This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json) Hash identifier: OvITNMFR02mTw3LG6fQ/pE5K8xelCHZVLhtq2juRw5g= Subject key identifier: 24:8D:BD:D2:D3:B4:15:8C:15:0B:AA:0B:EE:CC:DF:BC:7E:A5:48:00 Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019B360E63B309804086441C3797D69AA6A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft Manifest number: 137E Signing time: Fri 19 Dec 2025 10:01:11 +0000 Manifest this update: Fri 19 Dec 2025 10:01:11 +0000 Manifest next update: Sat 20 Dec 2025 10:01:11 +0000 Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: tp+X8V5mFa6D68Sm5yPtUcbh95k9wkJtJh0IedJm47Q=) 2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:63:b3:09:80:40:86:44:1c:37:97:d6:9a:a6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Dec 19 10:01:11 2025 GMT Not After : Dec 20 10:01:11 2025 GMT Subject: CN=248dbdd2d3b4158c150baa0beeccdfbc7ea54800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:52:fe:60:d6:35:79:24:62:cf:03:f5:22: 1d:9d:35:6a:f5:87:ba:0a:ee:d4:f5:92:2d:47:ec: 91:f5:87:62:68:36:eb:08:cf:80:9b:1f:14:d2:92: 28:9e:e1:a4:0c:0d:f0:84:9c:44:9a:e3:8a:0b:7a: d3:bd:7e:08:99:d8:7b:d2:fa:2e:ac:3d:61:31:2e: 6a:f2:e4:78:41:fe:67:81:b9:10:02:39:5d:1b:e1: 1a:6c:c5:30:d2:90:0c:8b:fa:fc:3f:b7:36:93:ca: d6:4c:ff:4b:23:25:d0:26:1b:0f:31:a9:10:c6:0d: 02:6d:46:dc:aa:1c:a6:a2:54:aa:df:a1:f9:0d:20: f7:7a:4d:6b:6f:0c:1b:61:8c:68:b4:2a:df:4f:57: f5:33:51:a8:34:ae:e8:d4:98:44:72:82:e1:70:d7: 68:88:0f:e2:75:9b:d3:8b:5b:01:b0:85:18:ef:8f: 58:57:5c:48:c4:1d:16:f1:0e:2e:60:dd:61:c0:f7: c3:e7:2f:53:35:3a:29:2d:e1:54:d0:61:26:7b:23: 18:82:5c:8a:28:bc:cb:8d:e1:35:dc:62:f3:32:58: 49:4e:b9:5e:a2:62:dc:e6:8a:db:59:fe:d7:29:cc: f7:02:65:39:4c:4a:46:0b:1d:ed:f5:47:4c:83:7f: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:BD:D2:D3:B4:15:8C:15:0B:AA:0B:EE:CC:DF:BC:7E:A5:48:00 X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:36:6f:2b:69:e6:cc:22:68:ae:d7:3d:70:0a:b0:6f:d7:e5: 5c:5e:d2:09:fc:f8:b0:4f:59:81:4e:3f:d6:29:de:fb:53:99: ef:f9:86:9f:20:96:d7:02:74:4c:8d:35:b5:4b:d8:19:f4:c3: 57:25:5f:96:f8:95:4f:f8:b7:6e:d2:64:9c:45:9e:65:5a:48: 44:34:c3:a9:04:05:2a:7e:f6:85:4b:3e:62:7f:7c:8b:81:d3: 53:51:e5:1a:f2:30:6a:bb:86:64:87:db:32:25:b3:13:c8:c0: b4:15:bf:77:01:7f:e9:c3:86:71:a1:c6:f1:f1:79:94:37:75: 2b:fe:c9:ae:6c:4d:49:b1:d2:49:a0:73:c4:89:99:23:27:69: 11:d3:65:56:91:50:eb:c4:9b:f5:9c:ec:05:45:b3:d8:71:12: 2e:bc:6a:b7:ed:37:09:7c:a9:fb:5b:68:e9:eb:46:b1:83:75: 6b:8a:8f:6f:85:cb:d7:91:87:e5:cb:56:54:ce:b4:63:61:84: e3:f8:d1:99:d8:85:16:1b:6a:9f:62:2d:97:10:ac:78:e6:92: c7:3f:3d:0c:3f:ec:49:21:42:1f:ad:b6:07:67:83:49:d4:ce: 71:6e:36:3a:8f:5c:36:28:09:38:30:1e:b0:d7:fe:98:15:b5: b1:bf:10:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DmOzCYBAhkQcN5fWmqamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjUxMjE5MTAwMTExWhcNMjUxMjIwMTAwMTExWjAzMTEwLwYDVQQD EygyNDhkYmRkMmQzYjQxNThjMTUwYmFhMGJlZWNjZGZiYzdlYTU0ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28ZS/mDWNXkkYs8D9SIdnTVq9Ye6 Cu7U9ZItR+yR9YdiaDbrCM+Amx8U0pIonuGkDA3whJxEmuOKC3rTvX4Imdh70vou rD1hMS5q8uR4Qf5ngbkQAjldG+EabMUw0pAMi/r8P7c2k8rWTP9LIyXQJhsPMakQ xg0CbUbcqhymolSq36H5DSD3ek1rbwwbYYxotCrfT1f1M1GoNK7o1JhEcoLhcNdo iA/idZvTi1sBsIUY749YV1xIxB0W8Q4uYN1hwPfD5y9TNTopLeFU0GEmeyMYglyK KLzLjeE13GLzMlhJTrleomLc5orbWf7XKcz3AmU5TEpGCx3t9UdMg3+QKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSNvdLTtBWMFQuqC+7M37x+pUgAMB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzZvK2nm zCJortc9cAqwb9flXF7SCfz4sE9ZgU4/1ine+1OZ7/mGnyCW1wJ0TI01tUvYGfTD VyVflviVT/i3btJknEWeZVpIRDTDqQQFKn72hUs+Yn98i4HTU1HlGvIwaruGZIfb MiWzE8jAtBW/dwF/6cOGcaHG8fF5lDd1K/7JrmxNSbHSSaBzxImZIydpEdNlVpFQ 68Sb9ZzsBUWz2HESLrxqt+03CXyp+1to6etGsYN1a4qPb4XL15GH5ctWVM60Y2GE 4/jRmdiFFhtqn2ItlxCseOaSxz89DD/sSSFCH622B2eDSdTOcW42Oo9cNigJODAe sNf+mBW1sb8Qjg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:08 2025 by rpki-client