This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json) Hash identifier: uQHaQtiWHj8CbX3NRCM0g4YfN7V7OOopz7ihehP8hJE= Subject key identifier: 20:98:EC:C7:61:CC:33:8B:23:D2:97:44:E5:0A:41:73:BA:6F:2E:3B Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4 Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4 Certificate serial: 019BF499CE49A0EDA0D11B27E37A2663B499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft Manifest number: 175F Signing time: Sun 25 Jan 2026 10:01:19 +0000 Manifest this update: Sun 25 Jan 2026 10:01:19 +0000 Manifest next update: Mon 26 Jan 2026 10:01:19 +0000 Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: vj+PS7bzbTuHdGTYK7YoAl5r6ltApJjLVVMGFjiHykg=) 2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:ce:49:a0:ed:a0:d1:1b:27:e3:7a:26:63:b4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4 Validity Not Before: Jan 25 10:01:19 2026 GMT Not After : Jan 26 10:01:19 2026 GMT Subject: CN=2098ecc761cc338b23d29744e50a4173ba6f2e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:a9:87:dd:94:9e:6f:a6:67:de:af:0f:b1: 72:b8:b4:72:af:23:3b:8f:d3:f6:fb:d9:61:17:77: 7a:39:15:e4:08:93:51:db:d1:bc:b5:b5:3a:46:92: 55:51:c6:af:54:bc:6f:16:2c:5d:0f:3d:c9:22:9e: ec:e4:98:56:59:9d:a0:aa:8d:dd:72:88:e7:7e:ff: 7d:ba:74:1c:1d:c1:a2:60:42:c7:5d:41:dd:9d:e6: 45:79:c7:10:19:68:20:3d:ee:d8:30:63:42:87:2c: 92:d5:c1:36:5e:d1:0e:82:39:4d:d5:59:49:da:f2: 5d:ff:46:e4:1f:dd:ad:d3:5e:5d:32:33:36:f2:70: 37:e4:3f:7c:d1:cc:1a:a7:74:cf:b0:bd:e3:5a:76: f8:94:3f:2e:3e:27:71:b6:bd:a2:03:8d:d9:ec:3f: 32:27:c3:7d:57:8c:32:26:09:f0:16:4e:5a:6c:8a: bf:90:86:02:9c:64:ca:40:a4:73:db:82:a5:8c:41: 99:65:9c:d9:68:b2:9f:4a:d8:c3:9f:7a:08:91:7f: 5b:eb:1e:11:11:ba:8d:83:f6:8a:bd:72:b8:fb:fe: ca:53:54:e3:13:74:d7:24:8c:d3:26:73:9d:3f:44: 4c:98:17:3a:7f:07:23:26:2b:85:28:cc:bb:d9:11: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:98:EC:C7:61:CC:33:8B:23:D2:97:44:E5:0A:41:73:BA:6F:2E:3B X509v3 Authority Key Identifier: keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:eb:99:5a:bd:95:2f:25:3b:f7:04:3f:87:0c:5d:7b:bb:8f: e7:14:e6:3c:eb:14:73:34:56:96:83:a8:7d:ad:be:81:b1:74: a8:7c:fe:64:fc:95:9a:88:33:35:d7:10:4a:5e:64:34:45:92: c0:db:f9:73:b1:7c:d4:4f:2b:e8:ab:7d:e0:3a:2d:37:fb:f1: 39:4f:7f:a3:f0:f4:9a:8b:9f:c0:82:d7:bf:80:20:91:a0:1e: eb:7a:32:54:7b:14:ff:cf:14:0d:f9:c3:b2:70:68:bb:88:64: 09:3a:29:34:36:2f:0d:60:61:8d:3e:6b:ad:79:9f:61:fd:46: 73:15:28:58:71:ec:c8:f5:6a:a3:32:f7:33:fa:2b:29:d4:95: 5e:88:b4:7b:6f:19:1e:8d:ad:0a:96:a3:2b:14:1a:ad:72:db: 6b:00:0f:3e:50:6b:3b:bc:c3:db:a2:14:e6:a6:95:16:59:20: 2a:9f:2f:24:1b:97:4b:e4:fd:27:e3:6f:0b:f9:24:a5:50:5e: 15:1c:c6:da:9d:10:a4:dc:0c:71:d8:e5:ca:6d:4d:3e:0d:29: 92:88:60:a7:0b:61:fd:97:67:65:24:4e:49:19:fb:de:c6:76: 19:34:ec:69:24:60:f1:39:da:6c:7b:b1:9d:a2:3e:f3:99:18: e0:8c:23:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mc5JoO2g0Rsn43omY7SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZmIzZTk1Y2JiYTE5NDhiZDk4NmE5MmJlNmYwZjY0N2U2 ZGM2YzQwHhcNMjYwMTI1MTAwMTE5WhcNMjYwMTI2MTAwMTE5WjAzMTEwLwYDVQQD EygyMDk4ZWNjNzYxY2MzMzhiMjNkMjk3NDRlNTBhNDE3M2JhNmYyZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Oph92Unm+mZ96vD7FyuLRyryM7 j9P2+9lhF3d6ORXkCJNR29G8tbU6RpJVUcavVLxvFixdDz3JIp7s5JhWWZ2gqo3d cojnfv99unQcHcGiYELHXUHdneZFeccQGWggPe7YMGNChyyS1cE2XtEOgjlN1VlJ 2vJd/0bkH92t015dMjM28nA35D980cwap3TPsL3jWnb4lD8uPidxtr2iA43Z7D8y J8N9V4wyJgnwFk5abIq/kIYCnGTKQKRz24KljEGZZZzZaLKfStjDn3oIkX9b6x4R EbqNg/aKvXK4+/7KU1TjE3TXJIzTJnOdP0RMmBc6fwcjJiuFKMy72RENCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCY7MdhzDOLI9KXROUKQXO6by47MB8GA1UdIwQY MBaAFN77PpXLuhlIvZhqkr5vD2R+bcbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEt ZjQ1OTQ2YWM1ZTgwLzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEtZjQ1OTQ2YWM1ZTgw LzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeuZWr2V LyU79wQ/hwxde7uP5xTmPOsUczRWloOofa2+gbF0qHz+ZPyVmogzNdcQSl5kNEWS wNv5c7F81E8r6Kt94DotN/vxOU9/o/D0moufwILXv4AgkaAe63oyVHsU/88UDfnD snBou4hkCTopNDYvDWBhjT5rrXmfYf1GcxUoWHHsyPVqozL3M/orKdSVXoi0e28Z Ho2tCpajKxQarXLbawAPPlBrO7zD26IU5qaVFlkgKp8vJBuXS+T9J+NvC/kkpVBe FRzG2p0QpNwMcdjlym1NPg0pkohgpwth/ZdnZSROSRn73sZ2GTTsaSRg8TnabHux naI+85kY4Iwj3A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:22 2026 by rpki-client