMjNm LzEvVlpjeUJLTnBhQVdHM2lmNVJ2eUJabFl5cW9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5GnrtMZ /rj2RO+t6K4Rsda9nrS+3fAzdIRJnXRBrbnUE6Zqg4ZcjXXJMw9K1WHr/P1My9s0 Vo3lTIRRjt7qtNM8DZs4jQ26xPiFCfxLh+ywrHc7Z9dRqepgMGJVP8SYRTrOpmVF lVx6C/xZf97QTwyDzBxSI2KU8LIOkMRwGYw/OG40Z1AJ3mdb2pmXpp5u/58/Jhd1 H73Q1WRHmfsdTvyA3kqMR1KYyPzI9q4UJN9Lt2BZED40ftHf5sMmbiuFeeElaCYE SdZe3wEsKq3gSWxZjmA27ulsKTv+/wmnnBmtHh95tO50kYFoBy0WsZYX3qWEJt6v DXQKRRXFgfNa9A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:25 2025 by rpki-client