This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json) Hash identifier: R9b1FpqdBzZ6XUUEO7OPAGq6C0uZu9apKY/Db2s5eXM= Subject key identifier: B9:2C:2A:F2:F2:EF:4D:DA:70:35:29:F6:D2:FF:D6:D9:69:91:5B:8E Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e Certificate serial: 019B424AA0C47A860F74C6A8C9B3500EC1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:02:25 +0000 Manifest this update: Sun 21 Dec 2025 19:02:25 +0000 Manifest next update: Mon 22 Dec 2025 19:02:25 +0000 Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=) 2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: YJ2sXz2D8YDKJE9sW+VlAt9X2fv1YbDA+AT2jMexBEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:a0:c4:7a:86:0f:74:c6:a8:c9:b3:50:0e:c1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e Validity Not Before: Dec 21 19:02:25 2025 GMT Not After : Dec 22 19:02:25 2025 GMT Subject: CN=b92c2af2f2ef4dda703529f6d2ffd6d969915b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:4e:90:42:65:19:80:3f:2a:94:73:35:ce: b5:1d:0e:42:4c:ac:c2:af:e2:af:72:0d:42:a6:96: 08:7e:6a:56:ae:11:95:a5:41:4a:56:c1:b3:78:14: 7c:3e:23:47:26:ef:ba:d4:3d:0b:79:76:cb:5d:a2: d2:73:0b:77:e8:50:0d:a4:bc:56:e7:25:c4:e8:72: b7:9b:bc:5f:5c:de:11:7d:82:50:4d:7f:7c:2b:19: 72:3c:6b:f1:f1:ad:19:e6:a9:a4:d6:8c:25:3c:1e: 5c:48:42:4b:61:2c:df:32:c6:3b:8a:23:d7:b4:e5: df:92:39:20:37:d5:b1:1a:90:b0:8f:2e:14:1b:4d: 57:fd:60:25:87:85:f5:4f:f0:2f:61:a3:f1:6e:09: 10:ed:d9:75:61:03:d7:71:05:be:f7:f7:b0:e1:d6: a5:fa:d6:8d:a5:fc:08:6d:e9:16:4a:3b:49:54:b3: 62:63:3f:35:a1:4a:62:6c:5b:34:b6:2d:29:b2:e6: 11:a4:01:c9:57:d9:f7:6d:4b:95:48:54:fc:16:f5: a0:9d:27:6e:48:1f:7d:01:8d:18:2d:b2:51:b5:66: 86:65:81:f1:a4:04:b2:48:08:0a:6e:44:3d:34:4c: 5c:eb:80:47:ef:ed:66:09:a0:0f:39:a4:0f:b5:1c: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:2A:F2:F2:EF:4D:DA:70:35:29:F6:D2:FF:D6:D9:69:91:5B:8E X509v3 Authority Key Identifier: keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:03:d4:38:0f:ff:48:d2:55:35:be:ef:bf:c9:5c:b7:a7:7d: f1:d8:a8:7c:0e:e3:19:d0:2a:66:25:0d:2f:e7:9a:02:ae:5c: d2:da:8c:a9:26:74:da:aa:93:15:df:d4:9c:d9:35:ca:35:f5: 45:42:29:27:58:62:de:3f:86:83:2d:ea:00:ac:33:5f:c5:fb: 99:18:09:0c:74:83:51:cb:34:6a:ca:6b:5d:7c:27:d0:95:20: d9:a8:24:78:83:a7:00:e6:35:fd:de:51:c3:8a:cc:b6:f0:e9: 82:13:87:b4:5e:e2:4f:27:cc:39:fc:b5:7f:de:d6:0d:f8:8f: 01:fb:34:40:a0:e0:a7:31:9c:e9:88:5d:84:6b:0a:22:a8:56: b5:b5:a8:39:30:db:2f:7b:ed:29:39:6c:a2:b7:fa:b9:e0:b5: 1a:65:d9:07:ad:c5:fa:9f:e8:4e:56:98:80:60:3e:9b:98:92: 61:d9:df:56:ce:34:6a:2a:e7:40:23:d3:41:e6:44:8b:f1:e2: 89:30:33:0f:48:1e:52:a8:4c:97:78:79:f0:c9:ab:70:7a:f7: ec:b5:69:53:9f:f8:0f:d9:1f:2a:17:69:2b:00:bb:87:7d:3d: 0d:d3:1b:42:8a:3d:6c:b0:f2:ef:77:16:9a:fa:86:9f:70:4e: 05:19:cc:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqDEeoYPdMaoybNQDsHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk YWZmNWUwHhcNMjUxMjIxMTkwMjI1WhcNMjUxMjIyMTkwMjI1WjAzMTEwLwYDVQQD EyhiOTJjMmFmMmYyZWY0ZGRhNzAzNTI5ZjZkMmZmZDZkOTY5OTE1YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFJOkEJlGYA/KpRzNc61HQ5CTKzC r+Kvcg1CppYIfmpWrhGVpUFKVsGzeBR8PiNHJu+61D0LeXbLXaLScwt36FANpLxW 5yXE6HK3m7xfXN4RfYJQTX98KxlyPGvx8a0Z5qmk1owlPB5cSEJLYSzfMsY7iiPX tOXfkjkgN9WxGpCwjy4UG01X/WAlh4X1T/AvYaPxbgkQ7dl1YQPXcQW+9/ew4dal +taNpfwIbekWSjtJVLNiYz81oUpibFs0ti0psuYRpAHJV9n3bUuVSFT8FvWgnSdu SB99AY0YLbJRtWaGZYHxpASySAgKbkQ9NExc64BH7+1mCaAPOaQPtRzdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLksKvLy703acDUp9tL/1tlpkVuOMB8GA1UdIwQY MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3 LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAPUOA// SNJVNb7vv8lct6d98diofA7jGdAqZiUNL+eaAq5c0tqMqSZ02qqTFd/UnNk1yjX1 RUIpJ1hi3j+Ggy3qAKwzX8X7mRgJDHSDUcs0asprXXwn0JUg2agkeIOnAOY1/d5R w4rMtvDpghOHtF7iTyfMOfy1f97WDfiPAfs0QKDgpzGc6YhdhGsKIqhWtbWoOTDb L3vtKTlsorf6ueC1GmXZB63F+p/oTlaYgGA+m5iSYdnfVs40airnQCPTQeZEi/Hi iTAzD0geUqhMl3h58MmrcHr37LVpU5/4D9kfKhdpKwC7h309DdMbQoo9bLDy73cW mvqGn3BOBRnMNA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:10:42 2025 by rpki-client