This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json) Hash identifier: FOCFkXZB9QAUizQhokzvjbGn7btFmpcH/Ere2ArlG/c= Subject key identifier: F4:B7:36:2D:DB:D0:F1:97:50:28:22:3B:79:BE:1B:80:B4:6A:79:C4 Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019B3BD92EF4823FA4D2694DCEBE758ABAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft Manifest number: 071A Signing time: Sat 20 Dec 2025 13:00:47 +0000 Manifest this update: Sat 20 Dec 2025 13:00:47 +0000 Manifest next update: Sun 21 Dec 2025 13:00:47 +0000 Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=) 2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: y8Y9qDsLUym2NKConIx8Lsl3clUOeEw28b8bCezx5m4=) 3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:2e:f4:82:3f:a4:d2:69:4d:ce:be:75:8a:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Dec 20 13:00:47 2025 GMT Not After : Dec 21 13:00:47 2025 GMT Subject: CN=f4b7362ddbd0f1975028223b79be1b80b46a79c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:73:b6:95:a8:90:f1:6e:1d:b9:98:78:19: c1:00:a2:e4:a5:64:2f:36:35:53:d3:1e:6d:64:08: 42:c7:68:af:05:93:81:e8:55:54:85:58:8e:d0:99: 81:ef:9d:4e:29:c8:3a:49:25:e4:68:45:37:34:54: 72:6e:2d:f1:01:00:8b:07:4b:7b:60:63:c9:56:6a: bf:4c:d5:a5:b0:32:e8:4a:1e:47:a4:1d:3f:43:95: d4:30:9b:1d:2d:14:1e:59:fd:c7:19:36:ce:2f:71: 3b:ea:2e:7e:72:1b:b7:30:e2:91:84:0d:5b:c3:89: 26:27:a7:79:d9:43:a8:fb:83:a1:43:d6:2c:b4:ae: 2f:39:64:07:97:6c:2e:01:a9:cf:f0:d7:d3:06:30: 5c:29:f4:bc:f2:1b:e8:b8:86:fc:43:da:49:6b:e2: aa:78:2d:00:97:88:19:ad:53:98:58:b8:90:50:e4: a9:e3:1a:b0:22:d8:fa:53:6a:65:0d:d6:3a:4b:46: e1:ec:e4:9a:94:7b:63:27:98:b5:2a:05:a9:d4:1a: 05:d5:57:bd:0e:11:4f:c9:4b:8d:a2:70:5e:e5:4a: 96:aa:e3:1a:73:70:94:fd:e7:e9:4a:6f:4d:78:6e: d7:fd:78:87:fd:ab:74:1c:63:81:97:00:1d:25:03: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:36:2D:DB:D0:F1:97:50:28:22:3B:79:BE:1B:80:B4:6A:79:C4 X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c5:67:d8:91:bb:62:cf:27:1d:56:06:85:15:13:34:e7:50: 18:36:db:4c:b1:30:b5:8d:3a:e1:d8:8a:7e:8d:a9:0b:c6:50: 84:56:09:fe:58:28:a4:04:9c:1f:95:2e:51:ed:7a:90:d7:a7: 45:30:fe:c3:b7:07:49:05:03:61:e1:a8:4a:46:c2:8b:72:b6: d6:3f:dc:d2:64:c6:5e:1a:20:85:d8:d9:6b:58:e8:90:c9:4d: 40:14:fb:7f:b6:85:9a:05:d9:6b:43:9e:06:1c:71:23:99:b2: c0:a9:d9:a2:8a:fe:92:af:56:43:ab:98:56:e5:2f:4d:0a:b5: 1b:a2:2b:76:8d:0f:7e:97:2d:24:1f:ce:b3:e1:96:a7:94:10: 23:85:09:ec:93:65:ec:cf:66:7a:c2:40:f3:e6:00:0e:5f:3b: 8e:3e:27:68:fe:e7:bf:93:7f:a8:18:df:9d:f5:e6:ef:f5:01: 85:29:c8:b1:9e:4d:72:dc:8d:86:26:6a:f1:26:3f:12:a6:9f: 7a:a2:89:a6:2d:f7:ae:3f:bd:10:84:6d:45:cf:64:a1:18:d2: f0:60:70:b7:69:d7:5c:6e:43:b0:3f:b7:8d:9f:af:d3:21:a6: 9d:bb:fc:29:09:90:59:49:0b:44:09:d1:c4:74:f6:5c:00:78: 1b:fa:ff:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72S70gj+k0mlNzr51irqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjUxMjIwMTMwMDQ3WhcNMjUxMjIxMTMwMDQ3WjAzMTEwLwYDVQQD EyhmNGI3MzYyZGRiZDBmMTk3NTAyODIyM2I3OWJlMWI4MGI0NmE3OWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15ztpWokPFuHbmYeBnBAKLkpWQv NjVT0x5tZAhCx2ivBZOB6FVUhViO0JmB751OKcg6SSXkaEU3NFRybi3xAQCLB0t7 YGPJVmq/TNWlsDLoSh5HpB0/Q5XUMJsdLRQeWf3HGTbOL3E76i5+chu3MOKRhA1b w4kmJ6d52UOo+4OhQ9YstK4vOWQHl2wuAanP8NfTBjBcKfS88hvouIb8Q9pJa+Kq eC0Al4gZrVOYWLiQUOSp4xqwItj6U2plDdY6S0bh7OSalHtjJ5i1KgWp1BoF1Ve9 DhFPyUuNonBe5UqWquMac3CU/efpSm9NeG7X/XiH/at0HGOBlwAdJQPY1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS3Ni3b0PGXUCgiO3m+G4C0annEMB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMVn2JG7 Ys8nHVYGhRUTNOdQGDbbTLEwtY064diKfo2pC8ZQhFYJ/lgopAScH5UuUe16kNen RTD+w7cHSQUDYeGoSkbCi3K21j/c0mTGXhoghdjZa1jokMlNQBT7f7aFmgXZa0Oe BhxxI5mywKnZoor+kq9WQ6uYVuUvTQq1G6Irdo0PfpctJB/Os+GWp5QQI4UJ7JNl 7M9mesJA8+YADl87jj4naP7nv5N/qBjfnfXm7/UBhSnIsZ5NctyNhiZq8SY/Eqaf eqKJpi33rj+9EIRtRc9koRjS8GBwt2nXXG5DsD+3jZ+v0yGmnbv8KQmQWUkLRAnR xHT2XAB4G/r/Tg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:03 2025 by rpki-client