This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json) Hash identifier: sru+hEVB1OiZEUIPSRq0RCSJpc6XT2akMshAdHMPKiE= Subject key identifier: 37:C8:DD:45:0B:AC:7B:ED:52:96:FE:CD:D9:F3:F1:48:FC:0A:F4:DF Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Certificate serial: 019B3EDAFD605F854D1AE135B0D4C8AD53E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft Manifest number: 07B8 Signing time: Sun 21 Dec 2025 03:01:37 +0000 Manifest this update: Sun 21 Dec 2025 03:01:37 +0000 Manifest next update: Mon 22 Dec 2025 03:01:37 +0000 Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=) 2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: ggPqzx16/h2gxHOUZ3PNfkrBEvvjYNZkfv1UzYp4yIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:fd:60:5f:85:4d:1a:e1:35:b0:d4:c8:ad:53:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Validity Not Before: Dec 21 03:01:37 2025 GMT Not After : Dec 22 03:01:37 2025 GMT Subject: CN=37c8dd450bac7bed5296fecdd9f3f148fc0af4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:4b:9d:20:46:d7:a4:10:3c:70:dd:33:f2: 1a:16:56:15:ea:47:f3:0b:0a:d1:40:7c:9a:56:e9: a0:2d:88:38:98:45:50:6d:1c:f6:33:bf:81:76:3a: 32:09:e1:6e:f7:13:c7:dd:64:e9:85:63:9e:a2:7c: 24:1f:c6:1e:99:e7:22:08:1e:b5:aa:67:13:0a:3d: a1:81:b6:ed:55:6f:97:5b:ca:30:0b:9c:7f:32:de: fb:f4:e6:91:5f:7e:cb:8a:e1:88:eb:7b:58:fd:e5: 56:5a:16:fa:11:36:40:83:78:d5:7b:0e:ed:d9:4b: e4:c3:fb:b6:90:88:21:95:31:6f:ef:a1:51:88:fd: f1:12:53:fc:d3:fa:d7:a2:b6:6b:ec:84:70:28:a8: 1c:15:fc:0f:08:9b:18:f9:03:43:e3:b6:4f:08:36: 39:3d:66:a0:24:db:9a:bc:11:ed:e2:8b:97:d7:a0: 7c:04:c4:ae:7e:4f:f3:a0:ac:30:d2:3c:76:d6:7a: 0d:d7:e0:4c:a7:e0:e0:b5:84:f1:a1:84:77:48:1d: c8:52:c3:be:37:ef:13:60:5e:2b:8a:64:b3:f4:d9: 19:d6:4b:18:bb:e2:fb:bf:e7:6c:fe:80:85:91:1b: 18:1b:2c:9d:be:76:4b:85:8a:75:5e:be:50:ba:a9: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:DD:45:0B:AC:7B:ED:52:96:FE:CD:D9:F3:F1:48:FC:0A:F4:DF X509v3 Authority Key Identifier: keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:34:90:8f:e9:91:9c:ce:c6:87:61:af:f1:b8:fd:56:dc:09: 1f:f3:f7:72:26:c0:48:34:c4:af:99:5c:ff:af:bd:c5:61:31: 41:40:37:26:33:11:04:aa:49:e9:5d:aa:07:cf:65:be:14:29: 21:4f:81:10:a9:6d:da:16:c8:cf:4d:9b:09:86:a6:b5:6c:a4: 95:40:db:22:93:78:11:da:a4:a2:79:8b:3a:74:be:2f:72:14: 4a:f8:41:48:cf:9a:3e:d2:a0:af:46:77:e6:56:ff:9a:57:da: eb:a2:a6:e6:70:04:24:52:bc:ea:fe:cd:de:5a:12:c7:39:b4: 81:fb:02:fd:83:1e:80:f1:a7:d6:25:98:37:b7:37:58:68:2d: 39:6e:2c:78:60:e1:82:3a:2b:d0:05:76:31:64:78:30:bf:de: 4c:b2:84:f9:20:6f:9c:ba:fa:85:8f:03:4b:0a:6f:57:1c:8e: 96:af:d9:4e:c9:67:c2:fe:20:86:24:72:c7:2f:3c:97:97:3d: 31:1a:ce:9c:4d:8b:dc:e7:f8:92:c5:2f:f5:96:c0:b6:96:49: 35:a6:86:e2:dc:ce:5e:f4:0f:cc:bc:a0:3f:0f:13:3a:ce:cf: 77:2e:12:b8:a3:8e:9a:d3:3c:4a:05:be:8e:f0:45:69:75:a3: 38:10:dc:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2v1gX4VNGuE1sNTIrVPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz MGM5OTMwHhcNMjUxMjIxMDMwMTM3WhcNMjUxMjIyMDMwMTM3WjAzMTEwLwYDVQQD EygzN2M4ZGQ0NTBiYWM3YmVkNTI5NmZlY2RkOWYzZjE0OGZjMGFmNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaVLnSBG16QQPHDdM/IaFlYV6kfz CwrRQHyaVumgLYg4mEVQbRz2M7+BdjoyCeFu9xPH3WTphWOeonwkH8YemeciCB61 qmcTCj2hgbbtVW+XW8owC5x/Mt779OaRX37LiuGI63tY/eVWWhb6ETZAg3jVew7t 2Uvkw/u2kIghlTFv76FRiP3xElP80/rXorZr7IRwKKgcFfwPCJsY+QND47ZPCDY5 PWagJNuavBHt4ouX16B8BMSufk/zoKww0jx21noN1+BMp+DgtYTxoYR3SB3IUsO+ N+8TYF4rimSz9NkZ1ksYu+L7v+ds/oCFkRsYGyydvnZLhYp1Xr5QuqkAMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfI3UULrHvtUpb+zdnz8Uj8CvTfMB8GA1UdIwQY MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTSQj+mR nM7Gh2Gv8bj9VtwJH/P3cibASDTEr5lc/6+9xWExQUA3JjMRBKpJ6V2qB89lvhQp IU+BEKlt2hbIz02bCYamtWyklUDbIpN4EdqkonmLOnS+L3IUSvhBSM+aPtKgr0Z3 5lb/mlfa66Km5nAEJFK86v7N3loSxzm0gfsC/YMegPGn1iWYN7c3WGgtOW4seGDh gjor0AV2MWR4ML/eTLKE+SBvnLr6hY8DSwpvVxyOlq/ZTslnwv4ghiRyxy88l5c9 MRrOnE2L3Of4ksUv9ZbAtpZJNaaG4tzOXvQPzLygPw8TOs7Pdy4SuKOOmtM8SgW+ jvBFaXWjOBDcrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:36 2025 by rpki-client