This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json) Hash identifier: LkGYig4wNInmvcPHNhnGepq1yY3p3sfri3BCoEuD2AY= Subject key identifier: C2:70:69:01:F0:20:35:F5:82:78:EF:06:17:2A:79:75:6D:21:47:B2 Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Certificate serial: 019B3AC6EBB7B1F957B7940A24900BA739D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft Manifest number: 0D9F Signing time: Sat 20 Dec 2025 08:01:13 +0000 Manifest this update: Sat 20 Dec 2025 08:01:13 +0000 Manifest next update: Sun 21 Dec 2025 08:01:13 +0000 Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=) 2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: 0hABdx+6KDO6tSC+x8lglMdWmc7Tan+aqH/WaXph9dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:eb:b7:b1:f9:57:b7:94:0a:24:90:0b:a7:39:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Validity Not Before: Dec 20 08:01:13 2025 GMT Not After : Dec 21 08:01:13 2025 GMT Subject: CN=c2706901f02035f58278ef06172a79756d2147b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:64:89:e2:b2:2e:d4:03:78:55:79:8e:6a: 35:1f:88:b0:a1:0f:89:cf:0e:8e:88:40:de:a6:a6: 8b:46:29:1a:93:57:58:c1:02:2d:bc:58:c1:4b:b7: 2a:68:e0:a0:74:f9:c0:1e:c7:0b:f5:0a:b5:28:d7: 92:9b:e1:dd:71:4e:a4:ec:ed:43:f9:72:b6:b6:74: 32:65:f1:41:01:59:8c:c8:fe:77:a3:d4:c8:5c:b1: b9:31:c6:05:ec:02:de:df:ed:41:fc:f3:36:8e:d7: d9:fc:ad:81:56:39:37:93:fe:d5:cd:96:a5:ad:49: 95:73:06:0c:d6:82:87:0f:40:71:00:58:31:d5:87: e8:9a:b4:16:f8:52:9c:22:30:95:a9:16:ae:b1:14: 32:1a:07:aa:fd:e9:71:65:98:7c:30:4e:28:71:67: f1:1b:87:32:0e:dc:06:69:cc:d5:10:d2:f0:56:60: 4c:47:67:b2:ef:e8:d6:89:c5:ec:cf:b1:b0:00:fc: ae:0c:79:d5:7a:60:d3:a1:af:05:42:94:68:d5:c1: 17:d7:c4:db:64:2e:51:b2:4b:c5:28:49:67:d6:bd: 74:94:f4:be:99:70:b7:1f:3b:2c:57:5a:68:99:9b: fb:c2:75:67:a5:24:62:d6:42:9c:70:c3:11:99:2c: 8e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:69:01:F0:20:35:F5:82:78:EF:06:17:2A:79:75:6D:21:47:B2 X509v3 Authority Key Identifier: keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a7:c1:56:81:7c:22:3a:ae:4e:62:44:47:d3:fe:93:d1:6b: 3b:18:96:f2:94:65:c4:ba:36:ec:63:cf:fd:c4:fb:80:30:12: 37:72:68:55:39:b1:98:34:b9:ec:da:15:8f:ed:07:0a:cf:ac: 57:8b:d8:b6:f9:ba:aa:41:f3:c9:8a:09:d9:64:55:54:b2:74: 65:1a:72:3c:c8:9f:2a:57:e5:6d:1a:cb:7a:47:ae:6b:3c:60: 65:11:89:50:ba:75:b8:c4:dd:e3:b5:01:26:a6:2b:63:48:67: 40:85:5e:f9:27:3d:1c:a3:ce:3a:a9:1f:86:16:7f:02:8a:2c: ad:ea:ba:36:ce:65:d8:66:87:fd:8d:14:1d:ee:cc:5f:c7:f3: e4:83:f6:ba:83:df:6e:b3:c0:e3:8a:dc:98:b4:60:cf:82:b1: 37:c0:79:ad:65:c6:ef:60:b2:b2:7b:41:1b:78:90:db:68:46: 94:7a:d6:7f:2e:51:c2:a0:25:00:94:95:2a:63:80:64:c9:82: 80:a3:6c:af:5f:4e:67:b4:37:cf:e2:ac:b9:12:ec:33:5e:2e: bc:f3:9c:3a:74:4b:a4:7b:72:66:e4:e2:f4:c1:bf:4f:dc:4a: 30:02:36:a7:5d:b1:67:cb:f0:57:1f:21:47:fd:b7:da:55:a2: d3:08:8c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuu3sflXt5QKJJALpznRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0 MmI3YmIwHhcNMjUxMjIwMDgwMTEzWhcNMjUxMjIxMDgwMTEzWjAzMTEwLwYDVQQD EyhjMjcwNjkwMWYwMjAzNWY1ODI3OGVmMDYxNzJhNzk3NTZkMjE0N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g5kieKyLtQDeFV5jmo1H4iwoQ+J zw6OiEDepqaLRikak1dYwQItvFjBS7cqaOCgdPnAHscL9Qq1KNeSm+HdcU6k7O1D +XK2tnQyZfFBAVmMyP53o9TIXLG5McYF7ALe3+1B/PM2jtfZ/K2BVjk3k/7VzZal rUmVcwYM1oKHD0BxAFgx1YfomrQW+FKcIjCVqRausRQyGgeq/elxZZh8ME4ocWfx G4cyDtwGaczVENLwVmBMR2ey7+jWicXsz7GwAPyuDHnVemDToa8FQpRo1cEX18Tb ZC5RskvFKEln1r10lPS+mXC3HzssV1pomZv7wnVnpSRi1kKccMMRmSyOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJwaQHwIDX1gnjvBhcqeXVtIUeyMB8GA1UdIwQY MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbafBVoF8 IjquTmJER9P+k9FrOxiW8pRlxLo27GPP/cT7gDASN3JoVTmxmDS57NoVj+0HCs+s V4vYtvm6qkHzyYoJ2WRVVLJ0ZRpyPMifKlflbRrLekeuazxgZRGJULp1uMTd47UB JqYrY0hnQIVe+Sc9HKPOOqkfhhZ/Aoosreq6Ns5l2GaH/Y0UHe7MX8fz5IP2uoPf brPA44rcmLRgz4KxN8B5rWXG72CysntBG3iQ22hGlHrWfy5RwqAlAJSVKmOAZMmC gKNsr19OZ7Q3z+KsuRLsM14uvPOcOnRLpHtyZuTi9MG/T9xKMAI2p12xZ8vwVx8h R/232lWi0wiMbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:38 2025 by rpki-client