This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json) Hash identifier: Ui6TBMax/LcAGB0xvlC0Q04vI9Kx2FWwWnntYioZIW0= Subject key identifier: 91:3C:2F:F4:0E:80:E1:76:89:2B:54:3B:A7:A3:F1:9F:B6:21:38:E8 Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Certificate serial: 019AF12E7C097BE208FFC7F188F8E607C76E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft Manifest number: 12E1 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=) 2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: FMG/G/NN6LegFiY5Nub7Qd9WwpHFzMYfDHE8FU0I7sY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7c:09:7b:e2:08:ff:c7:f1:88:f8:e6:07:c7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=913c2ff40e80e176892b543ba7a3f19fb62138e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:cf:04:fe:b1:50:29:91:b5:20:ec:d9:b5: bb:81:a3:3f:cf:15:54:3e:1e:8c:ee:99:4f:2d:eb: c0:78:6c:a8:74:11:3c:2c:c3:7b:0f:df:79:aa:9c: 82:70:83:60:71:eb:60:01:bb:25:16:79:fc:c6:34: d0:d9:77:d9:a2:45:6f:e9:e4:85:3f:54:5b:4c:46: a9:14:d0:6b:17:e4:85:f9:02:40:50:62:67:22:c7: c5:11:f7:df:27:b3:6a:2d:b5:49:8a:d5:e7:7b:f9: fb:4f:c9:61:7c:94:7e:a4:b9:b9:2f:4b:5a:a1:b1: d5:59:73:83:7f:1a:92:c3:51:80:9e:4e:db:60:6e: fd:f5:f5:91:36:2f:84:68:a2:07:bf:e5:20:7d:4e: 17:42:36:2b:cb:11:4c:ca:ba:5d:a9:ca:52:7a:f9: c2:4c:e8:2c:a4:83:d6:1b:18:0b:c8:52:1e:c5:4f: ac:e9:ad:e3:39:bc:dc:85:99:63:5b:fe:9a:65:c2: ff:a6:83:6a:b5:e6:f2:7e:96:13:3f:b8:a0:48:07: 9a:60:a3:60:4d:c5:22:d0:55:87:3f:7f:74:c2:03: 6a:65:b9:bc:c1:62:c6:c7:4f:04:85:99:d7:1a:a0: 5d:be:a1:6e:ba:a2:ef:3d:e9:62:b4:15:c8:8f:a4: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3C:2F:F4:0E:80:E1:76:89:2B:54:3B:A7:A3:F1:9F:B6:21:38:E8 X509v3 Authority Key Identifier: keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:21:0b:bf:1c:b5:30:6a:0b:16:6c:de:a9:32:ab:11:5e:48: 89:eb:54:43:a3:fd:7c:7e:ac:c8:a0:8b:99:07:b0:0e:a1:7c: 81:4a:4e:18:94:b8:1e:d7:4b:0e:7c:45:cc:af:85:53:80:65: 31:c4:86:eb:53:ec:8f:55:09:2f:df:83:f4:e8:c3:1a:16:50: 68:b3:2e:a5:2d:94:30:65:93:ff:4e:38:fb:ea:db:f3:a8:6b: ad:dd:e4:95:f1:f0:3e:00:f1:31:2e:8f:03:6b:31:7e:9d:7a: 99:90:de:4b:65:e3:dc:54:36:b0:2e:3e:1f:ac:f7:45:67:89: dd:19:db:4f:05:f8:4d:76:93:a6:e2:40:52:c2:80:18:67:20: 7e:f9:3d:3b:a6:76:60:f0:5f:b1:cc:a7:12:7e:55:4e:05:40: d9:af:2b:1c:d3:d3:0b:ba:40:36:6f:4e:28:99:5b:20:4d:63: e7:8a:15:a5:4c:92:1e:d3:bb:66:0c:7d:b8:09:42:41:17:80: 91:a2:13:35:5e:c4:90:b0:2a:23:39:00:cd:fb:f0:77:63:37: 3c:13:ea:45:0f:eb:f8:e3:41:a2:a4:bb:7f:6c:f3:4a:06:a2: a6:42:7c:a4:16:74:59:de:d1:72:b5:cb:08:b1:58:64:96:b8: fb:3e:a0:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnwJe+II/8fxiPjmB8duMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj ZDllYzkwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg5MTNjMmZmNDBlODBlMTc2ODkyYjU0M2JhN2EzZjE5ZmI2MjEzOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30nPBP6xUCmRtSDs2bW7gaM/zxVU Ph6M7plPLevAeGyodBE8LMN7D995qpyCcINgcetgAbslFnn8xjTQ2XfZokVv6eSF P1RbTEapFNBrF+SF+QJAUGJnIsfFEfffJ7NqLbVJitXne/n7T8lhfJR+pLm5L0ta obHVWXODfxqSw1GAnk7bYG799fWRNi+EaKIHv+UgfU4XQjYryxFMyrpdqcpSevnC TOgspIPWGxgLyFIexU+s6a3jObzchZljW/6aZcL/poNqtebyfpYTP7igSAeaYKNg TcUi0FWHP390wgNqZbm8wWLGx08EhZnXGqBdvqFuuqLvPelitBXIj6Q/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE8L/QOgOF2iStUO6ej8Z+2ITjoMB8GA1UdIwQY MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct NWMzZGI5OGJmODY0LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0 LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyELvxy1 MGoLFmzeqTKrEV5IietUQ6P9fH6syKCLmQewDqF8gUpOGJS4HtdLDnxFzK+FU4Bl McSG61Psj1UJL9+D9OjDGhZQaLMupS2UMGWT/044++rb86hrrd3klfHwPgDxMS6P A2sxfp16mZDeS2Xj3FQ2sC4+H6z3RWeJ3RnbTwX4TXaTpuJAUsKAGGcgfvk9O6Z2 YPBfscynEn5VTgVA2a8rHNPTC7pANm9OKJlbIE1j54oVpUySHtO7Zgx9uAlCQReA kaITNV7EkLAqIzkAzfvwd2M3PBPqRQ/r+ONBoqS7f2zzSgaipkJ8pBZ0Wd7RcrXL CLFYZJa4+z6gjg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:00 2025 by rpki-client