This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json) Hash identifier: +rBH+5y2y/eoiN7OwP6wrgv+zYr0y5YSo3hrpZVRhiU= Subject key identifier: 07:D3:DB:4A:37:2C:B5:21:6B:B3:E9:E4:95:BA:65:83:CE:9B:F1:35 Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46 Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46 Certificate serial: 019B37583834746159F0B7AA506512C5EE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft Manifest number: 1604 Signing time: Fri 19 Dec 2025 16:01:26 +0000 Manifest this update: Fri 19 Dec 2025 16:01:26 +0000 Manifest next update: Sat 20 Dec 2025 16:01:26 +0000 Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: do1/uZ3kd92pfQV0bD2BY+MK9B7Ie6lJQS8OkjXjHwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:38:34:74:61:59:f0:b7:aa:50:65:12:c5:ee:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46 Validity Not Before: Dec 19 16:01:26 2025 GMT Not After : Dec 20 16:01:26 2025 GMT Subject: CN=07d3db4a372cb5216bb3e9e495ba6583ce9bf135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:07:57:71:e3:ce:de:ab:ef:7e:8d:79:6c: f0:6f:f6:d5:2c:b6:85:77:79:08:64:77:45:36:92: 3f:68:3c:7a:35:ed:4f:0f:a7:cf:bb:92:87:06:4d: 7c:9e:59:04:10:f6:a3:b0:4c:53:6f:a6:03:3e:2a: 34:66:0b:30:0c:7e:bc:4c:df:b0:99:a7:17:3c:5c: e8:c3:f6:bf:ff:bb:4d:eb:19:93:9a:42:ab:1d:3d: 7d:ed:e7:30:77:d5:6c:1d:be:d4:60:65:17:cb:b1: 4f:a6:9e:09:b6:4d:99:70:fa:60:49:b6:81:f9:67: f2:f2:3f:b9:71:65:ca:29:e7:ef:df:27:3f:81:66: f1:ee:ff:c6:06:c4:5b:48:9e:3d:81:b9:6f:1f:76: 7c:ea:42:f0:ae:a0:0d:97:26:54:51:6d:74:89:82: 2f:6d:a5:3e:b1:5a:7e:93:53:ef:d7:d9:0c:64:ea: 11:b5:98:66:9f:93:57:40:15:a5:45:86:e0:4a:ee: 63:00:e3:66:e8:50:fe:2f:60:a1:a8:e0:ff:91:f5: 3b:a2:0f:9d:3f:7e:08:f8:34:a8:c2:64:f6:b0:0a: e4:6d:72:15:e1:e6:07:4d:da:0b:bf:4e:8b:8f:fd: a3:ff:b2:a1:81:bc:16:e0:53:ca:23:ba:47:75:48: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:DB:4A:37:2C:B5:21:6B:B3:E9:E4:95:BA:65:83:CE:9B:F1:35 X509v3 Authority Key Identifier: keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:13:d1:07:f9:e3:9a:e8:92:f4:76:be:ce:a3:9d:84:9f: 99:55:62:75:01:26:17:a2:7a:67:09:51:39:a3:45:76:fd:de: d8:80:a8:d8:ae:61:47:8d:bc:77:37:34:00:77:ec:6a:c8:14: ca:96:df:8b:00:ad:e1:8e:30:50:b9:f5:54:70:35:a6:e3:c4: e6:cc:7d:85:98:7f:5e:e5:68:d7:4c:e8:2a:e8:9f:a1:8c:94: b8:d2:3a:ee:40:13:4f:d4:d0:26:8b:3b:21:9c:17:34:f0:ef: d0:61:a6:71:ec:50:3b:3b:7b:0f:ed:31:33:ef:16:6e:89:6c: 67:b5:07:e0:63:7e:a0:e0:e5:d9:28:43:c9:ed:f2:b3:72:b9: f6:f6:1a:32:b0:cb:d7:0a:d2:66:6c:b2:7d:35:74:21:5f:f4: 36:61:68:d1:69:8a:01:cf:22:b2:c1:32:58:44:a5:df:f8:93: 76:ab:58:8b:ef:fa:2f:e4:9b:e2:cd:0b:8b:40:bf:d6:fb:35: 42:a4:ab:a9:55:b0:bc:20:60:e7:cf:16:0d:38:18:68:69:c8: c9:ab:eb:3a:25:90:9a:6a:f9:09:c2:5d:3e:59:fa:c1:97:64: 10:06:54:d9:36:6b:0a:4d:47:a7:99:b1:1b:3b:67:3c:1e:79: fe:9c:dd:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WDg0dGFZ8LeqUGUSxe4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTllNTk3N2Y2MWU3M2YzMDQ4MmRhZWIxYTVmMmRmNzJk NWVkNDYwHhcNMjUxMjE5MTYwMTI2WhcNMjUxMjIwMTYwMTI2WjAzMTEwLwYDVQQD EygwN2QzZGI0YTM3MmNiNTIxNmJiM2U5ZTQ5NWJhNjU4M2NlOWJmMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cHV3Hjzt6r736NeWzwb/bVLLaF d3kIZHdFNpI/aDx6Ne1PD6fPu5KHBk18nlkEEPajsExTb6YDPio0ZgswDH68TN+w macXPFzow/a//7tN6xmTmkKrHT197ecwd9VsHb7UYGUXy7FPpp4Jtk2ZcPpgSbaB +Wfy8j+5cWXKKefv3yc/gWbx7v/GBsRbSJ49gblvH3Z86kLwrqANlyZUUW10iYIv baU+sVp+k1Pv19kMZOoRtZhmn5NXQBWlRYbgSu5jAONm6FD+L2ChqOD/kfU7og+d P34I+DSowmT2sArkbXIV4eYHTdoLv06Lj/2j/7KhgbwW4FPKI7pHdUjP8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfT20o3LLUha7Pp5JW6ZYPOm/E1MB8GA1UdIwQY MBaAFFWZ5Zd/Yec/MEgtrrGl8t9y1e1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYt OTE4NWE1ZGI0ZWM1LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYtOTE4NWE1ZGI0ZWM1 LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWMT0Qf5 45rokvR2vs6jnYSfmVVidQEmF6J6ZwlROaNFdv3e2ICo2K5hR428dzc0AHfsasgU ypbfiwCt4Y4wULn1VHA1puPE5sx9hZh/XuVo10zoKuifoYyUuNI67kATT9TQJos7 IZwXNPDv0GGmcexQOzt7D+0xM+8WbolsZ7UH4GN+oODl2ShDye3ys3K59vYaMrDL 1wrSZmyyfTV0IV/0NmFo0WmKAc8issEyWESl3/iTdqtYi+/6L+Sb4s0Li0C/1vs1 QqSrqVWwvCBg588WDTgYaGnIyavrOiWQmmr5CcJdPln6wZdkEAZU2TZrCk1Hp5mx GztnPB55/pzdvA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:47:15 2025 by rpki-client