This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json) Hash identifier: 5vgQoPuqEjUscRb0auj4eCTs2ojb/Wnrr/7ch0JYGig= Subject key identifier: F1:07:AC:40:99:C9:38:7F:05:05:83:46:31:22:01:64:B7:BD:0D:BF Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Certificate serial: 019B2552132B988DAF37401F0F808525EF1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 04:01:34 +0000 Manifest this update: Tue 16 Dec 2025 04:01:34 +0000 Manifest next update: Wed 17 Dec 2025 04:01:34 +0000 Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=) 2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: yApu64USkP3mhH+OU4oTL8qRhyCmGCdeGgkeHWNS0Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:13:2b:98:8d:af:37:40:1f:0f:80:85:25:ef:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Validity Not Before: Dec 16 04:01:34 2025 GMT Not After : Dec 17 04:01:34 2025 GMT Subject: CN=f107ac4099c9387f0505834631220164b7bd0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:95:56:a0:8f:96:41:11:82:8b:64:11:59: 02:ff:56:af:08:ea:0f:fb:bd:b2:26:b4:2a:ba:04: cd:b9:16:2d:de:0f:9b:fd:ff:da:99:d9:44:a2:89: 5f:7c:a6:ef:84:9b:b9:37:23:93:81:e0:9d:d6:bc: f3:8b:b4:27:75:d6:84:11:4a:94:30:79:25:09:4f: 5b:cd:2d:f3:23:d7:88:df:50:7b:75:55:aa:a1:7b: 7c:87:a3:3a:2b:e3:db:54:fd:c4:78:5b:d5:75:42: 56:72:5d:b9:f6:40:72:86:12:fe:9a:70:2e:e7:34: 83:f4:a8:ae:98:45:2f:d3:c4:35:92:a0:4a:d6:3f: 28:78:b5:13:43:01:99:00:4f:90:b1:c1:5d:2c:97: b8:87:0c:83:e5:9f:43:32:97:71:19:30:45:1b:fe: 3b:af:2e:0c:60:aa:43:fd:b7:49:1c:c0:20:9a:60: cb:bd:f6:22:2a:31:97:db:f1:32:99:38:f3:80:8c: a4:14:b4:2d:fd:b1:43:93:e5:75:f5:d7:ea:8d:19: 76:2c:c3:2c:63:0f:9c:ca:0a:04:82:5e:15:d8:61: 0b:e6:67:98:a2:bb:b4:e5:eb:17:81:42:4b:31:41: dd:6f:ca:f5:f4:ce:a4:b2:cf:5e:0c:3d:b9:16:8d: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:07:AC:40:99:C9:38:7F:05:05:83:46:31:22:01:64:B7:BD:0D:BF X509v3 Authority Key Identifier: keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8e:11:86:bd:51:af:79:4a:e0:c2:e3:b6:22:f0:87:6e:05: 45:5d:54:ee:15:84:7a:00:7b:91:ad:d0:e6:cf:c3:11:e3:fc: 87:1c:49:5d:21:c7:5d:98:b6:2a:cc:c2:e8:2a:40:c5:39:ea: 0e:c7:80:c8:93:eb:a2:23:70:73:03:73:d2:78:4a:f4:78:eb: e8:c7:e1:7d:e0:8f:6f:da:73:1c:b4:c5:ef:ef:60:65:20:3e: 4a:7c:0c:0a:5b:0c:ac:35:50:42:76:8e:71:a9:90:04:99:93: 44:ea:b3:be:6e:52:f2:eb:45:dd:e4:9f:d1:f1:1d:c8:bc:37: ff:88:32:38:86:5f:77:b7:a2:20:a0:4d:fc:dd:fc:e0:03:eb: a8:f5:b7:3c:1c:a2:86:52:2b:79:80:cd:db:ec:5e:5b:40:ef: 3f:b3:23:5c:ae:ee:37:ff:8f:a3:61:0a:49:7e:8c:ff:ec:b2: d5:e4:3b:3b:90:29:b5:6f:f4:d9:a3:6e:0e:9d:81:e1:90:03: 4f:32:e0:8d:cb:b6:c7:47:31:2f:42:2a:8d:16:2f:23:a5:52: be:5f:fe:8d:06:2d:e7:42:26:e1:b7:99:62:6f:5b:d4:c3:7c: 82:d3:c0:25:42:2a:2b:e8:ad:88:91:78:c4:5e:32:f9:6f:68: d4:86:bf:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUhMrmI2vN0AfD4CFJe8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi YzZjYzMwHhcNMjUxMjE2MDQwMTM0WhcNMjUxMjE3MDQwMTM0WjAzMTEwLwYDVQQD EyhmMTA3YWM0MDk5YzkzODdmMDUwNTgzNDYzMTIyMDE2NGI3YmQwZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrmVVqCPlkERgotkEVkC/1avCOoP +72yJrQqugTNuRYt3g+b/f/amdlEoolffKbvhJu5NyOTgeCd1rzzi7QnddaEEUqU MHklCU9bzS3zI9eI31B7dVWqoXt8h6M6K+PbVP3EeFvVdUJWcl259kByhhL+mnAu 5zSD9KiumEUv08Q1kqBK1j8oeLUTQwGZAE+QscFdLJe4hwyD5Z9DMpdxGTBFG/47 ry4MYKpD/bdJHMAgmmDLvfYiKjGX2/EymTjzgIykFLQt/bFDk+V19dfqjRl2LMMs Yw+cygoEgl4V2GEL5meYoru05esXgUJLMUHdb8r19M6kss9eDD25Fo3KsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEHrECZyTh/BQWDRjEiAWS3vQ2/MB8GA1UdIwQY MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ44Rhr1R r3lK4MLjtiLwh24FRV1U7hWEegB7ka3Q5s/DEeP8hxxJXSHHXZi2KszC6CpAxTnq DseAyJProiNwcwNz0nhK9Hjr6MfhfeCPb9pzHLTF7+9gZSA+SnwMClsMrDVQQnaO camQBJmTROqzvm5S8utF3eSf0fEdyLw3/4gyOIZfd7eiIKBN/N384APrqPW3PByi hlIreYDN2+xeW0DvP7MjXK7uN/+Po2EKSX6M/+yy1eQ7O5AptW/02aNuDp2B4ZAD TzLgjcu2x0cxL0IqjRYvI6VSvl/+jQYt50Im4beZYm9b1MN8gtPAJUIqK+itiJF4 xF4y+W9o1Ia/SQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:15 2025 by rpki-client