This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json) Hash identifier: aovvzxKFKJ/hw3zt5tfR2/RSXCzVng1OqBaq04KXqkE= Subject key identifier: FC:44:95:D3:F3:51:0F:8B:A0:98:08:EC:5A:D1:C8:D4:2A:B3:38:34 Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e Certificate serial: 019B1F87BB3F7E4B468006426D8385D9BB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 01:02:27 +0000 Manifest this update: Mon 15 Dec 2025 01:02:27 +0000 Manifest next update: Tue 16 Dec 2025 01:02:27 +0000 Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=) 2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: udInaX3Ee0XHYMep0lTIEuCNLwAaXLTsAO3yhkF7Ves=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:bb:3f:7e:4b:46:80:06:42:6d:83:85:d9:bb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e Validity Not Before: Dec 15 01:02:27 2025 GMT Not After : Dec 16 01:02:27 2025 GMT Subject: CN=fc4495d3f3510f8ba09808ec5ad1c8d42ab33834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:4a:64:8a:e1:5d:05:62:fb:25:b4:93:be: 52:b4:91:7d:24:fb:cf:36:b6:6d:f5:b5:61:9a:2a: 62:7a:e2:cd:6a:3f:10:31:b5:5f:72:63:6b:8e:63: a0:01:0f:e1:4a:17:66:8b:d7:c3:9d:21:a1:ed:4c: b6:07:7d:9f:b1:9c:2c:61:ec:c7:59:e8:10:24:44: 55:5f:ba:7c:4d:95:67:a7:e0:bf:e2:4b:bd:11:6a: 8f:1f:c6:df:61:88:83:1d:45:5d:f1:cb:9e:3f:f0: a4:16:37:15:80:09:bf:56:0d:4e:5f:f4:75:f9:28: 85:f5:5e:c3:6c:db:33:f8:f4:d7:6e:ee:2f:bc:72: 73:2d:a4:5f:2e:57:d6:5b:ae:0c:60:00:16:3d:20: 91:9a:8a:78:a1:be:1f:11:11:ae:96:b5:64:7f:e3: 21:6f:dc:0e:dc:a8:0c:68:5a:b8:a5:ee:fd:2c:f1: 83:d8:11:44:da:a8:ab:84:55:91:8c:19:cd:7a:f2: 25:47:c5:b0:f3:c1:83:88:1e:07:12:01:5b:8e:bb: 36:c3:46:89:ba:f4:62:4c:b7:a3:09:ed:5e:06:1d: ce:e0:07:5a:23:cf:c9:ac:d4:dd:bb:ea:61:d4:cf: 35:32:06:a3:cb:20:bf:f7:da:a5:41:ff:52:5c:c2: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:95:D3:F3:51:0F:8B:A0:98:08:EC:5A:D1:C8:D4:2A:B3:38:34 X509v3 Authority Key Identifier: keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c9:76:17:34:33:32:46:a2:df:c4:94:8e:50:5b:10:b2:01: cc:14:37:8b:87:76:72:b8:36:68:b4:99:72:38:f4:43:3f:49: e7:79:3c:15:92:80:d7:18:ec:75:00:e9:1f:bf:0c:d4:ee:52: f1:5a:79:91:5e:9f:65:9c:70:89:94:6e:d7:2d:c4:1e:e5:44: 14:ab:b5:ad:82:55:84:03:a6:be:84:44:9a:2a:7c:11:f1:22: 77:69:18:05:24:6f:81:27:06:37:c8:a7:25:94:68:9c:59:3c: 90:d8:0e:29:a7:4d:fd:29:13:6b:9c:80:91:af:fd:83:06:34: 8a:5e:32:ed:1e:20:9a:df:db:4f:cf:af:52:3d:50:a7:32:a9: 1a:29:65:e5:f7:50:a4:68:8d:4b:fc:48:ed:2e:a8:be:61:7d: 55:e9:e7:04:c4:0f:03:5a:89:4d:86:ad:b0:79:14:4f:90:af: 75:ca:35:ad:59:69:70:69:81:da:5c:75:d2:8f:ad:a2:72:43: 47:e2:80:f7:d8:25:8f:93:c4:d7:00:ce:57:83:b1:64:6c:11: 8a:4f:e5:bf:25:56:a6:74:26:d0:b1:5f:c7:4a:d6:0a:d2:a0: 52:a2:41:f4:d3:fb:65:8d:2f:71:09:64:75:cf:f9:99:80:56: 8e:62:4c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh7s/fktGgAZCbYOF2bssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk YWZmNWUwHhcNMjUxMjE1MDEwMjI3WhcNMjUxMjE2MDEwMjI3WjAzMTEwLwYDVQQD EyhmYzQ0OTVkM2YzNTEwZjhiYTA5ODA4ZWM1YWQxYzhkNDJhYjMzODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI5KZIrhXQVi+yW0k75StJF9JPvP NrZt9bVhmipieuLNaj8QMbVfcmNrjmOgAQ/hShdmi9fDnSGh7Uy2B32fsZwsYezH WegQJERVX7p8TZVnp+C/4ku9EWqPH8bfYYiDHUVd8cueP/CkFjcVgAm/Vg1OX/R1 +SiF9V7DbNsz+PTXbu4vvHJzLaRfLlfWW64MYAAWPSCRmop4ob4fERGulrVkf+Mh b9wO3KgMaFq4pe79LPGD2BFE2qirhFWRjBnNevIlR8Ww88GDiB4HEgFbjrs2w0aJ uvRiTLejCe1eBh3O4AdaI8/JrNTdu+ph1M81MgajyyC/99qlQf9SXMLeGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxEldPzUQ+LoJgI7FrRyNQqszg0MB8GA1UdIwQY MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3 LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsl2FzQz Mkai38SUjlBbELIBzBQ3i4d2crg2aLSZcjj0Qz9J53k8FZKA1xjsdQDpH78M1O5S 8Vp5kV6fZZxwiZRu1y3EHuVEFKu1rYJVhAOmvoREmip8EfEid2kYBSRvgScGN8in JZRonFk8kNgOKadN/SkTa5yAka/9gwY0il4y7R4gmt/bT8+vUj1QpzKpGill5fdQ pGiNS/xI7S6ovmF9VennBMQPA1qJTYatsHkUT5Cvdco1rVlpcGmB2lx10o+tonJD R+KA99glj5PE1wDOV4OxZGwRik/lvyVWpnQm0LFfx0rWCtKgUqJB9NP7ZY0vcQlk dc/5mYBWjmJMiw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:39 2025 by rpki-client