This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json) Hash identifier: twA+IrScZAkzynFD3hjPfs0YfJONxZwHKhfwSxQDN1s= Subject key identifier: 74:9A:C9:BE:08:04:F0:C2:F7:72:79:08:38:43:6F:9B:F4:AB:1C:AB Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617 Certificate serial: 019AF31CB2604B13D319D8738529014B82B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft Manifest number: 0C08 Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=) 2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=) 3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=) 4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: Vx3+dIb065mjqvR/SuwOWvGltToiGM7AHCeice6LLK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b2:60:4b:13:d3:19:d8:73:85:29:01:4b:82:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=749ac9be0804f0c2f772790838436f9bf4ab1cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:cc:8f:28:c2:30:bb:98:43:6a:a3:db:1f: 31:24:39:4b:8c:bc:be:f5:5e:73:21:51:e7:3b:5e: e9:ab:e7:5c:84:71:7b:f9:1a:03:40:df:7d:bb:be: 75:56:43:be:03:d2:59:57:48:0b:4f:63:7e:4d:28: fc:71:72:63:dd:df:d0:13:59:ca:48:92:e2:42:ab: 4c:56:f1:86:18:45:07:c7:d4:07:48:88:e1:c0:cd: 5c:02:29:94:28:be:e9:a3:bc:85:f0:ff:f6:69:e9: 74:23:8f:ac:83:c1:05:8d:79:c5:95:5f:c0:fc:69: 02:c6:52:67:04:8a:62:b8:af:c3:1b:c4:54:16:1b: f7:e1:2e:0b:99:e5:77:fb:72:e7:42:6b:77:ff:09: 5b:36:f5:2d:a8:e9:0a:2e:f1:69:af:fd:37:64:b0: e8:1a:f4:06:13:b6:29:68:ff:43:e5:f3:d8:39:1d: 6e:ad:9c:87:4e:40:3f:f6:91:9e:54:22:3b:42:5f: 69:9a:01:88:b7:57:df:67:c3:61:85:c6:d7:7f:2f: a3:3f:7a:0e:9a:54:8b:67:ee:a8:83:d7:c5:10:69: 98:a0:79:c4:83:34:76:4c:9e:48:ce:dd:a4:b0:c2: 7f:b6:4d:d6:12:ce:e3:0a:64:df:a6:86:b5:5d:d5: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:C9:BE:08:04:F0:C2:F7:72:79:08:38:43:6F:9B:F4:AB:1C:AB X509v3 Authority Key Identifier: keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:b7:bd:c7:58:04:40:36:4e:05:db:56:3a:e1:9f:71:71: 19:87:03:8a:df:32:b2:7b:64:50:6b:83:c2:69:e9:fe:ca:37: c3:61:de:4c:2b:6b:cf:e4:01:ef:ce:ef:10:34:24:18:28:f0: 0a:42:c0:c3:a1:b6:fa:cf:37:5e:37:d3:02:56:f1:d9:38:f0: bc:6b:7b:10:08:fb:e0:f5:5f:11:a3:aa:d7:73:3f:f9:4a:dd: b3:4a:d9:5e:29:ed:97:e5:10:fe:ab:16:f9:fe:7a:f6:87:39: d5:f8:de:aa:02:05:8e:28:0b:d5:a9:0d:0b:ae:ec:2f:ac:1d: e2:32:a9:1d:97:24:ee:ab:f4:53:08:e8:cb:a0:5a:05:c4:90: e5:2d:f7:c7:d1:be:63:9e:d4:75:54:72:e6:a1:81:51:d6:86: e5:d4:ef:40:ed:56:2b:32:5d:99:9a:ef:88:7e:79:bf:c4:f5: 78:ab:d9:9e:74:c7:81:3c:48:a3:0d:f3:da:73:03:56:3d:b5: 9e:bc:41:f3:5f:64:b7:03:68:1c:b1:bb:23:23:08:ac:81:a8: f0:33:75:4b:ab:2d:1c:ba:d9:97:84:95:c7:3a:06:cf:af:c9: 23:3b:11:d6:4e:e0:71:48:68:08:90:60:fc:8d:3c:b4:96:80: 0e:a0:e2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLJgSxPTGdhzhSkBS4K3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1 MzM2MTcwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD Eyg3NDlhYzliZTA4MDRmMGMyZjc3Mjc5MDgzODQzNmY5YmY0YWIxY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F/MjyjCMLuYQ2qj2x8xJDlLjLy+ 9V5zIVHnO17pq+dchHF7+RoDQN99u751VkO+A9JZV0gLT2N+TSj8cXJj3d/QE1nK SJLiQqtMVvGGGEUHx9QHSIjhwM1cAimUKL7po7yF8P/2ael0I4+sg8EFjXnFlV/A /GkCxlJnBIpiuK/DG8RUFhv34S4LmeV3+3LnQmt3/wlbNvUtqOkKLvFpr/03ZLDo GvQGE7YpaP9D5fPYOR1urZyHTkA/9pGeVCI7Ql9pmgGIt1ffZ8NhhcbXfy+jP3oO mlSLZ+6og9fFEGmYoHnEgzR2TJ5Izt2ksMJ/tk3WEs7jCmTfpoa1XdX26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSayb4IBPDC93J5CDhDb5v0qxyrMB8GA1UdIwQY MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt MGVkMjRlYmM0ZWQ4LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4 LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr63vcdY BEA2TgXbVjrhn3FxGYcDit8ysntkUGuDwmnp/so3w2HeTCtrz+QB787vEDQkGCjw CkLAw6G2+s83XjfTAlbx2TjwvGt7EAj74PVfEaOq13M/+Urds0rZXintl+UQ/qsW +f569oc51fjeqgIFjigL1akNC67sL6wd4jKpHZck7qv0Uwjoy6BaBcSQ5S33x9G+ Y57UdVRy5qGBUdaG5dTvQO1WKzJdmZrviH55v8T1eKvZnnTHgTxIow3z2nMDVj21 nrxB819ktwNoHLG7IyMIrIGo8DN1S6stHLrZl4SVxzoGz6/JIzsR1k7gcUhoCJBg /I08tJaADqDiOg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:30 2025 by rpki-client