This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft File: 3XzvizrZIDFjCqyiJqntebpgVYY.mft (raw, json) Hash identifier: Lnxj8uY+iFDX3egZfsXGY1WZ/i9OUvLrYj+uitcFa1g= Subject key identifier: 70:72:B2:E1:37:EE:2A:74:B9:7A:00:A9:FA:73:92:D4:14:21:D3:B0 Authority key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86 Certificate issuer: /CN=dd7cef8b3ad92031630aaca226a9ed79ba605586 Certificate serial: 019B6BEA08F9D9E2A97A98E0FF6AF4863D18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft Manifest number: 0307 Signing time: Mon 29 Dec 2025 21:00:58 +0000 Manifest this update: Mon 29 Dec 2025 21:00:58 +0000 Manifest next update: Tue 30 Dec 2025 21:00:58 +0000 Files and hashes: 1: 3XzvizrZIDFjCqyiJqntebpgVYY.crl (hash: 68aIsqRQSJpN14uqfql3fWuypeDA+fa2/MnQ/obMZcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:08:f9:d9:e2:a9:7a:98:e0:ff:6a:f4:86:3d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586 Validity Not Before: Dec 29 21:00:58 2025 GMT Not After : Dec 30 21:00:58 2025 GMT Subject: CN=7072b2e137ee2a74b97a00a9fa7392d41421d3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:cc:dc:f0:34:bd:43:34:24:65:be:e6:e3: a9:50:fc:c0:96:bd:ac:14:28:d4:12:01:52:d9:05: 4f:92:8d:23:7b:cb:0f:43:fa:a5:69:3c:4f:ae:40: b6:6d:b2:e1:97:08:81:be:d5:55:2d:4d:c6:30:8e: ff:dc:0c:40:fe:48:81:f8:56:be:ee:fd:b2:bc:8a: b0:7d:ab:76:1c:4c:39:3d:ad:8c:2f:39:a8:92:9a: 7f:8b:b2:b4:97:ff:5a:77:99:6f:70:f3:10:6b:76: ad:ea:1b:7c:12:00:5a:71:4b:ed:0f:a5:12:8c:9e: 51:31:54:56:67:f0:50:0b:10:d4:96:4a:1f:2c:3a: bb:65:5b:b1:75:df:49:d8:3c:a7:2c:bf:df:ac:bb: 8a:5f:7d:7f:d7:e4:f9:4d:59:e4:55:28:44:86:29: 0f:57:41:ed:b8:c5:bf:de:ca:63:ce:42:ce:04:d3: 19:5f:f2:e2:d0:9b:da:d2:f1:0f:14:f5:9f:3e:ec: 35:df:62:06:27:69:04:81:a0:85:20:11:db:37:1e: 28:3e:ad:55:02:99:7e:8c:07:5b:fd:60:71:f0:15: c7:23:d1:81:89:54:9e:0b:0f:88:07:a1:59:ba:b8: c3:dc:23:06:1a:73:48:e2:61:88:60:e5:2e:b4:5b: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:B2:E1:37:EE:2A:74:B9:7A:00:A9:FA:73:92:D4:14:21:D3:B0 X509v3 Authority Key Identifier: keyid:DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d0:cb:f8:d2:e6:8d:19:92:94:07:c0:d8:5d:77:cd:43:d5: 55:09:b4:51:ed:27:f7:91:f7:9d:3e:5d:03:ac:7f:d2:f5:be: 2b:7a:aa:6a:86:2e:f5:50:74:56:a0:96:45:f2:41:82:34:b4: 52:98:69:f9:dd:0c:5c:31:d9:f5:39:bb:ca:3c:6a:de:f5:8a: 3b:6d:f6:c5:43:e6:12:21:17:4a:f8:51:d4:cc:51:3f:49:fd: 6e:c8:45:53:1d:9d:0a:b0:7e:29:7b:af:15:4a:d4:d5:b8:93: 60:b6:19:17:7d:b9:37:db:95:00:61:b9:04:38:e5:30:3a:bc: 87:58:f5:38:2d:d5:4c:29:68:da:05:a1:0b:3a:47:85:fe:51: c3:8e:e5:5c:79:c5:b8:b7:bf:b9:01:c5:b2:ee:a8:35:3c:d7: 60:86:b9:fd:eb:45:75:35:24:02:75:b0:6c:9f:19:fb:80:fd: 8a:a3:76:b6:2d:c0:50:a1:fb:69:82:81:5b:40:2b:eb:c1:d8: 4d:c4:36:35:83:63:f9:f6:37:da:af:bd:7a:17:15:4f:2b:53: 48:d2:88:b9:dc:98:21:a0:8a:64:c1:af:31:90:74:65:b3:3b: 50:67:6e:2a:9f:70:99:6f:20:56:61:b1:58:a3:4d:d0:55:95: 5f:07:b3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6gj52eKpepjg/2r0hj0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkN2NlZjhiM2FkOTIwMzE2MzBhYWNhMjI2YTllZDc5YmE2 MDU1ODYwHhcNMjUxMjI5MjEwMDU4WhcNMjUxMjMwMjEwMDU4WjAzMTEwLwYDVQQD Eyg3MDcyYjJlMTM3ZWUyYTc0Yjk3YTAwYTlmYTczOTJkNDE0MjFkM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yXM3PA0vUM0JGW+5uOpUPzAlr2s FCjUEgFS2QVPko0je8sPQ/qlaTxPrkC2bbLhlwiBvtVVLU3GMI7/3AxA/kiB+Fa+ 7v2yvIqwfat2HEw5Pa2MLzmokpp/i7K0l/9ad5lvcPMQa3at6ht8EgBacUvtD6US jJ5RMVRWZ/BQCxDUlkofLDq7ZVuxdd9J2DynLL/frLuKX31/1+T5TVnkVShEhikP V0HtuMW/3spjzkLOBNMZX/Li0Jva0vEPFPWfPuw132IGJ2kEgaCFIBHbNx4oPq1V Apl+jAdb/WBx8BXHI9GBiVSeCw+IB6FZurjD3CMGGnNI4mGIYOUutFsK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBysuE37ip0uXoAqfpzktQUIdOwMB8GA1UdIwQY MBaAFN1874s62SAxYwqsoiap7Xm6YFWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUt MzcyZjY1ZDk5YTlmLzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUtMzcyZjY1ZDk5YTlm LzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9DL+NLm jRmSlAfA2F13zUPVVQm0Ue0n95H3nT5dA6x/0vW+K3qqaoYu9VB0VqCWRfJBgjS0 Uphp+d0MXDHZ9Tm7yjxq3vWKO232xUPmEiEXSvhR1MxRP0n9bshFUx2dCrB+KXuv FUrU1biTYLYZF325N9uVAGG5BDjlMDq8h1j1OC3VTClo2gWhCzpHhf5Rw47lXHnF uLe/uQHFsu6oNTzXYIa5/etFdTUkAnWwbJ8Z+4D9iqN2ti3AUKH7aYKBW0Ar68HY TcQ2NYNj+fY32q+9ehcVTytTSNKIudyYIaCKZMGvMZB0ZbM7UGduKp9wmW8gVmGx WKNN0FWVXwezNg== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:53 2025 by rpki-client