This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json) Hash identifier: FrLBZXAlxb+G14ByyhECbUnA7flONSUNk4qDbhfD7U0= Subject key identifier: 9A:C3:C9:96:76:0B:15:10:00:73:3E:1C:03:08:70:26:9F:AA:63:74 Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Certificate serial: 019B33B1BBDFBD74EE944C1EC3CF789CEEE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft Manifest number: 0684 Signing time: Thu 18 Dec 2025 23:00:44 +0000 Manifest this update: Thu 18 Dec 2025 23:00:44 +0000 Manifest next update: Fri 19 Dec 2025 23:00:44 +0000 Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=) 2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: Ah/hGxOBPdQAxXTjvR/PgxYGBfGWTGxPuT2JAeB6Ekw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:bb:df:bd:74:ee:94:4c:1e:c3:cf:78:9c:ee:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Validity Not Before: Dec 18 23:00:44 2025 GMT Not After : Dec 19 23:00:44 2025 GMT Subject: CN=9ac3c996760b151000733e1c030870269faa6374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:ee:85:23:4f:d0:7f:4e:2f:f7:e6:ab:06: e8:4a:48:d9:c3:01:e3:40:9b:a8:e0:a1:4e:ff:43: a4:cb:5b:f6:fc:14:ca:8a:31:e5:b8:ff:e8:94:78: 90:ac:da:2b:d6:7f:e3:19:01:aa:b9:aa:d6:b6:94: 3d:0f:67:21:8d:29:93:e8:1a:cc:de:4b:55:cf:25: 23:45:15:f1:c9:cb:2e:7b:9c:84:a6:1c:3d:66:d8: 1e:ef:14:ae:32:a1:8d:5a:ef:04:50:a6:4c:5c:9e: 94:4a:85:b8:e9:79:98:e0:92:0c:91:a7:2b:4e:e4: 97:ac:29:b1:88:ee:00:fe:d7:5e:9e:0c:af:87:08: 3f:09:ef:38:98:5a:a1:0c:cf:9a:30:22:2d:d8:43: d6:a2:5a:72:18:72:97:5d:48:6e:b5:68:b6:2d:87: 12:d5:9b:9e:a7:f2:b2:fe:43:fd:de:6e:16:63:95: 3f:68:28:be:ec:98:5a:93:e6:a7:c1:62:e7:4e:12: da:7d:b2:ed:30:a5:ec:3b:3b:60:26:b7:47:34:58: 1c:6d:a7:83:62:f2:68:b5:86:11:45:9f:1a:86:44: 0d:f4:c8:76:6d:1d:c0:6c:f9:a9:b8:a9:e2:a4:b2: fc:8a:65:07:c7:cd:58:2d:5d:df:36:e2:fd:4d:2a: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:C9:96:76:0B:15:10:00:73:3E:1C:03:08:70:26:9F:AA:63:74 X509v3 Authority Key Identifier: keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:29:42:8c:3f:99:18:b0:e9:49:29:df:4c:3a:c7:ce:54:b9: e7:8c:da:83:19:23:cb:2e:48:77:de:c3:79:48:37:f3:ae:40: 9e:04:68:48:cc:db:5e:6a:69:74:ad:0a:7d:3a:08:09:9a:2b: b3:64:a9:f9:e8:bd:d5:e9:5b:fd:3e:1f:2e:61:12:8b:6f:86: b8:45:51:26:7e:58:53:84:31:0f:e5:4b:5b:ba:c0:89:40:8e: 42:e7:b6:ef:f9:0c:2b:32:b2:b8:88:59:5f:44:51:15:61:bb: 8a:d3:fd:ab:cc:21:f9:34:02:64:0d:c6:2a:d9:a6:42:0f:6f: 55:a1:b8:ff:5b:0d:be:40:51:f4:e1:70:f7:46:14:e6:92:ff: 9b:e7:20:61:45:2e:34:9b:cd:b0:25:68:5b:bc:62:5f:ff:ed: e6:0a:bc:3f:5d:62:ad:2c:73:88:48:1b:81:63:5f:3e:ae:53: db:78:cb:cd:17:60:74:bc:c7:94:ff:47:03:e7:d5:81:0c:4e: a6:49:c0:65:fb:fb:7d:97:fc:09:8b:4b:1d:e4:0e:b3:90:ba: ef:8a:6b:46:be:9e:bf:d5:14:b5:fa:3c:64:41:4b:59:c7:d9: dc:c3:82:20:bc:7d:90:a4:27:22:d1:47:c6:b5:84:8d:79:1d: 3a:a5:cc:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsbvfvXTulEwew894nO7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk NDQwODkwHhcNMjUxMjE4MjMwMDQ0WhcNMjUxMjE5MjMwMDQ0WjAzMTEwLwYDVQQD Eyg5YWMzYzk5Njc2MGIxNTEwMDA3MzNlMWMwMzA4NzAyNjlmYWE2Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumHuhSNP0H9OL/fmqwboSkjZwwHj QJuo4KFO/0Oky1v2/BTKijHluP/olHiQrNor1n/jGQGquarWtpQ9D2chjSmT6BrM 3ktVzyUjRRXxycsue5yEphw9Ztge7xSuMqGNWu8EUKZMXJ6USoW46XmY4JIMkacr TuSXrCmxiO4A/tdengyvhwg/Ce84mFqhDM+aMCIt2EPWolpyGHKXXUhutWi2LYcS 1Zuep/Ky/kP93m4WY5U/aCi+7Jhak+anwWLnThLafbLtMKXsOztgJrdHNFgcbaeD YvJotYYRRZ8ahkQN9Mh2bR3AbPmpuKnipLL8imUHx81YLV3fNuL9TSpFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrDyZZ2CxUQAHM+HAMIcCafqmN0MB8GA1UdIwQY MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ilCjD+Z GLDpSSnfTDrHzlS554zagxkjyy5Id97DeUg3865AngRoSMzbXmppdK0KfToICZor s2Sp+ei91elb/T4fLmESi2+GuEVRJn5YU4QxD+VLW7rAiUCOQue27/kMKzKyuIhZ X0RRFWG7itP9q8wh+TQCZA3GKtmmQg9vVaG4/1sNvkBR9OFw90YU5pL/m+cgYUUu NJvNsCVoW7xiX//t5gq8P11irSxziEgbgWNfPq5T23jLzRdgdLzHlP9HA+fVgQxO pknAZfv7fZf8CYtLHeQOs5C674prRr6ev9UUtfo8ZEFLWcfZ3MOCILx9kKQnItFH xrWEjXkdOqXMug== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:11 2025 by rpki-client