This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json) Hash identifier: Imdy5z3g69iAX65YlkTV/iKy6LXDJRVPwzrv26SODis= Subject key identifier: 74:16:EF:19:FF:AD:8D:F8:76:3A:F3:88:7E:10:D5:31:B1:E6:1A:51 Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Certificate serial: 019B3CEC17DE56F41E4D794101F35542775E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 18:01:04 +0000 Manifest this update: Sat 20 Dec 2025 18:01:04 +0000 Manifest next update: Sun 21 Dec 2025 18:01:04 +0000 Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=) 2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=) 3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: aT498BUs4lzYvD0RJAvjc1deCV5TbOlbrtek6ILOvHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:17:de:56:f4:1e:4d:79:41:01:f3:55:42:77:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Validity Not Before: Dec 20 18:01:04 2025 GMT Not After : Dec 21 18:01:04 2025 GMT Subject: CN=7416ef19ffad8df8763af3887e10d531b1e61a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:cb:df:dd:0e:a4:8c:d2:37:c2:08:45:74: 05:52:bd:d3:51:be:2e:8d:47:18:e3:f5:59:a1:db: 68:62:bd:27:3f:c2:6a:96:ee:9c:e2:a6:75:a6:f6: 0f:a1:02:de:18:51:d8:45:71:88:bf:97:b7:b1:d8: 87:a1:33:62:33:a8:ee:b9:a0:eb:77:5d:89:ab:f7: 7c:69:5d:13:2f:38:9e:42:21:c6:7d:ce:f7:fd:f6: 54:a1:fb:2d:c8:cf:0a:7c:2d:b3:c3:40:0d:12:f3: ea:ed:94:32:dc:fe:b3:9a:46:8d:ee:fb:69:18:f2: 55:de:6c:97:41:b3:77:c5:5b:61:52:68:b9:f8:f1: 1f:92:e3:45:32:74:11:00:9a:84:b8:92:4b:71:64: 47:d9:66:0b:f5:e0:bd:0c:90:0e:01:c1:e1:0f:48: 22:c1:ac:71:99:4d:c8:a5:80:a2:c7:3f:49:20:51: e5:c8:50:e1:5d:78:be:78:37:25:f2:59:ae:b0:f3: 21:6f:03:42:e7:5a:af:df:4a:a7:b6:42:d8:72:eb: ef:e4:7b:6e:9c:9a:7f:8d:20:6b:77:44:bb:bf:cb: e7:72:da:f7:e3:76:b7:d7:41:86:e4:15:ec:c0:44: 9b:71:b6:be:67:7e:25:53:37:a6:3b:de:02:87:42: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:16:EF:19:FF:AD:8D:F8:76:3A:F3:88:7E:10:D5:31:B1:E6:1A:51 X509v3 Authority Key Identifier: keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:45:25:20:26:a0:33:de:05:0a:d4:04:7e:10:9f:8e:2b: 2b:8a:c6:bb:f1:ae:21:ff:46:96:27:34:e1:f6:fa:75:3b:30: e4:f4:14:ac:2b:e6:9b:ce:36:fe:ed:75:38:c5:bd:77:b9:c1: 3d:e8:cf:22:93:7d:71:d1:72:c0:0a:d1:cb:04:c5:e5:e2:17: 1e:b8:5b:d2:47:58:4f:0d:13:48:b1:5d:18:1b:c0:21:b0:34: f3:a1:64:5a:46:20:b1:05:39:12:3e:68:5a:18:79:b4:46:0d: a5:b8:a3:4a:56:e4:8d:18:10:c6:10:26:f6:f6:99:43:aa:e4: 79:cf:38:d7:74:f8:20:e2:fb:47:ae:f8:af:39:5f:13:3f:16: 0e:fd:75:ce:29:05:92:b2:ca:13:47:95:ac:f4:49:e5:e4:ef: 17:4d:f5:3e:a7:6f:b4:b4:51:4e:2d:51:49:21:7f:22:5d:a4: 50:38:4f:0d:66:db:6f:0b:6c:a0:b3:f8:e1:38:64:51:de:8d: 2d:fc:86:a6:b6:19:64:66:58:b0:11:5a:4e:83:23:4b:b1:40: fd:73:e5:42:ff:51:eb:b0:bd:ad:0e:de:8a:52:74:cd:2f:02: a6:48:e9:2b:0d:3a:a9:86:59:50:de:5b:69:b7:ca:9c:e0:56: 0d:1d:4b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87BfeVvQeTXlBAfNVQndeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzcwMTM1ZDBmMGQzMGE4NjhkZjU1MWQ4NzUyZDRiNGJh ZGMyYzEwHhcNMjUxMjIwMTgwMTA0WhcNMjUxMjIxMTgwMTA0WjAzMTEwLwYDVQQD Eyg3NDE2ZWYxOWZmYWQ4ZGY4NzYzYWYzODg3ZTEwZDUzMWIxZTYxYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNTL390OpIzSN8IIRXQFUr3TUb4u jUcY4/VZodtoYr0nP8Jqlu6c4qZ1pvYPoQLeGFHYRXGIv5e3sdiHoTNiM6juuaDr d12Jq/d8aV0TLzieQiHGfc73/fZUofstyM8KfC2zw0ANEvPq7ZQy3P6zmkaN7vtp GPJV3myXQbN3xVthUmi5+PEfkuNFMnQRAJqEuJJLcWRH2WYL9eC9DJAOAcHhD0gi waxxmU3IpYCixz9JIFHlyFDhXXi+eDcl8lmusPMhbwNC51qv30qntkLYcuvv5Htu nJp/jSBrd0S7v8vnctr343a310GG5BXswESbcba+Z34lUzemO94Ch0JikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQW7xn/rY34djrziH4Q1TGx5hpRMB8GA1UdIwQY MBaAFMd3ATXQ8NMKho31Udh1LUtLrcLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUt ZDY0ZDc1Mzk0MDM3LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUtZDY0ZDc1Mzk0MDM3 LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdhFJSAm oDPeBQrUBH4Qn44rK4rGu/GuIf9Glic04fb6dTsw5PQUrCvmm842/u11OMW9d7nB PejPIpN9cdFywArRywTF5eIXHrhb0kdYTw0TSLFdGBvAIbA086FkWkYgsQU5Ej5o Whh5tEYNpbijSlbkjRgQxhAm9vaZQ6rkec8413T4IOL7R674rzlfEz8WDv11zikF krLKE0eVrPRJ5eTvF031PqdvtLRRTi1RSSF/Il2kUDhPDWbbbwtsoLP44ThkUd6N LfyGprYZZGZYsBFaToMjS7FA/XPlQv9R67C9rQ7eilJ0zS8CpkjpKw06qYZZUN5b abfKnOBWDR1Ljg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:03:33 2025 by rpki-client