This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json) Hash identifier: SMLYaK6yl7+3vI+UytpslXb7vhv6iOhph0W68HBeWBo= Subject key identifier: 1E:F3:70:26:61:58:14:20:95:67:D2:A9:D9:54:6A:47:1A:E6:33:B9 Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Certificate serial: 019B6D3383CB973A44BE61606E0AD51814A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft Manifest number: 07D9 Signing time: Tue 30 Dec 2025 03:00:51 +0000 Manifest this update: Tue 30 Dec 2025 03:00:51 +0000 Manifest next update: Wed 31 Dec 2025 03:00:51 +0000 Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: WaSHeghI+MrjZFzoWYoDNbWlGUxdAGPORqX9zr+EznQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:83:cb:97:3a:44:be:61:60:6e:0a:d5:18:14:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Validity Not Before: Dec 30 03:00:51 2025 GMT Not After : Dec 31 03:00:51 2025 GMT Subject: CN=1ef37026615814209567d2a9d9546a471ae633b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:92:c4:82:7e:72:9e:5e:52:e5:11:11:19: b3:b4:b2:57:06:52:45:87:1c:e0:b1:51:27:5a:37: f8:56:6a:61:e1:08:1c:96:f5:12:6c:6e:ce:e7:06: e5:80:97:87:f9:de:35:f1:b4:94:32:57:0f:d5:31: eb:19:d3:0a:f2:6a:5c:19:90:d7:a7:0b:d7:b4:81: a2:28:4c:32:06:e9:95:a4:d4:85:0d:cf:3b:9e:91: 61:48:4c:ff:b8:e8:b2:bc:42:7c:c3:a0:ca:be:cf: 33:87:66:c1:50:6a:ba:5c:63:5d:c5:bf:ae:04:ac: b7:ce:c9:9c:1d:f3:ee:17:a7:fd:97:aa:2b:ef:22: f7:03:8f:f9:89:7d:9f:1f:a7:49:bc:59:c8:0f:df: 93:5a:13:9e:d6:be:54:7b:b5:3c:61:24:a5:6f:8f: 4e:e6:e7:04:23:65:aa:56:a7:ff:76:36:47:fc:b7: aa:84:ac:17:6f:2b:ee:11:6c:64:f8:ec:cb:ba:74: 4f:ba:16:a4:5f:a4:1c:7b:bb:40:d4:54:b4:c2:ed: fd:a2:69:bc:2b:03:3c:b2:30:a9:4c:69:9e:ce:ea: 0c:5a:5d:9d:4e:39:18:0b:8b:a3:ce:21:fc:bd:99: 94:d9:e5:0d:32:52:9f:cf:23:d5:26:4d:5d:1a:57: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F3:70:26:61:58:14:20:95:67:D2:A9:D9:54:6A:47:1A:E6:33:B9 X509v3 Authority Key Identifier: keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:25:6b:72:d2:e9:cf:cb:ea:36:0d:fc:d9:f6:1a:a9:de:04: 70:1f:27:e0:8f:97:fe:d0:e3:6e:51:34:cf:c0:09:40:22:28: 8b:ff:3b:01:7c:70:ad:8c:14:c8:ec:e2:55:fd:e8:c7:f2:63: c1:80:1e:39:d2:f8:1c:27:e1:d8:0e:0a:ae:ce:ce:05:25:2a: 66:7e:33:49:71:31:3f:4f:5b:1a:f8:39:b2:68:a4:7c:46:07: 34:0b:a0:74:f9:f6:8c:13:3a:10:aa:fc:e2:b4:28:be:13:1f: 41:a5:d2:f8:5d:94:1e:dd:64:f1:69:62:28:58:18:85:34:e5: f2:1a:2d:ae:56:44:4d:ed:94:8b:6d:c0:c1:db:f1:99:14:0b: cc:0b:0e:74:73:d1:34:7d:ce:cb:a8:0e:9c:9d:0e:80:47:78: 17:6c:f6:cf:26:9b:cc:59:56:1c:ef:a4:70:15:08:c6:6e:4a: 58:b1:dc:38:d2:c5:37:ca:a3:e9:36:27:c2:ee:4e:70:3e:d6: 73:ee:b7:84:b7:2e:09:79:2f:a1:f9:b9:ce:13:49:93:e5:f5: ca:c3:89:3e:e3:6f:ad:44:80:94:08:66:35:88:84:60:fc:c8: 75:2a:7a:fd:a1:ba:27:e4:8c:7b:48:c8:b9:d3:03:5b:fc:b3: a6:5d:13:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM4PLlzpEvmFgbgrVGBSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl N2I2YzQwHhcNMjUxMjMwMDMwMDUxWhcNMjUxMjMxMDMwMDUxWjAzMTEwLwYDVQQD EygxZWYzNzAyNjYxNTgxNDIwOTU2N2QyYTlkOTU0NmE0NzFhZTYzM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1umSxIJ+cp5eUuURERmztLJXBlJF hxzgsVEnWjf4Vmph4QgclvUSbG7O5wblgJeH+d418bSUMlcP1THrGdMK8mpcGZDX pwvXtIGiKEwyBumVpNSFDc87npFhSEz/uOiyvEJ8w6DKvs8zh2bBUGq6XGNdxb+u BKy3zsmcHfPuF6f9l6or7yL3A4/5iX2fH6dJvFnID9+TWhOe1r5Ue7U8YSSlb49O 5ucEI2WqVqf/djZH/LeqhKwXbyvuEWxk+OzLunRPuhakX6Qce7tA1FS0wu39omm8 KwM8sjCpTGmezuoMWl2dTjkYC4ujziH8vZmU2eUNMlKfzyPVJk1dGldjwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7zcCZhWBQglWfSqdlUakca5jO5MB8GA1UdIwQY MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3 LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1SVrctLp z8vqNg382fYaqd4EcB8n4I+X/tDjblE0z8AJQCIoi/87AXxwrYwUyOziVf3ox/Jj wYAeOdL4HCfh2A4Krs7OBSUqZn4zSXExP09bGvg5smikfEYHNAugdPn2jBM6EKr8 4rQovhMfQaXS+F2UHt1k8WliKFgYhTTl8hotrlZETe2Ui23AwdvxmRQLzAsOdHPR NH3Oy6gOnJ0OgEd4F2z2zyabzFlWHO+kcBUIxm5KWLHcONLFN8qj6TYnwu5OcD7W c+63hLcuCXkvofm5zhNJk+X1ysOJPuNvrUSAlAhmNYiEYPzIdSp6/aG6J+SMe0jI udMDW/yzpl0TaQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:20 2025 by rpki-client