This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: HnzLXgfKFJ1/NNCWrUCNwot7Udp+5p0NmzMDFyemMQA= Subject key identifier: E9:D1:97:8B:82:5E:48:A9:BD:FA:DC:31:FA:E3:44:4C:31:7E:0F:90 Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019B0DB6D04B56E15F7A43CEF7C89B3900AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 087E Signing time: Thu 11 Dec 2025 14:00:43 +0000 Manifest this update: Thu 11 Dec 2025 14:00:43 +0000 Manifest next update: Fri 12 Dec 2025 14:00:43 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: uAo8bg37zLdxc4Umgr6hTcPQURnrIs0oroLhmkyjKw8=) 2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:d0:4b:56:e1:5f:7a:43:ce:f7:c8:9b:39:00:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Dec 11 14:00:43 2025 GMT Not After : Dec 12 14:00:43 2025 GMT Subject: CN=e9d1978b825e48a9bdfadc31fae3444c317e0f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:3b:66:e7:b2:18:a4:f0:7b:17:89:25:46: c7:79:dd:56:d9:39:d5:15:3e:64:1a:29:41:75:3e: eb:32:92:fe:d6:87:0e:09:ab:55:cf:ab:c8:72:ec: 50:5e:4c:9f:13:95:7e:43:f4:87:eb:cd:53:99:e5: d5:e1:1d:de:b1:17:84:0d:7e:28:eb:08:ef:8e:86: 93:6a:8d:8c:1e:85:a5:c5:4d:19:33:58:79:c0:61: 7e:ef:ae:82:45:4d:e8:53:c5:ee:d1:9e:f6:f2:59: 66:cd:a3:a2:b1:20:fa:d9:b1:a1:75:0e:b5:e6:7f: 8e:ae:ee:44:b7:99:a2:85:9a:76:fb:3e:eb:68:ec: de:7d:2e:1a:19:44:42:c8:e5:ad:a7:1b:76:41:ef: 6e:22:ed:e0:a7:22:cd:cf:3e:42:df:20:17:6a:8b: 7a:b9:45:b3:b0:6d:e4:56:09:33:9f:c6:ac:32:2a: 5f:d8:6d:83:6d:a9:94:93:9f:2d:10:57:73:ab:08: 5f:fb:b3:74:65:e2:59:ed:f8:55:de:8c:5b:20:5d: ed:19:d7:5d:75:8f:f4:36:1c:17:6a:72:0c:1a:6a: 9e:b8:06:45:98:79:15:7c:c5:35:eb:2e:04:58:bc: fe:43:03:73:f4:d8:0c:0b:55:65:2c:52:ef:6d:0a: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D1:97:8B:82:5E:48:A9:BD:FA:DC:31:FA:E3:44:4C:31:7E:0F:90 X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:19:e4:ac:f1:73:e1:f9:2c:37:17:5b:06:ea:6b:6d:70:69: 4b:86:fe:75:17:29:fa:3d:8a:6f:59:d2:4f:1e:cc:a1:52:ef: 4a:e3:f0:66:9f:9c:e8:19:d8:8f:48:60:0d:59:75:de:44:1c: 66:40:31:b8:33:de:6e:9b:56:32:d0:74:dd:7b:49:1b:d6:8c: d2:fc:8f:dd:dd:d8:f3:37:4a:ae:96:28:f9:98:a3:40:18:7b: ba:f3:7b:71:9f:56:54:e0:cd:73:98:20:84:a3:e0:33:69:48: d9:6f:cc:31:e6:df:9b:bb:60:b0:a0:d6:83:11:29:7f:40:a2: 28:32:04:12:6f:f2:dc:ee:87:f8:2f:38:84:42:6a:ef:42:f4: 4f:0d:6e:a9:db:62:61:43:bb:5a:bc:50:dc:14:c5:ff:ee:04: 14:b3:bb:1e:f9:fc:0e:57:70:7d:31:b7:de:df:30:49:92:a0: 5c:b9:36:62:79:ba:8d:74:66:9f:4e:66:a9:db:35:9c:66:8f: 35:b5:ed:f1:dd:2c:b2:48:18:32:df:ef:fc:8d:d1:6c:da:94: 42:ea:76:f4:db:0c:46:62:13:b6:60:56:e8:ea:de:57:77:0b: 72:a1:be:b2:90:49:50:0f:63:a7:f8:ad:f3:51:b7:05:d2:05: 63:e6:34:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNttBLVuFfekPO98ibOQCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjUxMjExMTQwMDQzWhcNMjUxMjEyMTQwMDQzWjAzMTEwLwYDVQQD EyhlOWQxOTc4YjgyNWU0OGE5YmRmYWRjMzFmYWUzNDQ0YzMxN2UwZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXw7ZueyGKTwexeJJUbHed1W2TnV FT5kGilBdT7rMpL+1ocOCatVz6vIcuxQXkyfE5V+Q/SH681TmeXV4R3esReEDX4o 6wjvjoaTao2MHoWlxU0ZM1h5wGF+766CRU3oU8Xu0Z728llmzaOisSD62bGhdQ61 5n+Oru5Et5mihZp2+z7raOzefS4aGURCyOWtpxt2Qe9uIu3gpyLNzz5C3yAXaot6 uUWzsG3kVgkzn8asMipf2G2DbamUk58tEFdzqwhf+7N0ZeJZ7fhV3oxbIF3tGddd dY/0NhwXanIMGmqeuAZFmHkVfMU16y4EWLz+QwNz9NgMC1VlLFLvbQq/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnRl4uCXkipvfrcMfrjREwxfg+QMB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxnkrPFz 4fksNxdbBuprbXBpS4b+dRcp+j2Kb1nSTx7MoVLvSuPwZp+c6BnYj0hgDVl13kQc ZkAxuDPebptWMtB03XtJG9aM0vyP3d3Y8zdKrpYo+ZijQBh7uvN7cZ9WVODNc5gg hKPgM2lI2W/MMebfm7tgsKDWgxEpf0CiKDIEEm/y3O6H+C84hEJq70L0Tw1uqdti YUO7WrxQ3BTF/+4EFLO7Hvn8DldwfTG33t8wSZKgXLk2Ynm6jXRmn05mqds1nGaP NbXt8d0sskgYMt/v/I3RbNqUQup29NsMRmITtmBW6OreV3cLcqG+spBJUA9jp/it 81G3BdIFY+Y0og== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:15 2025 by rpki-client