This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json) Hash identifier: sqzmti7w8dYLYO3z14hz2hADkvdiwDkFnbsYH6+V8UU= Subject key identifier: 97:D7:EA:87:59:D2:B4:11:9D:0C:46:4E:E6:40:E7:1B:BE:FA:11:76 Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019B3FB64497FF7F17E10CA5803ED4BEE92F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 07:01:08 +0000 Manifest this update: Sun 21 Dec 2025 07:01:08 +0000 Manifest next update: Mon 22 Dec 2025 07:01:08 +0000 Files and hashes: 1: j_x8-xq1Cd2KgNHm4nfR-icwAI0.roa (hash: iJitYLX0aghD6k8WGrVcB21UJwxiN0hlpWyOTUTC2Oc=) 2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: paV6aGf4B4RQfixaRh0YTPDT1Bt2Xot4cAZaF+LjJ40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:44:97:ff:7f:17:e1:0c:a5:80:3e:d4:be:e9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Dec 21 07:01:08 2025 GMT Not After : Dec 22 07:01:08 2025 GMT Subject: CN=97d7ea8759d2b4119d0c464ee640e71bbefa1176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:21:1e:e8:62:32:6f:73:16:e8:41:4d:cf: af:28:03:13:7f:e5:7d:0d:1c:75:15:d6:35:57:ce: 07:f2:62:32:24:eb:ff:c8:89:6d:29:b7:15:42:97: e4:5e:91:22:72:ef:1a:6c:b1:75:7c:00:d2:36:22: 94:eb:e0:89:59:10:b0:b7:df:e1:17:77:04:12:60: c1:dc:dc:1b:6e:eb:a1:cd:2e:75:61:33:9f:53:ba: 71:0a:3f:db:2d:70:75:16:18:80:96:cb:1d:f8:2a: 7f:19:7d:32:2d:c7:a0:2d:80:60:77:0f:14:d2:8a: 73:4e:89:18:1e:a8:f9:4e:7a:46:9c:d4:67:52:0f: 90:e7:4a:a2:da:90:2f:b0:2e:95:f3:4f:69:08:45: cb:c3:93:b8:14:fa:49:13:74:4d:25:0f:94:c8:f9: 50:64:00:13:bc:84:ca:1b:d7:51:67:e0:64:0e:b4: a6:ba:cf:20:da:53:18:5a:51:ff:80:e0:a6:34:45: 06:d2:05:aa:b1:70:8d:2c:fc:10:35:32:a9:bc:00: a6:30:c6:1d:41:1a:1c:0b:2d:f3:79:89:66:80:e4: 53:da:24:ae:fa:76:50:51:c9:b9:13:69:cf:68:23: 75:12:20:c6:aa:21:ff:f4:b0:27:17:05:e9:6d:da: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:EA:87:59:D2:B4:11:9D:0C:46:4E:E6:40:E7:1B:BE:FA:11:76 X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:86:5e:44:e3:04:f4:e7:12:bb:24:d7:9b:58:84:70:aa:fc: a2:f4:dd:7e:93:22:23:5b:14:bf:e7:25:88:8d:3c:be:d2:0f: f2:00:35:70:29:3f:79:4d:85:3f:0c:3b:7a:35:9a:75:e8:ca: e0:e0:03:c1:7b:9d:cf:e5:5c:6b:6b:90:f3:e1:45:a5:69:c9: 4b:c2:bc:0e:ea:1a:6a:69:39:85:17:10:20:31:a5:cc:e3:d3: eb:4a:46:02:e3:87:e5:56:60:52:c4:bc:cf:d1:4c:e6:ff:eb: 36:3c:d6:8d:9f:11:3f:57:7c:13:f0:f2:26:d1:c1:76:7d:38: 43:cb:8d:13:89:62:78:39:31:95:37:4b:cb:a1:38:cf:ff:d7: 3b:41:0e:b9:a3:4a:37:b0:bb:b6:55:30:69:f9:02:12:3d:6b: be:4b:9d:3e:5b:ee:ee:ed:be:a0:4e:c6:58:16:15:f4:6f:c2: 5d:80:74:b7:75:8b:3d:32:f6:bf:76:82:92:f7:82:cd:28:ec: 69:86:5c:2e:38:22:ce:ef:b2:f2:41:6c:93:7a:91:42:bf:58: c6:cd:85:33:8a:87:13:26:ec:24:2a:c2:05:31:53:1b:4d:89: 6e:6a:70:53:a0:42:df:ff:c1:15:37:0d:ce:7f:0b:e2:91:3a: 8c:98:09:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkSX/38X4QylgD7UvukvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjUxMjIxMDcwMTA4WhcNMjUxMjIyMDcwMTA4WjAzMTEwLwYDVQQD Eyg5N2Q3ZWE4NzU5ZDJiNDExOWQwYzQ2NGVlNjQwZTcxYmJlZmExMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyMhHuhiMm9zFuhBTc+vKAMTf+V9 DRx1FdY1V84H8mIyJOv/yIltKbcVQpfkXpEicu8abLF1fADSNiKU6+CJWRCwt9/h F3cEEmDB3NwbbuuhzS51YTOfU7pxCj/bLXB1FhiAlssd+Cp/GX0yLcegLYBgdw8U 0opzTokYHqj5TnpGnNRnUg+Q50qi2pAvsC6V809pCEXLw5O4FPpJE3RNJQ+UyPlQ ZAATvITKG9dRZ+BkDrSmus8g2lMYWlH/gOCmNEUG0gWqsXCNLPwQNTKpvACmMMYd QRocCy3zeYlmgORT2iSu+nZQUcm5E2nPaCN1EiDGqiH/9LAnFwXpbdrVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfX6odZ0rQRnQxGTuZA5xu++hF2MB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3IZeROME 9OcSuyTXm1iEcKr8ovTdfpMiI1sUv+cliI08vtIP8gA1cCk/eU2FPww7ejWadejK 4OADwXudz+Vca2uQ8+FFpWnJS8K8Duoaamk5hRcQIDGlzOPT60pGAuOH5VZgUsS8 z9FM5v/rNjzWjZ8RP1d8E/DyJtHBdn04Q8uNE4lieDkxlTdLy6E4z//XO0EOuaNK N7C7tlUwafkCEj1rvkudPlvu7u2+oE7GWBYV9G/CXYB0t3WLPTL2v3aCkveCzSjs aYZcLjgizu+y8kFsk3qRQr9Yxs2FM4qHEybsJCrCBTFTG02JbmpwU6BC3//BFTcN zn8L4pE6jJgJOw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:29 2025 by rpki-client