This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft File: Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json) Hash identifier: pwJXFJVDosuQSx30kYIECft6zGGNnzA9nZSGuoXealE= Subject key identifier: 5D:20:97:A5:87:74:67:52:41:DB:96:2A:07:2B:55:FE:76:C4:6E:31 Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Certificate serial: 019AF1D20DD535BECA4B1ABE34CC63ADE7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft Manifest number: 04D5 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: jt+iV7c92PDPwFrioymEhDxLcFjs/E9BhEUxGfvVFTw=) 2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0d:d5:35:be:ca:4b:1a:be:34:cc:63:ad:e7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=5d2097a58774675241db962a072b55fe76c46e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:4f:c5:e7:d0:0d:08:54:24:9a:58:3f:9e: ec:88:ee:ba:26:65:a9:99:df:50:92:3d:11:3f:ac: a2:53:82:e4:c9:83:e2:ed:87:a9:d5:83:28:a0:23: da:02:8e:b1:af:1c:f1:8d:cd:0a:4b:9b:17:b5:c2: 88:a1:af:62:02:d1:60:91:58:58:29:8a:e5:be:ba: 24:3a:47:6c:8f:af:17:c8:6a:e5:f0:29:66:52:bd: ce:ef:b9:5a:0c:4a:f1:99:e6:5b:ec:00:dc:9f:d7: 08:db:c3:52:a1:92:ac:6b:a0:ee:d2:79:ac:40:42: 87:31:03:84:eb:6f:82:7e:b4:5a:9d:4f:77:bb:63: 54:86:a6:b0:d1:9f:e7:dc:e1:43:5e:4e:5b:f0:0f: cc:31:0a:bf:88:40:b2:f7:c2:a0:ed:ba:b7:77:5a: 93:7b:4e:62:3b:5b:b6:65:c2:d9:82:f8:0f:43:64: e7:41:92:aa:81:46:69:fa:10:38:23:46:39:5b:51: 56:93:98:bc:34:28:76:35:68:80:51:12:a4:fb:90: 42:e7:76:b8:94:89:b5:d6:83:89:59:df:18:48:48: dc:fd:a0:33:8a:ac:58:85:9a:6c:d7:9f:f6:34:7b: f8:0e:99:0c:45:0c:14:2f:e6:fa:97:9a:c1:00:5f: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:97:A5:87:74:67:52:41:DB:96:2A:07:2B:55:FE:76:C4:6E:31 X509v3 Authority Key Identifier: keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:03:f2:be:60:96:ca:41:2d:62:2e:88:f1:fd:b8:d6:bc: 39:62:eb:d7:9b:c7:bf:ce:d4:bb:31:7d:2c:a6:6c:a4:da:59: f2:cf:dc:31:ed:9d:7b:66:ff:7a:ae:fa:80:fe:4c:b7:a5:07: 8c:c8:1b:ab:28:5d:79:c6:93:b3:1d:1f:10:1f:1f:f8:5f:24: 59:b1:0f:2d:ee:63:98:a9:e8:08:f2:0a:7b:f0:a8:0f:b4:41: ff:5b:68:8e:9b:d4:48:38:93:7d:74:3d:2e:84:0e:9f:7c:8d: 1f:77:b1:1f:fb:c2:b4:9c:c5:6a:6d:b7:15:bb:39:b5:0a:34: 66:53:72:4b:2c:39:e4:61:ca:1c:fe:83:09:95:e7:3f:34:d4: 91:da:18:a7:99:25:21:32:bd:1d:e5:aa:a9:ff:be:15:81:8a: da:c2:cb:43:81:1f:f5:3a:df:3e:59:04:db:23:68:d1:d2:8a: 03:f5:45:b1:cc:31:82:61:7a:ea:9e:0a:48:da:11:9a:4d:fa: d7:42:3c:e9:46:69:fa:a7:eb:dd:bf:e9:97:62:33:d3:c5:7f: 34:f8:fe:89:08:ee:69:cf:25:81:4b:83:f2:b7:80:42:02:9c: 61:df:30:ec:7e:a4:1c:87:b0:65:9a:2b:e2:a8:06:7e:a5:6e: f6:99:dd:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g3VNb7KSxq+NMxjreeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2QzN2U2NWM4MjI4Zjc5M2Y0OGI4ZTlhMjBmMTJjMmY4 MGI4ODMwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg1ZDIwOTdhNTg3NzQ2NzUyNDFkYjk2MmEwNzJiNTVmZTc2YzQ2ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IpPxefQDQhUJJpYP57siO66JmWp md9Qkj0RP6yiU4LkyYPi7Yep1YMooCPaAo6xrxzxjc0KS5sXtcKIoa9iAtFgkVhY KYrlvrokOkdsj68XyGrl8ClmUr3O77laDErxmeZb7ADcn9cI28NSoZKsa6Du0nms QEKHMQOE62+CfrRanU93u2NUhqaw0Z/n3OFDXk5b8A/MMQq/iECy98Kg7bq3d1qT e05iO1u2ZcLZgvgPQ2TnQZKqgUZp+hA4I0Y5W1FWk5i8NCh2NWiAURKk+5BC53a4 lIm11oOJWd8YSEjc/aAziqxYhZps15/2NHv4DpkMRQwUL+b6l5rBAF8MdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0gl6WHdGdSQduWKgcrVf52xG4xMB8GA1UdIwQY MBaAFFc9N+Zcgij3k/SLjpog8SwvgLiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMt ODRjZDIxZmZiOTFiLzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMtODRjZDIxZmZiOTFi LzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAMD8r5g lspBLWIuiPH9uNa8OWLr15vHv87UuzF9LKZspNpZ8s/cMe2de2b/eq76gP5Mt6UH jMgbqyhdecaTsx0fEB8f+F8kWbEPLe5jmKnoCPIKe/CoD7RB/1tojpvUSDiTfXQ9 LoQOn3yNH3exH/vCtJzFam23Fbs5tQo0ZlNySyw55GHKHP6DCZXnPzTUkdoYp5kl ITK9HeWqqf++FYGK2sLLQ4Ef9TrfPlkE2yNo0dKKA/VFscwxgmF66p4KSNoRmk36 10I86UZp+qfr3b/pl2Iz08V/NPj+iQjuac8lgUuD8reAQgKcYd8w7H6kHIewZZor 4qgGfqVu9pndRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:41 2025 by rpki-client