This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json) Hash identifier: Ppx831Px/WYwHhffpPWE40WMyU5x/qadpNTGhXc+dwE= Subject key identifier: D6:50:2A:3C:E8:A3:B6:A1:7C:C9:D5:AA:A0:DD:BB:B4:CB:78:CB:4A Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2 Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2 Certificate serial: 019AF7D442480B93A6A17B5F244F07C58F5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft Manifest number: 0DDB Signing time: Sun 07 Dec 2025 08:01:14 +0000 Manifest this update: Sun 07 Dec 2025 08:01:14 +0000 Manifest next update: Mon 08 Dec 2025 08:01:14 +0000 Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: GB/Zy3Z3kChwW98zSrCAqEgu9oI2n7JK2x5kONg7VXQ=) 2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:42:48:0b:93:a6:a1:7b:5f:24:4f:07:c5:8f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2 Validity Not Before: Dec 7 08:01:14 2025 GMT Not After : Dec 8 08:01:14 2025 GMT Subject: CN=d6502a3ce8a3b6a17cc9d5aaa0ddbbb4cb78cb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:5f:90:06:c5:88:f5:c4:4d:c2:bb:02:6a: b6:ad:2e:89:48:61:d6:3d:87:63:37:69:7f:9c:d9: f2:0d:33:51:5b:9c:16:25:fc:d1:ca:9c:57:81:f4: 96:76:a1:0e:04:e7:36:f4:d5:94:b9:87:07:53:ce: 05:db:fe:b6:d7:aa:12:3d:58:0b:26:60:f7:52:3a: c4:bb:d1:28:87:b8:c1:00:9a:3b:79:92:73:8f:30: 5c:f4:19:ac:6e:09:44:e5:ff:55:ef:86:34:e0:e0: 33:40:7a:dc:7d:03:a3:f1:51:26:11:ec:b2:ea:75: c3:d6:0f:01:36:b8:72:fe:89:dc:f8:f6:d9:ec:bb: 69:07:9e:c5:6a:e5:38:23:11:cd:39:bb:a0:86:02: 66:32:71:7e:af:97:85:49:a5:1a:61:ac:24:a0:36: 62:8e:33:d6:23:c6:8b:b7:4d:41:eb:b6:56:8f:d0: 28:e4:fb:3a:85:ef:cb:b8:28:ec:95:6d:80:73:1b: a2:d2:20:65:02:88:5c:42:da:af:86:67:d6:03:45: c2:d8:8c:b1:74:8a:fc:fc:cd:6e:7a:02:99:a4:b5: f0:35:09:a3:30:66:8b:55:16:9d:f7:f4:17:bc:21: ab:2b:0a:48:93:f0:2a:09:9c:09:c3:63:29:4a:74: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:2A:3C:E8:A3:B6:A1:7C:C9:D5:AA:A0:DD:BB:B4:CB:78:CB:4A X509v3 Authority Key Identifier: keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:79:82:bf:41:f9:64:c8:46:55:c7:72:4e:ff:c1:f0:02:5f: 2e:8e:01:11:02:f6:79:a3:01:16:5b:01:8a:c4:6d:50:99:d8: d4:90:1c:58:0a:6d:d9:20:f5:58:bb:76:b5:cc:4c:f5:20:7b: 23:1c:58:e5:60:2d:8a:62:7b:b2:b8:a2:02:52:bd:b8:bf:18: 7f:a1:3d:8c:75:a0:e9:c8:3e:c8:53:db:c0:69:ef:9d:75:82: 3f:56:a5:17:be:83:6c:1e:ea:0b:d5:c8:69:79:e1:0c:20:ed: 63:03:f0:8f:3d:03:b8:00:92:18:a3:d3:60:83:3c:e2:c9:5e: af:c0:5d:65:d5:c9:3f:d3:e1:59:c8:56:e9:1d:8d:ed:b9:93: 1d:72:32:fb:ad:bf:ed:ec:5a:e9:aa:ba:97:f4:2b:8c:9f:b1: 5e:12:90:ec:f2:f0:e4:04:fa:c9:3a:47:e4:b0:30:d8:5c:40: c6:f3:68:c8:4d:e8:96:b9:47:23:08:6c:aa:dc:4b:76:66:52: 49:f9:b2:d8:03:95:7f:0c:9d:0c:2d:09:3d:1a:d0:d6:ce:23: 89:a6:bd:7a:ad:3f:35:a3:23:0e:93:96:ad:89:a6:d4:7e:d9: 9f:40:ca:f2:07:61:da:e5:c9:9d:56:e6:f9:79:27:9d:4b:41: a2:08:cb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31EJIC5OmoXtfJE8HxY9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx NGVmZjIwHhcNMjUxMjA3MDgwMTE0WhcNMjUxMjA4MDgwMTE0WjAzMTEwLwYDVQQD EyhkNjUwMmEzY2U4YTNiNmExN2NjOWQ1YWFhMGRkYmJiNGNiNzhjYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5fkAbFiPXETcK7Amq2rS6JSGHW PYdjN2l/nNnyDTNRW5wWJfzRypxXgfSWdqEOBOc29NWUuYcHU84F2/6216oSPVgL JmD3UjrEu9Eoh7jBAJo7eZJzjzBc9BmsbglE5f9V74Y04OAzQHrcfQOj8VEmEeyy 6nXD1g8BNrhy/onc+PbZ7LtpB57FauU4IxHNObughgJmMnF+r5eFSaUaYawkoDZi jjPWI8aLt01B67ZWj9Ao5Ps6he/LuCjslW2Acxui0iBlAohcQtqvhmfWA0XC2Iyx dIr8/M1uegKZpLXwNQmjMGaLVRad9/QXvCGrKwpIk/AqCZwJw2MpSnQ0GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZQKjzoo7ahfMnVqqDdu7TLeMtKMB8GA1UdIwQY MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3mCv0H5 ZMhGVcdyTv/B8AJfLo4BEQL2eaMBFlsBisRtUJnY1JAcWApt2SD1WLt2tcxM9SB7 IxxY5WAtimJ7sriiAlK9uL8Yf6E9jHWg6cg+yFPbwGnvnXWCP1alF76DbB7qC9XI aXnhDCDtYwPwjz0DuACSGKPTYIM84sler8BdZdXJP9PhWchW6R2N7bmTHXIy+62/ 7exa6aq6l/QrjJ+xXhKQ7PLw5AT6yTpH5LAw2FxAxvNoyE3olrlHIwhsqtxLdmZS Sfmy2AOVfwydDC0JPRrQ1s4jiaa9eq0/NaMjDpOWrYmm1H7Zn0DK8gdh2uXJnVbm +XknnUtBogjL2A== -----END CERTIFICATE-----Generated at Sun Dec 7 11:36:01 2025 by rpki-client