This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft File: Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json) Hash identifier: EZ4V+tgSv1LXimVv2SOrrq7iOzZs/N0ALs5jrgrsecw= Subject key identifier: 35:28:5F:AC:8D:F8:80:5A:A9:20:A7:E4:29:9C:3E:48:D3:E2:41:E0 Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Certificate serial: 019B3F118B34D9978C626641D367AE836B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft Manifest number: 04FD Signing time: Sun 21 Dec 2025 04:01:12 +0000 Manifest this update: Sun 21 Dec 2025 04:01:12 +0000 Manifest next update: Mon 22 Dec 2025 04:01:12 +0000 Files and hashes: 1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: 1pdO/WttEs/trfKDshRuCXefVEdHaFBVBw61S35nxLE=) 2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8b:34:d9:97:8c:62:66:41:d3:67:ae:83:6b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883 Validity Not Before: Dec 21 04:01:12 2025 GMT Not After : Dec 22 04:01:12 2025 GMT Subject: CN=35285fac8df8805aa920a7e4299c3e48d3e241e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:97:77:aa:83:83:52:8c:f5:28:27:40:86: 86:cf:21:d2:bc:13:e2:aa:a7:30:e2:ac:de:9d:88: fb:7e:63:7e:fb:d4:f2:ca:af:61:9a:90:27:b3:36: 6d:cc:75:68:9b:25:85:13:e0:41:ff:39:37:2e:09: a1:54:a7:16:60:fb:af:f0:db:cf:e6:0b:1b:c4:10: 86:3a:5b:56:d3:cb:ab:fa:e4:61:17:0a:04:f6:0e: 64:32:27:9a:4b:3b:ff:13:a2:93:0a:a2:c3:1c:4c: 89:a7:22:b0:ad:3c:1d:57:cc:14:bf:a8:ae:50:b9: cc:c1:ce:79:40:61:47:04:54:f6:7f:85:0c:61:a2: 7a:ab:3c:49:f0:7a:ce:2a:58:79:f1:91:a0:16:26: 35:c6:2c:9a:47:90:4c:9d:57:ed:a1:0c:b7:61:33: bf:61:1b:bc:66:80:b1:43:dd:b1:85:3a:27:86:bb: 7b:f1:8b:6e:f9:db:59:97:cd:6c:f4:e6:d1:2b:62: 0d:ec:ce:4c:6e:ed:a7:2c:31:ed:82:67:dd:5e:ad: 7e:b1:ea:3a:ed:d2:7f:02:78:4d:68:8d:22:28:77: e3:ba:14:a1:60:ad:89:50:4f:f2:17:95:6b:ca:d3: fc:0d:62:04:94:36:73:ae:18:e9:9b:d7:65:a2:4c: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:5F:AC:8D:F8:80:5A:A9:20:A7:E4:29:9C:3E:48:D3:E2:41:E0 X509v3 Authority Key Identifier: keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6e:3b:20:7e:52:21:8c:24:16:cd:64:2f:d2:c3:67:e0:91: c5:ff:51:52:e3:af:57:e6:6c:20:02:b5:fe:b8:37:94:f7:2a: 0a:0f:18:a5:e7:54:ec:1f:85:a3:e0:77:d9:f0:2f:3c:b1:63: 8f:cc:1e:d1:44:b5:61:1e:5e:c3:f7:8c:b3:9c:02:11:ac:08: 6a:0e:1a:75:34:cd:96:58:59:01:40:f8:ab:cd:d1:a2:69:45: 72:bb:22:15:f6:f2:99:96:c3:d5:c2:7b:19:da:0e:62:2c:f0: 47:6a:e7:ac:07:72:e2:cc:66:5f:dc:d1:a9:f9:aa:38:24:78: f1:52:9a:7a:e9:30:66:69:aa:55:2a:54:90:4d:e3:87:9d:50: de:a2:2e:7e:b6:c9:91:30:65:90:8e:14:cb:de:74:15:bd:85: 25:8c:d4:ff:2a:56:8a:c0:24:49:67:0d:b3:65:d4:6d:72:6d: e6:9b:a0:b1:71:1f:58:5f:84:38:49:4c:7a:a6:80:7f:be:db: 29:2e:ac:18:2a:c6:2e:69:78:52:e8:e9:4d:11:54:97:18:1a: 7d:8d:0a:e2:a2:45:bd:47:8b:33:fa:da:5e:8e:33:23:a7:ce: 9b:bd:39:eb:c0:2c:71:5f:b9:03:ac:aa:50:c3:b9:fc:11:b1: 39:20:ab:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYs02ZeMYmZB02eug2uSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2QzN2U2NWM4MjI4Zjc5M2Y0OGI4ZTlhMjBmMTJjMmY4 MGI4ODMwHhcNMjUxMjIxMDQwMTEyWhcNMjUxMjIyMDQwMTEyWjAzMTEwLwYDVQQD EygzNTI4NWZhYzhkZjg4MDVhYTkyMGE3ZTQyOTljM2U0OGQzZTI0MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqXd6qDg1KM9SgnQIaGzyHSvBPi qqcw4qzenYj7fmN++9Tyyq9hmpAnszZtzHVomyWFE+BB/zk3LgmhVKcWYPuv8NvP 5gsbxBCGOltW08ur+uRhFwoE9g5kMieaSzv/E6KTCqLDHEyJpyKwrTwdV8wUv6iu ULnMwc55QGFHBFT2f4UMYaJ6qzxJ8HrOKlh58ZGgFiY1xiyaR5BMnVftoQy3YTO/ YRu8ZoCxQ92xhTonhrt78Ytu+dtZl81s9ObRK2IN7M5Mbu2nLDHtgmfdXq1+seo6 7dJ/AnhNaI0iKHfjuhShYK2JUE/yF5VrytP8DWIElDZzrhjpm9dlokyS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUoX6yN+IBaqSCn5CmcPkjT4kHgMB8GA1UdIwQY MBaAFFc9N+Zcgij3k/SLjpog8SwvgLiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMt ODRjZDIxZmZiOTFiLzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83Y2Q1YjgtOGRmNi00Yzk5LWE2MjMtODRjZDIxZmZiOTFi LzEvVnowMzVseUNLUGVUOUl1T21pRHhMQy1BdUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz247IH5S IYwkFs1kL9LDZ+CRxf9RUuOvV+ZsIAK1/rg3lPcqCg8YpedU7B+Fo+B32fAvPLFj j8we0US1YR5ew/eMs5wCEawIag4adTTNllhZAUD4q83RomlFcrsiFfbymZbD1cJ7 GdoOYizwR2rnrAdy4sxmX9zRqfmqOCR48VKaeukwZmmqVSpUkE3jh51Q3qIufrbJ kTBlkI4Uy950Fb2FJYzU/ypWisAkSWcNs2XUbXJt5pugsXEfWF+EOElMeqaAf77b KS6sGCrGLml4UujpTRFUlxgafY0K4qJFvUeLM/raXo4zI6fOm70568AscV+5A6yq UMO5/BGxOSCr9g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:21 2025 by rpki-client