This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json) Hash identifier: ZF8NsH16AOv7luUbjDQiuB42EMAO9qNpRCohDD/dzKk= Subject key identifier: E6:3C:DF:40:A5:88:E6:93:CB:F6:98:41:F7:1B:7A:5C:44:42:68:E6 Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530 Certificate serial: 019AF20944A47F913CD1805B7F83AF13D517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft Manifest number: 77 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: geLpqC1L81wj97WGII92UKq94BrEGdNeinljAvElqGg=) 2: sL2NSlZMFdAYtXpmUtMsUTVxj5U.roa (hash: xcmnsmi1DtWtpZIXUGx0RyP3Q0L6fGwH3VyxN8K/Zro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:44:a4:7f:91:3c:d1:80:5b:7f:83:af:13:d5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=e63cdf40a588e693cbf69841f71b7a5c444268e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:35:e9:5c:d1:4c:df:f0:39:02:f5:b9:1e: 2f:7e:a1:a9:b1:71:a6:dd:34:34:8a:5d:65:77:ed: a3:fe:b0:51:93:fa:73:6f:ef:03:2a:c8:b8:19:99: e1:f5:77:e5:ed:75:09:74:ba:3d:09:22:13:ee:f9: 89:4e:c6:1b:be:7c:b1:00:5c:f3:98:e5:fa:80:80: c2:66:2c:51:95:c1:55:5b:8b:6c:61:75:a5:40:3b: d8:19:b7:f1:cc:fe:03:de:61:aa:3f:c4:b9:3e:ed: 2c:7f:fe:f2:ba:6c:05:bf:92:5c:4c:1a:64:77:7c: 00:12:e7:6a:62:6f:71:3d:d6:00:eb:a5:36:b7:6e: 99:dd:3d:a2:f9:31:d2:4e:dd:eb:4c:c4:50:9e:4c: 43:cc:11:77:67:98:4e:50:b3:3b:5f:c0:bb:97:18: 38:db:60:68:3a:ee:25:75:1b:3c:87:e7:bb:89:7c: 6d:b7:2d:70:98:0c:ff:d3:03:08:ce:3f:21:06:2c: 89:0e:e6:ae:11:82:2a:16:02:2d:51:a8:a3:cb:48: 2f:9a:fe:64:38:6c:24:17:ba:f4:b1:cf:65:b1:74: 4d:d9:80:ef:65:16:59:1f:a8:2a:55:bf:d4:f2:c8: 22:8a:79:23:0a:df:b6:8a:ef:81:52:c0:7d:e7:72: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3C:DF:40:A5:88:E6:93:CB:F6:98:41:F7:1B:7A:5C:44:42:68:E6 X509v3 Authority Key Identifier: keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3c:43:a5:c9:d6:82:59:ce:39:d7:e9:4c:c4:dd:8d:6a:54: cc:2c:27:59:b5:a9:4f:db:a3:89:a3:ed:c2:bd:83:dc:2f:89: dd:2f:70:20:4c:26:83:d8:74:e8:4e:5d:67:da:6a:e6:af:88: 3e:64:80:06:0d:ca:94:50:3a:65:20:cf:e9:95:9a:17:cc:1c: a0:fd:16:97:a5:55:b1:ba:2b:c3:22:5f:4b:50:a7:f3:6f:1c: 8d:e2:92:41:2e:53:e9:93:e8:ba:15:77:5c:51:42:de:c2:8e: 75:4a:94:6a:82:cc:67:ec:cc:15:25:c9:de:8f:2a:0c:67:66: 99:ab:a6:5a:b9:ab:d6:ca:c1:65:06:fb:9c:15:bc:25:d1:c8: 3b:bd:53:25:8c:51:d3:06:78:29:67:7a:ef:0d:ab:8e:29:ca: fa:b9:60:c2:95:23:9b:c0:27:74:49:a0:f7:62:19:6c:2a:05: 41:2a:5f:55:10:0e:c4:51:09:5c:c0:3f:eb:cb:87:d5:2d:52: eb:4d:2e:bb:84:58:0a:b9:7b:58:70:df:04:0d:3a:9f:7b:34: 30:56:44:b3:40:75:ec:cb:86:92:32:27:51:65:79:0a:ab:df: b4:12:f8:68:df:a5:a3:1c:2b:7a:50:7e:aa:19:bf:e0:84:3f: 6e:68:31:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUSkf5E80YBbf4OvE9UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0 Mzk1MzAwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhlNjNjZGY0MGE1ODhlNjkzY2JmNjk4NDFmNzFiN2E1YzQ0NDI2OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dg16VzRTN/wOQL1uR4vfqGpsXGm 3TQ0il1ld+2j/rBRk/pzb+8DKsi4GZnh9Xfl7XUJdLo9CSIT7vmJTsYbvnyxAFzz mOX6gIDCZixRlcFVW4tsYXWlQDvYGbfxzP4D3mGqP8S5Pu0sf/7yumwFv5JcTBpk d3wAEudqYm9xPdYA66U2t26Z3T2i+THSTt3rTMRQnkxDzBF3Z5hOULM7X8C7lxg4 22BoOu4ldRs8h+e7iXxtty1wmAz/0wMIzj8hBiyJDuauEYIqFgItUaijy0gvmv5k OGwkF7r0sc9lsXRN2YDvZRZZH6gqVb/U8sgiinkjCt+2iu+BUsB953JpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY830CliOaTy/aYQfcbelxEQmjmMB8GA1UdIwQY MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt NTQ1NGU1YTE2ZjQyLzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejxDpcnW glnOOdfpTMTdjWpUzCwnWbWpT9ujiaPtwr2D3C+J3S9wIEwmg9h06E5dZ9pq5q+I PmSABg3KlFA6ZSDP6ZWaF8wcoP0Wl6VVsborwyJfS1Cn828cjeKSQS5T6ZPouhV3 XFFC3sKOdUqUaoLMZ+zMFSXJ3o8qDGdmmaumWrmr1srBZQb7nBW8JdHIO71TJYxR 0wZ4KWd67w2rjinK+rlgwpUjm8AndEmg92IZbCoFQSpfVRAOxFEJXMA/68uH1S1S 600uu4RYCrl7WHDfBA06n3s0MFZEs0B17MuGkjInUWV5CqvftBL4aN+loxwrelB+ qhm/4IQ/bmgxvw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:31 2025 by rpki-client