This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json) Hash identifier: qPwWwVztLR5kav9rQjX4dQa0FY9T5OM0YD77dc5+6N8= Subject key identifier: A3:89:95:79:E7:7C:E3:55:E6:DD:1B:6B:BA:11:84:68:C8:5B:08:2C Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Certificate serial: 019B2BF8890823E47CBC90C8530B92AE604F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:01:06 +0000 Manifest this update: Wed 17 Dec 2025 11:01:06 +0000 Manifest next update: Thu 18 Dec 2025 11:01:06 +0000 Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=) 2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=) 3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: noO5IOQrsiEWr3aejPjm/5X/A3wE1wa3e2eQ09+YmH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:89:08:23:e4:7c:bc:90:c8:53:0b:92:ae:60:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Validity Not Before: Dec 17 11:01:06 2025 GMT Not After : Dec 18 11:01:06 2025 GMT Subject: CN=a3899579e77ce355e6dd1b6bba118468c85b082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:7d:a5:53:1a:38:74:d0:65:85:e1:c4:3f: 49:1d:0f:e0:b6:2a:7b:62:f9:c6:62:8d:b9:bd:02: 36:1f:09:3b:20:53:06:dd:ba:af:21:1d:f6:c4:48: 56:ea:a2:c6:a9:02:a2:18:32:e1:a5:a9:cf:51:ca: ab:23:5f:37:66:f8:ff:44:6c:38:0e:fe:a1:21:ef: e2:44:97:ff:f2:a1:7b:81:26:22:1e:08:94:fd:8b: 4b:c0:13:69:1f:51:64:68:74:ee:d8:94:36:81:61: 77:e1:3c:7e:09:ee:c5:ae:44:4c:86:dc:6c:f5:4e: 35:b4:df:dd:cf:56:78:2d:9e:26:f2:32:5b:52:d4: 49:f8:3d:63:88:87:2e:e8:5d:e5:e2:15:6e:8d:54: c2:3e:e3:3a:90:d3:ae:33:f7:2d:cd:97:0f:2b:ac: 6c:7c:0d:ab:ba:12:97:f3:52:57:d0:bf:c6:24:9e: ad:95:c5:86:a1:c2:ef:cb:32:dd:da:40:6a:9f:a7: c1:ff:32:82:f5:72:15:b2:5f:79:5c:d4:80:91:70: 39:89:72:6a:d9:3d:e7:f8:f2:2d:db:ff:2a:30:ec: 5d:a3:32:33:77:34:ef:31:80:f5:9f:6d:18:23:1e: ed:d3:a4:f9:ca:e7:f9:e4:26:98:21:69:ad:66:5e: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:95:79:E7:7C:E3:55:E6:DD:1B:6B:BA:11:84:68:C8:5B:08:2C X509v3 Authority Key Identifier: keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:79:ae:df:77:2a:ed:b0:9e:2c:48:3f:22:1c:f8:fe:a5:91: 8a:16:1e:47:81:e6:ea:69:60:0a:48:3a:d3:12:5c:02:f0:95: 40:e2:31:e2:00:dc:21:04:99:26:88:cf:32:db:d8:ca:38:2d: 4b:e3:39:65:54:89:3f:56:82:41:de:7e:ef:e5:f1:3b:d7:26: 3b:ba:3a:34:44:bc:b4:ed:cf:8d:6c:b1:00:2d:df:85:a5:de: b5:ff:ec:20:d6:73:fe:d2:a9:a3:12:c8:4e:1c:f2:56:d9:f2: 7c:78:8a:b7:25:d6:0c:85:8e:48:f1:af:73:3a:63:09:0a:f7: 65:68:2e:ed:e3:4c:d1:87:b9:1d:b1:a8:99:b8:0c:10:9a:71: 18:95:13:b2:66:f0:6d:1f:a2:0a:45:ef:67:85:07:8f:87:59: 01:a4:8e:c1:5d:a2:40:d7:7f:84:68:f3:d2:1f:16:82:6d:c4: 99:87:73:03:c7:49:73:6c:0e:17:87:6e:70:93:21:f7:83:af: eb:21:42:b2:b9:ff:c3:57:c6:23:76:48:69:aa:ae:ac:29:e5: ed:73:61:f9:d6:b8:6f:32:69:00:99:48:01:a8:ea:b5:33:e4: 40:b8:d3:90:aa:57:25:42:a2:c7:b4:df:b7:31:ab:52:ec:2f: b2:d9:45:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IkII+R8vJDIUwuSrmBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh ZWQ0NTEwHhcNMjUxMjE3MTEwMTA2WhcNMjUxMjE4MTEwMTA2WjAzMTEwLwYDVQQD EyhhMzg5OTU3OWU3N2NlMzU1ZTZkZDFiNmJiYTExODQ2OGM4NWIwODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBt9pVMaOHTQZYXhxD9JHQ/gtip7 YvnGYo25vQI2Hwk7IFMG3bqvIR32xEhW6qLGqQKiGDLhpanPUcqrI183Zvj/RGw4 Dv6hIe/iRJf/8qF7gSYiHgiU/YtLwBNpH1FkaHTu2JQ2gWF34Tx+Ce7FrkRMhtxs 9U41tN/dz1Z4LZ4m8jJbUtRJ+D1jiIcu6F3l4hVujVTCPuM6kNOuM/ctzZcPK6xs fA2ruhKX81JX0L/GJJ6tlcWGocLvyzLd2kBqn6fB/zKC9XIVsl95XNSAkXA5iXJq 2T3n+PIt2/8qMOxdozIzdzTvMYD1n20YIx7t06T5yuf55CaYIWmtZl6VdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOJlXnnfONV5t0ba7oRhGjIWwgsMB8GA1UdIwQY MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt ZGQ3ZDQ3Y2Y1YzE4LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUtZGQ3ZDQ3Y2Y1YzE4 LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXmu33cq 7bCeLEg/Ihz4/qWRihYeR4Hm6mlgCkg60xJcAvCVQOIx4gDcIQSZJojPMtvYyjgt S+M5ZVSJP1aCQd5+7+XxO9cmO7o6NES8tO3PjWyxAC3fhaXetf/sINZz/tKpoxLI ThzyVtnyfHiKtyXWDIWOSPGvczpjCQr3ZWgu7eNM0Ye5HbGombgMEJpxGJUTsmbw bR+iCkXvZ4UHj4dZAaSOwV2iQNd/hGjz0h8Wgm3EmYdzA8dJc2wOF4ducJMh94Ov 6yFCsrn/w1fGI3ZIaaqurCnl7XNh+da4bzJpAJlIAajqtTPkQLjTkKpXJUKix7Tf tzGrUuwvstlFCQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:57 2025 by rpki-client