This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json) Hash identifier: TYSSZeZQfgteO2nvAOgkkB9LHJn387ySVQOCqXSYZ98= Subject key identifier: 5D:3D:19:14:FA:54:29:6E:E2:43:3D:05:EE:C9:8A:59:AA:DE:DA:CF Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Certificate serial: 019B4A03F366EECB9122037E3CD67A77296D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft Manifest number: 051D Signing time: Tue 23 Dec 2025 07:02:11 +0000 Manifest this update: Tue 23 Dec 2025 07:02:11 +0000 Manifest next update: Wed 24 Dec 2025 07:02:11 +0000 Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: iKn3FQfv48R/KyIbeCvfiJhu1KCwmfdsALmofCRekGU=) 2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:f3:66:ee:cb:91:22:03:7e:3c:d6:7a:77:29:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Validity Not Before: Dec 23 07:02:11 2025 GMT Not After : Dec 24 07:02:11 2025 GMT Subject: CN=5d3d1914fa54296ee2433d05eec98a59aadedacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:39:bf:4e:d1:6b:82:7e:9c:14:c6:5b:24: 42:98:57:ba:8a:ed:03:ef:7c:f4:b6:41:14:43:15: 1a:de:64:3a:7f:0b:0a:71:f5:7c:4d:d8:c3:f0:a4: e8:f0:83:b6:6d:b1:2b:ae:a1:01:e9:7e:58:ce:1a: 59:a1:30:23:6b:35:fb:fc:8a:53:be:37:1e:db:dd: 9d:16:5e:15:f8:8d:31:6f:33:29:cc:fe:49:d0:48: 58:88:4b:f1:bf:ea:ea:eb:c5:c8:03:68:d4:98:a6: 09:df:7a:0a:19:2b:2d:bb:de:44:19:39:8c:05:7f: cd:df:c2:b7:0d:4e:10:9d:8e:c0:1c:45:47:a8:1d: 22:72:11:0a:51:ee:77:6b:5a:43:58:2c:5d:a3:1b: ae:08:1e:43:ed:a2:77:4d:1d:64:08:ed:df:2f:70: 76:f6:d4:4e:f3:f8:93:4b:f4:88:d9:50:82:bb:11: 0d:db:af:56:10:ba:6b:9f:87:f2:87:c6:09:8d:81: c9:26:b9:1b:aa:cc:0b:b7:44:5e:a6:a7:a2:4a:a1: b3:72:db:fd:c6:a9:90:db:09:e7:2b:58:3a:d0:8d: 87:fc:7c:e7:f0:ae:a2:03:d4:40:4e:97:c6:e9:09: e9:c4:83:ff:53:b2:f3:c5:9b:dc:53:b1:85:88:39: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:19:14:FA:54:29:6E:E2:43:3D:05:EE:C9:8A:59:AA:DE:DA:CF X509v3 Authority Key Identifier: keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:b2:b9:74:6e:54:3f:30:c9:3e:b0:f2:c2:fe:fa:ef:e9: fb:4c:75:e2:07:16:83:0e:10:9f:ee:12:61:16:26:aa:5f:05: 25:02:6f:42:39:30:b4:b3:f5:35:27:c3:28:d2:12:cd:b1:5b: e0:cd:ee:72:6c:e9:7e:d2:0d:48:da:f8:db:1b:ef:cd:5d:10: 49:d6:0b:fd:38:67:08:0b:74:17:9c:df:a7:0a:29:bd:b7:0b: 51:90:74:fc:37:3b:9b:27:cd:fa:f1:25:2b:40:88:39:fe:22: 87:0b:8a:fe:32:6c:ea:97:b7:b0:83:0a:2c:98:0b:41:68:f8: fc:c2:75:6a:f3:a9:bc:f2:eb:25:f4:41:b7:77:9d:df:86:7c: 10:95:b2:ba:61:c6:d7:31:86:ea:f1:6a:26:56:29:af:98:ab: 01:20:63:7a:41:58:ba:b3:c4:0d:0c:ce:83:8a:ed:16:73:6d: b2:a7:a7:87:9d:bb:d7:05:7f:bb:c8:62:d1:e2:4c:9f:26:28: fe:c0:78:24:5a:dc:62:ca:d3:61:4d:b6:75:46:a1:07:c2:ac: ca:b1:66:b9:0e:1f:1e:cd:7e:bb:09:d8:14:dc:73:a6:e1:9b: 41:df:79:e3:a0:17:14:26:9e:57:b0:35:7d:d7:b5:99:e3:e0: cc:fa:94:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA/Nm7suRIgN+PNZ6dyltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy NDIyMjMwHhcNMjUxMjIzMDcwMjExWhcNMjUxMjI0MDcwMjExWjAzMTEwLwYDVQQD Eyg1ZDNkMTkxNGZhNTQyOTZlZTI0MzNkMDVlZWM5OGE1OWFhZGVkYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndI5v07Ra4J+nBTGWyRCmFe6iu0D 73z0tkEUQxUa3mQ6fwsKcfV8TdjD8KTo8IO2bbErrqEB6X5YzhpZoTAjazX7/IpT vjce292dFl4V+I0xbzMpzP5J0EhYiEvxv+rq68XIA2jUmKYJ33oKGSstu95EGTmM BX/N38K3DU4QnY7AHEVHqB0ichEKUe53a1pDWCxdoxuuCB5D7aJ3TR1kCO3fL3B2 9tRO8/iTS/SI2VCCuxEN269WELprn4fyh8YJjYHJJrkbqswLt0RepqeiSqGzctv9 xqmQ2wnnK1g60I2H/Hzn8K6iA9RATpfG6QnpxIP/U7LzxZvcU7GFiDlyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF09GRT6VClu4kM9Be7Jilmq3trPMB8GA1UdIwQY MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt YWRjYTFhNTdhYjBjLzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFeyuXRu VD8wyT6w8sL++u/p+0x14gcWgw4Qn+4SYRYmql8FJQJvQjkwtLP1NSfDKNISzbFb 4M3ucmzpftINSNr42xvvzV0QSdYL/ThnCAt0F5zfpwopvbcLUZB0/Dc7myfN+vEl K0CIOf4ihwuK/jJs6pe3sIMKLJgLQWj4/MJ1avOpvPLrJfRBt3ed34Z8EJWyumHG 1zGG6vFqJlYpr5irASBjekFYurPEDQzOg4rtFnNtsqenh5271wV/u8hi0eJMnyYo /sB4JFrcYsrTYU22dUahB8KsyrFmuQ4fHs1+uwnYFNxzpuGbQd9546AXFCaeV7A1 fde1mePgzPqU5A== -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:30 2025 by rpki-client