This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft File: Vp3-Sa8607mlhpS6081OY4TwEYY.mft (raw, json) Hash identifier: RrfJ9vyjdqh2euGV72NGr007wlysUyA5l5TkVCGNbcM= Subject key identifier: EF:B9:FC:98:FA:3E:8B:D2:44:3B:38:24:58:84:9D:B7:72:52:80:A7 Authority key identifier: 56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86 Certificate issuer: /CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186 Certificate serial: 019AF31D41025BA12408F5BB19619B0CE800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft Manifest number: 91 Signing time: Sat 06 Dec 2025 10:02:51 +0000 Manifest this update: Sat 06 Dec 2025 10:02:51 +0000 Manifest next update: Sun 07 Dec 2025 10:02:51 +0000 Files and hashes: 1: Vp3-Sa8607mlhpS6081OY4TwEYY.crl (hash: TyLSOHy89QmEuUmTRMFiPhg7rpYN9kCASXuwYGHJR5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:41:02:5b:a1:24:08:f5:bb:19:61:9b:0c:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186 Validity Not Before: Dec 6 10:02:51 2025 GMT Not After : Dec 7 10:02:51 2025 GMT Subject: CN=efb9fc98fa3e8bd2443b382458849db7725280a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:80:23:51:b0:4e:d5:c3:d9:7d:4b:9c:8d:3e: a2:16:e6:e2:e3:5a:f2:54:ca:36:a5:40:0e:06:e0: 1e:bd:ab:18:ab:e4:5f:58:98:2e:63:24:c8:4d:5d: 64:47:0d:e3:56:c4:bc:96:a7:11:9b:9e:31:9c:f1: 9b:63:8d:52:ff:5c:60:d1:88:07:48:a6:9e:26:3d: 53:e3:ac:99:c4:78:d2:e0:f6:7b:2c:63:c4:00:e6: 80:19:d0:fa:28:78:4f:bf:c4:29:be:45:af:58:83: 7d:5d:27:fd:92:e3:f6:f5:59:f5:44:2c:e1:59:7c: bd:05:05:6e:1f:89:23:14:96:b0:d6:57:b2:93:43: b0:97:54:2e:79:da:25:69:05:7c:06:f3:cf:a0:03: 36:a2:33:f7:d7:a6:2d:27:49:43:e1:70:7c:4d:63: 4b:f8:ed:74:c7:89:cc:a2:7d:9d:84:d7:1a:a0:64: 46:36:2c:8e:c2:75:7c:4b:3e:46:5c:ac:3e:42:b2: ba:36:60:7c:08:c4:ad:46:e7:a0:59:dd:72:bb:8f: ab:40:88:3d:30:77:2d:cc:65:88:fd:ad:41:b9:6c: 2c:b5:bc:75:7e:f0:70:6e:4b:1e:57:0b:fc:c4:60: c9:a7:67:9f:84:c6:e9:5a:5b:0b:a5:7e:42:0c:d4: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B9:FC:98:FA:3E:8B:D2:44:3B:38:24:58:84:9D:B7:72:52:80:A7 X509v3 Authority Key Identifier: keyid:56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f2:cb:32:3c:1d:ab:94:40:9b:24:e2:69:2d:46:e6:a8:e6: 6d:e9:85:81:06:17:6e:10:27:16:f0:48:d5:ee:2d:1f:ed:a1: 03:d4:80:69:12:c4:66:ed:4c:10:b7:ff:e1:02:3c:c3:04:a2: 46:d8:5d:bf:4b:79:c1:73:37:3f:30:e3:43:13:f0:1d:bc:f4: 8e:e8:31:60:65:6c:a3:f6:f2:45:7a:1a:13:f3:26:8f:7f:23: 3d:e4:e0:57:4d:74:eb:51:54:52:cc:ae:bc:8c:b2:b6:7a:ba: 9c:d2:17:38:8a:cb:56:74:a0:d3:92:b5:0e:9b:9e:65:b3:e0: 2b:5b:7a:eb:ac:9c:99:85:1a:fa:fb:56:0f:cc:f8:b7:50:21: 69:b3:2b:b6:3c:38:8d:35:5e:c8:6d:81:18:ae:90:21:0b:1c: 5d:ae:2b:b3:77:65:54:fe:e5:12:1b:52:8a:1f:ee:7e:7b:40: cb:86:9b:55:59:ab:ab:0c:21:74:a2:0e:74:aa:6d:db:ed:67: 08:45:04:a4:06:8d:11:f9:89:10:11:22:60:a8:47:7a:22:31: f5:39:b7:21:4f:75:f5:7b:46:b6:b3:c4:e4:79:56:94:5c:f5: 06:56:7c:19:da:e3:67:08:a5:a0:c3:41:21:0a:5c:dc:23:c4: 64:a8:81:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUECW6EkCPW7GWGbDOgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OWRmZTQ5YWYzYWQzYjlhNTg2OTRiYWQzY2Q0ZTYzODRm MDExODYwHhcNMjUxMjA2MTAwMjUxWhcNMjUxMjA3MTAwMjUxWjAzMTEwLwYDVQQD EyhlZmI5ZmM5OGZhM2U4YmQyNDQzYjM4MjQ1ODg0OWRiNzcyNTI4MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74AjUbBO1cPZfUucjT6iFubi41ry VMo2pUAOBuAevasYq+RfWJguYyTITV1kRw3jVsS8lqcRm54xnPGbY41S/1xg0YgH SKaeJj1T46yZxHjS4PZ7LGPEAOaAGdD6KHhPv8QpvkWvWIN9XSf9kuP29Vn1RCzh WXy9BQVuH4kjFJaw1leyk0Owl1QuedolaQV8BvPPoAM2ojP316YtJ0lD4XB8TWNL +O10x4nMon2dhNcaoGRGNiyOwnV8Sz5GXKw+QrK6NmB8CMStRuegWd1yu4+rQIg9 MHctzGWI/a1BuWwstbx1fvBwbkseVwv8xGDJp2efhMbpWlsLpX5CDNRyfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+5/Jj6PovSRDs4JFiEnbdyUoCnMB8GA1UdIwQY MBaAFFad/kmvOtO5pYaUutPNTmOE8BGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnAzLVNhODYwN21saHBTNjA4MU9ZNFR3RVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mNmNiODUtOGUxZS00NTVmLWI0Yjgt ZGZjZjdlNjM2MjE4LzEvVnAzLVNhODYwN21saHBTNjA4MU9ZNFR3RVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mNmNiODUtOGUxZS00NTVmLWI0YjgtZGZjZjdlNjM2MjE4 LzEvVnAzLVNhODYwN21saHBTNjA4MU9ZNFR3RVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvLLMjwd q5RAmyTiaS1G5qjmbemFgQYXbhAnFvBI1e4tH+2hA9SAaRLEZu1MELf/4QI8wwSi Rthdv0t5wXM3PzDjQxPwHbz0jugxYGVso/byRXoaE/Mmj38jPeTgV01061FUUsyu vIyytnq6nNIXOIrLVnSg05K1DpueZbPgK1t666ycmYUa+vtWD8z4t1AhabMrtjw4 jTVeyG2BGK6QIQscXa4rs3dlVP7lEhtSih/ufntAy4abVVmrqwwhdKIOdKpt2+1n CEUEpAaNEfmJEBEiYKhHeiIx9Tm3IU919XtGtrPE5HlWlFz1BlZ8GdrjZwiloMNB IQpc3CPEZKiBPw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:59 2025 by rpki-client