This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: Yrg7yKqseI9GWnToKuyvL8inAYwsW/0IDrpylG0Uk8k= Subject key identifier: AF:09:36:1B:90:29:64:E7:73:93:2A:3B:87:8E:93:DA:6F:EE:48:BC Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019B4995237A6269ED1B0F7D04A01FD9840A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 089D Signing time: Tue 23 Dec 2025 05:01:09 +0000 Manifest this update: Tue 23 Dec 2025 05:01:09 +0000 Manifest next update: Wed 24 Dec 2025 05:01:09 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: LXBw81/LsygGQe30VYr3JRZUFzE809UWFW94bty/ZOA=) 2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:23:7a:62:69:ed:1b:0f:7d:04:a0:1f:d9:84:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Dec 23 05:01:09 2025 GMT Not After : Dec 24 05:01:09 2025 GMT Subject: CN=af09361b902964e773932a3b878e93da6fee48bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:fb:41:84:c4:42:ef:99:23:3a:22:d8:d9: 75:36:71:7b:4e:39:42:48:61:1c:b0:52:85:2f:59: 40:95:12:dd:8f:68:d9:e0:1f:1f:e4:ba:82:47:ab: a6:aa:65:e8:29:a4:33:f1:8d:40:b7:67:02:16:25: cf:f1:82:da:c1:77:d3:32:75:4c:0e:f0:c1:8e:ad: 61:d5:04:e5:2e:6b:0a:34:63:d6:e4:dd:44:36:fa: 7e:18:35:81:e1:f7:93:c6:30:dc:58:ae:4c:41:30: 82:41:b5:11:60:29:87:c7:d8:d4:b0:6b:0b:77:90: 9a:aa:cc:77:ff:b5:b3:73:69:bc:a0:aa:7a:23:e2: b0:7e:ea:38:90:cb:05:29:08:28:14:f3:16:da:0c: 6c:a4:5a:aa:4a:33:4f:a7:25:bb:db:af:22:cf:ec: f8:28:a1:18:36:38:6f:2c:ba:41:bd:62:20:a4:54: 6d:71:39:ee:3d:7b:43:76:34:21:89:2a:5a:4e:aa: 1a:a3:ee:1e:92:36:09:c3:21:26:65:67:f6:90:71: 29:48:59:5a:bc:fd:37:8e:94:fa:0e:a4:dc:3c:7b: 27:6f:37:4e:cc:9a:6a:8c:98:bb:00:98:3e:88:66: 37:ca:f1:f0:66:5e:89:9b:8e:93:63:a4:98:ab:d7: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:36:1B:90:29:64:E7:73:93:2A:3B:87:8E:93:DA:6F:EE:48:BC X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fb:43:27:e1:69:1e:4c:b6:51:10:b3:a8:cd:cf:86:bb:f8: 58:04:f6:90:2b:3c:ed:de:e1:0f:e5:21:57:54:0a:83:7f:43: a8:e0:06:e7:63:53:42:b0:70:a1:c7:8f:25:f2:2f:19:f7:44: 62:5a:1e:e5:01:63:fd:cb:6d:b7:c1:82:53:10:b2:0a:8f:2b: 08:04:0e:63:84:f4:8f:a1:bb:55:13:42:95:fe:db:1e:20:43: 40:ba:db:a8:20:94:2e:9e:31:33:7a:a1:6d:fb:76:b9:22:2e: 85:05:e8:0e:f8:b0:a9:0c:3f:c4:9a:dc:e2:34:34:9a:28:e8: 10:7f:4c:2c:9d:eb:04:a4:48:f5:56:50:e3:1b:d1:3b:cf:83: 7a:55:85:1b:5c:5a:c9:00:87:5f:8d:35:a5:2f:55:53:e1:1a: 59:cf:26:10:dd:cb:51:2a:b4:28:16:e9:08:c9:94:96:23:c4: 25:14:c3:85:af:e0:13:fc:66:88:5a:aa:7a:9a:45:ea:75:f8: c2:1a:f3:d8:e4:b2:63:ec:3d:3e:ea:89:cf:ed:d3:b2:22:92: 24:5c:51:66:ce:d9:70:68:98:41:d1:8d:26:e5:db:8e:48:67: 1c:18:d7:70:80:d6:07:84:be:df:79:0f:5d:00:42:11:72:c2: 65:89:39:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlSN6YmntGw99BKAf2YQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjUxMjIzMDUwMTA5WhcNMjUxMjI0MDUwMTA5WjAzMTEwLwYDVQQD EyhhZjA5MzYxYjkwMjk2NGU3NzM5MzJhM2I4NzhlOTNkYTZmZWU0OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZD7QYTEQu+ZIzoi2Nl1NnF7TjlC SGEcsFKFL1lAlRLdj2jZ4B8f5LqCR6umqmXoKaQz8Y1At2cCFiXP8YLawXfTMnVM DvDBjq1h1QTlLmsKNGPW5N1ENvp+GDWB4feTxjDcWK5MQTCCQbURYCmHx9jUsGsL d5Caqsx3/7Wzc2m8oKp6I+Kwfuo4kMsFKQgoFPMW2gxspFqqSjNPpyW7268iz+z4 KKEYNjhvLLpBvWIgpFRtcTnuPXtDdjQhiSpaTqoao+4ekjYJwyEmZWf2kHEpSFla vP03jpT6DqTcPHsnbzdOzJpqjJi7AJg+iGY3yvHwZl6Jm46TY6SYq9fNZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8JNhuQKWTnc5MqO4eOk9pv7ki8MB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/tDJ+Fp Hky2URCzqM3Phrv4WAT2kCs87d7hD+UhV1QKg39DqOAG52NTQrBwocePJfIvGfdE Yloe5QFj/cttt8GCUxCyCo8rCAQOY4T0j6G7VRNClf7bHiBDQLrbqCCULp4xM3qh bft2uSIuhQXoDviwqQw/xJrc4jQ0mijoEH9MLJ3rBKRI9VZQ4xvRO8+DelWFG1xa yQCHX401pS9VU+EaWc8mEN3LUSq0KBbpCMmUliPEJRTDha/gE/xmiFqqeppF6nX4 whrz2OSyY+w9PuqJz+3TsiKSJFxRZs7ZcGiYQdGNJuXbjkhnHBjXcIDWB4S+33kP XQBCEXLCZYk5eg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:54 2025 by rpki-client