This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json) Hash identifier: yiUMPdj72iBPcTmjI2ICcDyuvx8BU5lJkPnDQlIvW8c= Subject key identifier: F5:82:B5:7F:B7:06:25:AA:6F:69:8B:D1:56:E9:39:33:C5:51:7C:3C Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e Certificate serial: 019B3A9120A9CA67D8BA8E9A090C16ADEFDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:28 +0000 Manifest this update: Sat 20 Dec 2025 07:02:28 +0000 Manifest next update: Sun 21 Dec 2025 07:02:28 +0000 Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=) 2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: vkpKqajIzXnBcLVx+U6Y8r7pom9IRP++uSYIHHgEu5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:20:a9:ca:67:d8:ba:8e:9a:09:0c:16:ad:ef:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e Validity Not Before: Dec 20 07:02:28 2025 GMT Not After : Dec 21 07:02:28 2025 GMT Subject: CN=f582b57fb70625aa6f698bd156e93933c5517c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:c8:82:ab:3e:11:66:7a:d5:e2:30:06:fc: 5a:cc:33:90:12:bd:17:3f:d1:67:74:7e:94:49:08: 91:8a:40:56:e1:88:45:b2:d8:10:60:aa:c2:58:01: dc:c8:bb:07:ed:74:9b:a3:f4:15:25:bb:f6:d2:2b: fd:35:df:c4:b3:4d:ac:03:a5:78:1d:97:02:0b:95: 67:84:34:93:ac:88:36:a7:f4:2d:a5:40:d1:fd:e0: 28:2d:62:c5:b1:db:b3:4f:f4:c6:d8:9c:45:b8:00: 2a:0f:fe:5f:95:d5:e2:cf:0d:d7:3a:30:2a:ba:9a: 25:76:3e:38:af:88:e1:7b:0d:3c:2a:2f:c0:dd:86: 92:55:83:2c:45:bb:fa:d0:28:e6:c2:72:bb:fc:8b: c7:77:a1:7c:c5:77:78:70:3b:69:d0:8a:7b:3c:ec: 1c:fa:50:35:e7:68:c2:e8:73:8b:bf:3c:a1:12:f6: 20:83:c6:e8:5a:ce:89:64:ef:25:b5:d3:65:a6:8c: 8e:f8:45:a6:f6:99:03:34:a2:89:e6:73:3e:17:b3: 2e:3c:db:cd:02:e9:64:d0:ac:ad:1b:8c:55:8f:1c: 42:96:e3:21:8f:ec:09:be:4d:a4:6b:31:39:5c:7e: 7e:fa:ea:4b:61:cf:b1:87:16:e3:ee:6c:00:ac:fd: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:82:B5:7F:B7:06:25:AA:6F:69:8B:D1:56:E9:39:33:C5:51:7C:3C X509v3 Authority Key Identifier: keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:9b:49:3c:cb:36:2f:17:33:ae:ea:95:b2:dd:1e:d1:f2: 60:d6:a5:71:18:8f:76:af:44:be:1a:e2:38:f7:90:b5:a7:a4: 6b:e6:dd:51:03:3b:f4:27:45:50:a3:f3:7f:39:17:2c:2c:0d: c2:76:6c:22:da:a6:34:68:20:95:a9:8b:f0:3b:f8:1b:30:55: 5c:49:f5:eb:ae:fa:25:bc:d9:d7:23:6b:a5:3e:2e:54:13:29: 43:bb:9f:a0:a6:e7:60:64:5c:3d:1e:52:ff:8b:f6:31:9c:85: 32:ae:dd:94:14:44:37:53:26:07:bc:e6:45:06:a2:4d:02:ad: d3:73:61:3b:2f:d4:35:f2:ba:d3:b4:bc:90:85:2d:f3:b9:f2: 6b:66:f3:96:06:59:2f:44:98:93:e9:bd:71:b8:81:8f:52:d9: 17:1a:a5:96:fc:58:c9:47:22:fb:d1:37:36:d2:57:9d:e0:06: 03:da:cb:d3:39:92:82:d0:ab:60:56:0c:f6:ec:8a:ec:ab:61: 9f:f2:76:38:c9:69:3f:a5:9a:4a:31:41:fa:4f:20:af:5e:e5: d2:f3:ca:b0:52:45:0a:53:a2:01:e6:45:92:30:79:7e:4b:c8: f4:4c:49:0e:14:b3:7f:55:04:5e:04:c2:ff:24:16:db:bb:2f: 16:26:57:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kSCpymfYuo6aCQwWre/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk YWZmNWUwHhcNMjUxMjIwMDcwMjI4WhcNMjUxMjIxMDcwMjI4WjAzMTEwLwYDVQQD EyhmNTgyYjU3ZmI3MDYyNWFhNmY2OThiZDE1NmU5MzkzM2M1NTE3YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11jIgqs+EWZ61eIwBvxazDOQEr0X P9FndH6USQiRikBW4YhFstgQYKrCWAHcyLsH7XSbo/QVJbv20iv9Nd/Es02sA6V4 HZcCC5VnhDSTrIg2p/QtpUDR/eAoLWLFsduzT/TG2JxFuAAqD/5fldXizw3XOjAq upoldj44r4jhew08Ki/A3YaSVYMsRbv60CjmwnK7/IvHd6F8xXd4cDtp0Ip7POwc +lA152jC6HOLvzyhEvYgg8boWs6JZO8ltdNlpoyO+EWm9pkDNKKJ5nM+F7MuPNvN Aulk0KytG4xVjxxCluMhj+wJvk2kazE5XH5++upLYc+xhxbj7mwArP29sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWCtX+3BiWqb2mL0VbpOTPFUXw8MB8GA1UdIwQY MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3 LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWebSTzL Ni8XM67qlbLdHtHyYNalcRiPdq9EvhriOPeQtaeka+bdUQM79CdFUKPzfzkXLCwN wnZsItqmNGgglamL8Dv4GzBVXEn16676JbzZ1yNrpT4uVBMpQ7ufoKbnYGRcPR5S /4v2MZyFMq7dlBREN1MmB7zmRQaiTQKt03NhOy/UNfK607S8kIUt87nya2bzlgZZ L0SYk+m9cbiBj1LZFxqllvxYyUci+9E3NtJXneAGA9rL0zmSgtCrYFYM9uyK7Kth n/J2OMlpP6WaSjFB+k8gr17l0vPKsFJFClOiAeZFkjB5fkvI9ExJDhSzf1UEXgTC /yQW27svFiZXrA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:47 2025 by rpki-client