This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json) Hash identifier: qPS8LuHIl1rgGcc1gqGUqbcbMsFzlQGU8IKomQqY5II= Subject key identifier: 7D:72:47:A3:E8:97:20:4A:6B:F7:BC:8A:CD:65:55:36:26:8F:CB:70 Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Certificate serial: 019B3E6DB8FB77488B77715CB9D8BE455636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft Manifest number: 1309 Signing time: Sun 21 Dec 2025 01:02:16 +0000 Manifest this update: Sun 21 Dec 2025 01:02:16 +0000 Manifest next update: Mon 22 Dec 2025 01:02:16 +0000 Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=) 2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: bdf2sKPBY2v5r0Yc58iyN5QAfTZkrhsUiKrHPBxHykg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:b8:fb:77:48:8b:77:71:5c:b9:d8:be:45:56:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Validity Not Before: Dec 21 01:02:16 2025 GMT Not After : Dec 22 01:02:16 2025 GMT Subject: CN=7d7247a3e897204a6bf7bc8acd655536268fcb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:e0:5c:b5:4c:3b:af:3b:f5:76:21:85:64: ac:00:d8:22:36:a6:f0:44:30:e7:5c:12:ce:84:33: 13:43:6e:2e:96:fa:db:aa:0a:65:df:0a:76:a9:70: 87:b4:3e:5c:0c:a1:80:a1:57:38:70:50:f5:a1:c5: 67:4d:99:5d:00:82:77:e3:e9:4d:d0:be:55:bd:21: f8:6a:1a:32:38:dd:d9:11:58:93:b2:e3:18:37:c5: d0:65:e3:ca:fc:8a:6d:d4:d0:32:97:fa:d0:eb:57: 91:00:46:79:88:2f:3f:d5:05:af:6f:70:3a:c4:ee: 14:55:77:b1:4e:3a:7d:75:f1:16:f5:6e:c8:a5:2a: 23:ae:5d:c2:ea:28:0e:ba:d5:fa:03:7f:e9:d0:84: 2b:84:74:38:97:a4:e6:4f:e5:82:5a:29:74:a5:89: e6:de:e2:1c:54:5c:ca:44:b2:35:dd:77:2c:35:52: 5b:77:42:be:df:91:41:34:0d:bf:06:ea:7f:dd:4a: af:a7:74:7d:fa:63:c4:86:4d:c2:0a:10:30:94:ac: 84:50:97:8c:a8:f6:34:34:67:75:43:c5:16:90:f7: ca:64:fd:12:18:ca:26:2c:72:a1:49:3e:69:cc:ad: 1e:68:ff:33:5a:69:7b:eb:67:f5:6a:00:28:87:47: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:47:A3:E8:97:20:4A:6B:F7:BC:8A:CD:65:55:36:26:8F:CB:70 X509v3 Authority Key Identifier: keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:23:35:29:dc:bd:2b:be:14:1f:e7:88:45:55:a0:34:33:a1: 6b:96:1a:35:d9:ef:1c:15:67:0c:80:05:df:d3:91:9c:0b:a2: 02:7a:d3:f9:f3:ca:e3:4f:fb:13:8a:0c:55:ba:3f:5c:61:7d: 61:00:fd:da:48:cd:e6:cb:0d:fc:6b:c9:c6:fe:c4:92:00:00: 90:23:31:88:a7:32:07:b3:fa:45:f4:41:f4:b3:22:27:73:49: 0e:c8:95:9f:54:ea:8f:74:0b:d9:8d:53:20:1d:79:f4:8b:eb: d9:9a:5d:34:b9:b8:4c:7d:b8:cf:41:9c:e6:0f:82:07:01:28: 40:99:ac:6f:cf:e4:4a:44:8b:30:1f:db:fc:85:d7:50:bf:10: 5f:8d:b8:51:ad:b6:bb:0d:03:88:fb:a9:a9:d4:bd:c7:5a:71: 61:a0:1d:ab:cd:72:8b:51:32:83:f6:0b:b0:4a:66:e7:c0:29: 85:50:fc:ff:42:66:81:ad:df:b1:b1:fb:9a:66:6f:9c:81:44: 8c:ab:5e:66:3e:52:58:12:2b:ac:bd:8a:60:76:49:d2:51:cb: 95:a6:44:f5:90:94:ee:5a:5d:5a:3a:b0:3e:91:1e:9a:43:19: 6f:70:a8:e2:3a:f0:55:22:ec:cd:fe:bd:fe:3f:9e:2c:d4:90: 60:f8:8b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bbj7d0iLd3Fcudi+RVY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj ZDllYzkwHhcNMjUxMjIxMDEwMjE2WhcNMjUxMjIyMDEwMjE2WjAzMTEwLwYDVQQD Eyg3ZDcyNDdhM2U4OTcyMDRhNmJmN2JjOGFjZDY1NTUzNjI2OGZjYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmzgXLVMO6879XYhhWSsANgiNqbw RDDnXBLOhDMTQ24ulvrbqgpl3wp2qXCHtD5cDKGAoVc4cFD1ocVnTZldAIJ34+lN 0L5VvSH4ahoyON3ZEViTsuMYN8XQZePK/Ipt1NAyl/rQ61eRAEZ5iC8/1QWvb3A6 xO4UVXexTjp9dfEW9W7IpSojrl3C6igOutX6A3/p0IQrhHQ4l6TmT+WCWil0pYnm 3uIcVFzKRLI13XcsNVJbd0K+35FBNA2/Bup/3Uqvp3R9+mPEhk3CChAwlKyEUJeM qPY0NGd1Q8UWkPfKZP0SGMomLHKhST5pzK0eaP8zWml762f1agAoh0dHTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1yR6PolyBKa/e8is1lVTYmj8twMB8GA1UdIwQY MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct NWMzZGI5OGJmODY0LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0 LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiM1Kdy9 K74UH+eIRVWgNDOha5YaNdnvHBVnDIAF39ORnAuiAnrT+fPK40/7E4oMVbo/XGF9 YQD92kjN5ssN/GvJxv7EkgAAkCMxiKcyB7P6RfRB9LMiJ3NJDsiVn1Tqj3QL2Y1T IB159Ivr2ZpdNLm4TH24z0Gc5g+CBwEoQJmsb8/kSkSLMB/b/IXXUL8QX424Ua22 uw0DiPupqdS9x1pxYaAdq81yi1Eyg/YLsEpm58AphVD8/0Jmga3fsbH7mmZvnIFE jKteZj5SWBIrrL2KYHZJ0lHLlaZE9ZCU7lpdWjqwPpEemkMZb3Co4jrwVSLszf69 /j+eLNSQYPiLVg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:41 2025 by rpki-client