This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json) Hash identifier: FZbwKdJ3/yO7xX/nAA9mIJgaSq6paB7SIXysNkm0LRk= Subject key identifier: BB:6C:07:49:F0:29:F9:5B:EC:03:DC:E6:A2:A5:53:15:BA:61:05:19 Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b Certificate serial: 019AF352D259DC3ED1E4B9F192CF01BD2E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:01:22 +0000 Manifest this update: Sat 06 Dec 2025 11:01:22 +0000 Manifest next update: Sun 07 Dec 2025 11:01:22 +0000 Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=) 2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: ho/8ApR+oSSv82zZz0tW4xJf20rsRVqu+tVERO16kWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d2:59:dc:3e:d1:e4:b9:f1:92:cf:01:bd:2e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b Validity Not Before: Dec 6 11:01:22 2025 GMT Not After : Dec 7 11:01:22 2025 GMT Subject: CN=bb6c0749f029f95bec03dce6a2a55315ba610519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:96:44:67:b1:6a:e8:e4:82:92:f6:fa:c5: 46:47:76:fc:7a:c4:9e:d2:ca:4e:cd:6a:92:47:27: 36:5b:34:bb:ad:bf:63:36:7b:fb:b1:17:8f:aa:30: 47:47:b0:91:66:dd:a7:d6:6f:e9:6d:a8:d8:38:13: 15:2c:96:d7:85:d6:6f:c8:49:a8:e5:4d:cd:d0:53: 87:7b:d4:cb:3a:76:28:40:bc:33:ed:2d:a4:69:bb: a7:00:77:24:df:8d:1d:a8:ec:aa:75:25:b6:41:e3: 05:0e:6c:be:54:3d:b9:7e:8f:87:ae:e4:7b:a3:24: 9a:e1:32:6e:e4:60:3e:ba:a1:6d:b3:e3:93:b1:d2: 7d:75:89:b0:09:46:80:82:0e:8d:a5:eb:5c:5e:c0: 28:82:8c:cf:a6:d1:2e:72:41:c3:b2:fd:3a:15:71: 1a:43:24:57:5a:fa:06:68:ae:68:56:d2:df:97:9e: c1:dd:53:be:30:9b:0f:22:bd:50:ce:c9:5d:d0:e6: 10:6d:6b:09:3e:2f:7b:14:34:77:66:d8:9a:ea:26: 38:b6:45:f8:a3:5e:20:61:17:12:29:1b:d3:ea:48: a9:19:eb:9f:77:c2:6e:17:2f:78:bc:92:f6:a6:c0: 71:7c:1c:57:10:85:59:e7:c4:6d:ac:8b:51:c8:6b: 8f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:07:49:F0:29:F9:5B:EC:03:DC:E6:A2:A5:53:15:BA:61:05:19 X509v3 Authority Key Identifier: keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:be:c4:73:fe:97:6e:f6:53:27:68:3a:47:5b:d5:c5:3d:d2: e6:42:2c:4c:f5:34:21:49:b5:b0:1d:8c:98:55:5b:a8:e7:b8: 7c:eb:7c:4e:ec:24:4c:2f:99:96:36:38:07:15:86:6d:5b:39: 26:83:de:b1:7b:ee:87:48:78:3e:52:00:8c:2d:db:e4:6c:a7: f4:e9:bd:db:19:19:63:80:08:18:8c:15:79:d4:ac:38:ce:eb: 9f:97:a8:84:0b:0c:5f:52:e9:47:7d:b0:a1:b2:09:95:b1:94: d4:24:cb:cc:7f:87:5d:d3:10:07:95:8b:3a:61:85:7b:1f:28: 0b:72:a2:26:df:3b:16:28:7c:f5:76:cf:44:71:b9:b3:e0:d9: 4a:c1:37:49:c2:f9:c7:b7:51:f2:49:db:1d:58:0d:2e:f7:73: 9c:1b:d2:55:72:8c:68:b0:4b:8d:5a:b1:de:50:3a:67:c9:66: ea:c6:78:0b:c8:a5:ad:e6:2e:f2:dc:30:17:ad:f0:3d:67:15: c3:ab:16:01:ad:04:d9:d4:27:eb:ce:ad:c4:22:f6:f9:bc:e7: 2b:95:18:b8:57:d9:c0:78:01:a8:ad:f3:c9:ae:27:f6:e9:55: af:14:27:e7:8f:cc:ed:45:c6:96:09:13:3c:ff:3e:ce:0b:86: e7:83:b8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtJZ3D7R5Lnxks8BvS6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2 ZjE1NWIwHhcNMjUxMjA2MTEwMTIyWhcNMjUxMjA3MTEwMTIyWjAzMTEwLwYDVQQD EyhiYjZjMDc0OWYwMjlmOTViZWMwM2RjZTZhMmE1NTMxNWJhNjEwNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8SWRGexaujkgpL2+sVGR3b8esSe 0spOzWqSRyc2WzS7rb9jNnv7sRePqjBHR7CRZt2n1m/pbajYOBMVLJbXhdZvyEmo 5U3N0FOHe9TLOnYoQLwz7S2kabunAHck340dqOyqdSW2QeMFDmy+VD25fo+HruR7 oySa4TJu5GA+uqFts+OTsdJ9dYmwCUaAgg6NpetcXsAogozPptEuckHDsv06FXEa QyRXWvoGaK5oVtLfl57B3VO+MJsPIr1Qzsld0OYQbWsJPi97FDR3Ztia6iY4tkX4 o14gYRcSKRvT6kipGeufd8JuFy94vJL2psBxfBxXEIVZ58RtrItRyGuPjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtsB0nwKflb7APc5qKlUxW6YQUZMB8GA1UdIwQY MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL7Ec/6X bvZTJ2g6R1vVxT3S5kIsTPU0IUm1sB2MmFVbqOe4fOt8TuwkTC+ZljY4BxWGbVs5 JoPesXvuh0h4PlIAjC3b5Gyn9Om92xkZY4AIGIwVedSsOM7rn5eohAsMX1LpR32w obIJlbGU1CTLzH+HXdMQB5WLOmGFex8oC3KiJt87Fih89XbPRHG5s+DZSsE3ScL5 x7dR8knbHVgNLvdznBvSVXKMaLBLjVqx3lA6Z8lm6sZ4C8ilreYu8twwF63wPWcV w6sWAa0E2dQn686txCL2+bznK5UYuFfZwHgBqK3zya4n9ulVrxQn54/M7UXGlgkT PP8+zguG54O4yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:43 2025 by rpki-client