This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json) Hash identifier: gMwkzEhggdGf1AqnenaJpf0N3sa+wa7TrNC/OXhkoKo= Subject key identifier: C8:C3:35:65:11:18:B6:0C:AE:69:4E:6C:70:A4:47:4B:9B:D6:D6:51 Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Certificate serial: 019B435BCA33D60C09D0BFB7343B2B69383B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft Manifest number: 0FE9 Signing time: Mon 22 Dec 2025 00:00:47 +0000 Manifest this update: Mon 22 Dec 2025 00:00:47 +0000 Manifest next update: Tue 23 Dec 2025 00:00:47 +0000 Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: UId1SKCKM8KNyl+Ydu+dPPWUV4+PTW2lo1QJgDBuypQ=) 2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:ca:33:d6:0c:09:d0:bf:b7:34:3b:2b:69:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Validity Not Before: Dec 22 00:00:47 2025 GMT Not After : Dec 23 00:00:47 2025 GMT Subject: CN=c8c335651118b60cae694e6c70a4474b9bd6d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:93:7b:13:16:ea:f3:ad:ab:03:d3:9b:ac: f8:c6:da:c2:7e:f5:b9:41:52:d7:76:39:c4:fc:b8: 38:d3:72:82:f1:16:73:de:9b:be:7a:dd:96:98:02: 83:f3:66:c0:3a:24:22:a1:30:a5:70:90:40:b9:8c: 0e:7d:f7:80:68:b5:c7:a4:8f:5d:c8:81:12:2b:8d: e7:10:f8:16:d4:77:cd:1d:00:54:c8:6a:5f:50:01: aa:d9:47:6a:7a:b6:43:51:9f:3b:e0:35:31:27:0a: 04:d7:81:ac:13:ae:eb:79:9d:23:8a:ab:ae:b6:f3: 9d:7f:cf:65:c1:1f:16:06:3d:3f:67:7d:d1:f8:75: 83:4a:92:4f:0e:08:ce:cf:bb:6f:25:c2:19:c7:07: 04:50:40:cf:15:02:90:e6:17:c0:5c:88:6b:60:ee: 10:31:0e:47:6d:9f:7e:be:c3:1f:d3:a9:98:ff:fc: 8c:28:3c:c6:dd:87:54:5a:0e:ba:a3:da:86:c3:6f: f9:f4:06:e0:12:be:b9:c6:10:f4:b3:62:1e:0c:e7: 70:24:21:d9:be:ef:8a:2d:7c:3e:01:2b:63:c1:63: 2f:21:2b:57:a1:c8:82:75:e5:49:91:68:09:a9:7a: 2a:67:ce:9f:ba:30:19:f7:bf:11:df:fc:2c:28:a1: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C3:35:65:11:18:B6:0C:AE:69:4E:6C:70:A4:47:4B:9B:D6:D6:51 X509v3 Authority Key Identifier: keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:23:00:aa:7a:de:de:49:48:3a:f1:96:0f:1f:35:5b:c7: 39:64:c4:e5:2f:0d:de:2c:f9:ad:16:12:3a:1b:6d:ca:06:36: a8:4d:54:0f:59:ed:3e:e4:fe:4a:ea:75:05:63:aa:62:23:ac: 9c:d8:8d:07:9c:b7:b2:d8:a2:a3:ee:c0:8a:21:a4:54:ff:37: 73:f6:8a:c4:7c:90:03:d1:1d:de:c6:39:47:22:71:b4:81:d0: 2b:73:58:a8:46:df:a4:4c:5a:5d:b9:5a:97:2d:45:bb:67:ca: 24:ea:22:a9:20:15:78:af:7f:21:3f:3d:f1:f1:63:18:ad:0a: 9b:3a:57:42:ca:3b:ae:fb:dd:a9:b7:7f:3e:6b:c2:83:16:0f: f7:1e:05:23:ea:2e:00:f5:6b:fa:d7:6a:ac:2a:ee:ab:85:37: 1f:b2:a7:db:b9:3d:94:9d:ea:14:09:92:38:79:63:15:c5:db: 42:84:db:35:03:49:f7:99:6a:31:2c:5d:7d:12:57:2e:26:72: bf:7c:8e:f8:c1:57:05:81:0e:70:bd:f7:cc:34:93:5a:ca:21: c8:ec:f5:ac:9b:51:d9:2d:82:ab:a4:0d:f5:c2:56:2a:9e:8b: 36:23:f6:8f:2d:8d:74:c5:9e:e6:c0:12:03:7c:fc:7c:68:01: 3c:9a:c3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8oz1gwJ0L+3NDsraTg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm OGFjOTgwHhcNMjUxMjIyMDAwMDQ3WhcNMjUxMjIzMDAwMDQ3WjAzMTEwLwYDVQQD EyhjOGMzMzU2NTExMThiNjBjYWU2OTRlNmM3MGE0NDc0YjliZDZkNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TWTexMW6vOtqwPTm6z4xtrCfvW5 QVLXdjnE/Lg403KC8RZz3pu+et2WmAKD82bAOiQioTClcJBAuYwOffeAaLXHpI9d yIESK43nEPgW1HfNHQBUyGpfUAGq2UdqerZDUZ874DUxJwoE14GsE67reZ0jiquu tvOdf89lwR8WBj0/Z33R+HWDSpJPDgjOz7tvJcIZxwcEUEDPFQKQ5hfAXIhrYO4Q MQ5HbZ9+vsMf06mY//yMKDzG3YdUWg66o9qGw2/59AbgEr65xhD0s2IeDOdwJCHZ vu+KLXw+AStjwWMvIStXociCdeVJkWgJqXoqZ86fujAZ978R3/wsKKFmZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjDNWURGLYMrmlObHCkR0ub1tZRMB8GA1UdIwQY MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1 LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2cjAKp6 3t5JSDrxlg8fNVvHOWTE5S8N3iz5rRYSOhttygY2qE1UD1ntPuT+Sup1BWOqYiOs nNiNB5y3stiio+7AiiGkVP83c/aKxHyQA9Ed3sY5RyJxtIHQK3NYqEbfpExaXbla ly1Fu2fKJOoiqSAVeK9/IT898fFjGK0KmzpXQso7rvvdqbd/PmvCgxYP9x4FI+ou APVr+tdqrCruq4U3H7Kn27k9lJ3qFAmSOHljFcXbQoTbNQNJ95lqMSxdfRJXLiZy v3yO+MFXBYEOcL33zDSTWsohyOz1rJtR2S2Cq6QN9cJWKp6LNiP2jy2NdMWe5sAS A3z8fGgBPJrDDA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:22:36 2025 by rpki-client