This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json) Hash identifier: ObWoXtSYKviV7PnlwMerAD4if86+ZYQVQTwtFCLN+8Y= Subject key identifier: B4:13:25:1D:9F:27:FA:D5:40:BA:4C:35:56:08:A2:0B:3F:F1:06:C5 Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Certificate serial: 019B65B0EA16FDC955DCB8DD6DF71CADF21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft Manifest number: 0BFE Signing time: Sun 28 Dec 2025 16:00:51 +0000 Manifest this update: Sun 28 Dec 2025 16:00:51 +0000 Manifest next update: Mon 29 Dec 2025 16:00:51 +0000 Files and hashes: 1: LBrII0meAx8QWA02SN2ZRJzJHAs.asa (hash: curHeTVsTIYmnw+ZQWffVJrl51KIKs9/8kuP50nyLSE=) 2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: X5pbSpwnOdPffaRIkdB9AUrPN02x73Mq9y+NKYGZdvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:ea:16:fd:c9:55:dc:b8:dd:6d:f7:1c:ad:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Validity Not Before: Dec 28 16:00:51 2025 GMT Not After : Dec 29 16:00:51 2025 GMT Subject: CN=b413251d9f27fad540ba4c355608a20b3ff106c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:10:1c:c9:86:fd:02:15:94:ab:50:ba:cb: 1c:15:10:81:95:c5:4b:46:e7:be:38:4a:59:08:97: fd:20:b5:4b:0c:7f:f7:85:7c:42:a1:2f:db:a7:16: 38:f5:54:78:48:63:7d:71:dd:90:5d:78:3f:d7:2f: 85:fb:91:68:b1:d4:7a:43:07:b4:ac:08:15:1f:99: 0a:5b:e7:c1:ce:43:de:96:46:20:9f:00:ce:10:79: f3:5e:fd:6e:0c:66:b7:f6:6c:91:10:5a:4b:e7:6d: 58:07:8e:c3:f6:dc:e9:e3:ab:85:69:1e:a7:4b:56: 54:1f:28:88:69:99:89:fd:21:a7:74:e3:14:4d:57: ac:95:88:5a:eb:8f:62:42:59:70:cd:d1:6c:27:9f: fd:d1:19:e4:e6:02:fb:e2:5f:32:74:e9:1c:70:26: 53:04:94:63:31:4d:da:8f:db:39:93:2a:fc:6c:98: 39:27:c7:ef:36:77:aa:87:74:8d:44:b9:26:db:68: 9e:b6:b3:25:ec:ed:c4:d3:63:1b:4d:79:1f:3c:8d: 4a:a6:03:0f:e3:94:01:17:b2:1f:4a:9c:d0:2e:8b: 3a:32:74:b3:67:bd:6d:c3:fc:4b:86:f2:b9:b7:fb: 0f:47:94:e3:d5:ec:e7:cc:69:1d:a2:d7:47:1d:96: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:25:1D:9F:27:FA:D5:40:BA:4C:35:56:08:A2:0B:3F:F1:06:C5 X509v3 Authority Key Identifier: keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d1:a4:1e:cf:62:f7:5e:35:e9:93:59:e3:48:9d:a5:75:9e: 87:27:d3:88:9f:ec:5c:7f:d9:96:80:ef:02:46:42:3e:7b:9c: c8:f0:01:ea:64:ba:cb:1f:a3:3a:da:e1:cb:1c:b0:48:b1:1a: be:96:a9:e5:97:14:e4:27:85:99:a1:63:30:5d:96:88:63:55: 28:0b:4d:59:d2:72:b7:b7:f8:c0:e0:01:67:49:0c:d1:13:1f: 8c:64:74:2d:83:8d:48:9b:92:6a:bf:09:3b:0a:01:bf:1f:99: 1d:c9:fd:d2:cb:9d:be:dc:c4:72:76:ef:7a:b3:de:df:90:0f: 92:2c:29:89:61:85:f7:13:b8:72:ec:58:7e:0d:24:3f:bf:0a: 30:ef:38:cc:b9:30:2c:b7:a5:88:bc:af:75:f4:64:40:93:ff: 6c:43:ca:b7:97:ac:a3:b0:07:26:67:62:e8:b7:16:08:fd:46: 66:2c:4f:eb:c4:2f:7e:8c:72:a1:da:ab:1a:96:89:d9:5b:d6: ed:ea:4b:67:d3:b2:a8:20:6f:ff:ee:b8:52:c1:81:0a:02:59: 07:a0:ae:3c:75:8d:f4:cc:88:34:92:36:d1:da:93:c8:d9:4a: 5b:84:83:9d:78:4e:a5:1c:3f:3f:e4:d6:77:5a:ae:9f:f7:65: 7c:47:00:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsOoW/clV3LjdbfccrfIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx YzdlNGUwHhcNMjUxMjI4MTYwMDUxWhcNMjUxMjI5MTYwMDUxWjAzMTEwLwYDVQQD EyhiNDEzMjUxZDlmMjdmYWQ1NDBiYTRjMzU1NjA4YTIwYjNmZjEwNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3AQHMmG/QIVlKtQusscFRCBlcVL Rue+OEpZCJf9ILVLDH/3hXxCoS/bpxY49VR4SGN9cd2QXXg/1y+F+5FosdR6Qwe0 rAgVH5kKW+fBzkPelkYgnwDOEHnzXv1uDGa39myREFpL521YB47D9tzp46uFaR6n S1ZUHyiIaZmJ/SGndOMUTVeslYha649iQllwzdFsJ5/90Rnk5gL74l8ydOkccCZT BJRjMU3aj9s5kyr8bJg5J8fvNneqh3SNRLkm22ietrMl7O3E02MbTXkfPI1KpgMP 45QBF7IfSpzQLos6MnSzZ71tw/xLhvK5t/sPR5Tj1eznzGkdotdHHZa/ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQTJR2fJ/rVQLpMNVYIogs/8QbFMB8GA1UdIwQY MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdGkHs9i 91416ZNZ40idpXWehyfTiJ/sXH/ZloDvAkZCPnucyPAB6mS6yx+jOtrhyxywSLEa vpap5ZcU5CeFmaFjMF2WiGNVKAtNWdJyt7f4wOABZ0kM0RMfjGR0LYONSJuSar8J OwoBvx+ZHcn90sudvtzEcnbverPe35APkiwpiWGF9xO4cuxYfg0kP78KMO84zLkw LLeliLyvdfRkQJP/bEPKt5eso7AHJmdi6LcWCP1GZixP68QvfoxyodqrGpaJ2VvW 7epLZ9OyqCBv/+64UsGBCgJZB6CuPHWN9MyINJI20dqTyNlKW4SDnXhOpRw/P+TW d1qun/dlfEcABQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:09 2025 by rpki-client