This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json) Hash identifier: E6JtvQ5o7wFAkqSlP+g0YH7pGuCP+OTqhhZMVdRAOhY= Subject key identifier: CB:A3:D0:7A:E1:51:D6:72:40:89:1C:94:2C:6E:D2:F5:C3:04:7D:0B Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Certificate serial: 019B10812139728C01A16A5D3F7A93CD7123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft Manifest number: 177B Signing time: Fri 12 Dec 2025 03:00:56 +0000 Manifest this update: Fri 12 Dec 2025 03:00:56 +0000 Manifest next update: Sat 13 Dec 2025 03:00:56 +0000 Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=) 2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=) 3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: ZGQ0aX5+fX+pdIOdjqm5hW8YJy8S6rNbIR5w0Up2Pns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:21:39:72:8c:01:a1:6a:5d:3f:7a:93:cd:71:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Validity Not Before: Dec 12 03:00:56 2025 GMT Not After : Dec 13 03:00:56 2025 GMT Subject: CN=cba3d07ae151d67240891c942c6ed2f5c3047d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:f5:12:17:80:07:0d:e4:d3:bd:0d:c1:09: d4:78:b0:78:11:ab:5b:40:64:e2:e3:47:a7:9b:06: cc:95:4b:3e:e0:2c:24:a1:43:27:0f:59:b5:06:e0: 5a:8a:be:eb:dc:a2:07:94:3e:a1:c0:ba:eb:13:b6: 83:33:e3:37:14:f8:d6:3b:5d:1a:b6:f9:c1:0a:0b: aa:94:60:fb:97:7c:fe:48:69:b1:e9:b8:06:18:7c: 57:46:29:44:db:56:91:60:6c:4e:da:3d:7e:f9:16: 6d:bd:ad:46:65:9a:a9:cb:a7:67:b0:da:c7:b9:78: ee:cd:78:e8:74:2a:9a:c9:db:5d:a8:5c:1c:e3:d7: d6:a1:61:c7:3a:20:5f:a2:ea:11:c4:b3:09:d9:40: 61:e5:6b:29:da:9e:52:f6:5a:48:6a:81:c1:90:35: 6c:1a:89:eb:2d:94:79:e7:ed:e9:3f:79:07:d9:a4: 4a:48:6c:36:f1:e3:77:24:58:30:84:9a:f3:d0:f1: de:a1:8a:3d:06:92:ab:f8:59:a2:2c:f2:ab:81:f0: 34:3c:0b:19:5d:c8:15:40:0e:f3:a9:03:63:3e:ef: da:a8:e3:b1:48:4f:ca:93:83:76:df:a8:3c:a4:a2: 5e:07:e3:9c:0c:d9:a0:cc:97:7b:5b:ec:e7:ee:63: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:D0:7A:E1:51:D6:72:40:89:1C:94:2C:6E:D2:F5:C3:04:7D:0B X509v3 Authority Key Identifier: keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9c:21:a7:68:f9:b6:ec:bf:68:80:c7:69:bd:6f:da:88:b7: f4:e4:31:11:00:72:cb:c0:4b:e8:06:be:95:97:dd:7f:ca:e7: 82:1a:f8:f6:cb:b2:c6:e5:e5:43:04:cf:89:53:66:a0:6c:9e: ef:6b:18:c1:b0:f0:01:ad:3d:6d:26:98:2e:81:46:ec:e2:fb: 38:13:37:d4:3a:be:ef:40:f7:0e:8b:6d:d3:97:d5:57:c3:cc: 21:5e:7f:9b:d0:d0:61:2c:f0:f0:56:08:02:9f:93:cb:da:43: b7:18:58:2d:80:59:fb:c4:44:ce:aa:dd:d1:b4:1b:56:b7:e4: b7:39:3b:9c:a5:15:01:04:42:04:b0:e7:ff:90:8a:35:39:71: e1:78:83:20:37:c6:bc:c4:4f:ff:68:a3:74:37:df:97:c6:14: 92:c8:5f:f1:bd:6b:d8:88:f8:ba:fd:43:4f:b4:f9:19:16:44: e8:98:66:bb:37:2d:6f:2a:a3:dc:58:71:8f:c2:5f:9e:e9:1f: d4:8c:94:8c:9a:be:2f:79:e9:7d:91:e5:f2:82:7e:9f:f4:3f: 45:6d:1f:6c:b5:22:d8:93:3e:a0:f1:fa:ab:d1:83:89:af:e3: 63:01:3d:56:55:04:83:74:25:f7:80:76:b2:8e:aa:41:f7:2c: c9:7d:d6:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgSE5cowBoWpdP3qTzXEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzcwMTM1ZDBmMGQzMGE4NjhkZjU1MWQ4NzUyZDRiNGJh ZGMyYzEwHhcNMjUxMjEyMDMwMDU2WhcNMjUxMjEzMDMwMDU2WjAzMTEwLwYDVQQD EyhjYmEzZDA3YWUxNTFkNjcyNDA4OTFjOTQyYzZlZDJmNWMzMDQ3ZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq31EheABw3k070NwQnUeLB4Eatb QGTi40enmwbMlUs+4CwkoUMnD1m1BuBair7r3KIHlD6hwLrrE7aDM+M3FPjWO10a tvnBCguqlGD7l3z+SGmx6bgGGHxXRilE21aRYGxO2j1++RZtva1GZZqpy6dnsNrH uXjuzXjodCqaydtdqFwc49fWoWHHOiBfouoRxLMJ2UBh5Wsp2p5S9lpIaoHBkDVs GonrLZR55+3pP3kH2aRKSGw28eN3JFgwhJrz0PHeoYo9BpKr+FmiLPKrgfA0PAsZ XcgVQA7zqQNjPu/aqOOxSE/Kk4N236g8pKJeB+OcDNmgzJd7W+zn7mMWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuj0HrhUdZyQIkclCxu0vXDBH0LMB8GA1UdIwQY MBaAFMd3ATXQ8NMKho31Udh1LUtLrcLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUt ZDY0ZDc1Mzk0MDM3LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUtZDY0ZDc1Mzk0MDM3 LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJwhp2j5 tuy/aIDHab1v2oi39OQxEQByy8BL6Aa+lZfdf8rnghr49suyxuXlQwTPiVNmoGye 72sYwbDwAa09bSaYLoFG7OL7OBM31Dq+70D3Dott05fVV8PMIV5/m9DQYSzw8FYI Ap+Ty9pDtxhYLYBZ+8REzqrd0bQbVrfktzk7nKUVAQRCBLDn/5CKNTlx4XiDIDfG vMRP/2ijdDffl8YUkshf8b1r2Ij4uv1DT7T5GRZE6Jhmuzctbyqj3Fhxj8Jfnukf 1IyUjJq+L3npfZHl8oJ+n/Q/RW0fbLUi2JM+oPH6q9GDia/jYwE9VlUEg3Ql94B2 so6qQfcsyX3Wtg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:50:24 2025 by rpki-client