This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json) Hash identifier: BdVE6okwK4c2AmWG0XH6NqFim/Ytgb0I9RL/qe0RLtg= Subject key identifier: 8B:35:13:8A:A9:C0:5A:12:E0:2F:A7:A9:58:52:EB:39:D0:29:CB:E7 Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Certificate serial: 019B2551F87C505E1ABDC600E51447902671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft Manifest number: 12FC Signing time: Tue 16 Dec 2025 04:01:27 +0000 Manifest this update: Tue 16 Dec 2025 04:01:27 +0000 Manifest next update: Wed 17 Dec 2025 04:01:27 +0000 Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=) 2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: p6vNBpnsYf7OcsbNuj4HLCf8gS/VyBslcogeU/BwvHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:f8:7c:50:5e:1a:bd:c6:00:e5:14:47:90:26:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Validity Not Before: Dec 16 04:01:27 2025 GMT Not After : Dec 17 04:01:27 2025 GMT Subject: CN=8b35138aa9c05a12e02fa7a95852eb39d029cbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:d1:53:06:f8:52:f1:b6:88:db:0b:ee:58: ff:28:f2:b9:7a:24:0d:f9:1d:fa:f4:32:23:a7:d0: d1:f6:94:14:ad:3e:27:e1:e9:91:11:08:62:4a:49: 19:24:9f:b0:e7:86:33:3a:a4:d8:ba:19:1f:79:ad: be:9a:1d:e5:2e:88:0f:99:f1:45:62:c0:f1:86:e2: a5:b0:31:ff:58:f5:64:58:a4:42:34:69:7a:c8:94: 58:d3:2b:10:16:ef:6e:8a:02:0c:af:1c:05:42:69: 54:ef:1c:d6:c0:f6:8a:da:a2:65:29:23:9e:ee:4b: 85:e8:c6:a6:59:b8:d7:69:e5:17:57:6f:ec:44:e9: a4:e4:22:43:7b:4b:b9:d6:35:75:2c:12:e3:bb:57: 68:be:da:13:fe:51:d0:38:3f:00:71:15:e6:cb:54: f8:da:04:d9:a3:ee:e7:4e:b4:54:26:83:6d:b4:0d: 60:69:e3:ad:f6:a1:55:e6:9e:c7:c2:07:63:60:67: ff:a6:7b:07:ae:f8:a4:44:57:ac:f1:c5:c9:5a:c6: ba:ee:e9:52:f9:75:bb:67:40:25:0a:d4:57:57:6b: 61:aa:6c:fc:71:f1:42:74:f8:e0:de:1c:21:8b:3d: c7:2e:13:52:63:45:0d:8d:b8:16:b2:90:1d:9a:e6: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:35:13:8A:A9:C0:5A:12:E0:2F:A7:A9:58:52:EB:39:D0:29:CB:E7 X509v3 Authority Key Identifier: keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f9:aa:ac:72:c8:2f:c9:00:ed:53:ac:18:b8:8c:28:da:08: c9:cf:26:39:7f:47:67:9b:30:89:f9:17:bd:7f:5b:e3:51:fd: 1d:84:66:8a:66:b3:0c:d1:13:6c:d1:f7:d1:1d:ee:6b:0a:5a: 46:5a:73:96:6b:4b:34:0c:08:c2:7d:13:5d:f6:4a:af:86:d4: 7b:b2:34:43:80:29:e0:b3:5f:5e:64:aa:8a:6d:ba:95:53:7e: e3:59:72:f0:21:ad:ca:1b:97:dd:da:f2:8d:bf:1b:6f:66:48: 61:6a:70:4b:7c:33:b4:ca:14:0c:10:c3:14:52:41:d2:87:93: 10:97:4a:8f:31:40:72:82:c7:af:84:d3:01:2e:42:41:2f:6a: 9a:1f:da:58:e9:81:e6:57:63:ac:f4:40:c8:60:6a:8c:43:08: 36:65:11:b8:30:40:d4:e7:a4:b9:63:88:80:b3:19:7b:91:1f: 6d:44:00:ea:c5:f6:ca:eb:eb:e3:06:fa:ca:ff:cd:3a:56:0e: 3c:7f:11:94:a0:d6:91:15:ba:9c:ff:ca:d3:8f:81:60:5a:2d: 3d:94:e5:c4:41:88:69:32:a7:4c:1d:ce:a3:94:fe:ed:a8:ef: e9:f4:25:c6:f8:78:e6:6a:67:2b:1e:6f:ef:6c:43:73:15:30: 70:d5:63:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUfh8UF4avcYA5RRHkCZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj ZDllYzkwHhcNMjUxMjE2MDQwMTI3WhcNMjUxMjE3MDQwMTI3WjAzMTEwLwYDVQQD Eyg4YjM1MTM4YWE5YzA1YTEyZTAyZmE3YTk1ODUyZWIzOWQwMjljYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLnRUwb4UvG2iNsL7lj/KPK5eiQN +R369DIjp9DR9pQUrT4n4emREQhiSkkZJJ+w54YzOqTYuhkfea2+mh3lLogPmfFF YsDxhuKlsDH/WPVkWKRCNGl6yJRY0ysQFu9uigIMrxwFQmlU7xzWwPaK2qJlKSOe 7kuF6MamWbjXaeUXV2/sROmk5CJDe0u51jV1LBLju1dovtoT/lHQOD8AcRXmy1T4 2gTZo+7nTrRUJoNttA1gaeOt9qFV5p7HwgdjYGf/pnsHrvikRFes8cXJWsa67ulS +XW7Z0AlCtRXV2thqmz8cfFCdPjg3hwhiz3HLhNSY0UNjbgWspAdmubV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs1E4qpwFoS4C+nqVhS6znQKcvnMB8GA1UdIwQY MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct NWMzZGI5OGJmODY0LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0 LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfmqrHLI L8kA7VOsGLiMKNoIyc8mOX9HZ5swifkXvX9b41H9HYRmimazDNETbNH30R3uawpa RlpzlmtLNAwIwn0TXfZKr4bUe7I0Q4Ap4LNfXmSqim26lVN+41ly8CGtyhuX3dry jb8bb2ZIYWpwS3wztMoUDBDDFFJB0oeTEJdKjzFAcoLHr4TTAS5CQS9qmh/aWOmB 5ldjrPRAyGBqjEMINmURuDBA1OekuWOIgLMZe5EfbUQA6sX2yuvr4wb6yv/NOlYO PH8RlKDWkRW6nP/K04+BYFotPZTlxEGIaTKnTB3Oo5T+7ajv6fQlxvh45mpnKx5v 72xDcxUwcNVj4A== -----END CERTIFICATE-----Generated at Tue Dec 16 10:57:11 2025 by rpki-client