This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft File: vrs3Cx2yDf2QiVQkesseCgUkCsE.mft (raw, json) Hash identifier: /tQzVk+NYBwKg+asETE+SNMpBFoMnXaAQJK5WMbnHyw= Subject key identifier: 25:54:7B:89:CA:8F:04:54:B9:E2:08:E4:D6:64:10:06:38:E3:7C:42 Authority key identifier: BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 Certificate issuer: /CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Certificate serial: 019B593EE3E34C7509D7145F012DE5B2AE18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft Manifest number: 78 Signing time: Fri 26 Dec 2025 06:00:52 +0000 Manifest this update: Fri 26 Dec 2025 06:00:52 +0000 Manifest next update: Sat 27 Dec 2025 06:00:52 +0000 Files and hashes: 1: gL7EUF4F8fkW9BkZVETXRoXqwGI.roa (hash: 7lhfIaS2xmfgv64vJAgEVH7j+JB/4OXV6L8+g/ewpsw=) 2: vrs3Cx2yDf2QiVQkesseCgUkCsE.crl (hash: 9AiSnRQ9pqtATThlyEwwteueR8vSGb518idkF1xoom8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e3:e3:4c:75:09:d7:14:5f:01:2d:e5:b2:ae:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebb370b1db20dfd908954247acb1e0a05240ac1 Validity Not Before: Dec 26 06:00:52 2025 GMT Not After : Dec 27 06:00:52 2025 GMT Subject: CN=25547b89ca8f0454b9e208e4d664100638e37c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:03:4e:92:db:ea:12:04:12:77:f4:6f:ac: 1a:88:73:22:d8:e3:4a:02:9d:01:73:34:76:8b:ae: c7:91:58:28:fc:0e:f1:99:97:8a:34:0f:6b:f1:92: 33:b5:32:f3:a3:ad:17:77:f6:3c:a6:48:59:c1:52: 7d:1a:10:43:c3:2e:29:42:26:df:f1:70:80:b6:2d: 4f:ce:80:8d:61:5e:80:d5:82:1d:ea:2f:01:24:b9: d6:19:1a:c7:1d:ce:e0:39:c3:c4:38:fd:ed:da:00: b8:6e:98:61:54:0b:f9:fa:08:bd:1c:2b:93:24:cc: b7:ae:23:6e:36:d7:a2:cf:64:05:7d:57:77:21:40: fa:75:7d:49:e3:66:67:6f:ae:a5:32:51:2f:58:54: 20:45:7a:09:bd:b0:56:63:b0:61:1a:7e:5d:98:72: 7c:82:c1:d9:0e:c0:ea:e4:31:74:58:27:43:84:c8: e1:c3:87:7f:05:bf:04:be:c3:44:2b:22:30:5b:42: 45:fd:56:ac:a6:1a:59:3e:9f:4a:18:74:7f:59:0e: b1:8a:b5:bf:71:9e:bc:4d:52:14:02:81:f6:98:67: 52:fc:9b:19:e8:a7:db:5c:b2:c0:ad:83:43:fa:76: f3:92:6b:c0:a8:e3:86:51:1b:53:9d:a2:86:78:7e: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:7B:89:CA:8F:04:54:B9:E2:08:E4:D6:64:10:06:38:E3:7C:42 X509v3 Authority Key Identifier: keyid:BE:BB:37:0B:1D:B2:0D:FD:90:89:54:24:7A:CB:1E:0A:05:24:0A:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrs3Cx2yDf2QiVQkesseCgUkCsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d6aef7-0a82-4963-9993-fc918f2e74ec/1/vrs3Cx2yDf2QiVQkesseCgUkCsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b1:ce:a3:23:0a:43:4e:72:b7:e5:86:6c:17:e1:1e:1b:71: 83:87:4f:86:2d:76:5d:05:be:19:f3:e4:a8:a6:01:ea:3d:7a: f1:02:25:43:b2:48:8e:1d:a1:95:e4:42:cb:8d:49:55:32:66: 2a:b9:48:83:26:49:78:39:d1:3c:f9:7f:68:73:e6:5c:06:64: a8:8b:09:c7:8c:1e:19:fd:e6:f5:94:7c:e5:02:29:16:07:c1: 89:57:d1:28:06:39:0c:72:48:7d:78:3f:c3:9c:25:53:05:78: 82:b8:18:ba:a9:88:86:75:ee:8d:b3:b7:2f:e9:06:80:2b:91: a2:d9:47:69:68:45:c8:d8:f0:8f:d6:51:c1:ce:d6:91:14:d2: 8d:5a:1e:11:e6:05:63:79:0d:c4:d8:16:3c:f2:09:79:02:cc: 22:b6:18:32:cf:3a:55:e0:1f:de:60:0d:2a:ae:ab:b6:1f:32: f0:02:9c:58:0d:3c:6d:ac:26:78:07:ec:10:60:ed:73:4e:20: da:77:07:63:1f:6c:92:35:5e:43:8a:57:fb:7f:0f:b4:e4:c7: 8a:61:b7:7a:70:f1:4a:8a:bf:43:02:e5:25:2a:21:84:13:9f: c3:f3:18:22:ac:f3:da:8a:56:40:66:ee:82:22:10:fe:7c:54: 50:6a:ac:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuPjTHUJ1xRfAS3lsq4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmIzNzBiMWRiMjBkZmQ5MDg5NTQyNDdhY2IxZTBhMDUy NDBhYzEwHhcNMjUxMjI2MDYwMDUyWhcNMjUxMjI3MDYwMDUyWjAzMTEwLwYDVQQD EygyNTU0N2I4OWNhOGYwNDU0YjllMjA4ZTRkNjY0MTAwNjM4ZTM3YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCgDTpLb6hIEEnf0b6waiHMi2ONK Ap0BczR2i67HkVgo/A7xmZeKNA9r8ZIztTLzo60Xd/Y8pkhZwVJ9GhBDwy4pQibf 8XCAti1PzoCNYV6A1YId6i8BJLnWGRrHHc7gOcPEOP3t2gC4bphhVAv5+gi9HCuT JMy3riNuNteiz2QFfVd3IUD6dX1J42Znb66lMlEvWFQgRXoJvbBWY7BhGn5dmHJ8 gsHZDsDq5DF0WCdDhMjhw4d/Bb8EvsNEKyIwW0JF/VasphpZPp9KGHR/WQ6xirW/ cZ68TVIUAoH2mGdS/JsZ6KfbXLLArYND+nbzkmvAqOOGURtTnaKGeH6SxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVUe4nKjwRUueII5NZkEAY443xCMB8GA1UdIwQY MBaAFL67Nwsdsg39kIlUJHrLHgoFJArBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMt ZmM5MThmMmU3NGVjLzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kNmFlZjctMGE4Mi00OTYzLTk5OTMtZmM5MThmMmU3NGVj LzEvdnJzM0N4MnlEZjJRaVZRa2Vzc2VDZ1VrQ3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7HOoyMK Q05yt+WGbBfhHhtxg4dPhi12XQW+GfPkqKYB6j168QIlQ7JIjh2hleRCy41JVTJm KrlIgyZJeDnRPPl/aHPmXAZkqIsJx4weGf3m9ZR85QIpFgfBiVfRKAY5DHJIfXg/ w5wlUwV4grgYuqmIhnXujbO3L+kGgCuRotlHaWhFyNjwj9ZRwc7WkRTSjVoeEeYF Y3kNxNgWPPIJeQLMIrYYMs86VeAf3mANKq6rth8y8AKcWA08bawmeAfsEGDtc04g 2ncHYx9skjVeQ4pX+38PtOTHimG3enDxSoq/QwLlJSohhBOfw/MYIqzz2opWQGbu giIQ/nxUUGqsvA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:32 2025 by rpki-client