This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json) Hash identifier: bVw+Zj6m1pWx+fJ4bUOL6Fj0u49QihT26+G7y615Fmg= Subject key identifier: 10:0B:BB:6C:A3:99:CB:8F:48:FE:0C:DB:5B:DF:B9:74:9C:55:3C:73 Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Certificate serial: 019AF12DB10CC5F9D34EDC047F331B58919F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:34 +0000 Manifest this update: Sat 06 Dec 2025 01:01:34 +0000 Manifest next update: Sun 07 Dec 2025 01:01:34 +0000 Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=) 2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: hljk8MziAdoGKaNC+qRjOd6+LuUnuzQObUuUrUiAaZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b1:0c:c5:f9:d3:4e:dc:04:7f:33:1b:58:91:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Validity Not Before: Dec 6 01:01:34 2025 GMT Not After : Dec 7 01:01:34 2025 GMT Subject: CN=100bbb6ca399cb8f48fe0cdb5bdfb9749c553c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:b4:07:84:9d:be:7c:8f:12:cc:af:61:3c: 5b:d9:9f:1f:e4:5f:05:31:9f:66:46:c0:21:01:2c: 8a:9a:55:58:ff:d3:45:7a:20:6c:da:55:48:ff:cf: d8:79:2d:c9:e9:24:b1:45:01:6a:7d:c5:1b:ca:12: cc:22:be:69:b2:a3:39:93:9e:e3:0f:81:41:6e:9c: c9:3d:92:e6:16:a2:ab:7c:33:4c:f8:c2:cc:06:87: de:bf:13:04:5a:d7:4f:4e:b7:4c:68:17:73:a6:55: 06:d3:47:d3:25:bd:ee:a9:60:a4:ec:7a:34:5c:49: 04:91:5b:6d:4f:8b:0b:6f:dc:81:c1:2d:2b:b9:2a: 4d:d3:e5:20:d6:89:03:5d:d2:e4:bc:11:66:8c:16: 2e:32:46:ac:08:fc:ed:ec:2c:e4:f6:5f:88:81:4e: ea:76:55:68:89:22:b9:53:4f:e4:c4:2c:2f:8c:64: 3a:a2:cf:35:21:4a:49:10:a1:bf:5a:e4:f4:0c:f9: 09:37:ab:42:76:df:f8:4f:46:b4:23:56:e8:8c:1d: ae:a0:5c:56:73:e0:d5:77:8c:57:b8:33:27:4d:cf: 68:1c:ef:9e:c3:07:07:59:95:5d:2f:68:fc:f7:b8: e6:96:ff:2e:c3:67:3b:fa:55:27:46:25:f0:4c:9a: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:BB:6C:A3:99:CB:8F:48:FE:0C:DB:5B:DF:B9:74:9C:55:3C:73 X509v3 Authority Key Identifier: keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:75:54:ae:3d:26:7d:a0:de:d1:5d:4f:12:07:4a:cd:7b:6a: 72:9d:2f:4e:43:e8:c6:7e:a9:37:00:e4:30:92:6d:79:b0:98: 52:3e:92:56:6a:8e:81:3a:00:39:93:3c:16:ab:ea:d6:08:fa: 31:e5:91:47:81:10:a9:33:fa:aa:34:95:fa:8d:99:09:1f:bc: ee:e2:f4:0f:fe:55:0c:19:2e:62:31:0c:7c:9a:e0:bb:7c:af: 82:29:f0:2a:28:79:44:1a:4e:4c:79:15:9e:a8:cc:e7:a7:b3: eb:bd:b8:4c:99:d9:c5:86:e4:48:6e:4e:ea:f8:59:85:06:e6: 80:9f:9c:22:4a:8c:36:50:dc:98:11:2d:d9:be:91:f3:3c:82: 4d:01:2e:f3:30:ab:26:81:b7:63:f5:49:19:5a:48:2c:d9:fc: 88:0c:d2:21:7a:7e:b4:24:3c:67:e0:00:b5:c3:54:bb:c3:d0: d1:4a:6e:5a:c7:88:bf:97:97:7c:ae:35:08:22:73:5d:c1:0d: 24:f7:07:09:19:18:67:60:df:23:94:00:94:39:04:ba:48:b2: 10:6a:88:57:e1:25:6a:67:9b:0c:8a:5e:11:1d:85:06:91:8f: 5f:e0:cc:0b:5c:e8:07:4b:42:8e:48:d1:16:fb:6d:66:c9:3e: 29:95:88:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbEMxfnTTtwEfzMbWJGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi YzZjYzMwHhcNMjUxMjA2MDEwMTM0WhcNMjUxMjA3MDEwMTM0WjAzMTEwLwYDVQQD EygxMDBiYmI2Y2EzOTljYjhmNDhmZTBjZGI1YmRmYjk3NDljNTUzYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiu0B4SdvnyPEsyvYTxb2Z8f5F8F MZ9mRsAhASyKmlVY/9NFeiBs2lVI/8/YeS3J6SSxRQFqfcUbyhLMIr5psqM5k57j D4FBbpzJPZLmFqKrfDNM+MLMBofevxMEWtdPTrdMaBdzplUG00fTJb3uqWCk7Ho0 XEkEkVttT4sLb9yBwS0ruSpN0+Ug1okDXdLkvBFmjBYuMkasCPzt7Czk9l+IgU7q dlVoiSK5U0/kxCwvjGQ6os81IUpJEKG/WuT0DPkJN6tCdt/4T0a0I1bojB2uoFxW c+DVd4xXuDMnTc9oHO+ewwcHWZVdL2j897jmlv8uw2c7+lUnRiXwTJqhQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBALu2yjmcuPSP4M21vfuXScVTxzMB8GA1UdIwQY MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXVUrj0m faDe0V1PEgdKzXtqcp0vTkPoxn6pNwDkMJJtebCYUj6SVmqOgToAOZM8Fqvq1gj6 MeWRR4EQqTP6qjSV+o2ZCR+87uL0D/5VDBkuYjEMfJrgu3yvginwKih5RBpOTHkV nqjM56ez6724TJnZxYbkSG5O6vhZhQbmgJ+cIkqMNlDcmBEt2b6R8zyCTQEu8zCr JoG3Y/VJGVpILNn8iAzSIXp+tCQ8Z+AAtcNUu8PQ0UpuWseIv5eXfK41CCJzXcEN JPcHCRkYZ2DfI5QAlDkEukiyEGqIV+ElamebDIpeER2FBpGPX+DMC1zoB0tCjkjR FvttZsk+KZWI7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:22 2025 by rpki-client