This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json) Hash identifier: peNzI6kkfJ9opBIJeh69Tqh21tuQQs9JGisEXVl6PXg= Subject key identifier: 71:C4:10:D3:3A:4F:56:DB:1E:FF:62:64:05:26:F7:4F:08:58:A3:D1 Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Certificate serial: 019B52989991AF4F6F65C3B5B0DB3ACD2318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft Manifest number: 0694 Signing time: Wed 24 Dec 2025 23:01:31 +0000 Manifest this update: Wed 24 Dec 2025 23:01:31 +0000 Manifest next update: Thu 25 Dec 2025 23:01:31 +0000 Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=) 2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: Lf47Rr+F+Tkkxpz5vQCJnmYYgOhPcZUNj+WkfcnaI4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:99:91:af:4f:6f:65:c3:b5:b0:db:3a:cd:23:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Validity Not Before: Dec 24 23:01:31 2025 GMT Not After : Dec 25 23:01:31 2025 GMT Subject: CN=71c410d33a4f56db1eff62640526f74f0858a3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:28:5b:55:a9:54:e9:24:a4:cd:09:c4:2e: 8a:e2:d4:6a:cb:79:fe:d3:2c:b5:65:1d:bc:ea:f9: c7:1d:77:a4:56:c6:ee:c9:5e:dc:da:86:32:ac:56: fb:73:bd:27:d0:e9:ba:69:8f:92:2f:c0:45:8f:cb: b9:86:7b:65:b1:1a:bc:5d:cf:55:65:8d:4f:14:26: 08:91:29:c2:e0:ac:8f:8d:96:89:1d:e6:3e:ac:7a: 9c:ff:65:d5:66:52:f8:59:57:5e:ce:77:7f:3c:73: 54:4b:6b:a5:67:1a:6f:00:dc:95:e4:9d:c3:90:e6: 54:4c:96:e9:06:15:5c:8d:1a:10:2a:bd:f9:86:ea: 1d:f5:04:bf:66:d2:b5:7d:54:18:04:ef:6e:37:5f: 5c:e0:5c:93:88:3e:54:50:d4:18:8e:a0:e8:bb:22: 62:71:0e:1d:83:cf:77:d8:50:13:cf:4b:b7:4a:d8: a6:88:04:01:f8:6e:03:f7:15:a0:a2:b6:6f:e0:a6: 91:85:71:23:09:99:31:be:3d:e5:fd:02:05:d5:1b: 29:bc:eb:4d:ab:9d:9d:89:9b:b4:9e:c3:7d:25:11: d5:cc:25:5d:c4:09:b2:ea:b6:0c:43:82:17:f1:d4: ca:ee:c7:78:2e:6b:de:b8:83:6b:7a:d6:e9:39:bc: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C4:10:D3:3A:4F:56:DB:1E:FF:62:64:05:26:F7:4F:08:58:A3:D1 X509v3 Authority Key Identifier: keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:b8:9a:ee:95:05:b7:e5:b4:03:69:d8:88:68:14:69:9b:2d: e0:4d:db:a8:9e:ed:5e:35:e0:cc:a0:db:17:40:a8:e0:a7:a6: 0d:c3:bb:3b:5b:c4:91:47:b7:ef:ac:90:ed:86:8e:28:bd:65: cc:93:14:91:75:1f:fc:fc:56:81:b1:9c:13:43:92:05:e9:d6: 01:32:82:6a:c2:12:f0:8e:69:14:ee:9f:05:65:4d:f3:45:31: 9f:09:21:e1:5e:45:83:87:50:a4:60:97:74:da:fb:94:5e:2b: 23:68:63:4e:6d:79:42:46:d1:66:cc:bb:33:9a:b2:fe:36:f3: 10:b0:e9:0e:ed:9a:11:37:cb:1b:18:43:b7:f3:b7:ea:14:de: 97:6a:2c:30:11:6a:b6:84:f6:f0:bd:53:1c:09:71:3c:34:37: 41:dd:a4:8f:6b:b7:bd:0d:50:70:81:46:3a:e7:a7:65:af:c7: 7f:5b:50:fa:ec:d0:63:93:1a:eb:db:ac:05:ca:93:3f:c8:d2: fb:74:96:9a:b1:4d:b0:28:69:54:88:39:61:86:2d:d4:4e:62: d2:f9:64:11:f9:6b:36:5f:8e:ee:12:64:0a:df:94:ca:37:b6: db:48:02:89:66:52:fd:04:43:5b:31:5c:48:eb:be:99:96:1c: e2:c8:44:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmJmRr09vZcO1sNs6zSMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk NDQwODkwHhcNMjUxMjI0MjMwMTMxWhcNMjUxMjI1MjMwMTMxWjAzMTEwLwYDVQQD Eyg3MWM0MTBkMzNhNGY1NmRiMWVmZjYyNjQwNTI2Zjc0ZjA4NThhM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNsoW1WpVOkkpM0JxC6K4tRqy3n+ 0yy1ZR286vnHHXekVsbuyV7c2oYyrFb7c70n0Om6aY+SL8BFj8u5hntlsRq8Xc9V ZY1PFCYIkSnC4KyPjZaJHeY+rHqc/2XVZlL4WVdeznd/PHNUS2ulZxpvANyV5J3D kOZUTJbpBhVcjRoQKr35huod9QS/ZtK1fVQYBO9uN19c4FyTiD5UUNQYjqDouyJi cQ4dg8932FATz0u3StimiAQB+G4D9xWgorZv4KaRhXEjCZkxvj3l/QIF1RspvOtN q52diZu0nsN9JRHVzCVdxAmy6rYMQ4IX8dTK7sd4LmveuINretbpObzRgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHEENM6T1bbHv9iZAUm908IWKPRMB8GA1UdIwQY MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA57ia7pUF t+W0A2nYiGgUaZst4E3bqJ7tXjXgzKDbF0Co4KemDcO7O1vEkUe376yQ7YaOKL1l zJMUkXUf/PxWgbGcE0OSBenWATKCasIS8I5pFO6fBWVN80Uxnwkh4V5Fg4dQpGCX dNr7lF4rI2hjTm15QkbRZsy7M5qy/jbzELDpDu2aETfLGxhDt/O36hTel2osMBFq toT28L1THAlxPDQ3Qd2kj2u3vQ1QcIFGOuenZa/Hf1tQ+uzQY5Ma69usBcqTP8jS +3SWmrFNsChpVIg5YYYt1E5i0vlkEflrNl+O7hJkCt+Uyje220gCiWZS/QRDWzFc SOu+mZYc4shEBA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:01:55 2025 by rpki-client