This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json) Hash identifier: IWIPcMGV1WGxTD0AxvL23S3nk+R16Ekz9xrSIy15Vg4= Subject key identifier: 2A:EC:22:6E:79:2A:75:78:3D:34:D8:6A:20:0F:DB:8F:8B:91:EA:50 Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Certificate serial: 019B10818E917AB2780F8638AF9A7549134B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft Manifest number: 07A0 Signing time: Fri 12 Dec 2025 03:01:24 +0000 Manifest this update: Fri 12 Dec 2025 03:01:24 +0000 Manifest next update: Sat 13 Dec 2025 03:01:24 +0000 Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=) 2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: 9P482j9qZsX2dSgdR7dOzKCjwNnfNbIEfl8kCZGFj3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:8e:91:7a:b2:78:0f:86:38:af:9a:75:49:13:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993 Validity Not Before: Dec 12 03:01:24 2025 GMT Not After : Dec 13 03:01:24 2025 GMT Subject: CN=2aec226e792a75783d34d86a200fdb8f8b91ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:bd:0e:1a:4a:3a:57:16:06:ca:d9:d3:06: ea:3d:6a:4c:94:a0:77:89:cc:5e:0c:ff:79:3a:15: db:07:23:60:2e:b1:ba:3c:dc:9e:dd:ea:e7:b0:55: c8:b2:d7:0d:0a:77:50:b9:7a:33:a2:cf:c6:f4:1f: 4c:79:af:87:fa:77:4c:70:db:b6:f8:7b:5d:32:7f: 09:73:f7:39:9d:2a:02:b6:85:a1:70:02:99:be:41: 80:a3:bd:fe:f5:3d:14:b1:ce:90:e3:ca:d8:d8:96: 9d:50:1c:b0:f0:75:ee:47:6e:f6:fd:02:03:16:16: 2e:86:ca:3e:6f:a2:55:41:3c:e2:92:17:98:4d:2a: ec:57:b8:e6:90:ff:f4:98:b4:e8:26:72:41:06:ab: fd:62:be:d3:49:33:61:81:31:c2:c1:b2:73:1e:1b: d2:95:4b:7c:ad:ba:0d:8c:0a:1a:62:c8:e6:27:de: d3:58:03:c3:5a:3a:5b:9f:40:a0:71:81:7d:c4:2e: 13:69:10:96:63:e2:94:05:9e:56:55:d8:32:c3:68: 71:16:27:7b:5c:fe:1e:cd:2c:08:df:11:44:a5:d3: 98:74:21:9d:e5:b7:db:87:f9:32:22:20:e5:c9:59: f5:05:e3:57:52:1f:ee:43:c8:b8:01:37:04:8b:55: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EC:22:6E:79:2A:75:78:3D:34:D8:6A:20:0F:DB:8F:8B:91:EA:50 X509v3 Authority Key Identifier: keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:12:96:6e:85:09:eb:86:cf:1a:b9:7d:fa:32:85:5c:d1:21: 21:b5:eb:d6:16:2b:e8:a7:75:66:02:13:5b:89:58:11:3a:27: 25:5d:a9:7a:95:b5:5c:4b:fd:5b:34:38:b5:22:c8:42:d1:1b: c8:8d:e1:b1:f2:95:07:fd:28:e2:cf:f1:e9:d3:4d:f0:34:69: 74:42:b9:c9:bc:95:4f:9b:35:46:f2:28:a2:79:4b:a9:65:bb: b8:82:f8:49:5a:d1:46:7f:0e:bb:49:65:85:ce:d1:8d:02:9f: 17:86:a0:97:d0:09:17:f5:fa:02:6a:be:90:6e:4e:c3:d5:4e: 62:1d:7d:b5:1d:0e:bb:0e:ab:9c:5d:26:55:2c:3b:53:05:b0: 0a:6b:60:e7:fd:4a:36:31:11:85:07:5d:50:e9:db:23:9a:80: d4:6f:7b:99:48:08:7c:6b:70:e1:3a:71:06:8b:9c:9f:20:63: ba:29:a0:da:17:f5:79:f9:29:01:91:d1:a0:f4:91:91:32:bf: 3b:e7:e2:cb:29:e7:ae:1a:b4:90:bc:09:c6:56:40:2b:c9:b3: 2c:a5:ca:98:95:9c:cb:47:49:51:fb:4e:96:9e:7a:73:8d:df: 05:6f:ca:8a:6a:1e:43:21:6a:95:ec:2e:3b:cf:60:7d:8f:25: 84:40:43:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgY6RerJ4D4Y4r5p1SRNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz MGM5OTMwHhcNMjUxMjEyMDMwMTI0WhcNMjUxMjEzMDMwMTI0WjAzMTEwLwYDVQQD EygyYWVjMjI2ZTc5MmE3NTc4M2QzNGQ4NmEyMDBmZGI4ZjhiOTFlYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPK9DhpKOlcWBsrZ0wbqPWpMlKB3 icxeDP95OhXbByNgLrG6PNye3ernsFXIstcNCndQuXozos/G9B9Mea+H+ndMcNu2 +HtdMn8Jc/c5nSoCtoWhcAKZvkGAo73+9T0Usc6Q48rY2JadUByw8HXuR272/QID FhYuhso+b6JVQTzikheYTSrsV7jmkP/0mLToJnJBBqv9Yr7TSTNhgTHCwbJzHhvS lUt8rboNjAoaYsjmJ97TWAPDWjpbn0CgcYF9xC4TaRCWY+KUBZ5WVdgyw2hxFid7 XP4ezSwI3xFEpdOYdCGd5bfbh/kyIiDlyVn1BeNXUh/uQ8i4ATcEi1WQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrsIm55KnV4PTTYaiAP24+LkepQMB8GA1UdIwQY MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRKWboUJ 64bPGrl9+jKFXNEhIbXr1hYr6Kd1ZgITW4lYETonJV2pepW1XEv9WzQ4tSLIQtEb yI3hsfKVB/0o4s/x6dNN8DRpdEK5ybyVT5s1RvIoonlLqWW7uIL4SVrRRn8Ou0ll hc7RjQKfF4agl9AJF/X6Amq+kG5Ow9VOYh19tR0Ouw6rnF0mVSw7UwWwCmtg5/1K NjERhQddUOnbI5qA1G97mUgIfGtw4TpxBoucnyBjuimg2hf1efkpAZHRoPSRkTK/ O+fiyynnrhq0kLwJxlZAK8mzLKXKmJWcy0dJUftOlp56c43fBW/KimoeQyFqlewu O89gfY8lhEBDqw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:37 2025 by rpki-client