This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json) Hash identifier: nX9p5hixZeTpnmstArZVV/MkNjjZH8DgElmuZ4Iu4gg= Subject key identifier: 15:05:3C:F7:95:7C:2D:B1:BC:AF:34:B4:B5:03:C0:04:81:2E:39:8A Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860 Certificate serial: 019AF19B225F7878249F0224B4B0D796B8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft Manifest number: 1115 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: 6pwRXd4VmZrWG2JonKNScSz2ZhMDDy6k4hRW924p7UY=) 2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:5f:78:78:24:9f:02:24:b4:b0:d7:96:b8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=15053cf7957c2db1bcaf34b4b503c004812e398a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:47:b6:a5:95:96:94:93:15:c7:95:63:7e: 3b:bb:90:50:80:35:a6:99:d5:10:07:1a:14:bc:94: 66:06:53:21:5a:73:f6:bb:68:a1:00:91:71:75:2c: df:90:20:e9:90:98:f3:3b:04:9c:26:03:c0:16:3c: 38:4a:09:0e:95:9b:f5:ce:fe:59:d8:93:c5:25:a7: fd:ca:07:d7:f3:ff:fd:72:68:3a:12:ab:d3:0b:44: 12:c6:eb:82:6b:6b:9a:16:8d:5e:0d:a7:68:59:49: 79:3c:1f:2e:5f:9d:6f:36:9c:75:7b:c4:2e:fb:90: c8:4a:32:57:18:26:7f:35:92:d5:4b:61:2a:2a:6d: eb:9b:5f:be:8e:46:d6:00:2a:38:97:8a:6f:42:68: 5d:0d:60:a9:51:c0:46:cc:84:0a:a0:d0:68:87:1a: c7:d5:cb:c9:1b:e2:5a:b3:dd:56:42:ad:f9:a8:91: 6e:f9:ba:f1:af:2b:3d:a6:71:ae:57:50:38:1e:8e: 93:eb:19:57:f3:d9:45:90:b0:8b:93:f0:36:77:b0: 0f:29:8d:a1:8e:91:01:c5:73:59:39:c5:d9:2c:b0: 43:3f:83:55:74:fc:85:a7:39:36:7c:c5:e9:98:27: b8:9c:b0:33:c7:0b:69:17:32:fd:23:e0:21:71:bc: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:3C:F7:95:7C:2D:B1:BC:AF:34:B4:B5:03:C0:04:81:2E:39:8A X509v3 Authority Key Identifier: keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:98:08:8e:f6:08:d2:23:70:07:14:98:3f:a2:a7:6b:c6:77: 57:4c:6a:07:26:25:84:10:00:9f:52:25:23:dd:d7:49:f4:74: 43:04:b3:78:0f:c6:20:c5:6d:f2:5b:f1:f3:60:99:63:dd:39: 72:ca:1b:ea:3d:6d:75:04:ac:eb:07:97:68:33:2b:c3:73:e8: 24:5c:bb:11:aa:0d:53:f5:01:43:74:72:0b:fd:cc:72:08:91: 3a:87:9b:e8:55:3b:2c:37:39:7a:a3:a4:21:9b:05:50:74:37: 30:45:bd:3b:32:02:39:b4:3a:db:5d:8b:68:fd:79:4e:4d:8c: d9:79:89:ee:63:c8:9c:22:cc:8c:fb:dd:a8:3f:33:b3:cf:7a: b8:20:22:7d:73:a1:28:0d:0d:a0:4f:f9:d1:93:13:4f:64:c1: d3:97:d0:af:5d:89:85:03:cd:22:b2:9b:df:7a:a6:e8:dc:91: da:6b:30:24:93:74:84:11:b5:39:65:2c:79:00:c5:91:35:44: da:d8:72:e3:49:9d:83:ce:2d:37:f8:c5:3e:5d:8c:0c:60:24: 88:be:cd:a0:ba:39:4b:cb:ee:58:ae:fe:da:41:51:5f:53:81: 47:01:c3:43:da:f5:02:6a:33:3a:28:fe:01:fb:a9:cf:2e:80: b7:68:dc:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyJfeHgknwIktLDXlrizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl NjE4NjAwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygxNTA1M2NmNzk1N2MyZGIxYmNhZjM0YjRiNTAzYzAwNDgxMmUzOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLlHtqWVlpSTFceVY347u5BQgDWm mdUQBxoUvJRmBlMhWnP2u2ihAJFxdSzfkCDpkJjzOwScJgPAFjw4SgkOlZv1zv5Z 2JPFJaf9ygfX8//9cmg6EqvTC0QSxuuCa2uaFo1eDadoWUl5PB8uX51vNpx1e8Qu +5DISjJXGCZ/NZLVS2EqKm3rm1++jkbWACo4l4pvQmhdDWCpUcBGzIQKoNBohxrH 1cvJG+Jas91WQq35qJFu+brxrys9pnGuV1A4Ho6T6xlX89lFkLCLk/A2d7APKY2h jpEBxXNZOcXZLLBDP4NVdPyFpzk2fMXpmCe4nLAzxwtpFzL9I+AhcbwtRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUFPPeVfC2xvK80tLUDwASBLjmKMB8GA1UdIwQY MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2 LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJgIjvYI 0iNwBxSYP6Kna8Z3V0xqByYlhBAAn1IlI93XSfR0QwSzeA/GIMVt8lvx82CZY905 csob6j1tdQSs6weXaDMrw3PoJFy7EaoNU/UBQ3RyC/3McgiROoeb6FU7LDc5eqOk IZsFUHQ3MEW9OzICObQ6212LaP15Tk2M2XmJ7mPInCLMjPvdqD8zs896uCAifXOh KA0NoE/50ZMTT2TB05fQr12JhQPNIrKb33qm6NyR2mswJJN0hBG1OWUseQDFkTVE 2thy40mdg84tN/jFPl2MDGAkiL7NoLo5S8vuWK7+2kFRX1OBRwHDQ9r1AmozOij+ Afupzy6At2jcsg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:13 2025 by rpki-client