This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json) Hash identifier: oNPdntQLQQOL3X6peESc9r2lWLKL9p1SyACBOVlaGfU= Subject key identifier: 2C:19:DE:D3:ED:17:2B:FB:34:A6:BD:23:BF:75:5E:42:06:4B:DF:CA Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b Certificate serial: 019B2B53C1E17F5B20714E7D438C38E67DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:01:07 +0000 Manifest this update: Wed 17 Dec 2025 08:01:07 +0000 Manifest next update: Thu 18 Dec 2025 08:01:07 +0000 Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=) 2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: PWcVrFoFKI4ZptOWiUDK2ewwbvHH7SVFntGOC8Uel3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:c1:e1:7f:5b:20:71:4e:7d:43:8c:38:e6:7d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b Validity Not Before: Dec 17 08:01:07 2025 GMT Not After : Dec 18 08:01:07 2025 GMT Subject: CN=2c19ded3ed172bfb34a6bd23bf755e42064bdfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:0c:3d:45:25:36:69:e4:f1:5f:a2:da:ef: ab:dd:ec:d8:5d:b3:16:6a:cc:2d:58:13:e1:0b:84: b4:0b:a2:64:3f:60:c8:ed:21:1c:28:ea:b1:17:cd: 61:ae:66:6c:84:36:09:57:2b:be:a1:83:44:fa:b1: 4e:ea:18:11:1e:54:43:0f:1c:91:c7:3d:fe:b9:63: 58:2d:29:8a:df:e3:ed:77:64:63:51:f8:e0:55:46: 6c:40:65:15:49:fd:c6:d1:f8:43:78:23:1a:8a:ec: 65:0e:1d:75:32:29:9b:b1:f5:b2:68:8a:03:af:d3: 12:5f:4f:07:e7:73:5c:53:67:33:bd:49:02:ce:f9: 8e:15:6f:8b:53:6b:ab:9b:e3:85:0b:bd:5a:86:f6: 1f:3e:ae:29:ea:d3:0d:03:6c:cc:54:f4:82:8f:20: 96:fc:92:a6:a0:1d:19:e4:87:65:72:1a:e1:da:8b: bd:51:34:df:6a:5d:36:19:5d:92:8d:40:18:76:f0: 1e:65:e8:8d:53:09:11:1a:a0:5a:35:5f:ec:a6:cc: ad:dc:63:4c:4a:0f:5e:2a:af:dc:2c:3f:81:8c:13: 00:a1:2c:28:9f:f2:8a:a4:b7:28:4c:8c:53:7c:b5: be:29:a2:ac:54:9d:85:3e:7e:12:36:40:bf:ca:67: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:19:DE:D3:ED:17:2B:FB:34:A6:BD:23:BF:75:5E:42:06:4B:DF:CA X509v3 Authority Key Identifier: keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:d9:72:f8:ab:3f:59:af:0f:6a:e6:f6:ff:03:83:1d:67: 25:5b:47:e0:b6:21:b2:eb:ed:ec:d6:32:79:eb:bd:c7:83:54: 80:5c:4a:fe:20:1e:33:ee:d0:d8:3a:94:ac:b9:55:31:97:61: d7:58:67:0b:d8:5d:80:45:9a:2f:bc:fd:da:bd:10:06:d7:35: fb:cb:4b:24:2f:2e:20:95:76:a4:c3:45:0a:6d:c6:a8:1e:f1: b2:be:95:2d:c5:e9:46:98:17:0d:34:6d:47:02:32:40:ee:c8: 90:cd:7d:3d:af:34:37:ab:97:d8:34:53:1d:1d:ca:ea:1e:a5: 14:fe:d2:13:28:9f:68:ca:08:ab:2e:1b:97:bb:5f:db:8b:98: 09:4e:13:77:e7:c0:4c:4a:64:50:a7:bd:aa:ba:80:1c:a2:e4: ce:f9:12:a9:88:bb:53:05:0a:e6:d8:53:97:90:13:e2:ad:a8: ad:97:9d:70:a8:08:23:b9:e3:80:af:6c:f0:c8:8b:46:9d:5a: f0:20:78:35:c4:09:df:18:58:a2:01:99:7a:a2:6d:07:f7:49: 39:7c:c7:8f:0d:a5:63:3c:a5:8e:f4:46:11:2c:ba:e3:70:c0: 7e:9c:45:8d:38:73:e9:e3:de:52:dc:64:6d:86:43:05:7d:d5: ee:0f:e8:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU8Hhf1sgcU59Q4w45n3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2 ZjE1NWIwHhcNMjUxMjE3MDgwMTA3WhcNMjUxMjE4MDgwMTA3WjAzMTEwLwYDVQQD EygyYzE5ZGVkM2VkMTcyYmZiMzRhNmJkMjNiZjc1NWU0MjA2NGJkZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6wMPUUlNmnk8V+i2u+r3ezYXbMW aswtWBPhC4S0C6JkP2DI7SEcKOqxF81hrmZshDYJVyu+oYNE+rFO6hgRHlRDDxyR xz3+uWNYLSmK3+Ptd2RjUfjgVUZsQGUVSf3G0fhDeCMaiuxlDh11MimbsfWyaIoD r9MSX08H53NcU2czvUkCzvmOFW+LU2urm+OFC71ahvYfPq4p6tMNA2zMVPSCjyCW /JKmoB0Z5Idlchrh2ou9UTTfal02GV2SjUAYdvAeZeiNUwkRGqBaNV/spsyt3GNM Sg9eKq/cLD+BjBMAoSwon/KKpLcoTIxTfLW+KaKsVJ2FPn4SNkC/ymdoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwZ3tPtFyv7NKa9I791XkIGS9/KMB8GA1UdIwQY MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH13Zcvir P1mvD2rm9v8Dgx1nJVtH4LYhsuvt7NYyeeu9x4NUgFxK/iAeM+7Q2DqUrLlVMZdh 11hnC9hdgEWaL7z92r0QBtc1+8tLJC8uIJV2pMNFCm3GqB7xsr6VLcXpRpgXDTRt RwIyQO7IkM19Pa80N6uX2DRTHR3K6h6lFP7SEyifaMoIqy4bl7tf24uYCU4Td+fA TEpkUKe9qrqAHKLkzvkSqYi7UwUK5thTl5AT4q2orZedcKgII7njgK9s8MiLRp1a 8CB4NcQJ3xhYogGZeqJtB/dJOXzHjw2lYzyljvRGESy643DAfpxFjThz6ePeUtxk bYZDBX3V7g/ovA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:02 2025 by rpki-client