This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json) Hash identifier: iDMp6YJUN0JZoj5S7J9rMS+og1f1IWt9uGO60M9PNUM= Subject key identifier: 9B:8B:D0:6D:AE:AA:F3:7B:B1:80:AB:A1:D0:A9:EB:DA:68:96:7D:78 Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Certificate serial: 019B3AC64FCF76F6FA6A3697AFB943CB2E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft Manifest number: 15DE Signing time: Sat 20 Dec 2025 08:00:33 +0000 Manifest this update: Sat 20 Dec 2025 08:00:33 +0000 Manifest next update: Sun 21 Dec 2025 08:00:33 +0000 Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=) 2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: qmZ32Bu+BYN5Kux0uah7ByTBQoU3hVMtskBVh85njNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:4f:cf:76:f6:fa:6a:36:97:af:b9:43:cb:2e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Validity Not Before: Dec 20 08:00:33 2025 GMT Not After : Dec 21 08:00:33 2025 GMT Subject: CN=9b8bd06daeaaf37bb180aba1d0a9ebda68967d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:64:96:58:27:6a:69:91:30:2e:4d:39:fb: fe:11:f3:3f:2f:ae:da:0a:88:7c:61:b1:a0:85:0d: d9:f7:9e:51:58:77:e1:f1:c2:41:6e:e8:ae:5c:af: 61:2f:d7:9f:93:9a:85:01:d0:d2:a2:e7:3b:2f:1f: 57:26:80:cd:ff:66:df:95:eb:b1:9b:c5:f2:ca:bb: 17:51:06:50:10:8e:3f:cc:00:44:7b:9c:04:2c:b3: ae:5b:44:5e:6e:98:b0:15:76:8f:06:10:2d:12:3f: 2c:89:2d:62:9c:b4:54:ea:58:49:5d:9a:b4:c1:0d: fd:8c:5c:fa:23:ec:c5:50:9c:81:6e:01:39:42:4b: ac:e3:8d:07:5f:f6:b4:b7:e7:08:c0:1e:86:14:7c: 40:4b:bd:ac:c5:3f:c3:cc:8f:46:74:1e:67:8a:06: 72:da:a7:56:75:98:9a:00:96:8d:47:35:8c:97:f7: e6:fc:6c:99:fe:bc:2b:76:7d:3c:7a:2b:f9:8e:bd: 6b:52:9c:9e:66:ba:a3:4e:67:5c:0a:18:49:60:21: ed:2b:4e:5a:96:19:b5:e4:83:7a:f1:6f:d3:1c:e2: 9e:ef:84:ff:f4:2d:5c:70:5f:a5:0c:1a:e2:8c:c6: 3e:2c:56:c9:b3:51:4b:75:0e:fb:c4:c4:88:d4:b7: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:D0:6D:AE:AA:F3:7B:B1:80:AB:A1:D0:A9:EB:DA:68:96:7D:78 X509v3 Authority Key Identifier: keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:20:de:37:30:03:ce:b1:e3:c4:34:a6:0e:1a:ae:b2:4a:d6: 71:84:22:e9:9f:76:f1:f3:c2:c4:db:93:af:5a:10:5b:c5:a6: aa:9e:a2:ff:6f:00:69:75:25:3f:73:8b:c7:21:46:4a:ce:3a: 95:ea:ec:93:26:0f:ab:3d:de:a2:e3:50:d4:79:d5:e8:de:48: c4:7d:2a:f6:8c:59:5e:c8:ce:f0:d0:cc:3c:4c:f7:af:4c:73: 9b:00:3c:0e:22:81:61:44:c6:26:e3:6e:64:29:10:ec:7b:aa: b8:be:4a:51:f2:cd:72:7a:5b:56:7a:0b:f6:70:6b:48:88:89: f7:ce:12:e1:a2:8d:16:c3:67:62:60:02:71:82:8a:48:e4:c0: c1:dd:81:ee:20:c8:b0:42:3f:86:a4:09:87:f5:8e:13:57:30: 5b:a7:8d:ff:ed:1b:b6:f9:51:63:29:06:53:3c:ec:d5:df:8d: 53:34:81:a3:c7:e5:33:4e:8f:38:77:74:84:b7:4f:ce:aa:a6: ea:b3:fc:5f:11:dd:78:16:c1:78:ec:64:44:2e:65:e8:01:80: 1b:4a:02:16:de:75:3d:37:36:e7:ae:53:2c:b2:8b:9a:83:84: 72:94:ea:55:57:55:69:1b:e3:17:47:f8:51:a1:c6:95:d6:31: 54:d8:12:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xk/Pdvb6ajaXr7lDyy4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4 N2E4ZDMwHhcNMjUxMjIwMDgwMDMzWhcNMjUxMjIxMDgwMDMzWjAzMTEwLwYDVQQD Eyg5YjhiZDA2ZGFlYWFmMzdiYjE4MGFiYTFkMGE5ZWJkYTY4OTY3ZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+RkllgnammRMC5NOfv+EfM/L67a Coh8YbGghQ3Z955RWHfh8cJBbuiuXK9hL9efk5qFAdDSouc7Lx9XJoDN/2bfleux m8XyyrsXUQZQEI4/zABEe5wELLOuW0RebpiwFXaPBhAtEj8siS1inLRU6lhJXZq0 wQ39jFz6I+zFUJyBbgE5Qkus440HX/a0t+cIwB6GFHxAS72sxT/DzI9GdB5nigZy 2qdWdZiaAJaNRzWMl/fm/GyZ/rwrdn08eiv5jr1rUpyeZrqjTmdcChhJYCHtK05a lhm15IN68W/THOKe74T/9C1ccF+lDBrijMY+LFbJs1FLdQ77xMSI1LeQwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuL0G2uqvN7sYCrodCp69poln14MB8GA1UdIwQY MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyDeNzAD zrHjxDSmDhquskrWcYQi6Z928fPCxNuTr1oQW8Wmqp6i/28AaXUlP3OLxyFGSs46 lerskyYPqz3eouNQ1HnV6N5IxH0q9oxZXsjO8NDMPEz3r0xzmwA8DiKBYUTGJuNu ZCkQ7HuquL5KUfLNcnpbVnoL9nBrSIiJ984S4aKNFsNnYmACcYKKSOTAwd2B7iDI sEI/hqQJh/WOE1cwW6eN/+0btvlRYykGUzzs1d+NUzSBo8flM06POHd0hLdPzqqm 6rP8XxHdeBbBeOxkRC5l6AGAG0oCFt51PTc2565TLLKLmoOEcpTqVVdVaRvjF0f4 UaHGldYxVNgSww== -----END CERTIFICATE-----Generated at Sat Dec 20 10:31:51 2025 by rpki-client