This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json) Hash identifier: l9RdNslEeXyS/dz/z1HEYgDJ7BE/nojBI5jX+BI7vUM= Subject key identifier: AC:70:CE:64:56:8D:71:1D:47:03:59:24:36:E3:AA:AD:36:16:3C:26 Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Certificate serial: 019AF12DD25DB201BD3537F380A789AD7BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft Manifest number: 0274 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: 6e04urlEkAVNuYSpltZsJszWTfr+OwFy1IhP6uE3dv4=) 2: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (hash: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d2:5d:b2:01:bd:35:37:f3:80:a7:89:ad:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=ac70ce64568d711d4703592436e3aaad36163c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bd:1d:cf:c6:1d:97:73:92:36:0c:d7:ef:82: b7:8a:b9:ba:7f:64:53:97:01:b9:23:d3:e3:7a:33: 31:c4:9c:d1:43:60:f5:4e:9e:c8:f9:56:6d:59:c2: 8e:bd:31:a2:3b:2b:6f:c3:cf:a8:66:b7:88:96:ab: fd:5a:9a:d9:0d:36:0b:97:5b:4c:22:07:c5:0b:a6: b9:7f:8e:a3:c2:8d:a7:1c:b1:08:47:77:ab:ac:2f: 14:b6:ff:15:1a:84:30:35:b3:e8:53:05:64:77:23: 6c:88:60:86:d8:d9:83:68:bb:c3:31:5a:fb:ae:75: c6:23:ea:aa:1e:14:4e:97:37:cb:ab:b4:64:31:0b: de:49:33:7a:b6:3a:34:a5:74:45:28:ee:c7:0f:cd: 95:0c:55:b7:53:65:ae:43:27:08:29:c1:da:86:c7: f8:55:f2:04:0f:66:0e:c0:c4:3d:81:44:2c:28:c7: ce:59:c1:de:da:41:40:8a:e8:af:af:82:04:3c:12: 10:77:ba:74:7d:82:d1:86:06:ae:c2:8f:2a:f8:3a: 8e:1d:2c:16:a1:b6:70:0a:82:5c:ca:df:42:46:59: 35:25:da:5b:a8:cc:a2:30:4a:cd:12:e4:73:aa:b7: 4f:e2:65:94:5f:fc:32:8f:0b:46:30:01:db:a7:19: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:CE:64:56:8D:71:1D:47:03:59:24:36:E3:AA:AD:36:16:3C:26 X509v3 Authority Key Identifier: keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:75:94:ca:25:0b:bd:ba:a8:4a:c2:a0:f0:b2:64:8e:e9:75: 1a:25:f0:98:e5:1c:c4:25:49:c4:c9:28:ed:b1:a0:d6:e2:21: 31:f5:52:ab:87:58:f8:27:9a:2d:f6:72:b6:63:c7:62:23:b7: 61:01:52:8f:19:88:a4:c9:ca:a1:24:80:a8:de:d2:fd:b1:36: 0f:d7:9a:28:e5:65:e3:73:6a:d1:93:7b:4c:bd:89:46:5b:75: 33:2b:32:7b:bd:a5:a0:d0:9d:1e:84:6f:ae:fd:00:f2:df:02: c0:80:60:f3:07:1a:ad:b5:32:b8:35:3a:fa:8d:18:45:00:79: 3a:44:38:96:9f:02:e1:ed:c5:07:a9:c5:cf:67:7b:98:e1:53: 95:ca:9d:d3:3a:37:42:ca:c8:d7:2c:05:70:80:1d:38:b3:ce: 62:47:dc:cd:40:ba:d6:d3:42:47:ab:e6:c8:48:a5:cb:ff:79: bf:5d:49:99:c8:7c:e8:6a:39:7f:b1:68:46:bc:9a:2f:88:60: 17:b7:31:5e:fb:e0:96:7a:86:8d:b7:f1:b7:c6:52:55:e0:3d: 83:d6:3b:43:30:e5:93:a5:5b:c4:25:2f:85:bc:ad:05:34:0f: 8c:82:b9:75:b3:6b:2b:54:67:9d:8a:57:29:74:cf:83:77:b1: ba:1f:be:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdJdsgG9NTfzgKeJrXv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTU4ZGNiMjkwZWM1YWU3ZjY2YzFmYTBmOGQ5NjMyMTFk ZWVhNTQwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhhYzcwY2U2NDU2OGQ3MTFkNDcwMzU5MjQzNmUzYWFhZDM2MTYzYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L0dz8Ydl3OSNgzX74K3irm6f2RT lwG5I9PjejMxxJzRQ2D1Tp7I+VZtWcKOvTGiOytvw8+oZreIlqv9WprZDTYLl1tM IgfFC6a5f46jwo2nHLEIR3errC8Utv8VGoQwNbPoUwVkdyNsiGCG2NmDaLvDMVr7 rnXGI+qqHhROlzfLq7RkMQveSTN6tjo0pXRFKO7HD82VDFW3U2WuQycIKcHahsf4 VfIED2YOwMQ9gUQsKMfOWcHe2kFAiuivr4IEPBIQd7p0fYLRhgauwo8q+DqOHSwW obZwCoJcyt9CRlk1JdpbqMyiMErNEuRzqrdP4mWUX/wyjwtGMAHbpxnXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxwzmRWjXEdRwNZJDbjqq02FjwmMB8GA1UdIwQY MBaAFN8VjcspDsWuf2bB+g+NljIR3upUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTct YzQxNDJkZjM1Y2MzLzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTctYzQxNDJkZjM1Y2Mz LzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHWUyiUL vbqoSsKg8LJkjul1GiXwmOUcxCVJxMko7bGg1uIhMfVSq4dY+CeaLfZytmPHYiO3 YQFSjxmIpMnKoSSAqN7S/bE2D9eaKOVl43Nq0ZN7TL2JRlt1Mysye72loNCdHoRv rv0A8t8CwIBg8wcarbUyuDU6+o0YRQB5OkQ4lp8C4e3FB6nFz2d7mOFTlcqd0zo3 QsrI1ywFcIAdOLPOYkfczUC61tNCR6vmyEily/95v11Jmch86Go5f7FoRryaL4hg F7cxXvvglnqGjbfxt8ZSVeA9g9Y7QzDlk6VbxCUvhbytBTQPjIK5dbNrK1RnnYpX KXTPg3exuh++tQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:49 2025 by rpki-client