This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft File: vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json) Hash identifier: OMhcPGaPOVuREKfOw3gflDR7r7ep4Gfw7EuqfkelhjQ= Subject key identifier: AB:22:D1:C1:15:59:58:A0:66:68:06:5C:BE:0E:78:7C:DF:31:59:61 Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB Certificate issuer: /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Certificate serial: 019B32315E44C89B33A109C0C17D39319096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft Manifest number: 0441 Signing time: Thu 18 Dec 2025 16:00:54 +0000 Manifest this update: Thu 18 Dec 2025 16:00:54 +0000 Manifest next update: Fri 19 Dec 2025 16:00:54 +0000 Files and hashes: 1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=) 2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: LJxrZ3ajvahGVlEB7z7Nf5lOG2ZgTWwMD86Pi8wWsQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:5e:44:c8:9b:33:a1:09:c0:c1:7d:39:31:90:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb Validity Not Before: Dec 18 16:00:54 2025 GMT Not After : Dec 19 16:00:54 2025 GMT Subject: CN=ab22d1c1155958a06668065cbe0e787cdf315961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:f0:6e:47:c4:e9:f1:e5:e5:33:1f:f7:da: 94:0d:6a:96:a4:e3:c1:3d:cb:22:a9:8c:8b:68:f4: 1c:b9:bc:03:e8:2b:6e:5a:22:0e:81:0c:a2:2f:0d: 3e:4b:a5:26:ec:3f:53:20:7e:21:28:60:09:d1:bd: 31:cd:c4:92:d2:4d:11:f9:af:2c:a5:a5:4e:c2:c7: 1c:ed:a8:84:2e:fb:f4:56:85:4f:56:02:d6:31:a5: b3:69:2b:7e:5f:56:d2:e3:a3:b7:5d:21:c2:36:19: 84:01:e3:6f:83:3b:c9:15:53:77:c1:7a:7a:c5:9d: 80:4a:33:25:62:92:73:b3:99:de:80:fc:8e:28:e4: 40:15:f8:37:77:fa:5e:77:7d:23:4f:e0:47:80:2a: 52:65:f3:bd:d9:18:6c:0a:37:25:24:5e:c5:4e:bc: c9:0b:bb:4d:02:41:65:af:86:3f:33:8d:31:da:77: c5:39:4f:1e:94:5f:f6:01:62:6e:fd:e6:07:56:91: 11:72:72:d0:21:88:d6:f8:0f:42:a0:9c:b9:7f:f0: 28:27:bd:38:d4:1e:d0:57:19:26:52:e2:57:26:75: 00:b1:d9:a4:c5:48:3d:ef:de:6b:91:94:bf:d9:ad: c8:5d:3b:ec:82:12:17:71:91:fa:99:d0:19:cd:9e: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:D1:C1:15:59:58:A0:66:68:06:5C:BE:0E:78:7C:DF:31:59:61 X509v3 Authority Key Identifier: keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cd:83:48:ba:ee:e3:0f:7c:9e:0f:da:ee:5f:25:75:58:31: de:2c:d0:f2:03:72:f6:20:e9:a3:1f:6c:4f:eb:0a:38:10:23: d0:07:ef:40:3d:57:5d:d0:6a:c6:9c:de:b9:d9:c4:f8:db:8c: bb:71:2c:fe:e4:f3:f4:61:91:43:3e:d0:c2:3b:d0:0f:55:60: a5:c7:3c:81:5e:0e:3f:62:1c:b6:a5:6f:3a:27:5c:46:ad:82: 70:0d:75:2c:e7:51:ce:4a:f8:b2:3f:bc:e9:c7:44:b0:6f:d2: 37:34:7b:31:77:d2:d1:12:a8:27:80:de:73:6e:8a:38:2d:bd: 6c:47:0e:69:a9:9f:29:6c:85:5e:4f:69:88:3d:94:d7:db:10: 2b:53:23:b6:68:2e:a4:01:dd:06:36:a8:6a:8d:f1:22:60:51: 66:65:21:a6:28:88:a4:75:21:13:b9:a9:9a:77:e9:fd:13:a5: 21:57:e9:83:15:c0:c9:ad:3d:53:da:4f:09:4c:ee:32:ab:8f: f6:3f:2f:f7:77:37:ee:bc:a2:16:f7:39:f9:26:ae:fe:b2:04: 2a:92:2f:66:5b:82:93:f3:6a:9c:13:ac:4f:31:48:48:a1:c9: c3:97:d5:38:1c:b1:80:5c:1b:ad:8c:2b:4a:6b:ea:18:08:63: ac:38:49:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMV5EyJszoQnAwX05MZCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlN2M3OWU5YTIxZGIyNmJkNmFlMDc1MDI3NmRiMWIwYWZh N2VjZGIwHhcNMjUxMjE4MTYwMDU0WhcNMjUxMjE5MTYwMDU0WjAzMTEwLwYDVQQD EyhhYjIyZDFjMTE1NTk1OGEwNjY2ODA2NWNiZTBlNzg3Y2RmMzE1OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/wbkfE6fHl5TMf99qUDWqWpOPB PcsiqYyLaPQcubwD6CtuWiIOgQyiLw0+S6Um7D9TIH4hKGAJ0b0xzcSS0k0R+a8s paVOwscc7aiELvv0VoVPVgLWMaWzaSt+X1bS46O3XSHCNhmEAeNvgzvJFVN3wXp6 xZ2ASjMlYpJzs5negPyOKORAFfg3d/ped30jT+BHgCpSZfO92RhsCjclJF7FTrzJ C7tNAkFlr4Y/M40x2nfFOU8elF/2AWJu/eYHVpERcnLQIYjW+A9CoJy5f/AoJ704 1B7QVxkmUuJXJnUAsdmkxUg9795rkZS/2a3IXTvsghIXcZH6mdAZzZ6t5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsi0cEVWVigZmgGXL4OeHzfMVlhMB8GA1UdIwQY MBaAFL58eemiHbJr1q4HUCdtsbCvp+zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMt Y2ZlMmM3ZmYwMThiLzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMtY2ZlMmM3ZmYwMThi LzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn82DSLru 4w98ng/a7l8ldVgx3izQ8gNy9iDpox9sT+sKOBAj0AfvQD1XXdBqxpzeudnE+NuM u3Es/uTz9GGRQz7QwjvQD1Vgpcc8gV4OP2IctqVvOidcRq2CcA11LOdRzkr4sj+8 6cdEsG/SNzR7MXfS0RKoJ4Dec26KOC29bEcOaamfKWyFXk9piD2U19sQK1Mjtmgu pAHdBjaoao3xImBRZmUhpiiIpHUhE7mpmnfp/ROlIVfpgxXAya09U9pPCUzuMquP 9j8v93c37ryiFvc5+Sau/rIEKpIvZluCk/NqnBOsTzFISKHJw5fVOByxgFwbrYwr SmvqGAhjrDhJIg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:22 2025 by rpki-client