This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: 2zAmQxR0z0e1Ou+SunzovKHoMG9Z6YWkwtbKC9G/SK0= Subject key identifier: 01:6C:0C:A1:79:32:CE:A7:D6:F0:B7:3D:E8:94:85:B6:CF:6E:94:8C Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019AF68A9791560B0C00374E6B4EEF79FCA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 0872 Signing time: Sun 07 Dec 2025 02:01:09 +0000 Manifest this update: Sun 07 Dec 2025 02:01:09 +0000 Manifest next update: Mon 08 Dec 2025 02:01:09 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: bHDGOwOZfwgx6Y/CvPDESxN7wfusfA2JlVGkZWer/QE=) 2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:97:91:56:0b:0c:00:37:4e:6b:4e:ef:79:fc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Dec 7 02:01:09 2025 GMT Not After : Dec 8 02:01:09 2025 GMT Subject: CN=016c0ca17932cea7d6f0b73de89485b6cf6e948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fe:50:69:ad:57:19:eb:3c:8c:13:76:72:65: 7a:c2:be:a7:9a:90:33:d2:f4:9f:7d:3f:23:46:37: be:69:5b:12:a5:16:bf:9b:ff:27:f0:5e:03:75:57: 22:e0:0e:d5:bf:7f:9f:41:81:a5:3a:d9:43:bf:c3: ce:4a:ff:cc:b5:fe:f2:fa:07:89:cd:75:ee:7a:d5: 95:c7:60:3b:cb:93:33:aa:e3:f1:71:12:83:5d:a4: 44:35:82:c7:b7:a3:7d:d1:f6:6d:9a:c2:1e:0b:af: 4d:12:2f:17:92:37:97:e5:41:26:9e:c9:44:02:eb: 8b:72:8f:6b:9a:3c:bd:45:7a:3c:af:e6:71:dd:f6: 2f:12:32:1c:c3:b6:da:d4:3b:9b:64:94:c2:a8:bd: 9d:77:55:0d:4b:a8:e3:bb:03:f9:e3:fb:a1:30:42: 15:46:97:f3:c4:31:10:88:b4:cd:b3:29:38:43:e3: a7:c3:ab:8a:dc:ce:bc:03:85:aa:67:29:19:d4:cf: 32:c7:38:be:4b:9e:c3:5b:c7:b0:61:09:bf:71:0f: 9f:3d:20:d7:e4:f3:c2:e1:e8:62:59:af:64:b0:53: 52:6d:ae:88:cf:ea:66:18:f7:4e:f1:06:10:51:1e: 45:2a:70:f6:c9:1a:17:ad:ba:7f:4a:76:b1:59:ee: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:0C:A1:79:32:CE:A7:D6:F0:B7:3D:E8:94:85:B6:CF:6E:94:8C X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:81:ca:b6:da:17:82:9b:63:03:27:50:a6:a5:e3:94:d3:53: 1b:b9:f6:c5:69:6e:82:41:26:a1:bd:33:20:9c:80:a3:bd:77: d9:ca:80:84:80:64:25:2e:51:54:fa:de:56:c2:50:5a:e8:5d: dc:32:bf:0d:54:5d:f8:70:dd:38:d5:e1:5a:11:76:fe:b2:d6: 7b:a9:05:f3:d0:29:54:ba:af:c6:5a:f7:d3:22:40:8b:ff:dc: 88:1a:4f:22:02:fe:2c:61:d6:b4:aa:45:eb:c6:09:c7:f0:04: f8:84:95:42:4b:7d:88:58:c2:2d:d4:f8:a8:3e:22:24:c0:95: 35:9b:93:dd:8a:f0:48:1b:c2:02:8b:5d:8e:10:4e:da:0a:e2: 75:80:d2:52:82:e7:67:34:ba:3e:60:1e:c2:53:d4:46:b3:92: e6:21:46:96:19:f8:12:51:e1:f9:1d:de:9f:eb:ab:70:0d:11: 89:16:9f:61:60:a6:23:46:36:4a:f3:6a:3e:25:49:89:3e:6a: 0a:6a:33:ea:bc:a2:0c:9d:4d:f9:98:dc:23:4c:b2:47:ee:2b: 77:19:0e:75:b9:9a:9f:c4:93:17:fe:b8:81:52:08:94:c7:b2: d2:35:5c:3b:2d:10:83:9f:81:e5:f2:73:a4:aa:a5:f5:8f:d4: e1:ce:e7:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipeRVgsMADdOa07vefyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjUxMjA3MDIwMTA5WhcNMjUxMjA4MDIwMTA5WjAzMTEwLwYDVQQD EygwMTZjMGNhMTc5MzJjZWE3ZDZmMGI3M2RlODk0ODViNmNmNmU5NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/5Qaa1XGes8jBN2cmV6wr6nmpAz 0vSffT8jRje+aVsSpRa/m/8n8F4DdVci4A7Vv3+fQYGlOtlDv8POSv/Mtf7y+geJ zXXuetWVx2A7y5MzquPxcRKDXaRENYLHt6N90fZtmsIeC69NEi8XkjeX5UEmnslE AuuLco9rmjy9RXo8r+Zx3fYvEjIcw7ba1DubZJTCqL2dd1UNS6jjuwP54/uhMEIV RpfzxDEQiLTNsyk4Q+Onw6uK3M68A4WqZykZ1M8yxzi+S57DW8ewYQm/cQ+fPSDX 5PPC4ehiWa9ksFNSba6Iz+pmGPdO8QYQUR5FKnD2yRoXrbp/SnaxWe6mHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFsDKF5Ms6n1vC3PeiUhbbPbpSMMB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoHKttoX gptjAydQpqXjlNNTG7n2xWlugkEmob0zIJyAo7132cqAhIBkJS5RVPreVsJQWuhd 3DK/DVRd+HDdONXhWhF2/rLWe6kF89ApVLqvxlr30yJAi//ciBpPIgL+LGHWtKpF 68YJx/AE+ISVQkt9iFjCLdT4qD4iJMCVNZuT3YrwSBvCAotdjhBO2gridYDSUoLn ZzS6PmAewlPURrOS5iFGlhn4ElHh+R3en+urcA0RiRafYWCmI0Y2SvNqPiVJiT5q Cmoz6ryiDJ1N+ZjcI0yyR+4rdxkOdbman8STF/64gVIIlMey0jVcOy0Qg5+B5fJz pKql9Y/U4c7nlg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:46 2025 by rpki-client