This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json) Hash identifier: HaKTdXemXX1nfsvfDI/BwaK2f/rLnsqkh4ee6CHL6Vo= Subject key identifier: 29:74:C4:60:49:B9:9E:2D:66:18:1B:43:55:B7:48:40:17:22:CB:65 Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df Certificate serial: 019B5D53D69A09D1831FFC277723BEBE13C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft Manifest number: 1194 Signing time: Sat 27 Dec 2025 01:02:13 +0000 Manifest this update: Sat 27 Dec 2025 01:02:13 +0000 Manifest next update: Sun 28 Dec 2025 01:02:13 +0000 Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=) 2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: 0U3EBk/trP1FiT17crvmwc8c/hbDPtbh5xPJAziLvN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:d6:9a:09:d1:83:1f:fc:27:77:23:be:be:13:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df Validity Not Before: Dec 27 01:02:13 2025 GMT Not After : Dec 28 01:02:13 2025 GMT Subject: CN=2974c46049b99e2d66181b4355b748401722cb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:64:b8:de:87:5f:4f:73:1a:a0:c2:fc:09: 84:15:5c:8e:8d:a2:a7:d6:85:3d:11:60:99:ea:3d: 32:cc:83:e3:9d:52:17:a8:c9:fd:46:f3:3b:2b:a9: d3:1e:2a:ac:02:95:6d:29:55:2c:6f:d2:48:0d:4b: 01:5b:39:b2:ef:b5:e6:51:a1:e9:5a:36:2a:91:ad: d6:fb:3e:4b:8b:76:e4:4a:5f:5e:53:c6:fb:8a:61: 26:bb:52:cd:88:3d:8b:05:e1:e6:83:10:10:ab:5c: 9a:80:8e:0e:71:60:ad:32:3b:74:49:c0:a9:56:31: e6:05:ce:96:96:3d:50:cd:df:eb:fc:5e:40:55:f8: a4:f2:f1:20:cc:ce:41:dd:46:02:dd:f5:88:1b:30: 4b:2a:c1:3e:8b:f1:54:eb:2e:de:1b:81:cb:57:22: 01:66:81:35:c1:6a:52:00:a7:3c:bd:c3:28:67:8f: ac:b4:e5:ab:87:34:99:28:6f:94:e4:61:2a:4b:a7: 66:25:a9:27:bb:30:9a:e6:7b:08:0a:55:6c:25:e8: 53:e2:96:6a:06:64:18:9a:b6:c2:9b:ab:6c:2b:fa: 91:f7:15:7d:a4:37:ba:1d:51:61:17:46:93:7c:60: 5b:b9:3d:8b:76:29:2c:89:22:37:00:9c:58:41:8f: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:C4:60:49:B9:9E:2D:66:18:1B:43:55:B7:48:40:17:22:CB:65 X509v3 Authority Key Identifier: keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:93:fd:97:34:f3:be:9b:bd:14:6f:89:a3:16:8d:76:d4:80: da:2a:40:1a:ad:7d:c8:42:a6:fd:36:12:5b:0f:b8:83:0f:50: 8e:84:64:27:66:ea:02:09:61:88:86:ea:e8:b0:1e:88:07:67: 71:ba:56:76:86:78:0c:75:a0:48:0b:4b:a5:2d:75:a5:44:31: e0:02:a4:bc:db:a0:4e:9f:91:28:14:ad:0a:d3:08:5d:16:b0: cf:a0:8c:68:68:1e:a6:e7:b4:4a:04:bd:0b:f6:54:d7:64:04: bc:81:f8:24:d4:c3:8e:aa:3a:b3:a1:8f:3a:a1:fe:ad:64:63: 24:67:91:e4:87:9a:87:6a:f0:e1:25:a1:29:21:88:7e:6a:50: f9:e9:fd:d3:a3:47:6e:1b:50:40:66:dd:28:bf:24:da:35:7e: 80:fa:90:58:67:f8:9a:4a:7f:2f:9c:60:0c:30:8d:2a:32:88: 60:a8:be:17:ef:b7:52:4e:94:d0:ef:4b:80:78:52:eb:33:0a: 24:e2:e7:f7:91:ff:83:9f:09:82:88:0a:3b:ed:5a:22:30:35: 6b:8c:26:8a:70:eb:62:96:4e:ee:35:34:34:26:74:22:a4:af: ea:d7:27:13:b5:55:ad:a1:20:1f:4c:ad:93:bc:b2:3e:79:0a: 85:fa:9f:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU9aaCdGDH/wndyO+vhPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy N2Y3ZGYwHhcNMjUxMjI3MDEwMjEzWhcNMjUxMjI4MDEwMjEzWjAzMTEwLwYDVQQD EygyOTc0YzQ2MDQ5Yjk5ZTJkNjYxODFiNDM1NWI3NDg0MDE3MjJjYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob5kuN6HX09zGqDC/AmEFVyOjaKn 1oU9EWCZ6j0yzIPjnVIXqMn9RvM7K6nTHiqsApVtKVUsb9JIDUsBWzmy77XmUaHp WjYqka3W+z5Li3bkSl9eU8b7imEmu1LNiD2LBeHmgxAQq1yagI4OcWCtMjt0ScCp VjHmBc6Wlj1Qzd/r/F5AVfik8vEgzM5B3UYC3fWIGzBLKsE+i/FU6y7eG4HLVyIB ZoE1wWpSAKc8vcMoZ4+stOWrhzSZKG+U5GEqS6dmJaknuzCa5nsIClVsJehT4pZq BmQYmrbCm6tsK/qR9xV9pDe6HVFhF0aTfGBbuT2LdiksiSI3AJxYQY+T9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl0xGBJuZ4tZhgbQ1W3SEAXIstlMB8GA1UdIwQY MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt ZTBjMmI5NDc5MmNhLzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZP9lzTz vpu9FG+JoxaNdtSA2ipAGq19yEKm/TYSWw+4gw9QjoRkJ2bqAglhiIbq6LAeiAdn cbpWdoZ4DHWgSAtLpS11pUQx4AKkvNugTp+RKBStCtMIXRawz6CMaGgepue0SgS9 C/ZU12QEvIH4JNTDjqo6s6GPOqH+rWRjJGeR5Ieah2rw4SWhKSGIfmpQ+en906NH bhtQQGbdKL8k2jV+gPqQWGf4mkp/L5xgDDCNKjKIYKi+F++3Uk6U0O9LgHhS6zMK JOLn95H/g58JgogKO+1aIjA1a4wminDrYpZO7jU0NCZ0IqSv6tcnE7VVraEgH0yt k7yyPnkKhfqfeA== -----END CERTIFICATE-----Generated at Sat Dec 27 03:53:51 2025 by rpki-client