This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft File: b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json) Hash identifier: jeNnKvMdt1WpEemJL0EY6UdsFH7Bl/QZvcuzZ8ZEBxo= Subject key identifier: DA:6B:DC:61:30:A6:FB:06:27:8D:C6:CB:DA:DB:CA:45:DB:F1:52:92 Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e Certificate serial: 019B2BF8C63725AD5CB62FA1C1CE065DAC24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft Manifest number: 0A0B Signing time: Wed 17 Dec 2025 11:01:22 +0000 Manifest this update: Wed 17 Dec 2025 11:01:22 +0000 Manifest next update: Thu 18 Dec 2025 11:01:22 +0000 Files and hashes: 1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=) 2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: 3IvqzpEI6gTjA7c4Jmy3+4L9bkVFuSXOB1FmqLhqLK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:c6:37:25:ad:5c:b6:2f:a1:c1:ce:06:5d:ac:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e Validity Not Before: Dec 17 11:01:22 2025 GMT Not After : Dec 18 11:01:22 2025 GMT Subject: CN=da6bdc6130a6fb06278dc6cbdadbca45dbf15292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:c0:f3:54:65:28:99:19:3c:ac:f2:df:d0: d0:5e:55:fa:5e:98:0b:3b:4f:be:e9:7e:5f:37:ba: 9e:6f:84:66:15:5d:cb:6c:35:8f:60:af:1f:cd:7c: e8:b1:66:bb:54:fb:d2:61:e4:7c:a5:cc:8b:6d:37: 64:2f:7b:14:a3:58:56:51:a6:96:77:a0:49:16:76: 6d:ab:70:5e:76:df:e6:8f:90:3b:83:84:85:c5:e8: 32:77:a5:4e:f0:2a:5c:ce:73:0c:3a:7c:26:24:9f: 74:02:04:e1:36:8a:14:10:3d:c1:fb:6d:15:c6:52: 8d:ab:80:2d:fc:5b:07:71:35:21:6a:10:6a:ac:5e: 78:fb:31:07:09:34:4c:5c:1c:46:13:52:44:b9:02: 8c:46:ac:82:5b:75:7e:a5:39:41:cb:90:e5:35:34: 5b:db:ec:ec:94:7d:e1:3b:d1:f1:15:4b:30:30:15: c9:0c:23:b9:f5:57:4c:7c:74:31:29:2c:3b:15:d3: 45:16:8b:eb:85:c5:9e:f7:95:14:5d:8d:d4:8a:ba: 5b:bf:a8:ee:6c:de:a4:5b:39:5d:bc:c2:26:f3:4b: 21:a4:ae:4f:48:80:ed:54:26:a9:6c:7c:10:ba:67: 12:38:ca:a6:eb:54:d9:53:ba:8f:93:37:a0:0a:bc: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6B:DC:61:30:A6:FB:06:27:8D:C6:CB:DA:DB:CA:45:DB:F1:52:92 X509v3 Authority Key Identifier: keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:67:87:15:f2:81:3e:39:c2:61:4f:35:08:f3:e2:e4:65:fb: 22:85:57:2d:a2:e6:07:03:05:13:a7:2b:7c:0a:12:7d:16:79: 3a:9b:10:67:c5:08:b9:e0:b1:d9:14:b7:6f:8c:ad:36:b6:e0: e0:6f:0c:95:8d:53:2f:7a:16:82:0e:f5:75:b5:5b:ab:ce:c5: 59:20:6a:bd:bd:4e:bd:52:b2:c2:79:0c:3f:72:ca:bd:d0:d7: 34:42:65:0a:86:da:85:f0:87:d7:c2:86:ff:af:ad:a9:2c:ea: 7b:d7:32:98:f0:f1:82:65:40:e4:6f:b5:db:9a:bb:c7:74:9f: fe:61:f4:5d:39:3b:f7:e8:7f:87:65:ab:77:ea:ad:8d:91:f8: 8c:f9:3a:10:d6:6a:97:2b:2a:23:52:83:0b:ff:cf:57:43:b9: 6d:5f:62:8d:b9:ee:15:3d:21:4e:80:15:1a:64:e5:c0:43:8e: 4f:e7:a7:59:1b:a8:20:f8:d7:ee:89:39:07:6d:24:13:42:55: f1:58:f4:32:53:ec:8d:73:f0:41:a6:b8:d0:c4:46:31:7c:bf: d5:76:63:0c:94:68:47:0f:3a:7b:fe:7c:17:f0:86:f7:df:f7: 6e:35:73:23:72:94:6b:29:16:e4:ee:48:a1:2d:49:0a:9f:4a: b8:52:40:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+MY3Ja1cti+hwc4GXawkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZhMzcxODVhMjI5NDRhNjA3ZDlhOTRmOTg4NTk5N2Q4 NTFiMWUwHhcNMjUxMjE3MTEwMTIyWhcNMjUxMjE4MTEwMTIyWjAzMTEwLwYDVQQD EyhkYTZiZGM2MTMwYTZmYjA2Mjc4ZGM2Y2JkYWRiY2E0NWRiZjE1MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZvA81RlKJkZPKzy39DQXlX6XpgL O0++6X5fN7qeb4RmFV3LbDWPYK8fzXzosWa7VPvSYeR8pcyLbTdkL3sUo1hWUaaW d6BJFnZtq3Bedt/mj5A7g4SFxegyd6VO8CpcznMMOnwmJJ90AgThNooUED3B+20V xlKNq4At/FsHcTUhahBqrF54+zEHCTRMXBxGE1JEuQKMRqyCW3V+pTlBy5DlNTRb 2+zslH3hO9HxFUswMBXJDCO59VdMfHQxKSw7FdNFFovrhcWe95UUXY3Uirpbv6ju bN6kWzldvMIm80shpK5PSIDtVCapbHwQumcSOMqm61TZU7qPkzegCrzniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpr3GEwpvsGJ43Gy9rbykXb8VKSMB8GA1UdIwQY MBaAFG9/o3GFoilEpgfZqU+YhZl9hRseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMt YTM0YTRjOGIwYzhhLzEvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMtYTM0YTRjOGIwYzhh LzEvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2eHFfKB PjnCYU81CPPi5GX7IoVXLaLmBwMFE6crfAoSfRZ5OpsQZ8UIueCx2RS3b4ytNrbg 4G8MlY1TL3oWgg71dbVbq87FWSBqvb1OvVKywnkMP3LKvdDXNEJlCobahfCH18KG /6+tqSzqe9cymPDxgmVA5G+125q7x3Sf/mH0XTk79+h/h2Wrd+qtjZH4jPk6ENZq lysqI1KDC//PV0O5bV9ijbnuFT0hToAVGmTlwEOOT+enWRuoIPjX7ok5B20kE0JV 8Vj0MlPsjXPwQaa40MRGMXy/1XZjDJRoRw86e/58F/CG99/3bjVzI3KUaykW5O5I oS1JCp9KuFJAig== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:36 2025 by rpki-client