This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json) Hash identifier: 3h7lV77R642GvtJnO8mS+EkYR2QpGb+0AvQk5WKezA4= Subject key identifier: D5:54:3C:7B:9A:3C:EA:21:B8:EA:02:41:BE:57:F2:29:D9:27:5F:C9 Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Certificate serial: 019B5B9ADF3FFBD72D6A29597722B3745F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft Manifest number: 15EF Signing time: Fri 26 Dec 2025 17:00:34 +0000 Manifest this update: Fri 26 Dec 2025 17:00:34 +0000 Manifest next update: Sat 27 Dec 2025 17:00:34 +0000 Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=) 2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: KooFnIiySXit34gIGLPq5M9Xk+QZFXU0EU+rjJF7U+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9a:df:3f:fb:d7:2d:6a:29:59:77:22:b3:74:5f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Validity Not Before: Dec 26 17:00:34 2025 GMT Not After : Dec 27 17:00:34 2025 GMT Subject: CN=d5543c7b9a3cea21b8ea0241be57f229d9275fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:1b:e9:da:da:1f:19:2a:39:5d:63:99:6f: bf:5b:83:71:2b:de:fa:cd:00:b1:a1:2d:96:46:95: 76:17:03:24:f5:d9:1c:39:68:25:19:ec:91:0a:3e: 49:d6:43:78:c7:b4:dc:7d:f2:43:5e:8f:c3:ed:3f: 30:c9:11:71:72:c6:45:6e:74:27:02:a5:8a:64:ce: 9b:89:d2:c8:be:df:ec:24:87:33:2d:57:9d:56:e9: ad:07:2f:35:91:ac:9e:5d:e6:cd:29:e9:bc:f5:af: c4:0f:a2:25:d9:64:11:d8:35:20:e8:35:bb:51:0a: 26:d8:d2:57:30:64:dd:be:82:ed:47:64:67:0f:84: d1:9e:8a:f6:58:cd:7f:33:09:a5:59:9b:16:9f:17: 02:87:ae:a4:17:2c:fe:00:ca:ca:31:ab:03:27:a4: 87:bc:a4:34:5e:07:52:55:f5:d7:86:16:eb:12:12: 6c:2f:75:2f:26:30:71:b2:35:07:93:15:c0:fc:a0: f7:0c:2b:2b:48:e9:34:98:ab:4f:d0:38:9e:41:ed: 17:6e:66:99:23:4f:d8:ef:ae:9b:7b:cf:7c:37:15: d7:90:25:76:97:00:f8:3c:a5:b1:3e:66:30:5f:6b: 2e:00:4e:26:9b:20:f9:8b:4a:1e:66:c8:45:27:df: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:3C:7B:9A:3C:EA:21:B8:EA:02:41:BE:57:F2:29:D9:27:5F:C9 X509v3 Authority Key Identifier: keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:89:8c:4d:69:65:35:80:31:26:6f:b6:c5:eb:39:0f:ee: 51:a8:01:fa:56:d1:9a:f8:f3:25:e9:fa:79:3d:c0:5d:e8:c1: 60:e0:fd:e9:d4:a4:01:55:ef:8c:d3:55:3a:76:9c:8e:ba:ae: b3:e9:19:15:3a:54:96:60:54:7f:7e:9c:2b:52:48:18:6c:c4: 74:41:bb:17:7b:4e:3b:fb:f4:e9:c4:65:59:e9:4d:31:b4:72: 1c:f9:d0:77:5d:0f:5b:e5:ac:3d:a2:8a:54:2d:0e:e3:19:93: 4a:97:60:4c:af:f2:cc:46:bb:ab:00:86:87:dd:a0:96:11:52: 6c:86:5b:5c:83:5a:6d:c3:e2:c2:1c:f4:69:d7:f0:54:e7:1d: 07:7f:fb:99:d0:45:4b:e8:53:b3:fd:72:9d:f8:90:9f:29:bb: 86:a7:3b:98:8e:92:3e:19:5b:7e:ab:62:4b:ea:52:78:f7:54: a4:9f:7c:36:1e:97:88:48:1a:7f:23:2f:2d:80:fb:64:c8:4d: 08:34:74:0e:54:3c:8a:f1:45:f0:c8:df:cb:3c:6d:93:74:75: 30:c9:8e:4e:da:21:9f:35:80:05:d9:4f:e0:d6:71:27:22:6f: f5:be:39:76:6b:8e:3b:9b:2a:d0:9b:92:4a:c8:a4:19:6a:30: 62:06:15:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmt8/+9ctailZdyKzdF8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4 N2E4ZDMwHhcNMjUxMjI2MTcwMDM0WhcNMjUxMjI3MTcwMDM0WjAzMTEwLwYDVQQD EyhkNTU0M2M3YjlhM2NlYTIxYjhlYTAyNDFiZTU3ZjIyOWQ5Mjc1ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSQb6draHxkqOV1jmW+/W4NxK976 zQCxoS2WRpV2FwMk9dkcOWglGeyRCj5J1kN4x7TcffJDXo/D7T8wyRFxcsZFbnQn AqWKZM6bidLIvt/sJIczLVedVumtBy81kayeXebNKem89a/ED6Il2WQR2DUg6DW7 UQom2NJXMGTdvoLtR2RnD4TRnor2WM1/MwmlWZsWnxcCh66kFyz+AMrKMasDJ6SH vKQ0XgdSVfXXhhbrEhJsL3UvJjBxsjUHkxXA/KD3DCsrSOk0mKtP0DieQe0XbmaZ I0/Y766be898NxXXkCV2lwD4PKWxPmYwX2suAE4mmyD5i0oeZshFJ99TpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVUPHuaPOohuOoCQb5X8inZJ1/JMB8GA1UdIwQY MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQGJjE1p ZTWAMSZvtsXrOQ/uUagB+lbRmvjzJen6eT3AXejBYOD96dSkAVXvjNNVOnacjrqu s+kZFTpUlmBUf36cK1JIGGzEdEG7F3tOO/v06cRlWelNMbRyHPnQd10PW+WsPaKK VC0O4xmTSpdgTK/yzEa7qwCGh92glhFSbIZbXINabcPiwhz0adfwVOcdB3/7mdBF S+hTs/1ynfiQnym7hqc7mI6SPhlbfqtiS+pSePdUpJ98Nh6XiEgafyMvLYD7ZMhN CDR0DlQ8ivFF8Mjfyzxtk3R1MMmOTtohnzWABdlP4NZxJyJv9b45dmuOO5sq0JuS SsikGWowYgYV3w== -----END CERTIFICATE-----Generated at Fri Dec 26 22:46:13 2025 by rpki-client