This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json) Hash identifier: mot0aGTUCppKI8HZFH/V6nuLOwhYC+ij8Vl1DbUn+pA= Subject key identifier: 34:96:93:48:FD:26:A6:B6:8B:84:87:E8:C5:BA:E2:D3:A1:E0:10:5C Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019B47700FFB7C4CE1ECA75783BC658CA5CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft Manifest number: 1387 Signing time: Mon 22 Dec 2025 19:01:24 +0000 Manifest this update: Mon 22 Dec 2025 19:01:24 +0000 Manifest next update: Tue 23 Dec 2025 19:01:24 +0000 Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: +VAP1b/bfdc3jdW/mUyXmrhiATjvW5qmuciqgcRDAjA=) 2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:0f:fb:7c:4c:e1:ec:a7:57:83:bc:65:8c:a5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Dec 22 19:01:24 2025 GMT Not After : Dec 23 19:01:24 2025 GMT Subject: CN=34969348fd26a6b68b8487e8c5bae2d3a1e0105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:37:97:18:f1:fc:fc:77:dc:08:de:b9:59: e8:90:e2:10:ca:ca:e8:bd:b7:9b:43:3e:10:26:3c: 75:66:d9:51:bd:0f:d9:90:a1:f0:97:30:1f:de:59: af:c1:9d:37:ea:eb:27:56:6b:ac:f9:f7:b1:ac:ef: 21:6b:c8:38:c4:dc:b1:06:ae:55:98:18:37:40:01: 7e:72:41:eb:29:81:3b:e7:94:ca:b3:56:e3:52:0e: 66:2a:a4:b0:61:ff:36:32:ec:95:ac:af:8e:3d:55: 78:77:88:e7:75:c0:93:42:4d:df:ef:f0:cd:bc:59: 7d:f3:af:30:57:f2:f0:11:9a:f6:e7:6e:8e:b2:07: e6:7b:25:fd:a9:a3:7d:19:5d:be:e1:41:54:7a:97: e0:fc:ab:f5:fa:62:bd:65:59:8e:16:4d:8f:2e:68: 13:d5:55:2d:02:2e:9f:b0:3f:0c:30:c9:e6:d2:a3: b5:07:bb:01:e8:68:10:8e:a1:8d:8a:4d:00:94:76: 92:dc:cd:84:69:d3:4e:7d:03:91:85:fe:81:ab:cb: 0c:18:97:5d:9a:c5:7a:07:81:2b:9d:b2:4c:bc:99: 6b:bf:e6:68:24:ef:ce:87:6d:94:ed:31:8e:d7:7b: 00:22:d1:85:49:7b:ae:d6:bd:f3:73:8e:2d:fe:a5: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:96:93:48:FD:26:A6:B6:8B:84:87:E8:C5:BA:E2:D3:A1:E0:10:5C X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:f9:6d:86:01:1b:30:c5:69:71:4c:73:82:88:d4:ab:99: ae:4e:f8:6d:d9:29:cf:ec:5d:7a:a7:2b:4b:46:72:f6:3f:89: 6d:d9:74:ee:e7:1c:3a:23:23:04:e1:3d:9b:cf:8d:4d:c2:4b: 5a:8e:0a:10:95:8f:00:46:dc:d4:f5:a8:5a:1a:c5:38:50:e8: 81:28:1e:b6:f2:66:7c:b3:cf:b2:97:d8:06:14:f2:13:76:1a: 3b:5c:16:76:cd:7f:9c:91:42:84:b8:e2:51:75:45:33:2c:91: 43:9a:65:df:2e:5c:53:b5:2e:0a:dd:23:9b:90:87:39:b4:a3: 8e:76:3e:ff:af:0e:0d:55:38:05:ec:87:02:2d:bb:07:77:d1: fc:13:61:a4:dd:d4:74:02:46:54:73:5f:66:cc:2a:39:07:ab: 3a:0d:cb:01:7c:7b:48:0a:e6:75:87:ac:cc:88:af:c4:d5:75: d8:9f:d3:5f:ad:d0:30:58:e4:a6:87:8e:2b:f5:e4:1f:74:4e: 8c:31:58:d9:2c:b2:06:33:d7:98:48:40:eb:c8:e8:00:7a:d7: 2b:33:03:fe:5d:af:e9:1e:ad:f0:60:d9:67:46:a0:d1:b4:cf: 92:c9:f8:66:22:f0:68:be:74:40:54:a2:32:d7:47:19:60:be: e3:83:94:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcA/7fEzh7KdXg7xljKXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjUxMjIyMTkwMTI0WhcNMjUxMjIzMTkwMTI0WjAzMTEwLwYDVQQD EygzNDk2OTM0OGZkMjZhNmI2OGI4NDg3ZThjNWJhZTJkM2ExZTAxMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Y3lxjx/Px33AjeuVnokOIQysro vbebQz4QJjx1ZtlRvQ/ZkKHwlzAf3lmvwZ036usnVmus+fexrO8ha8g4xNyxBq5V mBg3QAF+ckHrKYE755TKs1bjUg5mKqSwYf82MuyVrK+OPVV4d4jndcCTQk3f7/DN vFl9868wV/LwEZr2526OsgfmeyX9qaN9GV2+4UFUepfg/Kv1+mK9ZVmOFk2PLmgT 1VUtAi6fsD8MMMnm0qO1B7sB6GgQjqGNik0AlHaS3M2EadNOfQORhf6Bq8sMGJdd msV6B4ErnbJMvJlrv+ZoJO/Oh22U7TGO13sAItGFSXuu1r3zc44t/qUnMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSWk0j9Jqa2i4SH6MW64tOh4BBcMB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEb5bYYB GzDFaXFMc4KI1KuZrk74bdkpz+xdeqcrS0Zy9j+Jbdl07uccOiMjBOE9m8+NTcJL Wo4KEJWPAEbc1PWoWhrFOFDogSgetvJmfLPPspfYBhTyE3YaO1wWds1/nJFChLji UXVFMyyRQ5pl3y5cU7UuCt0jm5CHObSjjnY+/68ODVU4BeyHAi27B3fR/BNhpN3U dAJGVHNfZswqOQerOg3LAXx7SArmdYeszIivxNV12J/TX63QMFjkpoeOK/XkH3RO jDFY2SyyBjPXmEhA68joAHrXKzMD/l2v6R6t8GDZZ0ag0bTPksn4ZiLwaL50QFSi MtdHGWC+44OURA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:47:49 2025 by rpki-client