This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json) Hash identifier: Tx9uT/x+5dymY3gvmnEec0oPxfzxn4GV/pegkanA6kI= Subject key identifier: 3C:97:90:8C:25:9D:E3:A9:C9:0B:9C:C8:2E:63:76:F0:06:61:E2:7D Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Certificate serial: 019B39EB1C094064CA354B4EF647DE4DA8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft Manifest number: 070B Signing time: Sat 20 Dec 2025 04:01:07 +0000 Manifest this update: Sat 20 Dec 2025 04:01:07 +0000 Manifest next update: Sun 21 Dec 2025 04:01:07 +0000 Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: E6c2es/CWLWGlxUHQSS+hGJieUxx5tO1k8RuiLhxZ9w=) 2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=) 3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=) 4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=) 5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1c:09:40:64:ca:35:4b:4e:f6:47:de:4d:a8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Validity Not Before: Dec 20 04:01:07 2025 GMT Not After : Dec 21 04:01:07 2025 GMT Subject: CN=3c97908c259de3a9c90b9cc82e6376f00661e27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:5a:87:c1:3b:c8:9d:1c:26:ce:09:b1:0b: 12:c8:9f:58:c5:bb:02:07:83:6b:43:91:92:37:88: f2:cd:29:74:27:8e:d6:17:9a:20:2f:ba:ef:d5:21: 04:ae:d4:42:02:63:86:1e:47:f4:60:de:6a:53:c2: c3:19:bd:63:e8:c1:24:67:d0:51:19:c7:2a:b6:69: 57:af:a2:e5:27:22:2e:c7:d8:37:96:8b:78:6e:1e: bc:e7:6e:64:a2:c5:97:f2:c4:d8:98:fb:16:9f:e2: 54:26:45:5d:00:89:aa:cd:8b:11:73:3a:2b:da:55: 6a:f5:9a:98:98:65:13:d1:32:0b:fc:45:e2:a8:a4: 20:de:1c:61:fe:63:b3:9e:35:1a:8b:ae:48:cf:fd: 01:c9:23:e0:3a:cb:55:a7:b3:be:fc:57:2c:e2:10: 73:91:96:17:c8:18:67:b6:6a:e4:a3:74:61:9c:9e: 42:96:74:d4:c3:69:da:2b:44:9b:cf:f0:3a:12:28: e8:11:f0:52:d7:a4:b5:3c:2a:df:81:07:90:1f:ac: eb:72:c0:9b:bd:96:6d:6e:b2:b7:f3:4c:c1:ed:d3: a0:89:4c:70:10:3b:80:50:db:13:28:02:79:cd:b6: cd:eb:79:26:f3:a2:31:ef:f6:51:1d:2f:12:48:a3: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:90:8C:25:9D:E3:A9:C9:0B:9C:C8:2E:63:76:F0:06:61:E2:7D X509v3 Authority Key Identifier: keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:53:14:5b:25:d3:e4:c0:d0:d9:90:b6:b4:ae:c5:00:6e:8f: 52:c9:7a:1d:29:b2:97:6c:3e:0e:4f:ca:e6:3a:e0:8f:07:7c: d2:46:ed:8e:c4:30:9c:ea:9a:d5:79:da:2f:f4:e6:7b:0e:52: df:ba:72:e9:6a:41:12:0b:80:99:89:79:e3:6c:7d:f3:9a:4c: b6:e2:8c:c8:e0:a2:ef:9a:e4:e0:bd:0f:54:ba:f3:fa:99:31: 23:60:0f:09:63:96:e2:01:23:25:80:cf:35:b9:4a:1a:c2:c3: da:b3:bf:c5:ed:93:15:9a:71:ee:55:56:21:34:1c:32:ee:df: 15:3d:f3:a5:38:55:ec:ca:db:03:85:df:41:6d:06:d9:a6:26: 3f:2d:f7:18:de:e3:0a:55:ef:f3:4b:0a:8c:66:a4:a1:e3:d8: 87:c2:1b:fb:b5:a5:ac:eb:60:71:95:33:47:9c:4d:14:17:75: 9d:58:b5:c0:2f:11:21:f5:2b:f9:0e:c6:7d:b8:3c:6e:ed:02: 9d:b2:9c:7e:26:60:79:b4:cf:41:39:13:a8:06:49:51:95:3b: 95:8d:68:81:a9:8b:4c:ba:a0:5e:55:59:ed:5e:c6:56:24:87: e0:14:fc:b3:1b:cd:32:8b:29:5a:c8:f5:79:e7:09:1a:67:af: 92:95:82:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xwJQGTKNUtO9kfeTajhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm MGU4OWUwHhcNMjUxMjIwMDQwMTA3WhcNMjUxMjIxMDQwMTA3WjAzMTEwLwYDVQQD EygzYzk3OTA4YzI1OWRlM2E5YzkwYjljYzgyZTYzNzZmMDA2NjFlMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Rah8E7yJ0cJs4JsQsSyJ9YxbsC B4NrQ5GSN4jyzSl0J47WF5ogL7rv1SEErtRCAmOGHkf0YN5qU8LDGb1j6MEkZ9BR GccqtmlXr6LlJyIux9g3lot4bh68525kosWX8sTYmPsWn+JUJkVdAImqzYsRczor 2lVq9ZqYmGUT0TIL/EXiqKQg3hxh/mOznjUai65Iz/0BySPgOstVp7O+/Fcs4hBz kZYXyBhntmrko3RhnJ5ClnTUw2naK0Sbz/A6EijoEfBS16S1PCrfgQeQH6zrcsCb vZZtbrK380zB7dOgiUxwEDuAUNsTKAJ5zbbN63km86Ix7/ZRHS8SSKP0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyXkIwlneOpyQucyC5jdvAGYeJ9MB8GA1UdIwQY MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt ZmRhNGU4YTViNDZlLzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1MUWyXT 5MDQ2ZC2tK7FAG6PUsl6HSmyl2w+Dk/K5jrgjwd80kbtjsQwnOqa1XnaL/Tmew5S 37py6WpBEguAmYl542x985pMtuKMyOCi75rk4L0PVLrz+pkxI2APCWOW4gEjJYDP NblKGsLD2rO/xe2TFZpx7lVWITQcMu7fFT3zpThV7MrbA4XfQW0G2aYmPy33GN7j ClXv80sKjGakoePYh8Ib+7WlrOtgcZUzR5xNFBd1nVi1wC8RIfUr+Q7Gfbg8bu0C nbKcfiZgebTPQTkTqAZJUZU7lY1ogamLTLqgXlVZ7V7GViSH4BT8sxvNMospWsj1 eecJGmevkpWCbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:22 2025 by rpki-client