This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json) Hash identifier: LGrHNgXZswIUOgyxm/iH0WQDEx94LC8jCCgQXJXATwI= Subject key identifier: 3C:87:8E:77:AA:90:17:69:0B:8D:D3:B7:62:51:24:34:08:88:0B:D0 Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Certificate serial: 019B36EA0D7CCAD1DC527BE6E325AE5DCA76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft Manifest number: 1761 Signing time: Fri 19 Dec 2025 14:01:07 +0000 Manifest this update: Fri 19 Dec 2025 14:01:07 +0000 Manifest next update: Sat 20 Dec 2025 14:01:07 +0000 Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: mL3RjzQsxQ5HpGqZ+rln0qItXXeQQK+89HBsdFArWL0=) 2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:0d:7c:ca:d1:dc:52:7b:e6:e3:25:ae:5d:ca:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Validity Not Before: Dec 19 14:01:07 2025 GMT Not After : Dec 20 14:01:07 2025 GMT Subject: CN=3c878e77aa9017690b8dd3b76251243408880bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:59:89:f5:22:b2:67:2e:0a:79:6d:11:2b: 33:00:bb:0a:72:95:65:1a:72:d8:58:ba:5f:c7:f1: a0:fe:eb:e1:e6:64:c0:b2:43:72:a9:e1:c4:b9:9f: 75:7e:fa:3e:32:45:5b:b0:03:02:35:5b:7f:ee:22: a2:be:cd:ef:20:54:91:ad:b2:aa:d6:15:a7:df:82: 29:ca:fd:ce:91:c1:36:74:b9:f3:41:b8:92:d3:fd: 82:61:30:4c:d2:24:cb:10:5e:f3:c7:f7:f0:d5:86: 3c:8a:1b:29:8b:0f:7d:5e:21:22:1f:9f:83:fe:56: d9:1f:ea:27:44:93:df:11:5d:08:3e:58:f6:a9:d8: ae:9d:77:2a:58:12:3d:5a:0c:2e:e0:1b:40:b7:2b: 5d:5f:94:5f:b0:65:83:45:d8:bb:41:2f:bd:e0:72: 43:af:75:d7:c9:00:63:ee:0a:b0:73:31:5f:f3:11: 0e:b8:02:af:cc:a2:bd:d3:30:47:58:03:fc:5d:c2: d5:7f:ca:b5:a1:0c:fe:32:eb:fe:94:95:33:bc:25: 0e:85:c3:4b:83:f5:fa:61:8c:2d:5d:10:16:e0:e5: b3:36:e7:4b:c8:37:39:32:d1:f2:30:01:d2:ae:33: 6a:08:12:b5:d5:4f:14:c6:79:39:ca:c2:47:67:28: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:87:8E:77:AA:90:17:69:0B:8D:D3:B7:62:51:24:34:08:88:0B:D0 X509v3 Authority Key Identifier: keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:90:a7:dd:38:61:79:1e:0e:08:5c:05:37:a5:35:a9:f1:1c: c9:b9:54:b9:14:17:81:54:60:44:02:0a:79:54:1d:5f:76:4e: 99:92:d9:1e:2e:59:34:e0:ef:3b:84:a7:59:9e:a2:9d:d9:85: fe:68:a5:b2:ad:00:5c:8c:52:52:6a:40:76:94:6b:71:05:39: 0e:0c:44:0c:39:e0:c6:43:52:69:6c:3f:27:6e:e8:7a:26:03: 8a:30:8d:ea:82:c0:61:d1:ea:95:54:f5:81:b0:04:dd:82:3c: 80:24:84:76:f7:49:c8:3d:50:4e:a2:a6:6d:c9:86:42:27:5b: 8e:28:4b:a0:1c:2a:7f:fd:ce:70:6b:78:6b:2f:e6:ad:cb:f5: 00:1c:05:4e:99:b9:d4:5e:98:c1:52:45:59:bb:88:ab:02:49: 8c:52:7b:db:0c:bf:a1:a2:cd:22:47:ae:37:30:0c:9c:0c:65: 01:26:31:e3:19:6a:de:cf:d0:22:0d:27:59:ba:33:f1:9c:97: e2:ce:94:b0:f5:3c:f6:fc:69:35:6e:3d:95:3f:74:93:48:5c: 1e:da:fb:a5:e2:29:52:bc:81:f2:e8:1b:2b:33:fb:c4:eb:fa: 7c:7a:b0:e1:cc:00:f0:d2:f1:cb:95:93:be:9c:a2:30:cd:7b: f8:fd:97:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26g18ytHcUnvm4yWuXcp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk N2YzZTMwHhcNMjUxMjE5MTQwMTA3WhcNMjUxMjIwMTQwMTA3WjAzMTEwLwYDVQQD EygzYzg3OGU3N2FhOTAxNzY5MGI4ZGQzYjc2MjUxMjQzNDA4ODgwYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlohZifUismcuCnltESszALsKcpVl GnLYWLpfx/Gg/uvh5mTAskNyqeHEuZ91fvo+MkVbsAMCNVt/7iKivs3vIFSRrbKq 1hWn34Ipyv3OkcE2dLnzQbiS0/2CYTBM0iTLEF7zx/fw1YY8ihspiw99XiEiH5+D /lbZH+onRJPfEV0IPlj2qdiunXcqWBI9Wgwu4BtAtytdX5RfsGWDRdi7QS+94HJD r3XXyQBj7gqwczFf8xEOuAKvzKK90zBHWAP8XcLVf8q1oQz+Muv+lJUzvCUOhcNL g/X6YYwtXRAW4OWzNudLyDc5MtHyMAHSrjNqCBK11U8Uxnk5ysJHZyjstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyHjneqkBdpC43Tt2JRJDQIiAvQMB8GA1UdIwQY MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJCn3Thh eR4OCFwFN6U1qfEcyblUuRQXgVRgRAIKeVQdX3ZOmZLZHi5ZNODvO4SnWZ6indmF /milsq0AXIxSUmpAdpRrcQU5DgxEDDngxkNSaWw/J27oeiYDijCN6oLAYdHqlVT1 gbAE3YI8gCSEdvdJyD1QTqKmbcmGQidbjihLoBwqf/3OcGt4ay/mrcv1ABwFTpm5 1F6YwVJFWbuIqwJJjFJ72wy/oaLNIkeuNzAMnAxlASYx4xlq3s/QIg0nWboz8ZyX 4s6UsPU89vxpNW49lT90k0hcHtr7peIpUryB8ugbKzP7xOv6fHqw4cwA8NLxy5WT vpyiMM17+P2Xrw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:56:15 2025 by rpki-client