This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json) Hash identifier: XUNce/ShaIPQx687BIdoTfjQYgh16CSB55VR2yEOVOw= Subject key identifier: F7:39:88:55:0A:D3:8B:D2:58:AE:9E:E4:A5:AA:D1:25:64:E0:B6:54 Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Certificate serial: 019AF19B2593A3175D43B269BC5316C0C7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft Manifest number: 0790 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=) 2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: qohupT0nUA/XAyp0NamHDYto0Oli+xsUvrGf4ljght0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:93:a3:17:5d:43:b2:69:bc:53:16:c0:c7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=f73988550ad38bd258ae9ee4a5aad12564e0b654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:bf:21:66:fd:5d:e9:b6:70:d0:53:9c:eb: 6e:02:c9:5b:5e:29:7d:88:fb:66:2d:8e:99:6a:9f: 25:66:05:91:13:22:54:02:d2:d0:89:4c:3a:67:d8: 19:24:8c:23:de:02:e3:d7:5b:8c:90:a8:80:59:ee: b9:c1:d8:55:c3:c3:e8:25:16:69:89:f9:cc:29:22: e2:c4:dd:bf:c0:e9:d1:df:af:e1:e4:e2:eb:78:a2: 11:96:2f:cb:62:d2:4b:e9:9a:c0:83:ef:d1:c8:c0: 91:e6:93:f0:2e:ae:0d:5a:05:9d:20:6c:ab:d6:8d: 9a:ba:bd:56:2b:e7:d4:46:61:bf:2f:ee:a7:ec:75: 0a:54:cd:05:e2:55:67:91:3e:bd:b5:ff:5e:d5:c2: 96:0c:22:2e:ff:f7:25:22:11:5e:61:d3:af:93:a7: 93:7a:fb:0a:e6:9a:53:5c:b9:67:90:83:34:12:eb: 22:15:02:db:ff:0d:41:25:57:19:59:bd:38:25:6c: f6:43:85:e2:9f:3b:ce:e8:21:eb:8b:a5:e0:34:37: fe:90:cf:b1:1c:b7:24:a5:8a:71:c7:e0:b0:bd:04: f7:72:65:0a:c3:cc:69:1a:74:6d:05:48:49:df:b4: 16:b9:11:0f:51:65:d2:6a:fe:6b:d4:ff:17:8b:cd: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:39:88:55:0A:D3:8B:D2:58:AE:9E:E4:A5:AA:D1:25:64:E0:B6:54 X509v3 Authority Key Identifier: keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:50:d6:b4:09:13:92:2f:9e:48:4f:bb:f1:7e:96:e5:5a:f2: d5:ac:8e:70:fb:57:8a:0a:7a:09:71:2f:3c:92:1c:07:97:67: 70:2e:a4:21:b5:ab:a9:53:d1:43:27:26:83:56:a4:73:74:39: e9:27:53:75:c5:eb:39:ae:4b:40:93:dc:ac:5e:b9:8b:a6:53: d4:3c:fc:cc:3c:4c:6c:50:6a:1e:fe:12:3b:a6:97:42:95:cc: f5:1b:03:b0:3c:80:5b:e8:8e:67:9a:74:97:70:1f:d9:90:c5: 93:03:7e:2b:a6:89:f6:bc:f5:2f:46:08:28:ff:f0:a0:db:c5: dc:b4:70:c5:74:cb:2d:de:6c:13:7c:73:45:e2:2f:da:39:e4: 4b:b2:62:b9:6a:b5:7b:5f:65:0a:15:45:e3:30:cc:f2:40:9a: 99:9d:4a:50:50:93:ef:76:18:ed:08:54:6a:71:a3:fc:37:cd: 56:d1:14:aa:1e:d2:c9:dc:41:9d:06:ea:cb:f3:f5:c2:b8:e0: 48:1b:9b:a7:44:de:67:92:86:92:81:47:5a:70:34:0a:e8:f2: 56:52:79:6f:39:7a:ad:c9:04:25:1e:34:49:cf:9c:b4:ea:87: 62:21:99:fc:46:6a:7a:93:24:b7:ec:25:31:d0:a3:5a:25:d0: 63:e2:f1:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyWToxddQ7JpvFMWwMffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz MGM5OTMwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhmNzM5ODg1NTBhZDM4YmQyNThhZTllZTRhNWFhZDEyNTY0ZTBiNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrW/IWb9Xem2cNBTnOtuAslbXil9 iPtmLY6Zap8lZgWREyJUAtLQiUw6Z9gZJIwj3gLj11uMkKiAWe65wdhVw8PoJRZp ifnMKSLixN2/wOnR36/h5OLreKIRli/LYtJL6ZrAg+/RyMCR5pPwLq4NWgWdIGyr 1o2aur1WK+fURmG/L+6n7HUKVM0F4lVnkT69tf9e1cKWDCIu//clIhFeYdOvk6eT evsK5ppTXLlnkIM0EusiFQLb/w1BJVcZWb04JWz2Q4XinzvO6CHri6XgNDf+kM+x HLckpYpxx+CwvQT3cmUKw8xpGnRtBUhJ37QWuREPUWXSav5r1P8Xi810twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc5iFUK04vSWK6e5KWq0SVk4LZUMB8GA1UdIwQY MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVDWtAkT ki+eSE+78X6W5Vry1ayOcPtXigp6CXEvPJIcB5dncC6kIbWrqVPRQycmg1akc3Q5 6SdTdcXrOa5LQJPcrF65i6ZT1Dz8zDxMbFBqHv4SO6aXQpXM9RsDsDyAW+iOZ5p0 l3Af2ZDFkwN+K6aJ9rz1L0YIKP/woNvF3LRwxXTLLd5sE3xzReIv2jnkS7JiuWq1 e19lChVF4zDM8kCamZ1KUFCT73YY7QhUanGj/DfNVtEUqh7SydxBnQbqy/P1wrjg SBubp0TeZ5KGkoFHWnA0CujyVlJ5bzl6rckEJR40Sc+ctOqHYiGZ/EZqepMkt+wl MdCjWiXQY+LxvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:53 2025 by rpki-client