This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft File: VNZdBt4mXaK11YjgbfiBbvRbLhc.mft (raw, json) Hash identifier: ts3F/wQqXXXzyX31Rda192uaEUSg2lO8Hz1oYV8FEMM= Subject key identifier: 20:6A:58:8F:CC:06:51:E7:6D:EC:3C:6C:33:93:6C:F0:FD:21:4A:63 Authority key identifier: 54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 Certificate issuer: /CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Certificate serial: 019AF79D523B094BD688E18E304478E355EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft Manifest number: 04 Signing time: Sun 07 Dec 2025 07:01:13 +0000 Manifest this update: Sun 07 Dec 2025 07:01:13 +0000 Manifest next update: Mon 08 Dec 2025 07:01:13 +0000 Files and hashes: 1: VNZdBt4mXaK11YjgbfiBbvRbLhc.crl (hash: tg2WYdAl5TQ2EaGfBn8xna9ZpbhkTwzH9YKFTMPeMfI=) 2: VmP0ATIzlJZzuZmxdiDwxRRvSuY.asa (hash: QDqtnVv0GAfDesodj0ytNnBt7Z3JzA38fwKzHLeXSEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:52:3b:09:4b:d6:88:e1:8e:30:44:78:e3:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d65d06de265da2b5d588e06df8816ef45b2e17 Validity Not Before: Dec 7 07:01:13 2025 GMT Not After : Dec 8 07:01:13 2025 GMT Subject: CN=206a588fcc0651e76dec3c6c33936cf0fd214a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:53:2c:16:d4:7c:4e:6e:df:e1:13:b9:7b: 6e:c2:37:c8:36:41:e4:48:c7:d8:cd:1c:3c:b4:8a: 84:2a:e2:7e:db:8d:6a:19:ba:a8:b4:ef:7d:11:b7: f6:9d:56:75:0e:bd:33:92:3c:85:79:9f:cc:a4:25: 83:8b:54:a5:c1:54:28:3b:4e:13:d8:a3:10:c7:b1: 02:7d:71:36:a2:68:fd:22:89:f3:9f:3c:00:bc:cb: 6b:52:b6:29:55:4d:21:bd:06:6b:ab:9e:fd:f2:7c: bc:4f:10:1a:b1:1a:dc:04:ed:42:1c:42:52:c4:32: 2c:21:a6:ba:15:f4:64:03:ce:3e:86:6b:d6:4e:69: 20:a2:46:fd:e5:00:cc:81:3b:f7:0d:f2:50:5c:e8: 90:b4:d8:2f:42:7c:ba:51:e3:82:e2:5a:b0:bf:65: 06:83:24:9c:cd:fa:12:84:2e:31:76:43:77:6d:f3: 5b:ce:48:ea:6d:3b:a5:77:31:80:0c:bf:9a:42:9d: 80:f8:b6:66:4d:4f:ca:0f:59:9d:19:80:2d:5e:0c: e1:e4:61:39:a3:66:85:43:5e:54:45:f2:e2:11:fc: c4:c2:34:9d:07:e8:de:b4:11:48:ff:87:2f:c3:e4: c8:9b:62:f3:ca:51:d4:1e:c5:cb:43:33:d3:0f:b3: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:58:8F:CC:06:51:E7:6D:EC:3C:6C:33:93:6C:F0:FD:21:4A:63 X509v3 Authority Key Identifier: keyid:54:D6:5D:06:DE:26:5D:A2:B5:D5:88:E0:6D:F8:81:6E:F4:5B:2E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNZdBt4mXaK11YjgbfiBbvRbLhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/VNZdBt4mXaK11YjgbfiBbvRbLhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5c:00:43:5b:1b:34:3a:34:1b:0c:aa:8d:08:73:42:e7:b2: 5c:ac:f7:1d:68:1b:8f:09:9c:97:9c:d2:0e:8e:0f:e9:78:1c: 14:7b:6b:cc:e8:85:ca:21:3d:7a:62:74:01:21:dc:41:51:12: ec:61:fb:f1:b7:64:7a:05:a6:ce:0c:64:42:0c:c7:1b:b7:71: 2c:90:ff:47:96:45:00:a9:08:17:3c:0b:b2:8d:0c:0d:90:61: 6b:7b:f0:38:2b:61:bf:43:1c:9c:a2:56:ad:84:92:c0:27:23: fd:13:1b:03:a8:1c:5e:13:d9:ee:12:90:da:cb:38:02:1b:6a: d8:35:a9:07:60:fd:e4:dd:0d:60:26:98:f0:d1:bc:b2:29:bf: 23:41:9e:97:6b:18:95:f6:b1:b2:49:10:2e:2e:cd:3e:93:ce: 1d:54:36:af:27:32:6a:44:3f:da:09:a6:95:c0:82:bd:91:24: fb:61:5d:15:f5:fe:8e:6c:b2:85:21:cb:ae:c3:f4:d2:53:ca: e4:9f:92:dc:9a:ea:1d:3d:70:6a:a0:41:f7:2b:49:f3:a2:39: d0:c7:eb:94:c0:b2:fd:2e:82:99:4b:d9:a4:ca:fb:28:cc:3e: 2a:51:a6:c8:00:f6:80:1a:0b:16:14:f5:37:77:06:3b:33:8b: 40:a5:6d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nVI7CUvWiOGOMER441XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDY1ZDA2ZGUyNjVkYTJiNWQ1ODhlMDZkZjg4MTZlZjQ1 YjJlMTcwHhcNMjUxMjA3MDcwMTEzWhcNMjUxMjA4MDcwMTEzWjAzMTEwLwYDVQQD EygyMDZhNTg4ZmNjMDY1MWU3NmRlYzNjNmMzMzkzNmNmMGZkMjE0YTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyxTLBbUfE5u3+ETuXtuwjfINkHk SMfYzRw8tIqEKuJ+241qGbqotO99Ebf2nVZ1Dr0zkjyFeZ/MpCWDi1SlwVQoO04T 2KMQx7ECfXE2omj9IonznzwAvMtrUrYpVU0hvQZrq5798ny8TxAasRrcBO1CHEJS xDIsIaa6FfRkA84+hmvWTmkgokb95QDMgTv3DfJQXOiQtNgvQny6UeOC4lqwv2UG gySczfoShC4xdkN3bfNbzkjqbTuldzGADL+aQp2A+LZmTU/KD1mdGYAtXgzh5GE5 o2aFQ15URfLiEfzEwjSdB+jetBFI/4cvw+TIm2LzylHUHsXLQzPTD7MrjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBqWI/MBlHnbew8bDOTbPD9IUpjMB8GA1UdIwQY MBaAFFTWXQbeJl2itdWI4G34gW70Wy4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt YTEzOTc4NzBiMTY2LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2 LzEvVk5aZEJ0NG1YYUsxMVlqZ2JmaUJidlJiTGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1wAQ1sb NDo0GwyqjQhzQueyXKz3HWgbjwmcl5zSDo4P6XgcFHtrzOiFyiE9emJ0ASHcQVES 7GH78bdkegWmzgxkQgzHG7dxLJD/R5ZFAKkIFzwLso0MDZBha3vwOCthv0McnKJW rYSSwCcj/RMbA6gcXhPZ7hKQ2ss4Ahtq2DWpB2D95N0NYCaY8NG8sim/I0Gel2sY lfaxskkQLi7NPpPOHVQ2rycyakQ/2gmmlcCCvZEk+2FdFfX+jmyyhSHLrsP00lPK 5J+S3JrqHT1waqBB9ytJ86I50MfrlMCy/S6CmUvZpMr7KMw+KlGmyAD2gBoLFhT1 N3cGOzOLQKVtWg== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:45 2025 by rpki-client