This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json) Hash identifier: +iVh0rhOaZiahi3SkTV9IdsEnJj3NlLaUrKGle+8Vmw= Subject key identifier: 60:FE:8B:A3:83:2B:07:B4:2C:88:59:BC:BA:D0:DD:02:C2:1C:AC:F1 Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617 Certificate serial: 019B3E6CAEC4E9307524D833124710B06A11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft Manifest number: 0C2F Signing time: Sun 21 Dec 2025 01:01:08 +0000 Manifest this update: Sun 21 Dec 2025 01:01:08 +0000 Manifest next update: Mon 22 Dec 2025 01:01:08 +0000 Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=) 2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=) 3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=) 4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: X5EgFwvnunqUk7sIf50G/iWS3k/OKtMZ2KGR68SXzEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:ae:c4:e9:30:75:24:d8:33:12:47:10:b0:6a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617 Validity Not Before: Dec 21 01:01:08 2025 GMT Not After : Dec 22 01:01:08 2025 GMT Subject: CN=60fe8ba3832b07b42c8859bcbad0dd02c21cacf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:74:1e:24:75:60:d2:35:57:8b:de:db:e0: 53:b6:c5:d0:d7:07:a5:8c:9d:14:f4:43:38:41:c4: 90:a5:fc:a3:82:e2:4c:66:3f:b4:0f:b8:6c:54:9a: ac:de:a4:68:d6:42:ec:48:73:36:ca:11:59:ba:b2: c2:f0:06:10:e2:af:bd:13:3a:b6:dc:2e:0d:49:47: a0:a3:7e:30:76:f5:fe:71:88:22:2f:70:f0:4d:dc: bc:2b:db:7e:a6:41:b6:d8:7a:9f:ea:d8:70:f7:60: fb:5b:29:45:0c:ae:b0:9b:94:62:1f:4e:38:1a:34: e8:2f:bb:c4:4f:08:96:32:b8:b0:fe:ef:78:f6:a5: 4d:e9:b5:1a:c9:11:f9:e3:9d:46:a8:70:88:58:b0: ef:7a:79:64:e3:f5:92:52:b8:2c:6a:6b:30:25:43: 31:62:b0:a1:f3:1c:0c:b9:be:fd:71:55:fc:ec:62: bc:8d:3f:ad:b3:b7:bf:71:8e:6b:25:28:4d:c1:81: b7:74:cf:73:fb:e4:c2:e9:05:83:16:10:a3:1b:58: 8e:44:73:60:8f:98:c0:73:3e:70:b5:cd:3d:a2:af: e0:65:b0:c3:33:73:1e:10:b6:ea:03:eb:08:71:4c: 5c:26:a3:cb:01:5b:f8:c8:cb:f6:c1:60:d0:d1:5e: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:8B:A3:83:2B:07:B4:2C:88:59:BC:BA:D0:DD:02:C2:1C:AC:F1 X509v3 Authority Key Identifier: keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:25:d4:01:59:21:2a:ba:f4:09:b7:82:69:39:2e:56:57:ea: 85:8e:45:bc:0d:26:dc:07:e3:15:a2:03:cc:78:01:af:77:80: 25:0a:8e:2f:08:39:8f:83:48:30:3f:41:31:6a:cd:01:98:32: 47:9b:98:20:35:37:a1:86:8c:a2:84:7d:ad:bc:8c:4b:e2:1e: 6c:3f:ce:04:5a:39:2f:57:61:75:73:9f:78:fd:5f:81:4a:2d: 01:df:d4:aa:0e:a3:18:2f:b9:bb:2c:45:b4:e4:b2:8c:15:b2: 99:fb:35:54:24:72:c2:cf:34:cf:c6:70:08:1c:b6:a2:be:be: 26:c4:c4:3c:88:f8:08:c7:f0:5e:28:9a:99:f7:c4:be:63:65: 6f:86:79:1e:2d:34:6b:a2:60:f7:87:cb:9e:9d:44:a4:24:de: a4:4d:c6:b7:6a:f6:87:f9:6f:e0:7f:5b:2b:47:18:60:fa:db: bc:8f:72:0e:c8:dd:22:de:f9:e6:32:34:60:83:84:f0:54:f3: 15:b2:1d:89:da:2d:66:a2:f8:cc:1c:df:62:3d:72:34:dd:59: 1e:17:78:7a:70:96:8a:de:d2:61:81:4a:6e:0d:7c:e1:c5:6f: df:d8:26:72:f4:55:26:ed:76:ac:36:e7:2c:7d:6b:d3:00:28: ce:30:7b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bK7E6TB1JNgzEkcQsGoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1 MzM2MTcwHhcNMjUxMjIxMDEwMTA4WhcNMjUxMjIyMDEwMTA4WjAzMTEwLwYDVQQD Eyg2MGZlOGJhMzgzMmIwN2I0MmM4ODU5YmNiYWQwZGQwMmMyMWNhY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G50HiR1YNI1V4ve2+BTtsXQ1wel jJ0U9EM4QcSQpfyjguJMZj+0D7hsVJqs3qRo1kLsSHM2yhFZurLC8AYQ4q+9Ezq2 3C4NSUego34wdvX+cYgiL3DwTdy8K9t+pkG22Hqf6thw92D7WylFDK6wm5RiH044 GjToL7vETwiWMriw/u949qVN6bUayRH5451GqHCIWLDvenlk4/WSUrgsamswJUMx YrCh8xwMub79cVX87GK8jT+ts7e/cY5rJShNwYG3dM9z++TC6QWDFhCjG1iORHNg j5jAcz5wtc09oq/gZbDDM3MeELbqA+sIcUxcJqPLAVv4yMv2wWDQ0V7BawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD+i6ODKwe0LIhZvLrQ3QLCHKzxMB8GA1UdIwQY MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt MGVkMjRlYmM0ZWQ4LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4 LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSXUAVkh Krr0CbeCaTkuVlfqhY5FvA0m3AfjFaIDzHgBr3eAJQqOLwg5j4NIMD9BMWrNAZgy R5uYIDU3oYaMooR9rbyMS+IebD/OBFo5L1dhdXOfeP1fgUotAd/Uqg6jGC+5uyxF tOSyjBWymfs1VCRyws80z8ZwCBy2or6+JsTEPIj4CMfwXiiamffEvmNlb4Z5Hi00 a6Jg94fLnp1EpCTepE3Gt2r2h/lv4H9bK0cYYPrbvI9yDsjdIt755jI0YIOE8FTz FbIdidotZqL4zBzfYj1yNN1ZHhd4enCWit7SYYFKbg184cVv39gmcvRVJu12rDbn LH1r0wAozjB7og== -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:03 2025 by rpki-client