This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json) Hash identifier: 6xzaOirU18eeawA8uoF1yhlK32QygYQq7RHWtE+re/s= Subject key identifier: E5:47:C0:8E:C8:8E:7C:E9:6B:2D:D3:1B:62:49:F1:BC:DB:28:A1:A2 Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Certificate serial: 019B38A1F3E06D91BB65A76E27469AABB085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 22:01:36 +0000 Manifest this update: Fri 19 Dec 2025 22:01:36 +0000 Manifest next update: Sat 20 Dec 2025 22:01:36 +0000 Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=) 2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: HHIOIoy7ZAKiQLoEf/cEEtxoH0dWYsMLCkgJ/R2zc48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:f3:e0:6d:91:bb:65:a7:6e:27:46:9a:ab:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Validity Not Before: Dec 19 22:01:36 2025 GMT Not After : Dec 20 22:01:36 2025 GMT Subject: CN=e547c08ec88e7ce96b2dd31b6249f1bcdb28a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:63:a9:22:38:94:27:c1:ac:49:af:1e:9a: ef:f6:e0:64:83:36:5e:2d:9b:00:59:44:52:83:d5: 46:40:ba:09:9c:29:f3:15:ab:bb:3b:ca:d1:e3:9c: 53:1a:65:ba:9c:1c:fa:39:48:46:5a:88:a2:dc:a6: 19:7d:96:be:f4:6d:60:80:a7:91:e8:ae:2f:bc:41: e0:70:30:6e:6e:04:a8:8c:86:46:f9:08:21:5b:f9: ad:3a:c0:fe:23:14:64:3f:e9:58:3d:9b:a4:8c:bd: ec:b1:e7:86:15:b7:92:89:e5:6e:1a:16:0a:05:77: e2:6a:19:46:43:40:6f:d9:10:f7:6b:f4:fb:33:71: d6:ef:12:b3:3d:43:b6:5a:2e:dc:f7:1e:e6:67:0c: 22:cf:de:dd:b3:07:6c:2e:2e:83:b6:cf:88:a7:38: 67:c5:e6:36:50:28:9d:6a:6a:b8:9c:b7:90:84:4f: ea:34:25:ae:5f:92:84:d3:0c:6d:99:47:eb:8d:e8: dd:00:1d:1d:82:85:43:dd:1a:f2:3a:ee:5f:48:f5: da:30:cd:76:28:d5:af:ec:89:af:a9:f1:38:bc:89: 62:ad:31:45:b9:dc:5b:44:54:29:25:77:b4:c0:ba: de:09:3b:38:74:14:a7:47:08:b0:32:41:81:10:21: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:C0:8E:C8:8E:7C:E9:6B:2D:D3:1B:62:49:F1:BC:DB:28:A1:A2 X509v3 Authority Key Identifier: keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:26:fc:17:c5:66:ee:d0:b5:19:56:4a:0a:17:47:7d:fc:a5: d0:51:4c:ca:b7:6a:3a:e7:64:24:36:92:f4:10:3d:db:00:1e: e6:23:9f:01:ee:16:b5:63:67:6f:a7:6e:5d:a6:7b:c0:6f:0f: e8:16:4b:de:91:fc:d6:ec:01:5d:9a:04:65:07:60:bc:67:b6: bb:0b:43:0d:2c:da:d2:cd:e1:5f:34:fd:6a:90:8a:98:7a:1e: 05:53:d2:e8:63:ba:a8:d2:de:8e:32:92:a1:aa:19:de:9f:15: ca:9c:ee:5f:51:52:36:6c:88:a0:0e:28:30:80:cd:1b:ed:2e: 3d:af:77:3c:f4:9d:bf:a5:a0:a3:b5:fd:20:2b:65:18:bb:51: 65:16:7b:72:6b:6f:f0:13:61:58:9c:87:6f:df:e8:05:a4:31: 8c:4a:93:05:90:69:22:70:e9:f3:b4:e4:74:d3:0e:38:87:57: f2:a4:71:b6:24:66:49:08:70:5b:c3:23:bf:8e:05:5c:36:6e: a5:93:a4:f2:fb:b6:ac:f2:bd:b0:a9:b8:39:f7:66:8f:4d:01: 13:35:d1:7f:4e:a5:81:fb:5f:ae:62:84:08:97:d3:83:11:c1: 59:31:f5:be:e2:01:32:7f:e5:01:62:58:de:02:b6:5c:ec:ff: 8c:b0:b1:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ofPgbZG7ZaduJ0aaq7CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi YzZjYzMwHhcNMjUxMjE5MjIwMTM2WhcNMjUxMjIwMjIwMTM2WjAzMTEwLwYDVQQD EyhlNTQ3YzA4ZWM4OGU3Y2U5NmIyZGQzMWI2MjQ5ZjFiY2RiMjhhMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L9jqSI4lCfBrEmvHprv9uBkgzZe LZsAWURSg9VGQLoJnCnzFau7O8rR45xTGmW6nBz6OUhGWoii3KYZfZa+9G1ggKeR 6K4vvEHgcDBubgSojIZG+QghW/mtOsD+IxRkP+lYPZukjL3sseeGFbeSieVuGhYK BXfiahlGQ0Bv2RD3a/T7M3HW7xKzPUO2Wi7c9x7mZwwiz97dswdsLi6Dts+Ipzhn xeY2UCidamq4nLeQhE/qNCWuX5KE0wxtmUfrjejdAB0dgoVD3RryOu5fSPXaMM12 KNWv7ImvqfE4vIlirTFFudxbRFQpJXe0wLreCTs4dBSnRwiwMkGBECEPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVHwI7Ijnzpay3TG2JJ8bzbKKGiMB8GA1UdIwQY MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSb8F8Vm 7tC1GVZKChdHffyl0FFMyrdqOudkJDaS9BA92wAe5iOfAe4WtWNnb6duXaZ7wG8P 6BZL3pH81uwBXZoEZQdgvGe2uwtDDSza0s3hXzT9apCKmHoeBVPS6GO6qNLejjKS oaoZ3p8VypzuX1FSNmyIoA4oMIDNG+0uPa93PPSdv6Wgo7X9ICtlGLtRZRZ7cmtv 8BNhWJyHb9/oBaQxjEqTBZBpInDp87TkdNMOOIdX8qRxtiRmSQhwW8Mjv44FXDZu pZOk8vu2rPK9sKm4Ofdmj00BEzXRf06lgftfrmKECJfTgxHBWTH1vuIBMn/lAWJY 3gK2XOz/jLCxsw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:03 2025 by rpki-client