This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json) Hash identifier: C1AxH2fgkfaPtWEfYPFEKNw6aBerN+O0irWp5XznfhE= Subject key identifier: 2F:B5:90:5A:20:56:CB:29:05:81:55:9C:6C:3C:65:C1:9A:76:71:9F Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a Certificate serial: 019B1CF30526AD7B2D2C3EC860311EB7E18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft Manifest number: 070A Signing time: Sun 14 Dec 2025 13:00:47 +0000 Manifest this update: Sun 14 Dec 2025 13:00:47 +0000 Manifest next update: Mon 15 Dec 2025 13:00:47 +0000 Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=) 2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: PeX9R8KXYSJcAe2a1IAMoSj5GjYcRlvEHAHYIo++BzE=) 3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:05:26:ad:7b:2d:2c:3e:c8:60:31:1e:b7:e1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a Validity Not Before: Dec 14 13:00:47 2025 GMT Not After : Dec 15 13:00:47 2025 GMT Subject: CN=2fb5905a2056cb290581559c6c3c65c19a76719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:a5:df:0e:9d:48:c2:d3:59:46:41:53:6a: da:18:b2:92:49:8a:af:e0:fe:c9:09:e6:ff:bd:14: e4:89:da:17:24:6c:33:85:d3:19:ae:86:6c:a5:d5: ea:8f:5b:aa:c9:62:64:dc:6b:01:2e:54:35:32:50: c9:a3:14:90:29:db:34:02:1d:f5:5a:64:01:6d:62: ab:b8:34:ce:b0:bf:89:94:24:f5:88:07:94:13:51: a3:be:ac:d7:4d:41:6e:74:ef:6a:d2:bf:f7:b0:3c: bb:fe:66:dc:3c:af:4b:a1:e9:40:3b:31:ef:e2:fa: f1:89:75:35:8a:41:ab:b1:b5:16:bc:92:e7:65:0f: ee:46:e3:1f:93:f4:d9:e0:2b:33:cf:fb:e2:62:9f: 80:1d:f1:25:ee:b3:45:80:1a:3d:7d:86:33:f9:78: 82:6c:71:95:21:3f:95:78:90:d7:50:d4:57:c1:07: 67:40:21:cb:62:44:53:78:70:63:0e:76:a6:5f:b6: 4c:86:9a:97:86:34:c2:d3:8f:8b:e4:cb:1e:fc:92: 5f:bf:72:ee:b1:74:c6:0d:12:e9:35:2f:ad:0b:f6: ff:5a:ef:bc:98:ca:d4:7b:ab:bf:a3:bb:1e:c5:1d: 8a:0d:ed:c7:a6:5e:78:b9:10:28:ca:08:1b:d5:05: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B5:90:5A:20:56:CB:29:05:81:55:9C:6C:3C:65:C1:9A:76:71:9F X509v3 Authority Key Identifier: keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e9:d2:37:8d:6f:07:fd:9d:a0:d8:ae:4e:cf:f2:32:87:98: 5d:9b:0a:d5:8d:aa:f0:7e:2c:9b:b1:b3:1b:4d:85:b6:88:ff: e0:b6:0b:07:96:c6:f6:5d:84:e1:ee:ea:15:57:2d:61:df:a6: df:07:c3:b9:bb:c8:f4:3d:1d:3e:2d:4d:a9:a7:3a:fd:cb:69: 27:b8:b0:2f:0a:42:73:0c:12:11:bb:4f:f5:55:ca:41:b7:e5: 1e:28:69:1a:5b:51:51:66:fd:9c:d0:15:16:e7:f9:3c:5a:c0: a9:3b:a7:d5:1d:c0:58:0c:a0:48:d7:ad:cd:e4:6a:16:42:d2: 37:c3:3f:2f:a7:c3:dc:ed:30:c6:ab:9f:17:bd:5a:28:77:7b: 2e:ec:df:ad:91:2f:bc:fc:ee:4e:20:dd:d2:0b:13:b7:c6:05: 49:0e:0a:64:25:26:9a:07:55:79:ec:80:87:fc:02:7e:99:8a: 20:2b:ba:dd:c4:91:fd:53:bf:32:91:a2:49:12:8b:05:47:01: b9:f7:b5:e5:ef:9c:c2:cf:91:99:4e:ae:2c:bb:45:85:eb:4f: e2:08:07:66:a6:47:4e:21:0a:2e:3d:4b:1f:d6:d8:58:43:a5: 04:27:7d:8e:8f:48:8e:5a:60:a1:72:68:c5:1b:b8:4c:19:96: 6b:e5:49:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8wUmrXstLD7IYDEet+GMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx OWUyOWEwHhcNMjUxMjE0MTMwMDQ3WhcNMjUxMjE1MTMwMDQ3WjAzMTEwLwYDVQQD EygyZmI1OTA1YTIwNTZjYjI5MDU4MTU1OWM2YzNjNjVjMTlhNzY3MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug6l3w6dSMLTWUZBU2raGLKSSYqv 4P7JCeb/vRTkidoXJGwzhdMZroZspdXqj1uqyWJk3GsBLlQ1MlDJoxSQKds0Ah31 WmQBbWKruDTOsL+JlCT1iAeUE1GjvqzXTUFudO9q0r/3sDy7/mbcPK9LoelAOzHv 4vrxiXU1ikGrsbUWvJLnZQ/uRuMfk/TZ4Cszz/viYp+AHfEl7rNFgBo9fYYz+XiC bHGVIT+VeJDXUNRXwQdnQCHLYkRTeHBjDnamX7ZMhpqXhjTC04+L5Mse/JJfv3Lu sXTGDRLpNS+tC/b/Wu+8mMrUe6u/o7sexR2KDe3Hpl54uRAoyggb1QUZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+1kFogVsspBYFVnGw8ZcGadnGfMB8GA1UdIwQY MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWunSN41v B/2doNiuTs/yMoeYXZsK1Y2q8H4sm7GzG02Ftoj/4LYLB5bG9l2E4e7qFVctYd+m 3wfDubvI9D0dPi1Nqac6/ctpJ7iwLwpCcwwSEbtP9VXKQbflHihpGltRUWb9nNAV Fuf5PFrAqTun1R3AWAygSNetzeRqFkLSN8M/L6fD3O0wxqufF71aKHd7LuzfrZEv vPzuTiDd0gsTt8YFSQ4KZCUmmgdVeeyAh/wCfpmKICu63cSR/VO/MpGiSRKLBUcB ufe15e+cws+RmU6uLLtFhetP4ggHZqZHTiEKLj1LH9bYWEOlBCd9jo9IjlpgoXJo xRu4TBmWa+VJDQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:17:58 2025 by rpki-client