This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json) Hash identifier: VrgAGnc48SS4cU45Bw0L08QcfYO39/wX0bWrDD0sZ7g= Subject key identifier: 63:BF:C3:91:F8:D9:86:F4:D5:63:6F:DD:72:F7:11:8F:3E:3D:C5:92 Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019B6A32C2A305DA2CE01A8C3A2A3F41ECC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft Manifest number: 1399 Signing time: Mon 29 Dec 2025 13:01:10 +0000 Manifest this update: Mon 29 Dec 2025 13:01:10 +0000 Manifest next update: Tue 30 Dec 2025 13:01:10 +0000 Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: 3jVde5tszX2YWmRz0mv1gCx1Lw23qvWeGQsaWboju2c=) 2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:c2:a3:05:da:2c:e0:1a:8c:3a:2a:3f:41:ec:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Dec 29 13:01:10 2025 GMT Not After : Dec 30 13:01:10 2025 GMT Subject: CN=63bfc391f8d986f4d5636fdd72f7118f3e3dc592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:01:9f:28:6f:f9:4f:da:dc:9e:67:04:6c:e8: da:74:5f:de:a8:38:82:0f:21:6c:a8:dd:8e:44:b0: 96:2c:cb:7a:04:6b:a7:3b:9a:c5:42:a4:60:21:92: c4:d2:d6:f7:e0:5d:7d:3f:94:7e:fc:24:9a:24:91: 96:4f:35:dd:ce:4e:48:eb:c5:14:59:b5:37:87:6d: 88:ff:f1:87:1c:9d:c4:e3:56:24:0c:1b:b2:05:96: 85:69:a9:71:cf:a7:8b:30:35:21:91:04:64:48:d5: ed:1c:3e:42:ed:03:4f:91:36:40:af:fd:42:0c:c0: 92:0f:21:88:bf:cd:78:aa:61:8d:e8:b3:94:d0:61: ab:c3:aa:f9:8d:96:9c:b0:16:bf:01:80:82:d5:42: 97:ed:7f:c7:20:47:2d:48:64:74:3b:74:bb:29:3b: 40:23:bf:5a:79:13:00:09:b4:94:d4:52:ed:95:3f: 66:77:57:3e:49:3e:0a:b8:69:f7:95:bd:2b:1d:d0: 34:a4:4e:8f:3c:4e:79:cd:a7:a5:5a:a8:3e:25:48: 2a:70:c6:88:13:58:21:45:de:fc:e1:da:9d:07:db: e2:ec:ed:49:51:3c:bc:b2:1e:5e:70:49:14:9e:73: ad:fb:e0:9c:65:2f:bf:bb:f0:10:07:c3:e6:37:26: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:C3:91:F8:D9:86:F4:D5:63:6F:DD:72:F7:11:8F:3E:3D:C5:92 X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9b:b3:3c:76:57:8b:d0:3d:20:15:c2:d8:14:f2:6f:99:02: 67:4d:ce:52:50:37:3e:d4:80:3c:9b:2e:12:53:9a:90:b9:f3: e9:13:41:dc:c6:26:a6:f9:6d:7a:80:02:1c:a5:4f:83:69:be: 05:52:3f:95:e5:3f:72:73:a4:f2:0f:30:a9:78:fb:31:18:b0: 53:26:f6:30:be:72:88:7a:ca:23:9c:26:87:fc:b9:80:cb:e5: ca:df:e6:ea:f4:4b:0d:b4:b2:cc:e4:a8:49:78:f3:df:3d:a4: 95:7c:61:5a:c0:58:42:45:69:85:90:9a:47:91:03:7e:e4:45: d3:5e:3f:3f:70:4f:71:98:c2:77:9a:f2:a6:89:b0:3f:9e:f5: 8d:f3:29:c7:ca:91:de:48:61:4d:43:3f:4d:88:1c:af:5e:c7: 95:83:5a:90:8f:0b:68:90:83:b7:f1:c8:8f:36:4e:fa:da:7c: d4:28:83:67:83:fe:a0:d5:2c:5a:e5:18:88:83:74:39:3b:08: ea:4e:3b:89:ce:b4:72:1f:99:f0:67:30:a7:8b:d4:fd:59:c4: 4f:2a:78:25:64:46:f8:1e:88:8b:c4:12:22:03:81:63:db:15: 44:30:5f:b8:33:4e:38:36:96:7f:70:07:95:fa:c6:27:9e:9b: 07:21:88:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMsKjBdos4BqMOio/QezIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjUxMjI5MTMwMTEwWhcNMjUxMjMwMTMwMTEwWjAzMTEwLwYDVQQD Eyg2M2JmYzM5MWY4ZDk4NmY0ZDU2MzZmZGQ3MmY3MTE4ZjNlM2RjNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wGfKG/5T9rcnmcEbOjadF/eqDiC DyFsqN2ORLCWLMt6BGunO5rFQqRgIZLE0tb34F19P5R+/CSaJJGWTzXdzk5I68UU WbU3h22I//GHHJ3E41YkDBuyBZaFaalxz6eLMDUhkQRkSNXtHD5C7QNPkTZAr/1C DMCSDyGIv814qmGN6LOU0GGrw6r5jZacsBa/AYCC1UKX7X/HIEctSGR0O3S7KTtA I79aeRMACbSU1FLtlT9md1c+ST4KuGn3lb0rHdA0pE6PPE55zaelWqg+JUgqcMaI E1ghRd784dqdB9vi7O1JUTy8sh5ecEkUnnOt++CcZS+/u/AQB8PmNyZXyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO/w5H42Yb01WNv3XL3EY8+PcWSMB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJuzPHZX i9A9IBXC2BTyb5kCZ03OUlA3PtSAPJsuElOakLnz6RNB3MYmpvlteoACHKVPg2m+ BVI/leU/cnOk8g8wqXj7MRiwUyb2ML5yiHrKI5wmh/y5gMvlyt/m6vRLDbSyzOSo SXjz3z2klXxhWsBYQkVphZCaR5EDfuRF014/P3BPcZjCd5rypomwP571jfMpx8qR 3khhTUM/TYgcr17HlYNakI8LaJCDt/HIjzZO+tp81CiDZ4P+oNUsWuUYiIN0OTsI 6k47ic60ch+Z8Gcwp4vU/VnETyp4JWRG+B6Ii8QSIgOBY9sVRDBfuDNOODaWf3AH lfrGJ56bByGIBg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:39:06 2025 by rpki-client