This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json) Hash identifier: +5k/A0dfZn/L+zBKsVcO2mGCe+Agq1UQYyP3MY+8kQo= Subject key identifier: BF:8C:30:1F:0B:2C:83:0E:39:99:0A:F9:44:C3:1F:57:48:14:C6:4C Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Certificate serial: 019AF4D2B1699F702B9C425EB5091B85CA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft Manifest number: 44 Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: gL7EUF4F8fkW9BkZVETXRoXqwGI.roa (hash: 7lhfIaS2xmfgv64vJAgEVH7j+JB/4OXV6L8+g/ewpsw=) 2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: JuNu0ipJMmdVI27bpKEsPBUBZ0k+mZ+9YmvWWM/RrRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b1:69:9f:70:2b:9c:42:5e:b5:09:1b:85:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=bf8c301f0b2c830e39990af944c31f574814c64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:92:ce:ab:36:79:34:e4:55:8c:2a:20:08: 91:c9:7c:53:b6:e5:6e:25:b8:57:8e:0f:b1:9b:e3: 48:43:bb:12:67:11:b8:d5:ad:1e:f5:52:8c:a6:83: 1b:9a:01:52:27:96:11:82:26:54:82:2f:ec:7a:89: d2:d0:5f:7e:19:10:71:0f:34:59:91:82:fd:05:3f: 00:30:a5:c6:2c:d8:f6:a3:6a:e9:39:1b:0b:4b:7c: ce:53:67:3f:b8:98:07:f4:a7:5b:3e:f1:0d:1e:ee: b6:a3:e0:1f:7d:4e:89:16:95:cb:85:bb:fb:6c:8f: 58:0d:fe:1f:f6:e1:b0:e6:d4:7a:66:b2:ca:ca:5b: 65:35:12:3d:04:47:14:c7:2b:b4:47:12:84:48:d8: af:6c:8a:69:2a:9e:55:ba:bc:95:eb:1a:69:0d:91: b9:55:66:13:32:9e:d4:f6:f9:ab:b0:ba:d2:bf:43: 02:12:33:23:2a:d9:75:36:36:56:19:74:40:0d:24: dd:e7:5c:71:92:02:8d:1c:b7:b2:53:56:02:2d:fd: 17:43:43:06:96:2a:00:0d:b6:52:60:9a:8c:78:a8: 72:03:f4:3f:87:ff:72:8f:06:dd:da:b2:54:50:12: 94:66:2c:61:12:61:f9:91:7a:50:15:71:ff:b0:06: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:30:1F:0B:2C:83:0E:39:99:0A:F9:44:C3:1F:57:48:14:C6:4C X509v3 Authority Key Identifier: keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:f7:5c:a3:5f:05:23:15:a5:9a:94:5e:29:db:c6:41:c1: e9:a5:44:3f:37:e1:c5:1d:54:7e:95:61:27:94:dd:7d:7f:35: 2e:29:09:de:bc:71:7d:5a:93:e1:87:a6:d5:16:9e:cd:41:4f: 03:bc:bc:af:69:65:17:7c:68:8e:21:b4:a0:e3:5e:35:95:ee: 6a:06:14:32:97:98:e4:8a:91:3d:18:65:af:bd:9f:26:44:b6: 0b:52:aa:79:16:36:b0:f0:6e:17:1a:06:01:20:dc:9f:f5:7e: 4e:0f:dd:68:4a:b7:88:bb:66:5b:1d:3f:63:c1:e4:f5:90:43: 5b:69:78:92:f1:58:60:b8:56:71:38:47:e4:cf:94:84:7c:96: a5:40:3e:51:1f:cb:8d:e5:84:b8:6a:4d:17:d8:74:a2:13:5b: 89:53:65:59:6a:2a:7b:cf:ee:25:52:bb:6f:01:ce:4f:4a:78: 44:54:9c:1d:0c:57:2b:eb:8d:8b:93:b1:a6:f2:fb:26:61:3b: d9:e6:39:62:56:d2:f4:36:62:21:d0:b3:24:b7:0f:0d:d4:ac: 3d:7a:cc:da:f9:d8:94:dd:6f:b0:50:9e:e6:8a:63:46:5f:bc: 22:3b:73:a8:1b:83:b2:d8:46:25:a5:71:40:b8:d5:15:7a:14: 9c:6f:0e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rFpn3ArnEJetQkbhcqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmIzNzBiMWRiMjBkZmQ5MDg5NTQyNDdhY2IxZTBhMDUy NDBhYzEwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD EyhiZjhjMzAxZjBiMmM4MzBlMzk5OTBhZjk0NGMzMWY1NzQ4MTRjNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKSzqs2eTTkVYwqIAiRyXxTtuVu JbhXjg+xm+NIQ7sSZxG41a0e9VKMpoMbmgFSJ5YRgiZUgi/seonS0F9+GRBxDzRZ kYL9BT8AMKXGLNj2o2rpORsLS3zOU2c/uJgH9KdbPvENHu62o+AffU6JFpXLhbv7 bI9YDf4f9uGw5tR6ZrLKyltlNRI9BEcUxyu0RxKESNivbIppKp5VuryV6xppDZG5 VWYTMp7U9vmrsLrSv0MCEjMjKtl1NjZWGXRADSTd51xxkgKNHLeyU1YCLf0XQ0MG lioADbZSYJqMeKhyA/Q/h/9yjwbd2rJUUBKUZixhEmH5kXpQFXH/sAYCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+MMB8LLIMOOZkK+UTDH1dIFMZMMB8GA1UdIwQY MBaAFL67Nwsdsg39kIlUJHrLHgoFJArBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMt ZmM5MThmMmU3NGVjLzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMtZmM5MThmMmU3NGVj LzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9D3XKNf BSMVpZqUXinbxkHB6aVEPzfhxR1UfpVhJ5TdfX81LikJ3rxxfVqT4Yem1RaezUFP A7y8r2llF3xojiG0oONeNZXuagYUMpeY5IqRPRhlr72fJkS2C1KqeRY2sPBuFxoG ASDcn/V+Tg/daEq3iLtmWx0/Y8Hk9ZBDW2l4kvFYYLhWcThH5M+UhHyWpUA+UR/L jeWEuGpNF9h0ohNbiVNlWWoqe8/uJVK7bwHOT0p4RFScHQxXK+uNi5OxpvL7JmE7 2eY5YlbS9DZiIdCzJLcPDdSsPXrM2vnYlN1vsFCe5opjRl+8IjtzqBuDsthGJaVx QLjVFXoUnG8O1A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:14:47 2025 by rpki-client