This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json) Hash identifier: J+1Dh2gAsNTxDNS7nra6xg8+YRgTfy4H9DKFfWYTFQ0= Subject key identifier: 87:3D:81:86:D4:D8:63:9C:B5:04:4C:26:44:5E:74:A1:7E:58:88:3D Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Certificate serial: 019AF49BEBA54EFF0C1F1C82E07A2AB449D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=) 2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: qhD81p8reeiTTGVom8Ei9uHJS6uBFVtEana6qimjmVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:eb:a5:4e:ff:0c:1f:1c:82:e0:7a:2a:b4:49:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=873d8186d4d8639cb5044c26445e74a17e58883d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:4a:1f:e9:16:d1:8c:3e:68:7d:3f:dd:8c: c1:92:78:65:38:76:03:b7:2c:47:79:98:9a:5b:75: 9d:e1:43:f2:36:ec:bd:2c:47:ac:02:31:1a:a8:fb: 9c:f1:3d:e5:6f:2e:fb:b1:d4:9e:af:ee:5b:c8:02: a6:24:87:4c:1f:0b:ae:b7:e4:07:60:4f:07:12:93: 55:0a:77:d1:e0:90:5e:fd:1e:f9:58:72:7a:fe:b2: 67:c8:6c:11:70:18:3e:3b:1c:68:0b:4b:7f:21:26: a1:6f:29:b6:af:77:53:8c:6a:87:ef:da:74:95:2a: 60:5e:b4:04:3c:a2:a6:0a:1b:f1:0d:58:e1:1d:86: 7e:6e:fe:d5:3d:08:94:fb:4d:58:a3:41:24:f4:02: 0a:7b:cd:fd:fe:12:e6:64:47:18:00:55:01:f4:41: 88:92:9c:4f:1d:6c:52:47:0a:a7:07:bd:2c:2b:52: e3:61:d9:64:6a:e1:97:8e:0d:9e:06:b9:44:ce:a7: 16:b0:97:9b:e9:97:b9:c2:f9:63:2b:4a:13:a4:89: 22:aa:df:cb:2a:92:a4:60:43:4f:c1:bc:f2:e6:5a: 73:35:d5:76:99:f8:00:0c:39:5a:1c:37:6b:8b:d6: 98:e2:d7:19:c1:79:31:7d:2f:b9:57:94:40:64:8a: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3D:81:86:D4:D8:63:9C:B5:04:4C:26:44:5E:74:A1:7E:58:88:3D X509v3 Authority Key Identifier: keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fd:cd:27:89:db:a0:97:00:e5:02:9a:f2:0e:9e:d5:9a:99: fe:3d:9a:c5:1e:cc:fc:99:7a:e7:68:13:dd:5b:fd:5e:7e:96: 8a:55:ec:63:19:fc:f7:3b:af:f1:c7:29:3c:54:29:0c:a3:42: 48:40:27:e9:e2:2d:b6:ca:b0:e2:70:a5:50:a3:94:fc:27:26: cb:ff:e8:6e:1b:ce:d6:17:03:0c:64:a2:63:79:39:72:77:1f: 25:08:3e:7e:e6:c0:fa:67:24:f1:20:8c:ca:7e:3a:f0:26:5d: 3d:4b:79:b5:9b:a3:58:98:21:6d:1d:e1:12:07:9b:0b:6a:cb: 2b:cc:7a:e5:11:9d:ae:99:16:d5:b3:71:13:34:21:9e:5d:6d: 56:55:56:3c:db:7b:e0:c1:06:8c:88:2a:21:45:2e:55:f0:c8: 25:64:91:6d:02:7f:c0:e2:bd:38:13:aa:ce:47:27:85:69:64: e1:b3:92:e2:c8:b1:1f:0c:84:e5:49:24:4a:f2:64:1d:9e:5b: 73:cb:2b:78:bf:11:09:71:4b:d1:e2:e9:8d:93:52:ae:1c:3f: 1d:b1:3a:5f:5c:db:5c:33:ae:36:5a:51:22:81:de:37:33:60: e7:88:81:53:9c:e1:2d:b0:04:75:7d:bc:3f:b3:03:dd:b7:d5: be:04:05:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+ulTv8MHxyC4HoqtEnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZmNThkMTlhZjEwYmRhNGZjYjBjZjMxZTU4ZGUwOTRi YmJiNDgwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD Eyg4NzNkODE4NmQ0ZDg2MzljYjUwNDRjMjY0NDVlNzRhMTdlNTg4ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo31KH+kW0Yw+aH0/3YzBknhlOHYD tyxHeZiaW3Wd4UPyNuy9LEesAjEaqPuc8T3lby77sdSer+5byAKmJIdMHwuut+QH YE8HEpNVCnfR4JBe/R75WHJ6/rJnyGwRcBg+OxxoC0t/ISahbym2r3dTjGqH79p0 lSpgXrQEPKKmChvxDVjhHYZ+bv7VPQiU+01Yo0Ek9AIKe839/hLmZEcYAFUB9EGI kpxPHWxSRwqnB70sK1LjYdlkauGXjg2eBrlEzqcWsJeb6Ze5wvljK0oTpIkiqt/L KpKkYENPwbzy5lpzNdV2mfgADDlaHDdri9aY4tcZwXkxfS+5V5RAZIoitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc9gYbU2GOctQRMJkRedKF+WIg9MB8GA1UdIwQY MBaAFMd/9Y0ZrxC9pPywzzHljeCUu7tIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUt MGE2ZjhiMWM2NTRkLzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUtMGE2ZjhiMWM2NTRk LzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv3NJ4nb oJcA5QKa8g6e1ZqZ/j2axR7M/Jl652gT3Vv9Xn6WilXsYxn89zuv8ccpPFQpDKNC SEAn6eIttsqw4nClUKOU/Ccmy//obhvO1hcDDGSiY3k5cncfJQg+fubA+mck8SCM yn468CZdPUt5tZujWJghbR3hEgebC2rLK8x65RGdrpkW1bNxEzQhnl1tVlVWPNt7 4MEGjIgqIUUuVfDIJWSRbQJ/wOK9OBOqzkcnhWlk4bOS4sixHwyE5UkkSvJkHZ5b c8sreL8RCXFL0eLpjZNSrhw/HbE6X1zbXDOuNlpRIoHeNzNg54iBU5zhLbAEdX28 P7MD3bfVvgQFjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:30 2025 by rpki-client