This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json) Hash identifier: 3wnRTv278+7V3hNgnpS9UonfzOZkd+Af/ix/rc1AWeA= Subject key identifier: 7F:68:7E:65:08:D7:43:B0:82:3F:D8:13:6B:D2:C3:EF:39:A7:C1:09 Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860 Certificate serial: 019B3721629E1EFC99173E59E5C30B67D194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft Manifest number: 1139 Signing time: Fri 19 Dec 2025 15:01:33 +0000 Manifest this update: Fri 19 Dec 2025 15:01:33 +0000 Manifest next update: Sat 20 Dec 2025 15:01:33 +0000 Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: dl6D6k4sFTcu6hLNRJlp8f6Nn+j8CgcB+doWd1BT3rw=) 2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:62:9e:1e:fc:99:17:3e:59:e5:c3:0b:67:d1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860 Validity Not Before: Dec 19 15:01:33 2025 GMT Not After : Dec 20 15:01:33 2025 GMT Subject: CN=7f687e6508d743b0823fd8136bd2c3ef39a7c109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:84:a9:e1:f6:e5:4f:99:fb:82:97:03:53: e1:04:5b:e9:e0:25:58:d3:a4:63:a2:ad:99:47:2c: b7:f7:d6:68:68:61:2d:a9:01:1e:58:87:c0:96:f2: 0a:ad:18:01:f5:de:f6:29:17:dd:00:86:4a:13:76: 0d:33:38:fe:69:85:95:9e:46:5c:f8:b0:a1:ed:cd: a0:bb:36:25:7c:b4:b8:a2:60:52:1a:67:f2:2d:3d: b4:e3:16:66:56:83:75:dd:fb:d0:49:7c:34:37:69: a5:65:9a:93:3b:da:48:78:bd:6d:b8:a0:a8:0e:76: 47:9b:44:2c:15:14:78:4e:fd:fe:5b:9c:2b:5d:e2: e9:72:70:8f:e5:a1:28:f0:f1:7a:46:e4:65:92:df: f7:33:c1:33:23:aa:a8:06:34:4c:7a:29:e5:fe:79: 09:8d:02:21:1a:5f:37:c8:fd:bd:1c:59:61:37:58: fc:ff:8e:0a:4f:33:d8:70:8f:91:5e:fd:16:9f:b4: 2c:f7:8d:8b:13:73:c8:49:2e:6c:bf:8f:1e:ad:99: cc:bc:56:f3:9a:43:d3:67:09:18:9b:72:c1:ac:f2: 20:8e:0d:36:cb:8d:1d:52:82:54:32:ec:6c:f8:4d: e7:14:ea:f4:36:cb:24:47:0f:8d:d3:47:86:58:fc: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:7E:65:08:D7:43:B0:82:3F:D8:13:6B:D2:C3:EF:39:A7:C1:09 X509v3 Authority Key Identifier: keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:61:f9:cb:bb:9e:05:6c:25:91:9b:1d:cd:52:6c:f0:85:eb: ca:3f:51:98:a9:2d:96:19:a6:52:64:9a:88:06:d6:5c:6f:77: 26:f1:0b:f6:af:32:30:76:58:17:32:36:98:c1:79:f6:3a:d9: ec:9e:81:d0:b2:fc:02:f2:4d:1f:45:38:c2:a7:90:fc:5d:bf: d0:f4:80:6d:76:c5:b9:82:d3:5f:5a:b0:cb:cf:c6:2b:5c:4b: 91:50:87:9c:5f:6d:96:df:26:3a:0d:28:8f:ce:c1:62:06:85: c6:ae:94:db:f3:47:8b:9f:0b:4a:6a:7f:06:29:db:d3:0c:da: c0:2c:c4:ba:ee:3d:d7:ab:fb:75:f0:a3:b6:fb:d3:8a:08:c7: 38:b2:2c:f6:90:41:0d:79:b2:d3:60:c1:41:08:e7:64:fa:50: 94:7b:2a:13:a4:53:b0:05:17:ad:52:bb:41:e5:51:e6:98:1d: f8:ed:e1:c8:e5:4a:b5:ec:17:4e:25:b7:17:ec:26:46:fb:1b: 84:e9:ef:a4:4e:0b:61:be:de:7c:1b:ef:ed:df:d4:7f:89:a7: 46:6b:8b:c4:7c:4f:7f:e0:21:41:ed:fd:bc:b7:75:3e:6e:38: 58:75:30:13:bd:c5:d9:25:e6:ce:5c:c6:49:36:d2:f3:7e:8f: fa:43:5e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWKeHvyZFz5Z5cMLZ9GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl NjE4NjAwHhcNMjUxMjE5MTUwMTMzWhcNMjUxMjIwMTUwMTMzWjAzMTEwLwYDVQQD Eyg3ZjY4N2U2NTA4ZDc0M2IwODIzZmQ4MTM2YmQyYzNlZjM5YTdjMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuWEqeH25U+Z+4KXA1PhBFvp4CVY 06Rjoq2ZRyy399ZoaGEtqQEeWIfAlvIKrRgB9d72KRfdAIZKE3YNMzj+aYWVnkZc +LCh7c2guzYlfLS4omBSGmfyLT204xZmVoN13fvQSXw0N2mlZZqTO9pIeL1tuKCo DnZHm0QsFRR4Tv3+W5wrXeLpcnCP5aEo8PF6RuRlkt/3M8EzI6qoBjRMeinl/nkJ jQIhGl83yP29HFlhN1j8/44KTzPYcI+RXv0Wn7Qs942LE3PISS5sv48erZnMvFbz mkPTZwkYm3LBrPIgjg02y40dUoJUMuxs+E3nFOr0NsskRw+N00eGWPzaKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9ofmUI10Owgj/YE2vSw+85p8EJMB8GA1UdIwQY MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2 LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2H5y7ue BWwlkZsdzVJs8IXryj9RmKktlhmmUmSaiAbWXG93JvEL9q8yMHZYFzI2mMF59jrZ 7J6B0LL8AvJNH0U4wqeQ/F2/0PSAbXbFuYLTX1qwy8/GK1xLkVCHnF9tlt8mOg0o j87BYgaFxq6U2/NHi58LSmp/Binb0wzawCzEuu4916v7dfCjtvvTigjHOLIs9pBB DXmy02DBQQjnZPpQlHsqE6RTsAUXrVK7QeVR5pgd+O3hyOVKtewXTiW3F+wmRvsb hOnvpE4LYb7efBvv7d/Uf4mnRmuLxHxPf+AhQe39vLd1Pm44WHUwE73F2SXmzlzG STbS836P+kNegw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:32 2025 by rpki-client