This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json) Hash identifier: bEG2nOvehfnKkP+PYx3DTC5Fja+iBh/pWRVjBaepp+I= Subject key identifier: 96:C2:29:18:DC:DB:6A:D4:CC:D4:FD:09:5E:55:1D:D6:78:64:60:B5 Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Certificate serial: 019B4E4D88D440F51CC12B37AAB52A61B2B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft Manifest number: 179B Signing time: Wed 24 Dec 2025 03:01:02 +0000 Manifest this update: Wed 24 Dec 2025 03:01:02 +0000 Manifest next update: Thu 25 Dec 2025 03:01:02 +0000 Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=) 2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=) 3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: mnTFy0Hhmui/Whbn9dPSKe6F9Vlp73SWyqrf8pn0Adw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:88:d4:40:f5:1c:c1:2b:37:aa:b5:2a:61:b2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Validity Not Before: Dec 24 03:01:02 2025 GMT Not After : Dec 25 03:01:02 2025 GMT Subject: CN=96c22918dcdb6ad4ccd4fd095e551dd6786460b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:a5:13:6d:c6:b9:23:c5:42:39:2d:5a:02: 4f:0d:83:cc:4f:b8:12:e4:4e:3c:50:ae:9a:bb:76: 0f:4b:13:a7:1f:d9:67:cd:d0:46:d7:2a:52:1e:f3: e4:70:88:5c:63:4b:5b:60:3d:bd:9d:08:c1:49:b8: 8e:11:20:93:9e:d7:f8:6f:e2:1c:c0:28:21:ce:a0: a1:03:13:3e:ac:80:cf:29:f0:7d:1f:80:57:43:30: 3e:db:28:5e:53:99:4a:80:6a:40:7a:b2:7b:09:fb: 91:21:9e:b7:0a:7c:7e:7f:04:94:27:54:d6:b6:d3: 22:86:b6:b9:6e:75:d2:58:71:1e:71:20:98:fd:fd: e3:3e:cd:e3:1a:95:40:9b:e3:83:8d:5a:49:6f:bc: d3:5e:f2:11:aa:83:79:57:b6:b3:41:29:5a:f7:5c: bc:c2:27:a5:f3:70:d6:17:c5:ad:3d:43:a1:35:3c: 67:4b:60:1b:e9:a0:92:be:93:4d:3b:65:55:89:84: 0a:22:66:b2:51:68:2f:57:bc:50:21:6c:b7:ac:a5: e7:a7:e3:8e:8c:84:fd:9c:60:fd:e9:0c:79:b7:af: 32:63:12:4e:9d:65:6f:cd:aa:41:f0:69:dc:7b:53: 15:41:fe:f5:a6:cc:79:6e:dc:8b:e5:ba:1d:1d:52: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C2:29:18:DC:DB:6A:D4:CC:D4:FD:09:5E:55:1D:D6:78:64:60:B5 X509v3 Authority Key Identifier: keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3c:c2:64:45:67:56:2e:c4:5b:23:2b:0f:d4:b9:c3:20:7b: 7b:60:05:69:2e:d1:25:d1:7d:79:b1:2c:69:39:88:9b:35:48: b4:be:51:de:ac:cd:67:65:94:be:e7:be:96:cc:a7:2b:bd:f9: 42:c6:9c:d8:be:71:52:6f:9f:30:fd:c3:89:53:45:7d:3a:58: f2:93:50:66:8d:9f:1f:cb:4d:b9:a9:95:32:6a:6f:65:a9:4a: d6:d7:1e:72:09:5d:92:2c:6f:94:2e:f5:a1:14:aa:21:01:d9: 56:cd:ec:c3:a9:3b:19:80:09:5b:4d:19:bc:6c:a5:c2:dd:c0: 50:e2:45:f1:d5:62:b6:02:d5:30:ba:d1:b5:ed:7b:2b:d5:9c: e6:d0:3a:e9:71:f3:ce:90:b8:4c:a9:c3:ef:d4:cb:b7:fc:d8: 75:e8:a1:15:1e:06:f3:c7:49:f5:93:7d:f2:d1:88:49:c0:21: 1c:ea:f8:c8:57:9d:4f:82:ea:d7:82:8b:20:37:af:ed:09:32: 32:37:6c:8c:5f:7d:e5:6e:4e:2b:c8:57:3c:bb:43:94:8f:3e: c2:32:15:8e:85:01:a9:37:f0:7e:42:4e:2d:6a:bc:90:c4:d0: 95:8e:dd:60:bd:12:17:b0:86:c7:cc:39:d4:5b:63:99:20:14: e4:bc:65:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTYjUQPUcwSs3qrUqYbK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzcwMTM1ZDBmMGQzMGE4NjhkZjU1MWQ4NzUyZDRiNGJh ZGMyYzEwHhcNMjUxMjI0MDMwMTAyWhcNMjUxMjI1MDMwMTAyWjAzMTEwLwYDVQQD Eyg5NmMyMjkxOGRjZGI2YWQ0Y2NkNGZkMDk1ZTU1MWRkNjc4NjQ2MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq+lE23GuSPFQjktWgJPDYPMT7gS 5E48UK6au3YPSxOnH9lnzdBG1ypSHvPkcIhcY0tbYD29nQjBSbiOESCTntf4b+Ic wCghzqChAxM+rIDPKfB9H4BXQzA+2yheU5lKgGpAerJ7CfuRIZ63Cnx+fwSUJ1TW ttMihra5bnXSWHEecSCY/f3jPs3jGpVAm+ODjVpJb7zTXvIRqoN5V7azQSla91y8 wiel83DWF8WtPUOhNTxnS2Ab6aCSvpNNO2VViYQKImayUWgvV7xQIWy3rKXnp+OO jIT9nGD96Qx5t68yYxJOnWVvzapB8Gnce1MVQf71psx5btyL5bodHVLk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbCKRjc22rUzNT9CV5VHdZ4ZGC1MB8GA1UdIwQY MBaAFMd3ATXQ8NMKho31Udh1LUtLrcLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUt ZDY0ZDc1Mzk0MDM3LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUtZDY0ZDc1Mzk0MDM3 LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzzCZEVn Vi7EWyMrD9S5wyB7e2AFaS7RJdF9ebEsaTmImzVItL5R3qzNZ2WUvue+lsynK735 Qsac2L5xUm+fMP3DiVNFfTpY8pNQZo2fH8tNuamVMmpvZalK1tcecgldkixvlC71 oRSqIQHZVs3sw6k7GYAJW00ZvGylwt3AUOJF8dVitgLVMLrRte17K9Wc5tA66XHz zpC4TKnD79TLt/zYdeihFR4G88dJ9ZN98tGIScAhHOr4yFedT4Lq14KLIDev7Qky MjdsjF995W5OK8hXPLtDlI8+wjIVjoUBqTfwfkJOLWq8kMTQlY7dYL0SF7CGx8w5 1FtjmSAU5LxlZQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:42 2025 by rpki-client