This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json) Hash identifier: rQxxAFgQnR+pSMnV1cDqpFbIX4ZgNyL9QOt/MoE+9+w= Subject key identifier: 68:62:5B:D2:3D:EA:3F:9D:75:F7:DE:FB:8A:55:64:57:5B:2A:AB:11 Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757 Certificate serial: 019AF12D9FC68185CAE469825BF9D2083207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft Manifest number: 0BBB Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: 2IJKPlKbN1OAbT6Zqb/KdniG9Zem2nhYPmr3GUhFIfU=) 2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9f:c6:81:85:ca:e4:69:82:5b:f9:d2:08:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559349644323315f806dc64ca4d9ed9557762757 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=68625bd23dea3f9d75f7defb8a5564575b2aab11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:32:b1:9f:20:7f:21:8b:b4:c6:5b:67:77: c1:82:f4:25:33:41:0b:1a:7b:48:fa:52:c9:f0:71: 81:f0:74:33:98:6c:c8:80:7f:d3:c5:ad:68:ed:4d: 6b:92:20:a6:65:a6:ca:89:da:2a:8e:e7:cd:da:6b: 84:fb:b5:88:cf:68:33:96:3b:e8:c5:e0:3a:7b:cc: 2a:66:40:7d:0b:54:bb:76:5f:cf:1f:11:34:af:6d: 5f:74:d5:36:3a:48:65:77:19:cd:8e:fa:7d:0e:cb: c2:bf:84:1f:41:fe:0e:a5:1c:fa:21:e5:7e:07:df: 6f:32:31:92:a3:db:fb:76:7b:18:ae:8f:ad:c1:9a: ae:e7:0d:c6:dc:a4:9e:c3:ab:8d:64:ab:4a:0e:47: 5a:07:5f:8d:2f:46:94:d6:88:7b:c2:a0:f3:25:2b: 59:63:cd:3f:b6:dc:d0:7c:4c:6e:1d:db:3f:4b:30: f4:51:97:5b:f7:88:52:0b:88:d8:7c:64:0f:9c:dc: 9c:5b:0f:6f:ae:15:8a:db:16:9e:b6:9d:ef:fd:b8: aa:97:d2:60:80:df:29:9d:ac:fd:90:ec:76:42:64: d3:59:2f:73:27:e8:8c:28:f6:12:d0:6d:11:04:85: 57:aa:86:47:e2:2f:f6:fd:1e:73:79:33:c2:48:01: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:62:5B:D2:3D:EA:3F:9D:75:F7:DE:FB:8A:55:64:57:5B:2A:AB:11 X509v3 Authority Key Identifier: keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f6:99:57:19:c2:f8:e4:cc:20:bc:91:45:ae:08:04:10:c8: 52:a1:71:b9:3a:2f:bd:83:92:a2:89:fd:0d:46:0b:1c:ff:3d: ad:36:07:44:bc:f7:77:33:ae:d5:6f:bc:2b:26:10:57:ff:07: 39:be:2d:1d:e7:4b:24:68:e5:bd:91:a8:19:d2:71:2b:26:e0: 4b:f2:a9:ce:59:44:e2:98:b7:33:38:44:a3:dd:82:ce:fb:db: 72:b5:62:67:e8:b3:5e:b8:86:74:ca:f0:f0:69:ba:97:78:0e: c8:22:c5:ed:8d:29:6a:12:46:76:61:6a:98:ba:bd:37:40:6e: 89:9c:2e:e5:e0:3a:ff:2b:1d:21:2e:a6:dd:42:ae:16:0c:d1: 1a:4d:39:52:4a:05:e4:a8:a8:08:d3:de:d7:95:21:5a:08:77: 1c:3b:6a:b1:1e:2f:0e:62:35:ea:3f:20:f6:0d:9a:79:26:aa: 2e:cf:6b:30:b0:e8:88:44:ad:cf:15:9d:32:b5:7f:6b:e7:92: da:7f:42:5d:94:a4:01:ac:77:bc:24:09:c4:51:28:22:eb:3f: 8a:7b:b6:d3:8a:f9:08:86:fe:8f:48:7f:0a:88:97:e9:4c:a2: e3:74:cc:d9:5f:59:db:db:3a:9a:b1:d3:2f:cb:03:91:dd:bb: 1e:c1:00:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ/GgYXK5GmCW/nSCDIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3 NjI3NTcwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD Eyg2ODYyNWJkMjNkZWEzZjlkNzVmN2RlZmI4YTU1NjQ1NzViMmFhYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+MysZ8gfyGLtMZbZ3fBgvQlM0EL GntI+lLJ8HGB8HQzmGzIgH/Txa1o7U1rkiCmZabKidoqjufN2muE+7WIz2gzljvo xeA6e8wqZkB9C1S7dl/PHxE0r21fdNU2OkhldxnNjvp9DsvCv4QfQf4OpRz6IeV+ B99vMjGSo9v7dnsYro+twZqu5w3G3KSew6uNZKtKDkdaB1+NL0aU1oh7wqDzJStZ Y80/ttzQfExuHds/SzD0UZdb94hSC4jYfGQPnNycWw9vrhWK2xaetp3v/biql9Jg gN8pnaz9kOx2QmTTWS9zJ+iMKPYS0G0RBIVXqoZH4i/2/R5zeTPCSAF/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhiW9I96j+ddffe+4pVZFdbKqsRMB8GA1UdIwQY MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4 LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvaZVxnC +OTMILyRRa4IBBDIUqFxuTovvYOSoon9DUYLHP89rTYHRLz3dzOu1W+8KyYQV/8H Ob4tHedLJGjlvZGoGdJxKybgS/KpzllE4pi3MzhEo92CzvvbcrViZ+izXriGdMrw 8Gm6l3gOyCLF7Y0pahJGdmFqmLq9N0BuiZwu5eA6/ysdIS6m3UKuFgzRGk05UkoF 5KioCNPe15UhWgh3HDtqsR4vDmI16j8g9g2aeSaqLs9rMLDoiEStzxWdMrV/a+eS 2n9CXZSkAax3vCQJxFEoIus/inu204r5CIb+j0h/CoiX6Uyi43TM2V9Z29s6mrHT L8sDkd27HsEAIA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:53 2025 by rpki-client