This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json) Hash identifier: YQohpETJd6NdXlQ1Nfq+HMcefGkzasWHLZylUFw/7IQ= Subject key identifier: 0E:D3:2E:8C:CA:97:8B:22:F8:FB:DD:ED:0F:F0:00:1F:A4:BA:64:8A Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Certificate serial: 019B5A1AE3C1169A0DFA365A46A56D390680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft Manifest number: 0BF8 Signing time: Fri 26 Dec 2025 10:01:10 +0000 Manifest this update: Fri 26 Dec 2025 10:01:10 +0000 Manifest next update: Sat 27 Dec 2025 10:01:10 +0000 Files and hashes: 1: LBrII0meAx8QWA02SN2ZRJzJHAs.asa (hash: curHeTVsTIYmnw+ZQWffVJrl51KIKs9/8kuP50nyLSE=) 2: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: bCLrD3/yp6x0d4YSDdqA7WDtv87zQM1Eagr2nR6yTHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:e3:c1:16:9a:0d:fa:36:5a:46:a5:6d:39:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Validity Not Before: Dec 26 10:01:10 2025 GMT Not After : Dec 27 10:01:10 2025 GMT Subject: CN=0ed32e8cca978b22f8fbdded0ff0001fa4ba648a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:78:e6:ab:d9:a1:f6:e2:18:10:d8:c9:80: 61:63:d2:40:dd:04:db:85:82:95:94:ed:2e:f8:db: 0a:de:41:e4:eb:6b:47:57:19:0b:a7:17:66:85:4b: 02:bf:d7:64:f2:6f:78:ec:0b:c6:b5:62:90:0b:71: d8:50:b8:af:0e:ae:4c:03:92:15:d2:ec:47:82:c3: 0b:91:8e:f5:d4:56:29:3d:a9:b1:2d:f0:f2:04:65: 82:18:2c:c2:1d:0d:5b:24:20:1e:7f:cd:4d:04:2f: df:fb:76:c2:36:ee:5f:f2:07:8e:28:50:85:e5:e7: b5:b8:58:0b:b6:80:70:87:31:22:20:b1:a1:19:4a: de:e7:ca:c7:56:cc:00:8f:21:ec:97:e8:86:64:ed: 95:de:35:91:8e:90:82:cc:c2:19:fa:7e:d7:98:08: 40:e0:f0:f3:ce:43:90:27:3e:5c:70:76:02:0c:21: 43:ed:80:c2:f6:94:e6:73:6a:5d:b0:fd:48:77:f6: 23:3a:0d:73:fe:4c:68:52:d8:cd:c9:84:62:9b:e7: af:0d:1c:50:90:ec:60:c4:c9:3c:11:8d:88:24:2c: 9a:e0:e5:f7:f7:b0:8a:c6:1f:b8:0b:c1:e1:b6:29: 0d:1f:15:70:08:48:bf:fb:34:88:91:07:2e:31:9b: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D3:2E:8C:CA:97:8B:22:F8:FB:DD:ED:0F:F0:00:1F:A4:BA:64:8A X509v3 Authority Key Identifier: keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:83:21:03:28:93:f0:7e:99:b1:02:c5:2c:12:f2:40:dd: 2c:6f:6b:82:1a:a7:32:dc:e0:c3:61:4a:dc:19:51:7b:40:5d: 27:6c:d0:58:54:59:9e:44:8b:0b:72:16:b2:0d:c0:03:57:b0: 29:23:80:c5:5c:06:ae:22:47:17:fc:72:87:91:cb:b1:fe:c3: 17:d0:6f:7a:a5:5e:ab:61:4b:7c:72:3b:0b:18:a2:09:28:e9: 3f:38:cd:1f:eb:6d:6e:94:59:71:e9:c1:c4:fe:c4:bb:ea:77: af:73:11:54:ea:7e:9d:55:3b:f3:04:39:d1:26:0c:c7:1f:83: e6:69:48:fd:34:bc:12:81:c7:bd:84:c7:b2:07:8c:84:e3:a9: ab:00:75:d0:44:c3:3e:db:8b:1b:35:38:65:9d:5a:f3:47:43: 55:fc:8f:c3:9d:de:a6:00:f1:a1:4f:7b:09:fb:fc:76:ab:2d: c5:6b:95:3a:93:a5:ac:ea:4c:6a:a7:dc:4d:50:18:a9:bb:db: e9:c2:e5:1e:86:9e:c8:c0:fa:0d:73:d6:fa:44:a5:ad:a2:ca: 88:d6:24:78:1e:81:6e:6e:c0:52:f9:db:58:8f:d2:53:b9:f5: b1:c9:4c:a5:07:01:6e:85:31:2e:0d:b5:c0:bc:75:b2:6c:f1: 97:2c:66:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuPBFpoN+jZaRqVtOQaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx YzdlNGUwHhcNMjUxMjI2MTAwMTEwWhcNMjUxMjI3MTAwMTEwWjAzMTEwLwYDVQQD EygwZWQzMmU4Y2NhOTc4YjIyZjhmYmRkZWQwZmYwMDAxZmE0YmE2NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk545qvZofbiGBDYyYBhY9JA3QTb hYKVlO0u+NsK3kHk62tHVxkLpxdmhUsCv9dk8m947AvGtWKQC3HYULivDq5MA5IV 0uxHgsMLkY711FYpPamxLfDyBGWCGCzCHQ1bJCAef81NBC/f+3bCNu5f8geOKFCF 5ee1uFgLtoBwhzEiILGhGUre58rHVswAjyHsl+iGZO2V3jWRjpCCzMIZ+n7XmAhA 4PDzzkOQJz5ccHYCDCFD7YDC9pTmc2pdsP1Id/YjOg1z/kxoUtjNyYRim+evDRxQ kOxgxMk8EY2IJCya4OX397CKxh+4C8HhtikNHxVwCEi/+zSIkQcuMZudowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7TLozKl4si+Pvd7Q/wAB+kumSKMB8GA1UdIwQY MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZiDIQMo k/B+mbECxSwS8kDdLG9rghqnMtzgw2FK3BlRe0BdJ2zQWFRZnkSLC3IWsg3AA1ew KSOAxVwGriJHF/xyh5HLsf7DF9BveqVeq2FLfHI7CxiiCSjpPzjNH+ttbpRZcenB xP7Eu+p3r3MRVOp+nVU78wQ50SYMxx+D5mlI/TS8EoHHvYTHsgeMhOOpqwB10ETD PtuLGzU4ZZ1a80dDVfyPw53epgDxoU97Cfv8dqstxWuVOpOlrOpMaqfcTVAYqbvb 6cLlHoaeyMD6DXPW+kSlraLKiNYkeB6Bbm7AUvnbWI/SU7n1sclMpQcBboUxLg21 wLx1smzxlyxmDg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client