This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json) Hash identifier: XQjt+yBSbUL7rJZYF8qf3qWn1jCBpfvVWckrEPq+TJg= Subject key identifier: 69:56:1E:EC:33:5A:33:5B:B9:36:1B:23:1D:97:1D:99:F9:02:60:11 Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757 Certificate serial: 019B2363A503C0082AE1FC3D17CDAC6F9775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft Manifest number: 0BD5 Signing time: Mon 15 Dec 2025 19:01:31 +0000 Manifest this update: Mon 15 Dec 2025 19:01:31 +0000 Manifest next update: Tue 16 Dec 2025 19:01:31 +0000 Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: ovPztDTg0VN0qqU7M4E1YpMsXn740QUwuQzfAm5XNAo=) 2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:a5:03:c0:08:2a:e1:fc:3d:17:cd:ac:6f:97:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559349644323315f806dc64ca4d9ed9557762757 Validity Not Before: Dec 15 19:01:31 2025 GMT Not After : Dec 16 19:01:31 2025 GMT Subject: CN=69561eec335a335bb9361b231d971d99f9026011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:26:e9:44:f0:14:18:c9:d0:f7:c1:19:ef: 15:f4:97:85:70:2d:2d:38:13:c8:ed:15:a2:ae:1c: ae:94:85:8e:e8:32:5b:61:ea:db:5b:45:fd:2d:e9: 35:fc:c1:c6:28:04:6a:7a:ce:88:bb:04:55:a3:cf: fe:f6:44:fc:1e:c6:e9:a2:67:a8:55:46:70:52:51: 89:a1:2a:03:bb:00:35:eb:4a:6e:09:69:78:b0:56: 0d:45:28:f4:c4:36:37:57:4b:e4:8a:d0:b4:fb:01: 93:79:6f:34:aa:60:1b:0c:57:ac:40:3c:90:cf:e2: de:73:93:9d:04:39:c1:c3:18:10:6b:a9:b5:7f:eb: a4:29:e4:79:fa:d0:60:e4:d6:95:b1:81:8d:77:1e: 83:ed:e0:ad:ad:8d:7d:a1:21:1e:41:6f:4c:2b:14: 49:5c:5f:73:47:3d:22:2c:2d:bb:38:6c:24:4f:c7: 22:42:4b:76:94:54:f3:aa:d9:62:04:57:25:cb:d8: 6c:9a:8f:eb:24:b8:1f:98:e6:38:25:eb:57:98:bd: d5:92:97:b1:1d:8d:f7:b1:7e:eb:d5:52:fb:27:54: 21:cf:19:b0:60:36:da:78:a5:9c:cd:e3:08:c0:7d: 36:ed:d9:b9:41:cf:26:fc:d1:c3:ea:bf:24:bb:39: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:56:1E:EC:33:5A:33:5B:B9:36:1B:23:1D:97:1D:99:F9:02:60:11 X509v3 Authority Key Identifier: keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d0:a6:ec:b7:81:2c:cc:fe:87:6e:4d:cb:f3:01:67:6e:3b: 40:a9:c4:fd:9d:33:c4:dc:5d:67:89:c4:0f:dc:48:ee:bc:3f: cb:12:67:ab:19:30:d3:81:6e:43:16:32:78:36:e7:2c:7a:41: d1:9b:37:df:ee:2f:c0:79:bf:8e:20:9f:99:14:ff:d4:57:18: 60:af:98:0a:0c:30:ab:f2:14:f8:6d:ab:da:63:11:2d:2d:37: 0d:12:d0:58:70:32:62:65:99:e7:45:2c:d3:1a:a7:29:08:5d: 29:4d:9e:ae:0f:b4:e1:e1:03:51:cf:30:e5:a2:76:66:d4:a2: 9c:40:14:e1:bd:cc:da:21:fa:9d:1a:bc:d4:b9:9d:6f:a6:21: a3:c1:9c:ab:66:b3:0d:1b:ad:30:0f:ed:74:3a:7d:7e:0b:84: 4e:84:65:94:6f:c0:43:18:68:12:25:97:27:72:65:50:88:48: 74:35:b2:8b:de:3c:f4:b2:d6:99:1b:7d:ef:4f:dd:e4:41:76: 4f:12:0f:60:98:37:40:15:df:81:91:70:9a:69:57:2c:c7:5b: f3:55:3c:fa:4a:f8:bc:7d:64:18:41:5f:37:4b:61:d9:3e:00: de:9f:05:54:29:c2:23:ad:39:ec:e5:42:c4:e0:d1:15:f5:c8: a8:7f:a0:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY6UDwAgq4fw9F82sb5d1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3 NjI3NTcwHhcNMjUxMjE1MTkwMTMxWhcNMjUxMjE2MTkwMTMxWjAzMTEwLwYDVQQD Eyg2OTU2MWVlYzMzNWEzMzViYjkzNjFiMjMxZDk3MWQ5OWY5MDI2MDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVgm6UTwFBjJ0PfBGe8V9JeFcC0t OBPI7RWirhyulIWO6DJbYerbW0X9Lek1/MHGKARqes6IuwRVo8/+9kT8Hsbpomeo VUZwUlGJoSoDuwA160puCWl4sFYNRSj0xDY3V0vkitC0+wGTeW80qmAbDFesQDyQ z+Lec5OdBDnBwxgQa6m1f+ukKeR5+tBg5NaVsYGNdx6D7eCtrY19oSEeQW9MKxRJ XF9zRz0iLC27OGwkT8ciQkt2lFTzqtliBFcly9hsmo/rJLgfmOY4JetXmL3Vkpex HY33sX7r1VL7J1QhzxmwYDbaeKWczeMIwH027dm5Qc8m/NHD6r8kuzm0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlWHuwzWjNbuTYbIx2XHZn5AmARMB8GA1UdIwQY MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4 LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtCm7LeB LMz+h25Ny/MBZ247QKnE/Z0zxNxdZ4nED9xI7rw/yxJnqxkw04FuQxYyeDbnLHpB 0Zs33+4vwHm/jiCfmRT/1FcYYK+YCgwwq/IU+G2r2mMRLS03DRLQWHAyYmWZ50Us 0xqnKQhdKU2erg+04eEDUc8w5aJ2ZtSinEAU4b3M2iH6nRq81Lmdb6Yho8Gcq2az DRutMA/tdDp9fguEToRllG/AQxhoEiWXJ3JlUIhIdDWyi9489LLWmRt970/d5EF2 TxIPYJg3QBXfgZFwmmlXLMdb81U8+kr4vH1kGEFfN0th2T4A3p8FVCnCI6057OVC xODRFfXIqH+gSg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:45 2025 by rpki-client