This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json) Hash identifier: 8Y+96WjcfS9jV0Zd99jjoq7S2VxwN4jx3zGp6cerJXk= Subject key identifier: 3F:F5:75:6A:04:F9:B7:F7:59:C3:69:47:3F:57:E4:69:44:1A:7F:B2 Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Certificate serial: 019AF19BAB3BBF2F20CDEF552708A66983FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft Manifest number: 0799 Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: XqUKxKIDwf7cQktvzlp86MWsb+nT9PJF+uKsTGyjzxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ab:3b:bf:2f:20:cd:ef:55:27:08:a6:69:83:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4 Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=3ff5756a04f9b7f759c369473f57e469441a7fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:c8:36:85:f7:70:23:9b:39:65:7d:37:73: 6c:f9:33:07:1b:af:f1:63:91:d6:0d:eb:a1:3e:28: e4:87:b9:85:a3:cd:45:a2:b3:c4:e5:1c:84:64:f0: 17:c2:8d:5e:9e:12:19:13:22:f2:9d:7a:29:ba:fb: 99:71:07:6f:33:4a:22:52:f2:52:05:68:86:93:28: da:fb:8b:bd:2c:b6:5f:5a:8e:66:25:a6:98:e8:ad: 47:63:17:a7:4c:5f:7f:50:44:bd:c2:02:ef:63:a7: f8:18:d5:2f:f9:18:aa:14:f2:3a:f2:17:65:e6:7d: e8:85:98:84:d9:ce:58:14:c0:f4:a8:21:62:a5:be: b1:48:20:80:54:74:37:1c:f4:e0:fc:2b:62:ff:c4: e8:38:d9:be:e7:ca:1e:65:2b:a4:c6:6b:ea:c5:42: e3:86:57:37:92:4a:e7:bf:1f:32:2a:1c:d3:e2:34: 8a:b2:8e:8a:7a:0c:81:cd:b8:9c:f8:c8:2c:8b:a0: 99:db:1a:f2:3d:81:86:90:5d:15:b5:5a:06:04:07: 5d:34:ce:bf:86:17:a2:60:fa:ae:6f:0a:35:2d:07: e3:1e:ab:2c:1c:48:31:4b:eb:7d:80:25:16:b7:13: 53:d3:6a:e4:4d:aa:e7:f8:16:68:9b:5e:c8:8d:34: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:75:6A:04:F9:B7:F7:59:C3:69:47:3F:57:E4:69:44:1A:7F:B2 X509v3 Authority Key Identifier: keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4b:ad:49:96:4e:34:fa:d3:ad:0e:7c:a9:a2:4f:ce:d1:9b: 20:f5:c9:ec:54:32:c7:ed:79:ed:f8:94:b4:c6:52:d8:70:58: 07:2a:62:43:2e:5b:fa:6d:19:d8:78:4e:6f:af:b1:e1:8c:67: 71:46:44:53:bf:93:4e:00:5c:a8:cc:f0:d0:10:53:73:58:3d: bf:4a:05:83:f9:17:b6:16:69:3c:f4:45:df:1e:eb:52:c7:50: 3a:ca:3d:ef:e6:c9:af:d1:26:8c:5e:94:eb:71:8a:ea:81:e6: 65:6a:da:ff:c6:92:38:48:b3:0a:09:9e:02:e3:b1:f3:fc:f3: fa:34:45:85:ba:8c:3a:09:cb:dd:e2:29:cd:a3:62:82:49:fd: 60:66:40:8d:2d:01:97:1f:2d:7f:88:21:a4:05:81:a8:06:b0: 1a:8a:42:29:42:34:f0:cd:05:5a:32:ab:3a:55:34:b6:9b:54: c6:aa:6e:71:bc:82:ab:47:df:85:46:73:0f:01:10:9c:2c:59: 9b:5c:00:4b:44:94:d7:ba:3c:ab:fa:25:fe:70:54:63:1d:38: b5:fa:93:89:8a:48:2a:3d:04:28:7a:fd:91:3a:94:33:2f:cc: 79:7a:2a:3b:70:83:7c:92:7d:e1:e5:ff:e1:6c:dc:0b:1e:9f: 30:7d:e0:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6s7vy8gze9VJwimaYP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl N2I2YzQwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygzZmY1NzU2YTA0ZjliN2Y3NTljMzY5NDczZjU3ZTQ2OTQ0MWE3ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscXINoX3cCObOWV9N3Ns+TMHG6/x Y5HWDeuhPijkh7mFo81ForPE5RyEZPAXwo1enhIZEyLynXopuvuZcQdvM0oiUvJS BWiGkyja+4u9LLZfWo5mJaaY6K1HYxenTF9/UES9wgLvY6f4GNUv+RiqFPI68hdl 5n3ohZiE2c5YFMD0qCFipb6xSCCAVHQ3HPTg/Cti/8ToONm+58oeZSukxmvqxULj hlc3kkrnvx8yKhzT4jSKso6KegyBzbic+Mgsi6CZ2xryPYGGkF0VtVoGBAddNM6/ hheiYPqubwo1LQfjHqssHEgxS+t9gCUWtxNT02rkTarn+BZom17IjTSXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/1dWoE+bf3WcNpRz9X5GlEGn+yMB8GA1UdIwQY MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3 LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUutSZZO NPrTrQ58qaJPztGbIPXJ7FQyx+157fiUtMZS2HBYBypiQy5b+m0Z2HhOb6+x4Yxn cUZEU7+TTgBcqMzw0BBTc1g9v0oFg/kXthZpPPRF3x7rUsdQOso97+bJr9EmjF6U 63GK6oHmZWra/8aSOEizCgmeAuOx8/zz+jRFhbqMOgnL3eIpzaNigkn9YGZAjS0B lx8tf4ghpAWBqAawGopCKUI08M0FWjKrOlU0tptUxqpucbyCq0ffhUZzDwEQnCxZ m1wAS0SU17o8q/ol/nBUYx04tfqTiYpIKj0EKHr9kTqUMy/MeXoqO3CDfJJ94eX/ 4WzcCx6fMH3gtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:37 2025 by rpki-client