This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: Jn+Xrr/O4hJAiW0/zEp37b2Lwq4VtFvsQwWRpyRUjHc= Subject key identifier: 01:6E:C7:2B:6F:52:7E:15:D5:68:99:33:1D:DF:32:78:8C:31:01:C4 Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019B3268C64BAF6F02E193AAC500E4D857F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 0891 Signing time: Thu 18 Dec 2025 17:01:25 +0000 Manifest this update: Thu 18 Dec 2025 17:01:25 +0000 Manifest next update: Fri 19 Dec 2025 17:01:25 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: d2wLMuqIepPgrXBnsL08d0N9WHU16mvlYG3MdrchkfI=) 2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:c6:4b:af:6f:02:e1:93:aa:c5:00:e4:d8:57:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Dec 18 17:01:25 2025 GMT Not After : Dec 19 17:01:25 2025 GMT Subject: CN=016ec72b6f527e15d56899331ddf32788c3101c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:ad:b2:e9:21:71:a3:76:38:a3:65:6e:bb: 39:3b:bb:ca:09:0a:e7:5e:33:79:92:69:86:ed:d1: 6e:4d:0d:7a:0d:c5:f0:95:55:7b:9a:2e:5e:e3:cd: 85:9a:08:45:0f:d5:b1:65:00:bc:50:4d:9e:61:f2: ab:7b:f4:43:b0:f0:a7:fa:f1:56:1b:1c:1e:b7:13: 17:f0:cd:93:7c:52:93:f6:4a:6a:61:a2:d1:21:ed: 0b:54:f6:2a:db:a4:37:88:a3:63:40:6c:ab:62:dd: 38:b3:f5:83:94:eb:a7:e6:9e:7f:83:ed:de:74:c7: 5f:7c:a0:8e:2a:93:3b:cd:e5:7f:bf:9e:59:60:76: b1:96:b4:25:7b:3c:ff:3a:3e:2e:c2:1a:fc:dd:17: 21:88:3e:27:9e:69:65:26:a0:1b:b5:fb:67:73:61: e6:da:b8:a4:ff:1e:5a:b2:52:47:86:2b:fc:6f:1a: cf:47:cf:f8:38:4b:d7:36:84:76:71:df:f5:74:6d: dd:90:91:46:b9:55:3d:2a:9a:e9:4b:54:f1:4d:78: 92:8b:9a:e7:4d:12:5b:6a:f8:72:ce:a5:c3:bb:42: 81:b7:c5:47:12:b4:09:50:19:e0:f0:db:f6:f1:cb: ff:91:33:ed:c4:06:15:66:8c:6a:51:08:39:bf:f0: d7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6E:C7:2B:6F:52:7E:15:D5:68:99:33:1D:DF:32:78:8C:31:01:C4 X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:42:3c:23:88:54:b1:d4:78:77:00:d1:3f:d4:e4:e0:9f:38: 14:06:4f:90:a2:d3:ff:b7:3d:74:12:71:6f:6e:72:a9:7d:fe: a9:a2:08:06:dd:68:35:a7:11:4c:f0:9a:7f:41:e7:2b:23:ed: 7b:0b:d5:3f:49:40:41:78:f1:2f:4b:9f:38:0a:15:c2:e5:23: ee:82:b5:d8:a0:df:52:90:a6:3a:8a:7c:e0:aa:14:4d:1c:67: 19:4a:e7:cd:7b:54:e6:de:59:fc:ad:4f:68:92:c7:ff:b4:fd: 25:b8:64:97:9c:78:9b:62:60:38:9e:c3:19:8a:ec:b7:8f:f5: 46:83:6d:b2:eb:62:70:8f:f5:6f:c6:5a:65:69:6a:40:5d:3d: 51:16:98:75:c9:d9:52:81:2d:60:5d:0b:26:2e:32:10:2c:f2: bb:2e:69:87:23:45:02:02:65:fc:ea:aa:f9:80:07:2c:3b:4c: cc:86:90:d9:6e:c6:27:29:8c:39:1a:c3:31:59:16:e4:64:12: 3c:61:35:c5:39:71:38:3e:4e:4e:80:73:92:39:b5:47:0d:3a: 7f:b8:74:95:34:fd:35:ff:ec:4a:75:e4:d5:5f:29:87:30:68: 23:f9:45:bf:f8:9b:03:2d:2b:60:cf:8a:79:d7:08:30:02:7b: 26:83:fd:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaMZLr28C4ZOqxQDk2Ff2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjUxMjE4MTcwMTI1WhcNMjUxMjE5MTcwMTI1WjAzMTEwLwYDVQQD EygwMTZlYzcyYjZmNTI3ZTE1ZDU2ODk5MzMxZGRmMzI3ODhjMzEwMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPatsukhcaN2OKNlbrs5O7vKCQrn XjN5kmmG7dFuTQ16DcXwlVV7mi5e482FmghFD9WxZQC8UE2eYfKre/RDsPCn+vFW GxwetxMX8M2TfFKT9kpqYaLRIe0LVPYq26Q3iKNjQGyrYt04s/WDlOun5p5/g+3e dMdffKCOKpM7zeV/v55ZYHaxlrQlezz/Oj4uwhr83RchiD4nnmllJqAbtftnc2Hm 2rik/x5aslJHhiv8bxrPR8/4OEvXNoR2cd/1dG3dkJFGuVU9KprpS1TxTXiSi5rn TRJbavhyzqXDu0KBt8VHErQJUBng8Nv28cv/kTPtxAYVZoxqUQg5v/DXhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFuxytvUn4V1WiZMx3fMniMMQHEMB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUI8I4hU sdR4dwDRP9Tk4J84FAZPkKLT/7c9dBJxb25yqX3+qaIIBt1oNacRTPCaf0HnKyPt ewvVP0lAQXjxL0ufOAoVwuUj7oK12KDfUpCmOop84KoUTRxnGUrnzXtU5t5Z/K1P aJLH/7T9Jbhkl5x4m2JgOJ7DGYrst4/1RoNtsuticI/1b8ZaZWlqQF09URaYdcnZ UoEtYF0LJi4yECzyuy5phyNFAgJl/Oqq+YAHLDtMzIaQ2W7GJymMORrDMVkW5GQS PGE1xTlxOD5OToBzkjm1Rw06f7h0lTT9Nf/sSnXk1V8phzBoI/lFv/ibAy0rYM+K edcIMAJ7JoP9Mw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:20 2025 by rpki-client