This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json) Hash identifier: ai8LHCVVcvt+Zf6M7VuPqw328Or8vdMYR/FRPtsAqlI= Subject key identifier: B6:8D:4C:BF:8E:F2:78:B8:C9:E0:DD:E1:42:8D:F6:E5:E6:FA:BE:E5 Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Certificate serial: 019B1CF2D7AE5F41597419507C9C8D8C1654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft Manifest number: 06FC Signing time: Sun 14 Dec 2025 13:00:35 +0000 Manifest this update: Sun 14 Dec 2025 13:00:35 +0000 Manifest next update: Mon 15 Dec 2025 13:00:35 +0000 Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: zuV1RQTSQiNoEFCRcHY8Q1uNSUL4J2/o1kaosXbBzGE=) 2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=) 3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=) 4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=) 5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:d7:ae:5f:41:59:74:19:50:7c:9c:8d:8c:16:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Validity Not Before: Dec 14 13:00:35 2025 GMT Not After : Dec 15 13:00:35 2025 GMT Subject: CN=b68d4cbf8ef278b8c9e0dde1428df6e5e6fabee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:cd:c8:9d:54:c7:e2:2c:b1:b3:17:95:82: 03:62:0c:84:bc:e6:d3:49:e5:36:1a:c1:75:33:7d: 3f:ff:8f:a8:74:e6:39:88:e2:14:13:d0:33:5b:0a: 69:fb:76:68:d2:5f:74:b1:5d:31:9f:07:27:c2:93: 28:af:5c:ab:cf:54:02:c3:d9:a4:d3:e7:61:4a:6f: 56:b9:7c:a1:eb:49:39:4f:6e:e8:15:fa:b4:c3:a0: f2:02:53:95:36:d6:93:ce:7a:24:d8:a2:dd:a0:43: 52:29:eb:a2:4c:e2:1a:52:f0:40:31:c7:3d:79:56: 91:e5:7f:eb:75:da:7c:6f:3c:58:06:9b:1f:81:6f: 7f:71:82:34:dd:28:72:c1:29:71:66:e4:c5:ed:62: 32:46:4e:52:8d:4c:2a:25:71:49:be:c5:37:ed:67: 90:03:6f:da:25:58:9a:6f:e7:d4:ab:47:95:2f:b8: 90:5e:04:68:3b:b9:c2:7b:46:b2:d8:f5:5b:c9:fa: bd:bb:b9:12:0f:c1:06:87:14:7a:3c:ff:60:21:52: c7:8f:40:e4:af:ee:16:ea:24:1d:b7:54:fa:30:97: 3e:e3:6c:1e:5d:b0:1f:1a:63:53:35:5d:c2:8c:1c: c2:a3:2e:be:32:d7:2b:c3:1a:55:0f:ce:67:6f:17: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8D:4C:BF:8E:F2:78:B8:C9:E0:DD:E1:42:8D:F6:E5:E6:FA:BE:E5 X509v3 Authority Key Identifier: keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:cf:f1:1a:44:b9:1a:d2:a2:31:59:a2:4d:a8:83:c6:46: b6:03:f9:56:71:af:d8:b4:b9:c3:73:af:a9:96:63:f5:49:4c: 6c:a5:12:cd:8d:ef:b9:38:77:f8:e0:85:20:b9:1f:fb:35:b5: 2e:eb:a4:09:98:4d:00:02:60:f1:60:1f:51:80:00:03:af:59: 3b:e0:fe:a1:1f:19:5a:2c:91:aa:98:09:fa:0d:2d:c1:ef:84: c1:28:dd:0f:3a:e2:d8:ce:52:c9:cc:de:da:e5:ec:4b:71:0c: 6d:8c:cb:2f:10:42:02:7a:6a:2e:cb:cc:e1:7a:90:24:44:8b: 4e:7b:9a:46:ca:1a:30:5f:f8:a8:b9:1a:66:8d:b8:de:a0:36: 78:59:cc:ee:63:dd:d8:62:95:a1:f1:2b:6a:1d:c9:b8:4c:77: e7:aa:ca:0d:d4:42:4e:21:3e:05:02:96:6c:50:ac:af:8e:c8: c1:da:a6:3f:0d:cc:6d:82:f5:a0:8f:a2:4a:6c:09:27:00:52: 3e:32:73:f0:40:d3:0a:79:56:d3:4e:c4:c8:80:88:c9:d2:be: 2c:c2:fa:09:e7:f9:d3:6f:7a:43:b3:54:2e:90:c9:1f:45:68: fe:77:d0:af:e8:9b:36:b6:b9:dc:5e:53:4a:73:6e:41:2a:d6: eb:c9:50:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8teuX0FZdBlQfJyNjBZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm MGU4OWUwHhcNMjUxMjE0MTMwMDM1WhcNMjUxMjE1MTMwMDM1WjAzMTEwLwYDVQQD EyhiNjhkNGNiZjhlZjI3OGI4YzllMGRkZTE0MjhkZjZlNWU2ZmFiZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf3NyJ1Ux+IssbMXlYIDYgyEvObT SeU2GsF1M30//4+odOY5iOIUE9AzWwpp+3Zo0l90sV0xnwcnwpMor1yrz1QCw9mk 0+dhSm9WuXyh60k5T27oFfq0w6DyAlOVNtaTznok2KLdoENSKeuiTOIaUvBAMcc9 eVaR5X/rddp8bzxYBpsfgW9/cYI03ShywSlxZuTF7WIyRk5SjUwqJXFJvsU37WeQ A2/aJViab+fUq0eVL7iQXgRoO7nCe0ay2PVbyfq9u7kSD8EGhxR6PP9gIVLHj0Dk r+4W6iQdt1T6MJc+42weXbAfGmNTNV3CjBzCoy6+MtcrwxpVD85nbxfCRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaNTL+O8ni4yeDd4UKN9uXm+r7lMB8GA1UdIwQY MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt ZmRhNGU4YTViNDZlLzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9LP8RpE uRrSojFZok2og8ZGtgP5VnGv2LS5w3OvqZZj9UlMbKUSzY3vuTh3+OCFILkf+zW1 LuukCZhNAAJg8WAfUYAAA69ZO+D+oR8ZWiyRqpgJ+g0twe+EwSjdDzri2M5Sycze 2uXsS3EMbYzLLxBCAnpqLsvM4XqQJESLTnuaRsoaMF/4qLkaZo243qA2eFnM7mPd 2GKVofErah3JuEx356rKDdRCTiE+BQKWbFCsr47IwdqmPw3MbYL1oI+iSmwJJwBS PjJz8EDTCnlW007EyICIydK+LML6Cef50296Q7NULpDJH0Vo/nfQr+ibNra53F5T SnNuQSrW68lQWA== -----END CERTIFICATE-----Generated at Sun Dec 14 16:54:51 2025 by rpki-client