This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json) Hash identifier: CihGy0QD03sKIaOkAxyji3tHwYgjubVvf9VSvWGQPLk= Subject key identifier: 84:77:DE:8C:F8:26:48:2E:E6:AD:56:20:42:9D:A4:67:BF:A9:56:4C Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Certificate serial: 019B50AA25EC52F99F871CF77C67B57003C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft Manifest number: 0693 Signing time: Wed 24 Dec 2025 14:01:26 +0000 Manifest this update: Wed 24 Dec 2025 14:01:26 +0000 Manifest next update: Thu 25 Dec 2025 14:01:26 +0000 Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=) 2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: qoUba3wS08PIkUyS1/ajyQ6m7N98Xz+3TTder7BFNiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:25:ec:52:f9:9f:87:1c:f7:7c:67:b5:70:03:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Validity Not Before: Dec 24 14:01:26 2025 GMT Not After : Dec 25 14:01:26 2025 GMT Subject: CN=8477de8cf826482ee6ad5620429da467bfa9564c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:50:27:ff:a3:ee:f3:cc:7f:a7:77:59:70: ba:3b:b0:4c:9c:9d:fb:88:b2:63:2b:0b:c2:4f:68: 2e:50:9b:a4:01:87:ac:e8:07:83:ed:a2:4a:d0:3f: db:50:15:a5:35:bf:18:a1:53:67:a2:68:a6:c1:db: 5a:c1:3c:cf:90:9b:a2:89:c0:82:47:eb:f4:d3:ce: fa:01:f8:ae:5e:69:2a:a5:d9:74:17:b4:29:41:39: 74:97:4f:a8:79:97:57:56:70:a3:14:76:49:91:b5: 5b:25:c6:d6:89:14:45:90:a7:4d:b8:2e:44:12:2c: 82:f8:da:ab:4e:4f:b4:33:21:68:d6:0a:a5:c4:a2: f1:3b:d3:1e:9a:cd:46:b1:85:5e:f8:28:34:60:04: 3e:07:44:3f:09:2d:89:a4:7d:e2:a4:ff:c0:22:33: 6d:fe:52:57:05:4d:05:3d:15:94:79:e2:8a:84:ae: 61:ff:43:db:fa:2f:93:f9:78:54:3e:4f:7c:30:be: 90:44:29:48:4e:5b:71:e5:d0:29:41:35:94:fa:b2: a1:a7:c8:ea:fb:94:5f:27:90:15:cb:6b:0d:86:66: 8f:3c:90:6d:f3:1d:04:c1:48:21:cc:63:f8:70:5a: 22:d5:86:cd:04:34:76:51:a3:eb:85:19:4b:c2:09: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:77:DE:8C:F8:26:48:2E:E6:AD:56:20:42:9D:A4:67:BF:A9:56:4C X509v3 Authority Key Identifier: keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c4:88:09:e2:8d:0a:5e:75:de:ce:5f:5e:86:58:4b:ba:b6: a2:98:64:3b:c9:e2:dd:f2:50:35:59:27:f4:d8:a3:72:99:ca: 1b:e3:e5:28:ed:c4:31:0b:88:4e:44:5b:04:b8:ff:80:ed:d2: 51:4c:eb:80:e6:5b:f0:cd:81:fe:6e:38:7e:65:21:c0:de:be: 9b:2d:6e:ce:08:0d:79:df:4c:25:17:e1:3b:b3:a5:e6:86:d3: 37:14:4c:64:70:0d:13:4d:7e:2a:2d:85:e8:52:98:c2:af:c0: e5:02:5c:f6:32:b7:e8:a9:32:be:0c:ae:b6:2e:db:30:2d:36: 5e:ae:85:d8:e0:5e:2f:cd:c9:b8:46:ee:bc:8e:88:9b:74:3c: d5:78:1b:22:14:37:b0:1e:29:17:c3:38:5f:d5:c2:77:b6:bd: c9:e5:16:48:85:82:19:ab:df:bb:82:6d:92:23:d2:40:40:f1: c8:11:9f:8e:e1:fb:af:eb:11:13:a5:05:25:ab:20:60:d4:c0: 63:c6:ee:be:de:d4:ac:3a:e9:5c:bf:32:d5:be:ec:dc:26:09: e1:8d:ca:bb:c1:03:2c:7d:3f:b2:31:6a:27:cb:17:20:4f:3d: c5:34:71:87:62:38:db:78:8f:9b:62:be:ee:a2:0a:da:8e:39: d5:d2:c9:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqiXsUvmfhxz3fGe1cAPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk NDQwODkwHhcNMjUxMjI0MTQwMTI2WhcNMjUxMjI1MTQwMTI2WjAzMTEwLwYDVQQD Eyg4NDc3ZGU4Y2Y4MjY0ODJlZTZhZDU2MjA0MjlkYTQ2N2JmYTk1NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S1QJ/+j7vPMf6d3WXC6O7BMnJ37 iLJjKwvCT2guUJukAYes6AeD7aJK0D/bUBWlNb8YoVNnomimwdtawTzPkJuiicCC R+v00876AfiuXmkqpdl0F7QpQTl0l0+oeZdXVnCjFHZJkbVbJcbWiRRFkKdNuC5E EiyC+NqrTk+0MyFo1gqlxKLxO9Mems1GsYVe+Cg0YAQ+B0Q/CS2JpH3ipP/AIjNt /lJXBU0FPRWUeeKKhK5h/0Pb+i+T+XhUPk98ML6QRClITltx5dApQTWU+rKhp8jq +5RfJ5AVy2sNhmaPPJBt8x0EwUghzGP4cFoi1YbNBDR2UaPrhRlLwgmGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR33oz4Jkgu5q1WIEKdpGe/qVZMMB8GA1UdIwQY MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8SICeKN Cl513s5fXoZYS7q2ophkO8ni3fJQNVkn9NijcpnKG+PlKO3EMQuITkRbBLj/gO3S UUzrgOZb8M2B/m44fmUhwN6+my1uzggNed9MJRfhO7Ol5obTNxRMZHANE01+Ki2F 6FKYwq/A5QJc9jK36Kkyvgyuti7bMC02Xq6F2OBeL83JuEbuvI6Im3Q81XgbIhQ3 sB4pF8M4X9XCd7a9yeUWSIWCGavfu4JtkiPSQEDxyBGfjuH7r+sRE6UFJasgYNTA Y8buvt7UrDrpXL8y1b7s3CYJ4Y3Ku8EDLH0/sjFqJ8sXIE89xTRxh2I423iPm2K+ 7qIK2o451dLJ6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 23:21:11 2025 by rpki-client