This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json) Hash identifier: esXM1/GcZf+Eu6qR0PV/tOxUuLflHg0ti1S5ETXdYXk= Subject key identifier: AD:06:26:79:5B:22:28:6C:34:A1:39:7D:C4:4A:60:05:EA:3D:C4:48 Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Certificate serial: 019B4A03AB8A86AA0E8F8AC10E0CA41B4B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft Manifest number: 02A2 Signing time: Tue 23 Dec 2025 07:01:52 +0000 Manifest this update: Tue 23 Dec 2025 07:01:52 +0000 Manifest next update: Wed 24 Dec 2025 07:01:52 +0000 Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: 5fALbZD1J9Q5KWjqtOEhfzdCndtL5U2YrD3hXpHgMXI=) 2: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (hash: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:ab:8a:86:aa:0e:8f:8a:c1:0e:0c:a4:1b:4b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Validity Not Before: Dec 23 07:01:52 2025 GMT Not After : Dec 24 07:01:52 2025 GMT Subject: CN=ad0626795b22286c34a1397dc44a6005ea3dc448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:84:f4:77:02:60:44:d3:38:26:b1:de:6c: 8d:87:b2:2b:10:be:68:bd:59:68:0e:47:a9:9a:d9: 2a:ba:18:dd:c7:00:1f:31:36:cb:bb:aa:f4:59:6c: 68:36:72:da:a0:ff:03:23:2f:f5:c5:a0:04:91:2c: f0:e8:a3:df:64:cc:c6:bc:d8:b7:a9:1d:d5:92:c8: 75:20:ef:45:f9:61:3e:45:29:66:88:29:25:f3:6b: 66:d8:69:4f:f8:9d:08:b4:a7:e9:cf:c1:e5:a8:f9: cc:1c:f6:58:b0:c1:d0:af:cb:92:27:5d:cb:c6:df: aa:1a:69:ef:b0:1e:15:aa:bd:7f:38:f4:7d:bb:f2: 5a:0c:83:42:69:3e:8c:05:68:ad:1b:64:be:01:b2: 96:2b:07:bf:78:58:69:33:f4:da:1e:97:f0:10:2e: 64:95:9b:8d:81:49:62:1a:84:b0:83:c8:18:4f:9b: b4:e1:4e:3b:41:d9:6b:d3:8f:ef:2e:84:df:3d:2f: f7:32:b5:27:dd:3b:cc:1d:86:18:e0:df:47:ef:ce: 8b:11:71:65:2a:52:c1:23:8c:6a:f1:a5:d0:52:d5: b5:b5:f8:b5:f8:9d:46:c4:97:c2:b7:81:e2:43:f3: da:7e:8a:43:75:e9:49:46:0a:f5:f4:cd:c0:39:0b: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:26:79:5B:22:28:6C:34:A1:39:7D:C4:4A:60:05:EA:3D:C4:48 X509v3 Authority Key Identifier: keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:57:de:d2:e6:47:04:23:71:29:1c:d2:fb:bf:1f:09:99:4f: e6:1e:93:15:81:88:7e:30:f9:3f:b5:aa:04:7b:00:d3:70:bc: a8:cf:75:78:ed:50:36:b8:d7:da:df:a4:ca:d8:13:eb:24:c0: d4:fa:c0:0c:1c:10:30:99:7a:83:79:94:8c:6a:ec:1a:6d:b3: 5b:4c:37:07:34:95:72:94:8a:a8:1f:3f:e6:e9:20:25:64:57: b6:d6:b7:10:b9:65:07:a0:96:dc:f8:f4:6f:bf:25:c0:b7:03: 76:89:5c:9b:ee:a2:bf:a3:5f:79:1d:84:80:09:61:56:f8:ec: 75:ca:15:d7:0f:3a:91:6d:83:82:e3:a2:8b:ad:7c:8e:b7:c7: 0f:82:d3:c6:4f:f1:1f:87:e6:cf:b2:43:99:41:ba:ed:4e:91: e9:b2:e6:dd:b3:ba:9c:fc:7a:a4:ce:bd:8b:82:25:d6:73:54: 98:aa:9e:26:74:f1:09:11:1f:82:01:83:63:80:c6:18:aa:4e: b9:bd:6c:a1:b2:1f:07:8b:fb:fa:6e:2a:09:78:a1:12:9d:2c: b9:7a:9a:04:ea:7b:6c:5f:14:68:da:6e:a0:35:cd:e4:8b:a6: ae:57:22:d7:2c:ff:20:00:52:3b:0e:f4:1c:78:e7:b1:c1:55: b0:83:71:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA6uKhqoOj4rBDgykG0uLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTU4ZGNiMjkwZWM1YWU3ZjY2YzFmYTBmOGQ5NjMyMTFk ZWVhNTQwHhcNMjUxMjIzMDcwMTUyWhcNMjUxMjI0MDcwMTUyWjAzMTEwLwYDVQQD EyhhZDA2MjY3OTViMjIyODZjMzRhMTM5N2RjNDRhNjAwNWVhM2RjNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+E9HcCYETTOCax3myNh7IrEL5o vVloDkepmtkquhjdxwAfMTbLu6r0WWxoNnLaoP8DIy/1xaAEkSzw6KPfZMzGvNi3 qR3Vksh1IO9F+WE+RSlmiCkl82tm2GlP+J0ItKfpz8HlqPnMHPZYsMHQr8uSJ13L xt+qGmnvsB4Vqr1/OPR9u/JaDINCaT6MBWitG2S+AbKWKwe/eFhpM/TaHpfwEC5k lZuNgUliGoSwg8gYT5u04U47Qdlr04/vLoTfPS/3MrUn3TvMHYYY4N9H786LEXFl KlLBI4xq8aXQUtW1tfi1+J1GxJfCt4HiQ/PafopDdelJRgr19M3AOQsRgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0GJnlbIihsNKE5fcRKYAXqPcRIMB8GA1UdIwQY MBaAFN8VjcspDsWuf2bB+g+NljIR3upUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTct YzQxNDJkZjM1Y2MzLzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTctYzQxNDJkZjM1Y2Mz LzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFfe0uZH BCNxKRzS+78fCZlP5h6TFYGIfjD5P7WqBHsA03C8qM91eO1QNrjX2t+kytgT6yTA 1PrADBwQMJl6g3mUjGrsGm2zW0w3BzSVcpSKqB8/5ukgJWRXtta3ELllB6CW3Pj0 b78lwLcDdolcm+6iv6NfeR2EgAlhVvjsdcoV1w86kW2DguOii618jrfHD4LTxk/x H4fmz7JDmUG67U6R6bLm3bO6nPx6pM69i4Il1nNUmKqeJnTxCREfggGDY4DGGKpO ub1sobIfB4v7+m4qCXihEp0suXqaBOp7bF8UaNpuoDXN5Iumrlci1yz/IABSOw70 HHjnscFVsINx7Q== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:44 2025 by rpki-client