This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json) Hash identifier: 7XaPEq/bXHH353MnaNA/DXiXlOUzshSIWBBzWfa2igk= Subject key identifier: F7:75:0F:82:88:18:F6:ED:38:42:88:8D:5C:90:97:F8:45:53:70:04 Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860 Certificate serial: 019B4E4DAA9925573366E2928403C97A8B24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft Manifest number: 1145 Signing time: Wed 24 Dec 2025 03:01:11 +0000 Manifest this update: Wed 24 Dec 2025 03:01:11 +0000 Manifest next update: Thu 25 Dec 2025 03:01:11 +0000 Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: zHPZpVeYwfiTV0EROr0F3GW4RNPmnTs3eHFea0+7kic=) 2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:aa:99:25:57:33:66:e2:92:84:03:c9:7a:8b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860 Validity Not Before: Dec 24 03:01:11 2025 GMT Not After : Dec 25 03:01:11 2025 GMT Subject: CN=f7750f828818f6ed3842888d5c9097f845537004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:dc:05:23:fa:50:2f:65:3a:3a:c2:f0:52: 1e:b4:c8:38:97:ba:32:9e:b7:22:55:c1:f0:99:88: aa:a6:41:14:3f:2b:5f:78:51:61:03:b2:23:d5:19: af:bc:bb:6b:57:84:ab:73:69:a8:dc:d5:86:19:72: 2b:b7:4b:b3:14:04:b5:3b:34:62:65:21:ed:79:5c: 46:94:f1:f3:b6:10:0e:d3:85:19:32:fa:f2:3a:69: c1:49:be:cb:c4:6f:97:96:69:05:f6:2e:e3:0d:0f: a4:f7:51:03:33:f1:8e:1e:e5:89:2c:04:62:21:79: 59:cb:1b:95:2f:a4:38:67:9c:21:5b:e5:5a:5b:4f: 35:b1:7d:78:1f:0a:26:c8:ba:f1:b7:01:63:67:ae: e4:fe:43:83:82:93:80:41:b7:7a:8e:75:4f:5a:8f: 2f:ef:98:8b:3d:34:0f:4a:4c:ee:e7:d7:86:9b:97: 46:29:1c:5c:4a:97:35:fb:93:62:8c:66:02:02:40: b8:9d:8b:6c:7f:cc:c0:8f:4c:74:2f:96:1b:e9:5f: e3:19:06:15:d1:b3:7b:3b:ec:c0:15:69:98:90:01: a5:6c:3d:76:8f:55:df:35:78:2f:a7:bd:99:f3:45: 70:81:ef:32:81:b4:4e:4a:7e:a5:62:3d:e5:86:31: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:75:0F:82:88:18:F6:ED:38:42:88:8D:5C:90:97:F8:45:53:70:04 X509v3 Authority Key Identifier: keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0a:2d:5c:2f:e4:ce:4a:65:84:be:59:9e:f9:e8:57:31:d7: de:d5:c3:47:b8:e1:b3:ac:d3:f3:d7:cf:81:04:a1:7f:d2:a3: fe:f2:5e:f9:ca:7e:31:ad:15:7d:0b:b2:84:09:03:ae:2f:60: 1e:e7:39:56:b2:69:74:d0:28:a2:c6:80:fd:db:33:db:43:cc: 37:e2:fd:ec:d6:4e:69:99:da:e5:5c:33:11:49:a1:77:72:6a: 5e:1b:04:f9:83:32:fa:61:23:f5:29:53:82:77:38:49:93:c5: 13:11:f6:df:34:fa:08:c0:ff:72:e8:f1:78:ea:02:12:38:6a: a3:9a:83:7d:9f:09:6e:50:92:8a:92:3f:85:e1:a5:09:d8:67: dc:d0:89:35:82:f1:f4:d5:8e:44:3c:3b:ce:3e:d9:b9:6e:f9: 1d:ca:dc:ca:7e:bd:23:36:39:f3:bb:4b:14:51:04:eb:25:64: 75:82:eb:ef:b9:45:47:76:78:14:d1:4f:2c:5c:c4:c9:84:a0: ae:c0:c8:86:9e:c2:cf:cf:2b:17:1a:85:8b:bc:46:e5:d0:8e: af:96:6a:ef:15:1a:be:28:33:34:ff:45:b2:a9:4e:60:df:9a: 09:b1:54:4c:68:d1:db:06:37:e0:93:1e:6e:1a:39:4c:04:f1: dd:08:71:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaqZJVczZuKShAPJeoskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl NjE4NjAwHhcNMjUxMjI0MDMwMTExWhcNMjUxMjI1MDMwMTExWjAzMTEwLwYDVQQD EyhmNzc1MGY4Mjg4MThmNmVkMzg0Mjg4OGQ1YzkwOTdmODQ1NTM3MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDcBSP6UC9lOjrC8FIetMg4l7oy nrciVcHwmYiqpkEUPytfeFFhA7Ij1RmvvLtrV4Src2mo3NWGGXIrt0uzFAS1OzRi ZSHteVxGlPHzthAO04UZMvryOmnBSb7LxG+XlmkF9i7jDQ+k91EDM/GOHuWJLARi IXlZyxuVL6Q4Z5whW+VaW081sX14HwomyLrxtwFjZ67k/kODgpOAQbd6jnVPWo8v 75iLPTQPSkzu59eGm5dGKRxcSpc1+5NijGYCAkC4nYtsf8zAj0x0L5Yb6V/jGQYV 0bN7O+zAFWmYkAGlbD12j1XfNXgvp72Z80Vwge8ygbROSn6lYj3lhjFSJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd1D4KIGPbtOEKIjVyQl/hFU3AEMB8GA1UdIwQY MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2 LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwotXC/k zkplhL5ZnvnoVzHX3tXDR7jhs6zT89fPgQShf9Kj/vJe+cp+Ma0VfQuyhAkDri9g Huc5VrJpdNAoosaA/dsz20PMN+L97NZOaZna5VwzEUmhd3JqXhsE+YMy+mEj9SlT gnc4SZPFExH23zT6CMD/cujxeOoCEjhqo5qDfZ8JblCSipI/heGlCdhn3NCJNYLx 9NWORDw7zj7ZuW75Hcrcyn69IzY587tLFFEE6yVkdYLr77lFR3Z4FNFPLFzEyYSg rsDIhp7Cz88rFxqFi7xG5dCOr5Zq7xUavigzNP9FsqlOYN+aCbFUTGjR2wY34JMe bho5TATx3QhxYw== -----END CERTIFICATE-----Generated at Wed Dec 24 09:16:59 2025 by rpki-client