This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json) Hash identifier: 917nvuz+hPXn9eeoyL6DTmjf/Ec/9KWUUZedBNqS5+8= Subject key identifier: E2:B7:FB:32:6D:96:64:B5:63:F1:B1:0F:FF:5E:11:A8:80:D5:3B:D8 Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7 Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7 Certificate serial: 019B703484567964029FF84E5D8A7D947973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft Manifest number: 06A7 Signing time: Tue 30 Dec 2025 17:00:48 +0000 Manifest this update: Tue 30 Dec 2025 17:00:48 +0000 Manifest next update: Wed 31 Dec 2025 17:00:48 +0000 Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: DggbVup4Rld3ZCZN1CcIj3SFor9DOC6b79otKTLGPw0=) 2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:84:56:79:64:02:9f:f8:4e:5d:8a:7d:94:79:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7 Validity Not Before: Dec 30 17:00:48 2025 GMT Not After : Dec 31 17:00:48 2025 GMT Subject: CN=e2b7fb326d9664b563f1b10fff5e11a880d53bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:0f:3c:2e:a3:f0:d6:e0:f9:8a:34:12:12: 3e:66:75:ac:c4:11:9f:6e:0b:df:d8:94:9a:c9:94: f4:3b:34:0c:22:4e:60:61:94:eb:24:67:68:75:f3: b8:72:cc:04:83:02:be:e1:e2:76:10:d5:52:23:ef: 1a:67:c1:95:94:26:5d:a4:62:28:9b:f1:0a:e5:9d: 28:f8:2d:7f:50:c9:7b:f2:43:b3:28:e9:85:5e:d7: 22:83:3a:c2:a5:d4:bd:33:89:71:e9:53:91:01:40: e6:0e:61:64:27:e1:20:4c:01:45:79:e2:92:de:b9: ca:cd:ee:f1:98:8b:23:3c:3e:77:94:c5:79:ba:c8: ce:e6:cb:b9:8a:80:1a:4b:8b:58:f5:27:3c:f7:b6: 71:fc:aa:37:ba:38:9d:16:fe:54:e8:45:62:89:c0: 0d:4b:94:2b:44:e6:54:9a:37:d8:a0:8b:9a:94:f6: 4d:3d:e8:d8:57:af:4e:dd:ca:cb:36:7b:4c:cd:28: 3e:4a:d4:4c:b4:b5:b6:cb:a6:69:3c:63:26:11:f5: 1d:ac:64:66:1c:22:e4:ef:5e:ea:be:2d:df:7c:b4: 73:b1:92:87:a5:f4:8a:64:33:18:7d:6f:41:9e:af: 4e:a6:a1:82:13:85:97:34:e3:21:40:a4:0c:f7:ee: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:FB:32:6D:96:64:B5:63:F1:B1:0F:FF:5E:11:A8:80:D5:3B:D8 X509v3 Authority Key Identifier: keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:79:ae:18:1a:16:53:a8:a3:a0:99:26:76:6e:61:c3:19:0d: 01:fc:86:fb:7a:64:31:70:8f:be:c3:3c:41:04:70:7e:41:dd: e3:cc:1f:3c:b3:a7:2a:14:ff:83:b1:a6:fb:4b:b4:fa:0d:12: de:d6:65:12:d9:fc:2d:9d:01:10:49:c5:80:6c:fa:93:3a:5d: 0c:53:8e:dd:71:be:4d:b9:03:24:99:d1:53:0c:49:8e:29:57: 06:42:9a:48:8e:29:8b:ec:b5:dd:b1:40:47:ac:3f:ef:30:7c: e5:0c:e6:dc:7f:c7:04:d2:2b:99:f3:29:a2:96:23:9c:a5:e4: 48:5b:28:9b:4a:ca:19:1a:5a:45:e2:4f:32:c8:7c:08:b8:f2: aa:a8:b2:c9:94:f4:15:95:c5:67:2e:de:d8:ab:65:45:4d:a9: e4:c9:f1:6e:34:8a:cb:fe:51:03:c6:88:2d:d1:84:d4:db:f0: cb:e2:59:fb:d2:10:c6:fd:ea:df:cd:61:9a:26:14:50:c8:62: 06:a7:e7:41:b4:11:aa:fd:cc:29:55:e6:a6:49:aa:6e:e0:b8: a9:d2:92:e6:d4:32:ec:1c:09:e7:ee:62:08:a5:8d:71:7d:bf: 90:34:b5:77:dc:1d:12:7d:ea:b1:91:19:0a:2c:8c:b3:65:e6: 63:87:cc:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNIRWeWQCn/hOXYp9lHlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBlMmY3MDNmNjk4YjlkY2VhYzYzZjFlODY5MWQ4Nzlj MGIyYTcwHhcNMjUxMjMwMTcwMDQ4WhcNMjUxMjMxMTcwMDQ4WjAzMTEwLwYDVQQD EyhlMmI3ZmIzMjZkOTY2NGI1NjNmMWIxMGZmZjVlMTFhODgwZDUzYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9kPPC6j8Nbg+Yo0EhI+ZnWsxBGf bgvf2JSayZT0OzQMIk5gYZTrJGdodfO4cswEgwK+4eJ2ENVSI+8aZ8GVlCZdpGIo m/EK5Z0o+C1/UMl78kOzKOmFXtcigzrCpdS9M4lx6VORAUDmDmFkJ+EgTAFFeeKS 3rnKze7xmIsjPD53lMV5usjO5su5ioAaS4tY9Sc897Zx/Ko3ujidFv5U6EViicAN S5QrROZUmjfYoIualPZNPejYV69O3crLNntMzSg+StRMtLW2y6ZpPGMmEfUdrGRm HCLk717qvi3ffLRzsZKHpfSKZDMYfW9Bnq9OpqGCE4WXNOMhQKQM9+76JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK3+zJtlmS1Y/GxD/9eEaiA1TvYMB8GA1UdIwQY MBaAFFcw4vcD9pi53OrGPx6Gkdh5wLKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODIt MTNkZjc1YzBkOWEzLzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODItMTNkZjc1YzBkOWEz LzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHmuGBoW U6ijoJkmdm5hwxkNAfyG+3pkMXCPvsM8QQRwfkHd48wfPLOnKhT/g7Gm+0u0+g0S 3tZlEtn8LZ0BEEnFgGz6kzpdDFOO3XG+TbkDJJnRUwxJjilXBkKaSI4pi+y13bFA R6w/7zB85Qzm3H/HBNIrmfMpopYjnKXkSFsom0rKGRpaReJPMsh8CLjyqqiyyZT0 FZXFZy7e2KtlRU2p5MnxbjSKy/5RA8aILdGE1Nvwy+JZ+9IQxv3q381hmiYUUMhi BqfnQbQRqv3MKVXmpkmqbuC4qdKS5tQy7BwJ5+5iCKWNcX2/kDS1d9wdEn3qsZEZ CiyMs2XmY4fMAg== -----END CERTIFICATE-----Generated at Wed Dec 31 02:54:04 2025 by rpki-client