This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json) Hash identifier: m7fRJLN0faqsnEwhBYo57yoGRVVVZ0A5v6SR65iPCWg= Subject key identifier: 77:FB:1F:3E:9E:E9:12:7D:84:8F:F3:7F:DD:62:D9:20:18:C6:4E:DE Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Certificate serial: 019B60F876778D886A9DA7699D405F4EC996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft Manifest number: 7C Signing time: Sat 27 Dec 2025 18:00:54 +0000 Manifest this update: Sat 27 Dec 2025 18:00:54 +0000 Manifest next update: Sun 28 Dec 2025 18:00:54 +0000 Files and hashes: 1: gL7EUF4F8fkW9BkZVETXRoXqwGI.roa (hash: 7lhfIaS2xmfgv64vJAgEVH7j+JB/4OXV6L8+g/ewpsw=) 2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: 8AfUgixGI+6lMCQkoi6/OmyWzz+Zmxo/44NlBmuv/GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:f8:76:77:8d:88:6a:9d:a7:69:9d:40:5f:4e:c9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Validity Not Before: Dec 27 18:00:54 2025 GMT Not After : Dec 28 18:00:54 2025 GMT Subject: CN=77fb1f3e9ee9127d848ff37fdd62d92018c64ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a6:04:49:14:57:1c:24:d8:09:62:2c:1f:55: e9:16:1b:66:f6:21:3e:b4:e4:ad:9a:26:8b:15:ae: b4:cb:4a:49:24:13:46:f4:0f:fa:e6:10:57:16:4e: 69:5d:a4:31:cb:a8:a5:f6:68:08:28:3f:6a:33:47: 5f:39:95:ae:2e:43:37:77:7f:a5:e5:c3:15:26:9f: d2:5b:f9:45:ea:b9:d8:8b:73:89:6d:ec:6d:e8:35: d6:6e:07:fb:ec:18:2b:8b:a5:3c:81:b3:36:dc:ec: e4:b6:95:c1:ff:7d:9d:96:03:60:23:15:28:d4:b2: 4c:fc:35:8b:fc:ec:b0:04:6a:68:c8:85:6c:1c:01: 11:ac:54:62:fc:8d:6d:67:06:ae:d7:d6:8a:e4:95: 31:a8:11:42:b6:74:b2:39:89:ae:33:7f:22:ec:23: 70:28:34:5c:20:ce:03:95:18:a3:d5:31:b7:ca:2f: b9:78:16:59:6c:92:48:12:68:fc:ed:f2:af:2e:d1: 89:55:bf:1d:0a:3b:89:30:8f:f6:f9:79:71:76:b3: c4:02:d1:be:a3:bb:94:0e:a2:f4:28:19:ab:16:0d: 0d:54:a9:8b:c5:0f:d4:7b:e1:d4:23:a9:38:93:33: 8a:b8:f5:e2:76:fe:40:49:13:62:80:fa:6a:90:1d: dc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:1F:3E:9E:E9:12:7D:84:8F:F3:7F:DD:62:D9:20:18:C6:4E:DE X509v3 Authority Key Identifier: keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:36:e1:ea:74:39:91:40:66:80:67:3e:98:61:3e:3c:7f:68: c6:63:1b:d7:35:82:8d:b5:5d:c8:b5:90:97:0f:46:02:2c:e0: 90:f3:cf:90:71:60:d6:a0:98:8b:bd:9c:07:da:5b:a0:4c:b2: 27:d5:0f:4f:af:8f:1e:ce:df:83:98:05:61:14:c5:91:53:d7: 94:07:2f:14:5f:a5:1f:f3:c8:f6:73:ad:b2:1b:f0:56:c1:10: e5:53:0e:1b:18:d4:f4:b8:05:f6:f5:aa:99:d7:12:b7:88:5f: ed:66:68:0c:8d:6a:3c:5d:8d:68:57:cd:c6:10:ae:ee:c2:04: 17:86:52:6c:d0:88:8e:9a:5c:37:df:88:90:2b:ed:22:c8:86: f5:16:35:ff:0f:58:27:6d:d2:26:37:07:45:32:71:c6:99:e8: 15:af:5d:f0:7f:29:56:67:d3:43:68:d4:4a:d0:e1:bf:37:92: ca:81:43:1e:de:7b:7a:d0:8f:72:c7:28:8e:c5:d2:84:ca:a7: 55:a3:03:5f:8a:dd:3c:1a:25:ef:2f:37:9c:3c:d4:b8:06:46: 03:df:ee:0d:0e:81:4e:1e:9f:42:c5:b8:12:bc:97:b8:ea:58: d7:3c:37:2d:8b:55:e7:fc:8b:67:2b:7a:7b:b4:5d:b0:91:15: 34:de:1d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtg+HZ3jYhqnadpnUBfTsmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmIzNzBiMWRiMjBkZmQ5MDg5NTQyNDdhY2IxZTBhMDUy NDBhYzEwHhcNMjUxMjI3MTgwMDU0WhcNMjUxMjI4MTgwMDU0WjAzMTEwLwYDVQQD Eyg3N2ZiMWYzZTllZTkxMjdkODQ4ZmYzN2ZkZDYyZDkyMDE4YzY0ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6YESRRXHCTYCWIsH1XpFhtm9iE+ tOStmiaLFa60y0pJJBNG9A/65hBXFk5pXaQxy6il9mgIKD9qM0dfOZWuLkM3d3+l 5cMVJp/SW/lF6rnYi3OJbext6DXWbgf77Bgri6U8gbM23OzktpXB/32dlgNgIxUo 1LJM/DWL/OywBGpoyIVsHAERrFRi/I1tZwau19aK5JUxqBFCtnSyOYmuM38i7CNw KDRcIM4DlRij1TG3yi+5eBZZbJJIEmj87fKvLtGJVb8dCjuJMI/2+XlxdrPEAtG+ o7uUDqL0KBmrFg0NVKmLxQ/Ue+HUI6k4kzOKuPXidv5ASRNigPpqkB3c8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf7Hz6e6RJ9hI/zf91i2SAYxk7eMB8GA1UdIwQY MBaAFL67Nwsdsg39kIlUJHrLHgoFJArBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMt ZmM5MThmMmU3NGVjLzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMtZmM5MThmMmU3NGVj LzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDbh6nQ5 kUBmgGc+mGE+PH9oxmMb1zWCjbVdyLWQlw9GAizgkPPPkHFg1qCYi72cB9pboEyy J9UPT6+PHs7fg5gFYRTFkVPXlAcvFF+lH/PI9nOtshvwVsEQ5VMOGxjU9LgF9vWq mdcSt4hf7WZoDI1qPF2NaFfNxhCu7sIEF4ZSbNCIjppcN9+IkCvtIsiG9RY1/w9Y J23SJjcHRTJxxpnoFa9d8H8pVmfTQ2jUStDhvzeSyoFDHt57etCPcscojsXShMqn VaMDX4rdPBol7y83nDzUuAZGA9/uDQ6BTh6fQsW4EryXuOpY1zw3LYtV5/yLZyt6 e7RdsJEVNN4dig== -----END CERTIFICATE-----Generated at Sat Dec 27 23:58:10 2025 by rpki-client