This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json) Hash identifier: IdDwVVMLUOMjIJb8fA9lMrSKOtxG/Mf1DYZr7mICMt4= Subject key identifier: 57:2A:8C:12:45:16:70:16:76:41:F6:50:CF:07:24:5F:E0:BD:09:7D Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e Certificate serial: 019B25521703212A9251E31A1141ED98754F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 04:01:35 +0000 Manifest this update: Tue 16 Dec 2025 04:01:35 +0000 Manifest next update: Wed 17 Dec 2025 04:01:35 +0000 Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=) 2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: 7gUWCcnu6/CTvw8dE3ryLCG3r7w2QMKJXYZ3kfJYKTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:17:03:21:2a:92:51:e3:1a:11:41:ed:98:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e Validity Not Before: Dec 16 04:01:35 2025 GMT Not After : Dec 17 04:01:35 2025 GMT Subject: CN=572a8c12451670167641f650cf07245fe0bd097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:f3:f5:42:a3:55:0c:eb:3c:29:af:58:55: 38:fc:d5:a0:77:29:cb:9c:09:0c:3e:41:5d:e5:64: a6:af:bd:89:16:11:b7:3f:72:24:57:3f:12:67:9b: 89:08:4d:14:f7:f5:e2:16:d8:77:56:82:e2:e7:d8: 53:e5:6b:15:9c:ea:32:13:84:d1:05:fa:c2:d6:b5: 2e:44:10:4c:10:aa:59:09:4c:06:c4:72:0e:0e:83: 1b:08:98:c5:db:1c:f2:a8:11:aa:3e:e7:5f:8d:80: 74:f3:be:4a:4a:67:6c:d3:68:7b:da:9f:54:d3:10: d4:06:a4:0d:f8:38:e4:0c:76:84:d4:96:31:3d:81: f4:43:8e:0f:23:24:35:dc:c7:7f:ef:e9:29:55:04: f1:57:c3:f1:ea:08:28:f1:d3:65:7f:6d:a9:99:02: 63:61:12:cb:88:7a:aa:1e:e4:ec:0a:cf:17:fd:af: 6d:6e:2c:53:9a:93:76:48:a2:f2:9d:b1:37:64:f5: ef:ac:3e:a2:30:d6:d4:de:2b:65:cf:fb:71:4b:17: 6a:88:89:41:b4:c7:b9:b9:3b:52:7c:ed:08:8d:b8: d7:7a:9f:f4:d8:bb:84:c0:ac:20:ae:1e:97:9c:f6: 14:4c:f3:1c:67:21:65:77:b1:fb:8e:9f:4e:c5:12: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:8C:12:45:16:70:16:76:41:F6:50:CF:07:24:5F:E0:BD:09:7D X509v3 Authority Key Identifier: keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:93:75:0b:06:4f:24:08:f4:d5:78:c0:ba:7f:49:f8:5c:4f: 26:08:b5:15:f2:c0:7a:58:77:43:3a:7c:de:cf:a7:07:a2:86: 19:16:6e:0c:d5:d8:be:f3:fb:37:7f:56:4e:8d:70:e6:80:57: aa:70:5f:d1:89:7c:f2:08:a6:33:2f:d4:05:89:b3:5a:a4:bf: ed:a2:19:14:90:e1:fb:33:f1:bb:b0:68:e4:1c:04:75:b1:25: 7f:5a:33:35:77:93:25:ba:bd:46:fc:5f:b9:64:5f:ba:4b:2d: 51:f8:2e:4a:95:20:72:42:37:ce:ef:2e:b8:d7:48:6a:8e:76: 43:ac:44:36:8a:c3:af:bc:84:bc:5b:72:61:36:9c:7b:74:26: 7a:93:6e:e3:3f:03:a3:b3:36:ab:46:03:e5:50:12:69:40:91: 89:d2:68:43:92:88:aa:21:1e:80:af:22:86:d8:7e:04:8c:3e: 01:43:5d:8e:ca:88:31:61:eb:51:8a:77:d9:aa:a9:7b:d7:ca: 8a:ab:5f:ad:73:4a:59:f6:41:1d:20:73:ee:42:8c:4b:bf:23: e6:cc:23:e0:3b:f7:ee:27:51:23:72:ec:52:17:66:57:09:02: 89:f1:0b:fa:5e:a3:b4:a7:7f:16:6a:1a:16:a4:ef:4d:6a:f7: 57:c6:c4:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUhcDISqSUeMaEUHtmHVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk YWZmNWUwHhcNMjUxMjE2MDQwMTM1WhcNMjUxMjE3MDQwMTM1WjAzMTEwLwYDVQQD Eyg1NzJhOGMxMjQ1MTY3MDE2NzY0MWY2NTBjZjA3MjQ1ZmUwYmQwOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDLz9UKjVQzrPCmvWFU4/NWgdynL nAkMPkFd5WSmr72JFhG3P3IkVz8SZ5uJCE0U9/XiFth3VoLi59hT5WsVnOoyE4TR BfrC1rUuRBBMEKpZCUwGxHIODoMbCJjF2xzyqBGqPudfjYB0875KSmds02h72p9U 0xDUBqQN+DjkDHaE1JYxPYH0Q44PIyQ13Md/7+kpVQTxV8Px6ggo8dNlf22pmQJj YRLLiHqqHuTsCs8X/a9tbixTmpN2SKLynbE3ZPXvrD6iMNbU3itlz/txSxdqiIlB tMe5uTtSfO0IjbjXep/02LuEwKwgrh6XnPYUTPMcZyFld7H7jp9OxRJ11wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcqjBJFFnAWdkH2UM8HJF/gvQl9MB8GA1UdIwQY MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3 LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5N1CwZP JAj01XjAun9J+FxPJgi1FfLAelh3Qzp83s+nB6KGGRZuDNXYvvP7N39WTo1w5oBX qnBf0Yl88gimMy/UBYmzWqS/7aIZFJDh+zPxu7Bo5BwEdbElf1ozNXeTJbq9Rvxf uWRfukstUfguSpUgckI3zu8uuNdIao52Q6xENorDr7yEvFtyYTace3QmepNu4z8D o7M2q0YD5VASaUCRidJoQ5KIqiEegK8ihth+BIw+AUNdjsqIMWHrUYp32aqpe9fK iqtfrXNKWfZBHSBz7kKMS78j5swj4Dv37idRI3LsUhdmVwkCifEL+l6jtKd/Fmoa FqTvTWr3V8bEkA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:35:30 2025 by rpki-client