This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json) Hash identifier: z3HPB0kUPgfRphxrdQJaMCW7aX4vFc0SQAHOxo2kXq0= Subject key identifier: 92:B0:10:80:17:CE:E3:E6:81:3F:D4:01:3E:84:BA:D8:A4:2E:FF:B5 Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7 Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7 Certificate serial: 019AF49C05C60B1639FCFDD1FA8BF51EF40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft Manifest number: 0667 Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: 6oB7LsWc7I4ETROdOQxejz9qNqyhaMYJ34TrSSK01NQ=) 2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:05:c6:0b:16:39:fc:fd:d1:fa:8b:f5:1e:f4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7 Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=92b0108017cee3e6813fd4013e84bad8a42effb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:67:27:d4:27:84:98:40:a8:6e:dd:d5:2f: 9a:2d:55:56:7c:35:ff:65:a2:02:27:07:f7:a3:fa: d6:d4:09:57:1c:58:c1:0f:b3:c4:bd:38:be:e1:d5: 3d:6f:d1:c3:ce:80:9b:db:07:e1:84:ba:ab:2b:04: a8:69:23:bc:38:88:f0:87:b2:ec:49:ad:dc:6f:56: 14:aa:b3:6d:70:0a:00:45:32:8b:11:be:09:49:28: ae:ef:53:16:1e:c2:99:7b:ab:05:e0:e9:46:82:17: 91:0b:dd:3c:58:5d:3a:a3:bb:fc:81:cb:9e:a1:ac: 08:91:72:0f:68:28:19:48:95:45:22:db:39:c9:0e: 76:7f:d5:44:1f:2f:f0:09:01:1d:a6:fb:d2:ce:ef: 86:a5:f5:d1:f8:d0:c4:9e:20:50:9a:ef:8d:96:28: 4e:d6:55:87:ea:2a:02:b1:01:16:20:41:e5:db:08: b0:28:67:28:8b:8a:2e:7f:ea:c5:a0:27:d8:a8:8c: 05:4a:60:de:b1:29:e9:17:0a:c1:53:57:45:39:a7: 7c:08:22:09:2b:4c:91:4c:3a:62:72:89:64:11:5e: 08:84:15:66:db:ea:09:49:21:19:c2:26:09:a9:9f: 16:ec:45:44:f3:e8:ff:c9:71:35:8c:48:d0:41:7a: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:10:80:17:CE:E3:E6:81:3F:D4:01:3E:84:BA:D8:A4:2E:FF:B5 X509v3 Authority Key Identifier: keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d3:5f:20:c1:c1:31:db:f6:f3:66:3a:90:b4:47:06:22:85: 06:9e:42:96:1c:c5:e0:5f:f6:b8:07:cf:d4:4f:4c:17:a5:ae: 4f:f0:50:4f:21:03:9e:69:61:62:cf:06:bc:e6:9f:53:c2:a1: b9:79:2e:7b:94:95:64:79:26:8c:c0:33:89:f5:20:1d:03:ee: 51:2f:81:66:ed:16:93:ee:e7:a9:f0:6e:01:88:2d:66:17:fd: 08:0a:4a:5f:56:e1:02:60:82:ce:91:90:bf:ed:99:e7:2b:3e: de:f2:53:99:ad:44:a2:55:02:bb:9b:19:fa:ee:fd:11:a1:73: eb:46:ed:ab:e4:22:ff:a1:ca:26:9b:24:10:c3:21:39:8c:4c: 51:c3:5b:61:74:cc:b6:92:44:19:ee:bc:08:51:5e:ae:6c:0d: 64:57:6e:70:e9:2a:27:52:88:04:59:05:e1:b1:3b:e2:62:52: 2e:c4:3a:a3:4d:ba:1e:15:0c:ce:00:8a:9d:04:a4:85:97:56: 5b:23:43:89:91:51:70:1e:7d:43:aa:fc:a3:5f:9a:94:29:21: eb:d1:84:42:98:ce:a2:2f:62:06:ff:4a:bb:e3:60:b4:23:f2: 06:2a:d1:d9:af:5d:a2:41:15:e4:9d:9f:19:f9:e8:d9:5c:00: de:c7:7b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAXGCxY5/P3R+ov1HvQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBlMmY3MDNmNjk4YjlkY2VhYzYzZjFlODY5MWQ4Nzlj MGIyYTcwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD Eyg5MmIwMTA4MDE3Y2VlM2U2ODEzZmQ0MDEzZTg0YmFkOGE0MmVmZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx5nJ9QnhJhAqG7d1S+aLVVWfDX/ ZaICJwf3o/rW1AlXHFjBD7PEvTi+4dU9b9HDzoCb2wfhhLqrKwSoaSO8OIjwh7Ls Sa3cb1YUqrNtcAoARTKLEb4JSSiu71MWHsKZe6sF4OlGgheRC908WF06o7v8gcue oawIkXIPaCgZSJVFIts5yQ52f9VEHy/wCQEdpvvSzu+GpfXR+NDEniBQmu+NlihO 1lWH6ioCsQEWIEHl2wiwKGcoi4ouf+rFoCfYqIwFSmDesSnpFwrBU1dFOad8CCIJ K0yRTDpicolkEV4IhBVm2+oJSSEZwiYJqZ8W7EVE8+j/yXE1jEjQQXrVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKwEIAXzuPmgT/UAT6EutikLv+1MB8GA1UdIwQY MBaAFFcw4vcD9pi53OrGPx6Gkdh5wLKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODIt MTNkZjc1YzBkOWEzLzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODItMTNkZjc1YzBkOWEz LzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNNfIMHB Mdv282Y6kLRHBiKFBp5ClhzF4F/2uAfP1E9MF6WuT/BQTyEDnmlhYs8GvOafU8Kh uXkue5SVZHkmjMAzifUgHQPuUS+BZu0Wk+7nqfBuAYgtZhf9CApKX1bhAmCCzpGQ v+2Z5ys+3vJTma1EolUCu5sZ+u79EaFz60btq+Qi/6HKJpskEMMhOYxMUcNbYXTM tpJEGe68CFFermwNZFducOkqJ1KIBFkF4bE74mJSLsQ6o026HhUMzgCKnQSkhZdW WyNDiZFRcB59Q6r8o1+alCkh69GEQpjOoi9iBv9Ku+NgtCPyBirR2a9dokEV5J2f Gfno2VwA3sd71g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:35 2025 by rpki-client