This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json) Hash identifier: anLQUeUmAU9MQDEt1HZH9ndk8rLflIkFHJnm1mUeNC4= Subject key identifier: BC:B3:10:A2:9F:95:19:8B:30:9D:FB:16:EC:0B:26:B3:7B:7F:57:87 Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442 Certificate serial: 019B5A88677A150D082D11225C33C654A692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 12:00:47 +0000 Manifest this update: Fri 26 Dec 2025 12:00:47 +0000 Manifest next update: Sat 27 Dec 2025 12:00:47 +0000 Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=) 2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: ySmmixF5ce/iSqEBpBNn+e4z6d3LB32z1wFE8QUxtK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:67:7a:15:0d:08:2d:11:22:5c:33:c6:54:a6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442 Validity Not Before: Dec 26 12:00:47 2025 GMT Not After : Dec 27 12:00:47 2025 GMT Subject: CN=bcb310a29f95198b309dfb16ec0b26b37b7f5787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:7b:2e:aa:2d:ba:e2:6f:ba:7b:0f:b5:f6: ab:0f:6e:ac:e7:02:55:92:89:92:45:72:c1:9b:15: ac:72:ac:e0:eb:0b:55:72:d4:a4:82:c7:52:e0:68: 2c:27:73:f6:58:77:0d:8d:88:8b:14:fe:9f:ce:ac: 06:7a:0d:0d:4e:d0:ae:6d:2e:64:05:06:90:44:e2: 83:a8:b6:43:c9:71:d3:92:be:ff:0a:ae:1a:bf:ff: 49:95:77:db:9d:9f:ea:eb:34:11:60:15:b7:52:bc: 6a:bb:84:79:44:ba:a9:58:7d:8d:89:78:4d:33:6d: 85:91:c0:cd:c7:7a:31:68:5e:c6:0d:00:01:de:50: 56:83:53:f1:ce:fa:c7:db:2e:d1:24:6f:60:30:51: 4d:f5:21:61:d6:13:70:42:57:8a:bf:2b:77:d5:79: 78:71:53:34:a7:08:9b:0b:50:7b:e9:45:e8:6b:47: cb:18:dc:17:f9:2c:cf:76:42:a9:c3:f6:19:15:73: e1:58:56:f0:5f:68:a1:5f:c0:17:a7:af:ff:89:73: fb:7e:b6:b6:a1:39:ce:de:3e:a5:74:bc:f3:db:32: d2:c1:73:de:6c:6a:95:4a:2e:73:8c:1c:1d:86:71: 36:bf:a6:ca:a5:3e:15:4a:44:e0:91:5a:a3:25:59: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:10:A2:9F:95:19:8B:30:9D:FB:16:EC:0B:26:B3:7B:7F:57:87 X509v3 Authority Key Identifier: keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:58:af:3b:43:47:15:1e:69:ea:12:2e:a4:fd:61:eb:58:9e: 40:9c:54:cb:9a:c2:a4:4e:90:af:54:da:84:7a:6c:a3:49:31: 39:3a:bd:21:f9:2e:e7:7b:28:3e:a4:b3:8c:e7:51:3d:d5:17: 11:bd:4d:8b:b8:94:22:8c:b1:84:b3:8d:30:c1:ac:39:be:15: 95:df:62:01:66:0c:d0:8c:e7:42:1e:98:11:be:c5:ab:65:50: d5:a8:9e:05:b6:7a:f4:12:9f:f2:c9:be:47:3f:b6:01:03:97: 1b:b8:27:ef:60:7e:b0:70:f8:99:3b:11:2c:ec:3e:99:1a:0b: 9f:db:1d:28:b2:b3:bd:25:47:ed:62:b0:9e:df:6b:dd:6b:76: 90:a4:2b:96:b0:6d:d9:f7:5d:25:7a:d3:ac:3d:b8:53:92:98: 0b:15:34:54:50:65:ac:84:dd:b5:16:fe:65:a7:8a:dd:26:1e: 05:4a:b3:d4:c7:34:62:3f:b1:24:ab:03:f8:3e:f4:84:f8:da: da:3e:06:52:ff:30:a8:55:0d:cc:24:b3:2c:6f:93:0c:33:e6: 19:93:52:f8:42:6a:0b:5b:2e:92:33:6f:f2:4c:0e:a4:53:c9: 33:ab:ed:d7:1b:fc:7b:a7:a1:d9:c6:68:48:11:92:54:24:45: 4e:80:ad:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGd6FQ0ILREiXDPGVKaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz Yjk0NDIwHhcNMjUxMjI2MTIwMDQ3WhcNMjUxMjI3MTIwMDQ3WjAzMTEwLwYDVQQD EyhiY2IzMTBhMjlmOTUxOThiMzA5ZGZiMTZlYzBiMjZiMzdiN2Y1Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyp7LqotuuJvunsPtfarD26s5wJV komSRXLBmxWscqzg6wtVctSkgsdS4GgsJ3P2WHcNjYiLFP6fzqwGeg0NTtCubS5k BQaQROKDqLZDyXHTkr7/Cq4av/9JlXfbnZ/q6zQRYBW3Urxqu4R5RLqpWH2NiXhN M22FkcDNx3oxaF7GDQAB3lBWg1PxzvrH2y7RJG9gMFFN9SFh1hNwQleKvyt31Xl4 cVM0pwibC1B76UXoa0fLGNwX+SzPdkKpw/YZFXPhWFbwX2ihX8AXp6//iXP7fra2 oTnO3j6ldLzz2zLSwXPebGqVSi5zjBwdhnE2v6bKpT4VSkTgkVqjJVnFPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyzEKKflRmLMJ37FuwLJrN7f1eHMB8GA1UdIwQY MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2 LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFivO0NH FR5p6hIupP1h61ieQJxUy5rCpE6Qr1TahHpso0kxOTq9Ifku53soPqSzjOdRPdUX Eb1Ni7iUIoyxhLONMMGsOb4Vld9iAWYM0IznQh6YEb7Fq2VQ1aieBbZ69BKf8sm+ Rz+2AQOXG7gn72B+sHD4mTsRLOw+mRoLn9sdKLKzvSVH7WKwnt9r3Wt2kKQrlrBt 2fddJXrTrD24U5KYCxU0VFBlrITdtRb+ZaeK3SYeBUqz1Mc0Yj+xJKsD+D70hPja 2j4GUv8wqFUNzCSzLG+TDDPmGZNS+EJqC1sukjNv8kwOpFPJM6vt1xv8e6eh2cZo SBGSVCRFToCtlQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client