This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json) Hash identifier: PU904z8vmRovxtxIljXQ5HGlhmdt0WhdeBiDDEn6W+Q= Subject key identifier: F1:EE:85:42:8E:B7:99:93:EF:CF:86:74:9A:A1:8D:FF:E2:A3:F7:E7 Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Certificate serial: 019AF2AD94428CFBC29245F8BFAD2D3FA81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft Manifest number: 1063 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=) 2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: Ug2gYif96gSGDZ0mrJGczyyiOIidlDVJCVZRPZnVDsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:94:42:8c:fb:c2:92:45:f8:bf:ad:2d:3f:a8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=f1ee85428eb79993efcf86749aa18dffe2a3f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fd:0c:f3:9b:7a:ef:ad:34:87:83:a7:6b:59: 01:48:74:2f:c2:70:1e:fc:c9:34:94:f4:4d:92:e9: 9a:0e:22:ca:8c:f3:35:f5:fe:d8:62:0a:4a:82:e5: 40:8f:14:6c:db:49:56:01:69:02:24:5b:76:0a:04: 6c:3a:85:1d:3b:83:a8:e6:f9:29:34:6b:82:0a:f5: db:f2:03:8e:dc:75:48:8a:59:32:a4:90:16:84:65: 38:be:5a:cd:41:84:28:47:be:bd:da:43:5a:0b:c9: 7b:82:74:99:91:79:69:08:f1:91:1a:b9:3f:e6:bf: 5a:f1:c4:be:bf:5e:46:67:e9:ef:df:b6:f0:f6:8e: 32:6d:4d:44:23:bc:de:d1:1a:93:ec:9c:d8:76:37: 38:d7:98:9e:88:03:80:20:c9:5b:37:87:31:1d:a1: 11:99:c6:a2:3a:a5:d0:bd:d0:5b:b2:da:b0:16:a4: 10:54:39:4f:d2:95:f0:64:58:52:1d:f5:61:a4:1a: 08:25:3e:13:68:0e:87:e2:7c:40:24:55:35:e2:54: 01:21:f2:db:47:2d:e0:29:bf:09:ac:2c:4c:d5:cf: 6c:c2:79:a6:c1:8b:ff:a2:97:48:7b:fc:e6:28:ef: d3:d2:a4:03:6a:81:00:db:9c:e5:1f:4c:35:70:52: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:85:42:8E:B7:99:93:EF:CF:86:74:9A:A1:8D:FF:E2:A3:F7:E7 X509v3 Authority Key Identifier: keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:24:c7:72:8f:73:49:5f:62:db:09:07:f4:7c:b6:85:be:c9: 70:b9:a5:26:78:ae:89:58:a8:ee:44:0e:81:38:77:35:07:15: ab:17:61:e8:89:04:fd:22:b7:83:6c:ae:99:33:7d:d1:f1:62: c8:cd:b5:24:d1:48:d2:38:f5:ba:05:f8:b8:c1:ec:be:be:95: cf:76:63:63:da:9f:64:12:43:c5:ea:de:85:fa:61:89:cc:ec: 9e:b1:14:8c:e0:ba:b1:54:e1:b8:6e:95:a3:6c:02:8d:2a:d0: ad:73:1d:2f:17:7f:2c:a9:54:27:cf:4b:3e:25:00:11:6c:d1: 1f:14:90:08:71:74:d1:9d:26:20:9b:3e:95:40:83:3e:ee:f0: b6:af:d0:77:f1:f9:c5:2f:ad:a4:ff:03:be:73:94:b9:57:2c: 8b:74:f4:f3:85:07:6f:8a:10:32:64:71:fd:09:46:9c:ce:f9: 47:5c:f4:92:ec:7f:55:9c:19:ba:95:8e:6f:d1:d6:82:0e:d8: 76:7b:cb:57:56:02:f6:66:a7:a1:7d:b8:27:ce:d9:84:be:54: ef:ca:ec:91:9a:39:ab:5d:cc:5a:a6:57:f8:e6:d9:87:a3:ea: aa:4c:d2:3a:0a:93:e0:b0:99:16:e9:60:b5:22:66:a7:96:52: c9:24:a8:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZRCjPvCkkX4v60tP6gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx NWZmYzgwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD EyhmMWVlODU0MjhlYjc5OTkzZWZjZjg2NzQ5YWExOGRmZmUyYTNmN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P0M85t67600h4Ona1kBSHQvwnAe /Mk0lPRNkumaDiLKjPM19f7YYgpKguVAjxRs20lWAWkCJFt2CgRsOoUdO4Oo5vkp NGuCCvXb8gOO3HVIilkypJAWhGU4vlrNQYQoR7692kNaC8l7gnSZkXlpCPGRGrk/ 5r9a8cS+v15GZ+nv37bw9o4ybU1EI7ze0RqT7JzYdjc415ieiAOAIMlbN4cxHaER mcaiOqXQvdBbstqwFqQQVDlP0pXwZFhSHfVhpBoIJT4TaA6H4nxAJFU14lQBIfLb Ry3gKb8JrCxM1c9swnmmwYv/opdIe/zmKO/T0qQDaoEA25zlH0w1cFI99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHuhUKOt5mT78+GdJqhjf/io/fnMB8GA1UdIwQY MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASTHco9z SV9i2wkH9Hy2hb7JcLmlJniuiVio7kQOgTh3NQcVqxdh6IkE/SK3g2yumTN90fFi yM21JNFI0jj1ugX4uMHsvr6Vz3ZjY9qfZBJDxerehfphiczsnrEUjOC6sVThuG6V o2wCjSrQrXMdLxd/LKlUJ89LPiUAEWzRHxSQCHF00Z0mIJs+lUCDPu7wtq/Qd/H5 xS+tpP8DvnOUuVcsi3T084UHb4oQMmRx/QlGnM75R1z0kux/VZwZupWOb9HWgg7Y dnvLV1YC9manoX24J87ZhL5U78rskZo5q13MWqZX+ObZh6PqqkzSOgqT4LCZFulg tSJmp5ZSySSoug== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:39 2025 by rpki-client