This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json) Hash identifier: K0Klnp6yiW5QmTlGJ3grVLsZL6evO9q0aETG0xF/YNw= Subject key identifier: 8C:C2:58:B9:18:AE:35:33:AD:B3:DD:CF:17:45:74:86:4A:30:6E:9D Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4 Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4 Certificate serial: 019AF12E0226094536799D6A0FE28B4D37DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft Manifest number: 16D8 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: C84s4OjR2IrixPNmXdsK94Ur/rtDldwunZirc9RX2dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:02:26:09:45:36:79:9d:6a:0f:e2:8b:4d:37:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=8cc258b918ae3533adb3ddcf174574864a306e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:81:4c:cb:85:95:67:11:98:6e:33:96:d2: fb:54:bc:47:7e:35:4d:ad:38:79:d7:e3:54:0d:be: d9:0d:43:7e:9b:b9:fc:de:58:0a:ae:5e:49:e1:ee: 3b:65:be:ae:7b:05:dd:78:6a:57:15:3f:c6:24:cb: 67:4a:8a:9a:6c:96:b1:bc:75:7e:8d:9a:81:77:32: be:83:6b:df:3e:46:f7:33:42:63:13:aa:31:23:77: 1f:d5:58:0c:eb:e6:38:9a:71:ff:a5:41:ee:1b:ab: fb:80:01:bb:37:02:11:28:50:9b:0a:d9:17:39:56: 96:ce:4e:74:d9:11:d8:bc:f0:d2:83:ef:97:38:02: ff:94:69:86:2a:0b:30:0a:3e:6f:71:61:57:06:f4: 8e:45:12:9a:df:8f:90:c9:a4:44:67:8f:43:14:38: 7f:14:a5:71:90:6b:ea:35:b1:f7:32:c4:65:a9:e3: 72:cf:69:85:43:b7:e6:60:5d:92:eb:b8:a2:f6:e0: 26:a9:14:1f:ad:e1:ee:db:e7:9a:e3:be:70:89:8f: 98:f9:f7:1a:4f:5a:c4:03:f4:ac:3d:2f:d7:3e:64: 15:11:fc:68:78:c1:6f:55:fa:fc:db:0d:27:75:18: f3:3d:e7:c9:ca:64:7b:9f:4e:8e:62:96:6c:48:bf: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:58:B9:18:AE:35:33:AD:B3:DD:CF:17:45:74:86:4A:30:6E:9D X509v3 Authority Key Identifier: keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e7:22:6e:5d:7a:08:e7:d4:df:7f:f1:93:97:0c:4c:48:c6: 0d:e8:a5:c8:6e:d7:45:da:99:ae:0c:97:41:a1:01:ad:ce:4d: ed:ce:0e:4e:71:e5:e5:f9:e5:98:a5:15:63:74:cd:3b:2e:ec: 25:de:ce:8d:66:20:81:29:7c:41:25:6d:ca:dc:f5:04:a3:d4: 2d:7b:3d:c2:f1:cb:d5:cd:10:23:20:6a:a6:7a:28:c5:f7:44: 4e:0d:ac:eb:81:e4:4e:8a:ef:95:02:03:09:04:ad:a2:b1:97: e3:c7:5a:ff:04:56:31:90:37:10:68:cb:cb:86:d4:4f:44:5e: ff:d6:bb:01:25:ce:b4:5f:4e:e8:35:0e:ef:05:e6:19:21:09: 06:bb:25:33:2c:f7:f5:03:1b:06:c7:64:48:61:8c:73:bd:94: 80:68:31:76:c0:6b:b9:6a:fb:01:18:26:0a:46:4c:15:96:c6: 2b:7a:5d:44:e4:25:f4:0d:4b:02:1d:cf:4d:25:27:70:a6:72: f1:b8:b6:6f:27:04:0f:d8:56:4c:c8:08:37:b1:26:b8:04:7e: 8f:8f:b9:9a:73:99:51:ea:53:57:a7:fb:5f:d9:f2:9e:b3:b5: 2b:37:57:7e:e4:ce:cb:d8:1c:d8:dd:c1:b0:35:ee:fa:f0:3b: 89:f0:d0:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgImCUU2eZ1qD+KLTTfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZmIzZTk1Y2JiYTE5NDhiZDk4NmE5MmJlNmYwZjY0N2U2 ZGM2YzQwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD Eyg4Y2MyNThiOTE4YWUzNTMzYWRiM2RkY2YxNzQ1NzQ4NjRhMzA2ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQKBTMuFlWcRmG4zltL7VLxHfjVN rTh51+NUDb7ZDUN+m7n83lgKrl5J4e47Zb6uewXdeGpXFT/GJMtnSoqabJaxvHV+ jZqBdzK+g2vfPkb3M0JjE6oxI3cf1VgM6+Y4mnH/pUHuG6v7gAG7NwIRKFCbCtkX OVaWzk502RHYvPDSg++XOAL/lGmGKgswCj5vcWFXBvSORRKa34+QyaREZ49DFDh/ FKVxkGvqNbH3MsRlqeNyz2mFQ7fmYF2S67ii9uAmqRQfreHu2+ea475wiY+Y+fca T1rEA/SsPS/XPmQVEfxoeMFvVfr82w0ndRjzPefJymR7n06OYpZsSL/bmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzCWLkYrjUzrbPdzxdFdIZKMG6dMB8GA1UdIwQY MBaAFN77PpXLuhlIvZhqkr5vD2R+bcbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEt ZjQ1OTQ2YWM1ZTgwLzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEtZjQ1OTQ2YWM1ZTgw LzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+cibl16 COfU33/xk5cMTEjGDeilyG7XRdqZrgyXQaEBrc5N7c4OTnHl5fnlmKUVY3TNOy7s Jd7OjWYggSl8QSVtytz1BKPULXs9wvHL1c0QIyBqpnooxfdETg2s64HkTorvlQID CQStorGX48da/wRWMZA3EGjLy4bUT0Re/9a7ASXOtF9O6DUO7wXmGSEJBrslMyz3 9QMbBsdkSGGMc72UgGgxdsBruWr7ARgmCkZMFZbGK3pdROQl9A1LAh3PTSUncKZy 8bi2bycED9hWTMgIN7EmuAR+j4+5mnOZUepTV6f7X9nynrO1KzdXfuTOy9gc2N3B sDXu+vA7ifDQvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:30 2025 by rpki-client