This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json) Hash identifier: PJAsDYKXA8vZws6Y64pqaZ00mlkG+S/E7bK6ZD5lmDE= Subject key identifier: 5E:13:B0:3B:85:C7:C8:1A:DE:31:5F:57:86:CE:DC:BD:16:FE:17:57 Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Certificate serial: 019AF3F78BE8D3EB8AF2EFF2C16BF52ED8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:17 +0000 Manifest this update: Sat 06 Dec 2025 14:01:17 +0000 Manifest next update: Sun 07 Dec 2025 14:01:17 +0000 Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=) 2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=) 3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: 3DGu4smH1LiKY+8uYdzrR3848kW23+0r9s+AIyYfRmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8b:e8:d3:eb:8a:f2:ef:f2:c1:6b:f5:2e:d8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451 Validity Not Before: Dec 6 14:01:17 2025 GMT Not After : Dec 7 14:01:17 2025 GMT Subject: CN=5e13b03b85c7c81ade315f5786cedcbd16fe1757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:60:94:a1:de:76:8a:46:76:6b:38:8f:ff: 1b:b6:73:7e:a9:b8:d4:2b:b0:b4:37:e3:9b:f7:c1: 2c:82:03:24:95:ba:6c:60:05:37:aa:03:c4:b2:fe: 16:3e:ff:48:34:eb:26:88:00:c2:4d:99:f8:93:55: 7b:ad:42:20:e6:9b:71:fc:13:f4:1f:76:89:76:32: d3:0d:3b:94:d3:b0:fb:12:97:5b:c3:b8:65:c9:54: 63:5b:94:4c:f8:7d:d4:04:b8:50:9e:c7:04:93:d9: d3:25:51:08:6c:39:79:dc:4c:d2:3c:3f:f1:3e:df: 3b:c2:e5:05:77:80:14:a4:73:22:34:99:bb:1f:ed: 6d:76:3a:ed:26:27:6f:65:a9:08:84:86:8b:bb:8c: 84:1e:8e:19:2c:fe:c3:ae:8d:06:fc:99:2b:ff:e1: bb:b5:f5:bb:57:d0:78:dd:da:f0:b2:3c:9a:4c:bf: 1c:b7:69:8b:6c:be:9d:fc:37:e5:80:c3:1c:cd:37: 27:12:b4:aa:14:3b:52:c1:27:40:35:ac:e6:8e:df: c9:65:9d:55:0f:3c:c0:38:0f:55:55:dc:8c:6d:ba: 05:0f:9d:c3:45:43:05:78:96:af:24:34:7d:63:b1: 43:13:5f:b3:ab:2d:ec:95:67:86:f4:0f:92:22:00: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:13:B0:3B:85:C7:C8:1A:DE:31:5F:57:86:CE:DC:BD:16:FE:17:57 X509v3 Authority Key Identifier: keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:6c:ee:e2:5f:19:61:57:47:d7:50:63:48:27:87:cd:4a: 9c:a4:06:97:82:27:a2:4c:bc:27:48:51:6c:77:2c:75:f1:e5: 0e:cc:ee:b0:5a:02:f6:35:93:e7:53:5a:f2:e1:6a:93:af:d7: 40:52:4e:69:d8:69:79:e6:f9:4c:c0:1b:3a:bf:4a:44:cb:14: 51:17:50:12:bc:00:fb:10:a0:9b:42:60:9d:dc:51:80:3c:94: c0:04:8f:22:75:4d:1b:27:91:4a:f6:72:6f:dd:e9:a8:c5:f6: cb:5a:2b:3c:c6:a1:a8:f2:ec:9b:52:85:5a:8e:57:9b:f3:29: bc:1d:14:60:ff:bb:0f:16:45:21:bb:aa:f7:94:b9:89:d2:53: 96:09:fc:d6:80:e1:60:b8:14:dc:55:32:83:77:42:06:7f:cd: 6e:76:d6:55:1f:2f:44:20:90:40:af:e7:c1:2b:d9:7a:85:5a: 79:98:aa:eb:bf:da:a7:74:fb:51:79:17:7f:75:e6:6f:86:d9: 6e:76:20:7c:8a:f0:2a:6f:2a:c1:10:9a:65:86:1e:38:47:6f: 93:e7:fe:d1:50:2c:7e:11:71:16:96:d5:bf:a2:15:10:62:89: 3b:2d:53:23:70:d9:60:13:12:07:3d:a6:5f:f3:3b:97:c3:21: 3f:6e:ff:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94vo0+uK8u/ywWv1Ltj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWRkNWJhNzY2MmI3MzFkZDA4YmNmODczOGYxMzVkOTNh ZWQ0NTEwHhcNMjUxMjA2MTQwMTE3WhcNMjUxMjA3MTQwMTE3WjAzMTEwLwYDVQQD Eyg1ZTEzYjAzYjg1YzdjODFhZGUzMTVmNTc4NmNlZGNiZDE2ZmUxNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBpglKHedopGdms4j/8btnN+qbjU K7C0N+Ob98EsggMklbpsYAU3qgPEsv4WPv9INOsmiADCTZn4k1V7rUIg5ptx/BP0 H3aJdjLTDTuU07D7Epdbw7hlyVRjW5RM+H3UBLhQnscEk9nTJVEIbDl53EzSPD/x Pt87wuUFd4AUpHMiNJm7H+1tdjrtJidvZakIhIaLu4yEHo4ZLP7Dro0G/Jkr/+G7 tfW7V9B43drwsjyaTL8ct2mLbL6d/DflgMMczTcnErSqFDtSwSdANazmjt/JZZ1V DzzAOA9VVdyMbboFD53DRUMFeJavJDR9Y7FDE1+zqy3slWeG9A+SIgAfBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4TsDuFx8ga3jFfV4bO3L0W/hdXMB8GA1UdIwQY MBaAFMSt1bp2Yrcx3Qi8+HOPE12TrtRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUt ZGQ3ZDQ3Y2Y1YzE4LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zNDZhMjMtMTE4MS00YTgwLTlmNTUtZGQ3ZDQ3Y2Y1YzE4 LzEveEszVnVuWml0ekhkQ0x6NGM0OFRYWk91MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpZs7uJf GWFXR9dQY0gnh81KnKQGl4Inoky8J0hRbHcsdfHlDszusFoC9jWT51Na8uFqk6/X QFJOadhpeeb5TMAbOr9KRMsUURdQErwA+xCgm0JgndxRgDyUwASPInVNGyeRSvZy b93pqMX2y1orPMahqPLsm1KFWo5Xm/MpvB0UYP+7DxZFIbuq95S5idJTlgn81oDh YLgU3FUyg3dCBn/NbnbWVR8vRCCQQK/nwSvZeoVaeZiq67/ap3T7UXkXf3Xmb4bZ bnYgfIrwKm8qwRCaZYYeOEdvk+f+0VAsfhFxFpbVv6IVEGKJOy1TI3DZYBMSBz2m X/M7l8MhP27/ng== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:51 2025 by rpki-client