This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json) Hash identifier: xqeKG9LvKZj5JIfK8s1eN84SA2/vor+CTZHOggUsRBQ= Subject key identifier: 11:45:66:44:E9:FF:E2:B6:4C:FC:41:AE:20:72:6D:D4:A5:51:04:8D Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019AF2769AECAC29529C4CF8053DAFE934C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft Manifest number: 135B Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: ulPkAaBfHjplIUEmLSY+gossiFrvWx4saFjwZ9+F5Qk=) 2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9a:ec:ac:29:52:9c:4c:f8:05:3d:af:e9:34:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=11456644e9ffe2b64cfc41ae20726dd4a551048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:25:e2:3b:d4:21:c0:6f:bd:74:b1:51:9e: a8:80:89:9a:70:83:41:02:c9:0e:3d:eb:1a:df:b5: 44:2c:b5:2a:da:43:b6:ff:20:ba:ca:73:81:ff:bb: 1a:f4:3b:f3:f1:22:04:6f:d8:75:ec:45:2f:52:a4: 94:af:d6:07:49:b4:01:3b:21:39:88:13:4e:0b:d5: f0:78:f5:be:61:94:54:5b:e6:93:bf:25:c6:ad:2b: 45:53:88:7c:30:4a:56:b0:4d:b6:3f:1e:3a:a1:7f: ce:af:3f:55:d4:79:02:02:a1:c6:96:05:9f:af:81: e8:98:f6:ba:52:52:e8:9f:41:13:ba:ec:89:a5:9d: d4:03:08:83:34:59:ea:e6:bd:66:95:66:e2:25:b3: 01:0f:f5:3e:c5:9c:ef:96:b7:80:72:53:b2:5f:67: 5a:71:b5:2c:db:09:e7:94:c2:cc:34:df:82:86:5f: 06:4f:33:f3:26:5f:2f:ed:b6:b9:32:1d:b6:a6:99: 1c:e4:21:8b:af:b8:bf:d9:eb:82:23:55:fe:95:e7: 63:04:c4:2f:79:b1:23:23:df:77:05:48:0f:fd:ad: ea:01:1c:81:26:f6:8d:cd:ea:d2:d6:fc:74:f7:bd: 20:7d:5a:64:e1:ec:c9:90:9b:7b:47:01:d1:73:23: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:45:66:44:E9:FF:E2:B6:4C:FC:41:AE:20:72:6D:D4:A5:51:04:8D X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fe:07:45:b5:13:7e:34:9a:22:3d:47:33:df:3a:8c:9d:a9: 72:cf:80:3d:a5:44:b2:15:94:aa:b9:c1:f2:54:d0:a6:ed:af: 03:83:34:fe:1f:08:46:5c:76:c2:7f:96:6f:b1:8f:ac:14:b3: d7:78:1e:d0:7c:b5:23:ec:35:c5:05:cd:fd:5a:65:f2:2b:89: f2:a0:f8:81:93:17:dc:4c:45:60:d9:12:87:71:24:a9:cc:3f: b2:63:bf:3d:73:a3:9e:f7:dd:db:7c:ff:1c:86:0f:a9:29:4a: 7e:03:d1:37:d8:ff:6c:ca:51:a5:97:e9:23:f2:1b:d6:3c:d8: 78:3c:4c:5f:34:5b:36:a3:3b:60:e5:d2:8d:a6:ec:a8:06:70: ee:dd:f8:ce:2a:41:f2:69:26:2b:7b:57:8c:65:38:05:ff:33: ef:4f:52:fe:a5:0e:17:4e:90:40:b6:2e:81:e8:98:5c:8c:06: a5:8e:37:f7:2e:df:69:b5:74:99:f2:be:d6:bb:2e:e4:d6:6e: be:67:a8:dd:48:e3:3e:ec:8b:a0:af:47:3e:fa:22:a0:e2:5d: 32:2a:cd:ad:8b:1c:9a:86:1d:d0:06:63:9e:10:72:e3:05:7c: 0d:e2:48:41:c8:ec:b9:f3:b7:2f:73:a2:ce:d0:68:56:0c:7b: ff:cd:19:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydprsrClSnEz4BT2v6TTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygxMTQ1NjY0NGU5ZmZlMmI2NGNmYzQxYWUyMDcyNmRkNGE1NTEwNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Al4jvUIcBvvXSxUZ6ogImacINB AskOPesa37VELLUq2kO2/yC6ynOB/7sa9Dvz8SIEb9h17EUvUqSUr9YHSbQBOyE5 iBNOC9XwePW+YZRUW+aTvyXGrStFU4h8MEpWsE22Px46oX/Orz9V1HkCAqHGlgWf r4HomPa6UlLon0ETuuyJpZ3UAwiDNFnq5r1mlWbiJbMBD/U+xZzvlreAclOyX2da cbUs2wnnlMLMNN+Chl8GTzPzJl8v7ba5Mh22ppkc5CGLr7i/2euCI1X+ledjBMQv ebEjI993BUgP/a3qARyBJvaNzerS1vx0970gfVpk4ezJkJt7RwHRcyPwAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFFZkTp/+K2TPxBriBybdSlUQSNMB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJv4HRbUT fjSaIj1HM986jJ2pcs+APaVEshWUqrnB8lTQpu2vA4M0/h8IRlx2wn+Wb7GPrBSz 13ge0Hy1I+w1xQXN/Vpl8iuJ8qD4gZMX3ExFYNkSh3Ekqcw/smO/PXOjnvfd23z/ HIYPqSlKfgPRN9j/bMpRpZfpI/Ib1jzYeDxMXzRbNqM7YOXSjabsqAZw7t34zipB 8mkmK3tXjGU4Bf8z709S/qUOF06QQLYugeiYXIwGpY439y7fabV0mfK+1rsu5NZu vmeo3UjjPuyLoK9HPvoioOJdMirNrYscmoYd0AZjnhBy4wV8DeJIQcjsufO3L3Oi ztBoVgx7/80ZmA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:22 2025 by rpki-client