This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json) Hash identifier: 1OT6+ffvx7eGjq82xAPG7OBnQX7xWtIm+YIFNdHLEW0= Subject key identifier: 2F:C3:C1:EA:8D:1C:1D:B8:B3:BC:9C:B6:50:3A:3D:1C:C2:36:FA:B9 Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Certificate serial: 019B53E17C48ECCBE958CC0047E411420678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft Manifest number: 1770 Signing time: Thu 25 Dec 2025 05:00:44 +0000 Manifest this update: Thu 25 Dec 2025 05:00:44 +0000 Manifest next update: Fri 26 Dec 2025 05:00:44 +0000 Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: 6TdhmuMgBYIP2KxlTr3E8HVs4YP08FsbwMEh0+LK6Jc=) 2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:7c:48:ec:cb:e9:58:cc:00:47:e4:11:42:06:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3 Validity Not Before: Dec 25 05:00:44 2025 GMT Not After : Dec 26 05:00:44 2025 GMT Subject: CN=2fc3c1ea8d1c1db8b3bc9cb6503a3d1cc236fab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:1d:b2:6a:f9:a5:96:92:9d:73:50:a6:68: 23:f1:64:c3:dc:0d:a2:6e:3b:b5:aa:8c:06:de:9d: 52:14:7e:dc:93:85:e4:7f:98:20:74:c0:87:0c:28: bb:e7:df:b8:08:03:05:c8:51:19:18:18:e0:ad:e9: f4:00:66:1c:59:08:2c:71:d4:4a:67:85:a2:65:80: 55:28:6b:d6:7a:e2:68:ab:d3:27:f1:72:3f:ec:65: 10:32:39:63:38:8b:dc:ae:e0:dc:71:2f:e7:f8:ca: fc:19:76:f1:90:02:87:5a:18:33:f6:29:79:5f:a2: 85:c6:8f:7a:37:b3:a9:ca:a8:45:ba:6c:a4:80:97: ce:21:03:26:33:7e:39:a0:3d:73:6f:a8:5c:00:a7: c8:6f:ed:58:60:ec:3b:04:09:d7:58:6a:2c:fa:0c: 39:a2:18:a0:7e:4f:1a:0b:b2:f2:49:6e:99:c5:35: 7c:64:4e:ec:57:03:bd:ac:81:74:f6:d7:22:3c:c7: 11:03:85:43:ed:f4:de:9a:43:a4:e4:d3:50:bf:60: 4d:2f:a7:06:e3:b1:53:15:69:80:d4:e9:19:f2:0e: ac:78:c4:45:b9:48:cd:d4:b8:a1:7c:a4:8a:2e:eb: f3:de:ce:86:ab:d3:3e:58:38:88:85:2a:1a:c6:1f: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C3:C1:EA:8D:1C:1D:B8:B3:BC:9C:B6:50:3A:3D:1C:C2:36:FA:B9 X509v3 Authority Key Identifier: keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:38:59:5a:20:71:bb:62:73:83:ef:57:4b:74:1c:b6:55:78: cd:b0:44:be:a7:cc:2e:69:e4:3f:53:27:ea:3a:e6:6e:ed:73: 4a:6f:5a:14:cc:cb:b7:9e:ce:1d:07:b7:8e:bc:49:97:84:1f: 7a:fc:1c:60:4d:f7:d8:72:57:39:d6:c4:36:31:c4:16:32:61: 59:13:79:c1:45:d3:ec:19:f2:be:49:c0:41:e9:32:2d:b0:64: 83:ef:c2:99:4d:cf:f0:1b:09:38:e2:c4:41:2e:1a:c9:c8:9b: 82:d1:57:41:97:a6:04:06:d6:34:14:10:41:ea:fe:e7:6a:1b: aa:c2:ac:4f:60:44:13:50:54:f8:0e:fc:39:09:54:2c:65:bc: 78:06:4b:a8:3e:61:5a:b9:ff:d3:58:a8:62:0c:36:0b:bd:84: 29:ef:d8:84:fb:8e:f3:48:ba:95:03:47:d1:a0:8e:8b:69:09: db:4a:4c:57:ad:e9:34:5f:ba:da:d5:de:c7:b5:3c:c2:9c:1f: d6:f9:92:13:04:d0:89:cd:5d:63:22:96:57:11:8a:fa:d2:d1: a6:1e:8b:54:fb:f1:2a:42:e9:12:5e:77:b2:c9:2f:92:45:a1: 23:fc:54:f7:e0:27:8d:99:4d:a3:01:23:2a:3b:44:ad:b4:f8: 58:a9:99:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4XxI7MvpWMwAR+QRQgZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk N2YzZTMwHhcNMjUxMjI1MDUwMDQ0WhcNMjUxMjI2MDUwMDQ0WjAzMTEwLwYDVQQD EygyZmMzYzFlYThkMWMxZGI4YjNiYzljYjY1MDNhM2QxY2MyMzZmYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Scdsmr5pZaSnXNQpmgj8WTD3A2i bju1qowG3p1SFH7ck4Xkf5ggdMCHDCi759+4CAMFyFEZGBjgren0AGYcWQgscdRK Z4WiZYBVKGvWeuJoq9Mn8XI/7GUQMjljOIvcruDccS/n+Mr8GXbxkAKHWhgz9il5 X6KFxo96N7OpyqhFumykgJfOIQMmM345oD1zb6hcAKfIb+1YYOw7BAnXWGos+gw5 ohigfk8aC7LySW6ZxTV8ZE7sVwO9rIF09tciPMcRA4VD7fTemkOk5NNQv2BNL6cG 47FTFWmA1OkZ8g6seMRFuUjN1LihfKSKLuvz3s6Gq9M+WDiIhSoaxh+75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/DweqNHB24s7yctlA6PRzCNvq5MB8GA1UdIwQY MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzhZWiBx u2Jzg+9XS3QctlV4zbBEvqfMLmnkP1Mn6jrmbu1zSm9aFMzLt57OHQe3jrxJl4Qf evwcYE332HJXOdbENjHEFjJhWRN5wUXT7BnyvknAQekyLbBkg+/CmU3P8BsJOOLE QS4aycibgtFXQZemBAbWNBQQQer+52obqsKsT2BEE1BU+A78OQlULGW8eAZLqD5h Wrn/01ioYgw2C72EKe/YhPuO80i6lQNH0aCOi2kJ20pMV63pNF+62tXex7U8wpwf 1vmSEwTQic1dYyKWVxGK+tLRph6LVPvxKkLpEl53sskvkkWhI/xU9+AnjZlNowEj KjtErbT4WKmZiw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:21:14 2025 by rpki-client