This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json) Hash identifier: ZXCIzHmrdytOFNkJShvtPF+TLDPoWd8pu+X2FN7FSxE= Subject key identifier: 20:E8:3E:2D:7E:BD:DE:C3:03:3B:D1:73:63:9D:C1:BC:84:35:C8:23 Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4 Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4 Certificate serial: 019AF12DE1E8911FB5F56B350CF0CA8A0DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft Manifest number: 0368 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=) 2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: a9BwnpT2nNPkAPl9oVDaw8iDsoIku1+SyKnzrH4y8xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e1:e8:91:1f:b5:f5:6b:35:0c:f0:ca:8a:0d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=20e83e2d7ebddec3033bd173639dc1bc8435c823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:3e:aa:79:74:f6:60:92:7b:8a:95:6a:d3: 57:c4:10:d1:8b:7b:4a:3c:76:0d:20:0d:90:41:f3: 7b:a8:7d:3a:31:e3:89:11:1d:33:7c:56:69:93:a9: 3c:0b:79:37:92:61:0a:2d:5f:b7:2f:00:ac:00:55: cd:71:6d:49:40:8c:e1:78:56:c8:a5:70:1a:f0:d2: f2:b7:32:e1:a8:62:db:48:03:19:15:4e:2e:fe:c0: 8a:94:04:1e:6a:69:37:29:8c:50:57:4c:47:13:cb: d9:41:2b:d8:ac:60:38:98:17:41:82:5e:8b:b5:cc: e6:41:b1:d6:5e:06:ad:cb:2b:36:3b:1c:b4:fb:47: fd:0b:8b:68:05:8f:32:0f:8f:d7:dc:81:a3:6c:cd: 5b:93:9b:3a:00:ed:78:3c:8a:6d:84:df:6d:fa:a5: b2:c4:19:86:eb:ab:a2:86:7e:d4:e7:f8:00:88:92: 07:7a:de:d2:e1:2a:77:05:f3:d5:99:70:27:ba:1e: 0c:37:65:8d:be:ac:80:8d:64:9e:f1:01:80:ba:c5: b9:19:38:f1:c3:1f:e7:51:07:6f:cf:52:c6:76:36: 74:e3:45:fa:72:d2:19:ca:97:b9:82:96:74:11:0c: 63:39:89:18:32:35:3f:41:3d:96:d7:4a:42:64:f2: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E8:3E:2D:7E:BD:DE:C3:03:3B:D1:73:63:9D:C1:BC:84:35:C8:23 X509v3 Authority Key Identifier: keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ce:00:8e:83:ab:02:14:4b:fc:66:a2:ea:7d:a0:34:9b:1f: 90:61:1f:20:0f:23:fa:fc:30:af:0d:02:ed:67:96:5c:ad:f5: 84:48:71:bb:9b:13:9c:79:22:32:1b:c5:4c:f6:3b:20:21:67: 2c:39:75:c6:fe:8a:a3:79:a3:fe:46:14:ec:ed:77:11:38:7a: 67:46:67:2b:d4:42:e3:65:ce:ca:e1:64:95:cf:5a:a6:a8:6b: 07:c4:f0:61:e9:b8:fd:18:0b:9a:fd:6f:71:e0:11:96:11:f4: b0:61:2f:cd:f0:18:09:43:bd:9b:88:0a:5a:c0:e1:54:85:ad: 2e:d5:23:f4:6b:57:a4:7b:dd:06:ef:94:65:04:1b:6d:a1:28: 32:1c:2c:0e:a2:04:9b:fc:54:67:78:83:7a:0c:0d:ba:a3:24: b6:f1:91:4f:d7:93:b0:4d:ed:3a:50:49:38:05:33:86:9c:8f: 30:f6:50:fa:7f:8c:40:82:34:70:cb:40:4c:76:03:03:75:78: 39:5c:54:47:48:ee:c0:26:bc:5e:b9:29:1a:02:e5:79:35:75: 91:28:4b:db:a0:6f:e4:79:33:49:08:36:34:60:63:b8:b9:11: e3:28:8b:26:f1:37:c7:4b:79:cd:de:36:1f:02:71:ea:00:ec: fa:97:94:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeHokR+19Ws1DPDKig2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2E1YTE2NWIxM2Q3NzA2Yzg0MjU5MzQ3NDRhNTIxNjYy ZWU0YTQwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EygyMGU4M2UyZDdlYmRkZWMzMDMzYmQxNzM2MzlkYzFiYzg0MzVjODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS8+qnl09mCSe4qVatNXxBDRi3tK PHYNIA2QQfN7qH06MeOJER0zfFZpk6k8C3k3kmEKLV+3LwCsAFXNcW1JQIzheFbI pXAa8NLytzLhqGLbSAMZFU4u/sCKlAQeamk3KYxQV0xHE8vZQSvYrGA4mBdBgl6L tczmQbHWXgatyys2Oxy0+0f9C4toBY8yD4/X3IGjbM1bk5s6AO14PIpthN9t+qWy xBmG66uihn7U5/gAiJIHet7S4Sp3BfPVmXAnuh4MN2WNvqyAjWSe8QGAusW5GTjx wx/nUQdvz1LGdjZ040X6ctIZype5gpZ0EQxjOYkYMjU/QT2W10pCZPI6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDoPi1+vd7DAzvRc2OdwbyENcgjMB8GA1UdIwQY MBaAFF96WhZbE9dwbIQlk0dEpSFmLuSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lNjJjM2EtMjYzZS00Y2VlLTljODkt NDljNmZjYmJiNWE4LzEvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lNjJjM2EtMjYzZS00Y2VlLTljODktNDljNmZjYmJiNWE4 LzEvWDNwYUZsc1QxM0JzaENXVFIwU2xJV1l1NUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM4AjoOr AhRL/Gai6n2gNJsfkGEfIA8j+vwwrw0C7WeWXK31hEhxu5sTnHkiMhvFTPY7ICFn LDl1xv6Ko3mj/kYU7O13ETh6Z0ZnK9RC42XOyuFklc9apqhrB8TwYem4/RgLmv1v ceARlhH0sGEvzfAYCUO9m4gKWsDhVIWtLtUj9GtXpHvdBu+UZQQbbaEoMhwsDqIE m/xUZ3iDegwNuqMktvGRT9eTsE3tOlBJOAUzhpyPMPZQ+n+MQII0cMtATHYDA3V4 OVxUR0juwCa8XrkpGgLleTV1kShL26Bv5HkzSQg2NGBjuLkR4yiLJvE3x0t5zd42 HwJx6gDs+peUiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:26 2025 by rpki-client