This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: m/wptbvKrMDWUEzYq5EPKDXdNicdrwYcvxMgMwFE3CQ= Subject key identifier: F8:14:2C:A1:04:2E:6F:34:17:52:6E:5C:E1:54:26:03:4E:83:B2:FC Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019B345701581411905D9822E4BFF15B4EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 0892 Signing time: Fri 19 Dec 2025 02:01:15 +0000 Manifest this update: Fri 19 Dec 2025 02:01:15 +0000 Manifest next update: Sat 20 Dec 2025 02:01:15 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: 14UibQuBHJkbfvnoaKx03q+YxInVDWeBLALMgF+qatY=) 2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:57:01:58:14:11:90:5d:98:22:e4:bf:f1:5b:4e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Dec 19 02:01:15 2025 GMT Not After : Dec 20 02:01:15 2025 GMT Subject: CN=f8142ca1042e6f3417526e5ce15426034e83b2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0f:f6:ac:cf:1a:26:e8:5e:29:4b:82:0e:dd: b9:c8:6f:d0:c2:a4:ed:d9:71:f5:c9:8e:54:98:76: bb:06:35:8c:d6:aa:38:bd:c8:52:d0:da:19:d4:25: e2:ad:a9:25:5c:de:c1:59:58:24:1c:3b:6f:39:0e: 24:98:1a:38:5e:6a:ee:6c:4f:46:4c:31:fb:70:6a: 4e:c3:57:5d:b5:fc:53:46:86:66:a8:1b:4e:f0:fa: 93:07:07:27:a5:f0:08:72:63:e4:80:3a:6f:64:c9: d7:6e:03:29:eb:07:8c:63:00:6e:da:42:aa:ef:c9: 6a:24:53:18:09:40:a5:4a:70:a2:77:dd:91:79:0c: b3:b2:8c:34:c0:2c:f6:04:48:47:e9:8d:5d:8c:1a: f0:ba:91:12:aa:16:2b:ba:30:52:e8:8b:90:1a:b9: 07:d4:fa:ca:88:f1:58:01:9c:f3:5e:ff:5c:0e:c4: 7c:17:84:1c:e2:c1:8f:3b:bb:02:0d:68:52:47:1f: b7:4f:7c:83:94:6d:49:e8:01:e3:10:2f:76:77:c4: d2:3b:54:ce:b7:58:bd:08:f0:f5:de:07:d2:7d:33: 7a:c7:55:33:b2:ab:a2:8e:fb:7e:7b:bf:58:b7:02: 9b:3f:15:ee:a1:15:ab:17:b2:5d:e8:17:6c:b9:86: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:14:2C:A1:04:2E:6F:34:17:52:6E:5C:E1:54:26:03:4E:83:B2:FC X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4b:fe:c1:ee:ae:b2:f0:cd:3e:8c:06:80:42:1b:19:09:71: 05:55:84:d8:ba:17:94:e0:02:e8:53:bc:a5:65:f3:21:c7:d6: 91:67:45:c1:de:a0:85:d6:85:c6:d0:c6:bd:90:3c:be:99:94: 10:26:e8:a3:72:f2:62:f4:31:47:50:07:65:c2:3a:b8:8a:fe: 1e:24:45:79:db:cf:68:c1:d1:7e:ea:bf:e6:46:b8:ae:86:e6: e3:78:70:98:01:14:cb:63:43:46:1d:a1:dc:d9:b5:57:51:db: cf:1f:c1:90:93:cc:c7:a1:90:73:96:f8:80:f8:e1:35:f2:e3: f1:b7:32:bc:ae:36:8c:5d:70:5d:97:07:dc:4f:26:11:f3:21: 27:57:9e:06:77:30:60:a1:66:df:c9:f8:99:23:ff:e1:60:f6: 80:18:c4:c6:f1:19:0e:10:c0:ee:a8:d5:b4:2d:b6:22:e1:f5: 67:3a:c1:35:96:98:c2:61:88:f6:97:52:e8:16:17:60:26:2e: f4:63:e5:06:89:4f:6f:c7:67:d4:80:c0:c3:49:cb:2f:89:d1: 7d:bc:b9:17:8d:dd:04:4d:8f:24:16:fc:8d:4a:fe:00:35:8b: 5a:5c:41:f0:8e:56:50:9c:bb:63:b1:5a:80:83:ea:e8:60:50: 83:a4:f6:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VwFYFBGQXZgi5L/xW074MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjUxMjE5MDIwMTE1WhcNMjUxMjIwMDIwMTE1WjAzMTEwLwYDVQQD EyhmODE0MmNhMTA0MmU2ZjM0MTc1MjZlNWNlMTU0MjYwMzRlODNiMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A/2rM8aJuheKUuCDt25yG/QwqTt 2XH1yY5UmHa7BjWM1qo4vchS0NoZ1CXiraklXN7BWVgkHDtvOQ4kmBo4XmrubE9G TDH7cGpOw1ddtfxTRoZmqBtO8PqTBwcnpfAIcmPkgDpvZMnXbgMp6weMYwBu2kKq 78lqJFMYCUClSnCid92ReQyzsow0wCz2BEhH6Y1djBrwupESqhYrujBS6IuQGrkH 1PrKiPFYAZzzXv9cDsR8F4Qc4sGPO7sCDWhSRx+3T3yDlG1J6AHjEC92d8TSO1TO t1i9CPD13gfSfTN6x1Uzsquijvt+e79YtwKbPxXuoRWrF7Jd6BdsuYbcxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgULKEELm80F1JuXOFUJgNOg7L8MB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0v+we6u svDNPowGgEIbGQlxBVWE2LoXlOAC6FO8pWXzIcfWkWdFwd6ghdaFxtDGvZA8vpmU ECboo3LyYvQxR1AHZcI6uIr+HiRFedvPaMHRfuq/5ka4robm43hwmAEUy2NDRh2h 3Nm1V1Hbzx/BkJPMx6GQc5b4gPjhNfLj8bcyvK42jF1wXZcH3E8mEfMhJ1eeBncw YKFm38n4mSP/4WD2gBjExvEZDhDA7qjVtC22IuH1ZzrBNZaYwmGI9pdS6BYXYCYu 9GPlBolPb8dn1IDAw0nLL4nRfby5F43dBE2PJBb8jUr+ADWLWlxB8I5WUJy7Y7Fa gIPq6GBQg6T29Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:38 2025 by rpki-client