This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json) Hash identifier: Nq999XQYMZ7t/EPmQB58F/SUaLcnuEI0AimBOHQEawY= Subject key identifier: 1A:56:4F:FB:2C:C4:02:9C:5F:03:35:E7:2B:DC:AF:2A:0E:41:8F:E0 Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef Certificate serial: 019B5D540857AB56EB05D9B1D4201C5E1B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft Manifest number: 0E59 Signing time: Sat 27 Dec 2025 01:02:26 +0000 Manifest this update: Sat 27 Dec 2025 01:02:26 +0000 Manifest next update: Sun 28 Dec 2025 01:02:26 +0000 Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: ioxkpkheWvooFFKue7VImRXuRREGsw1OPeXYr5AdOxc=) 2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:08:57:ab:56:eb:05:d9:b1:d4:20:1c:5e:1b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef Validity Not Before: Dec 27 01:02:26 2025 GMT Not After : Dec 28 01:02:26 2025 GMT Subject: CN=1a564ffb2cc4029c5f0335e72bdcaf2a0e418fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:a7:8e:ea:b5:1c:17:1e:e0:bb:2c:0f:0d: dd:76:c9:02:85:47:23:21:54:b7:ff:c8:b4:91:be: 53:cf:96:67:cf:80:00:05:92:61:34:07:57:96:c5: c2:c7:e5:d3:68:1b:07:ae:d7:70:a1:4f:2e:26:3d: d4:62:71:32:da:44:2a:70:c0:d2:b2:c3:16:3b:e0: 3b:7a:3d:8a:5d:fe:e5:24:d4:79:dc:72:13:f0:45: ce:e8:4a:43:8e:da:ee:e0:99:97:38:fd:31:8a:fe: dd:f4:8f:33:ab:34:1f:1c:4b:05:1e:7c:8a:ce:a6: 09:ae:40:d5:0a:b5:af:02:e3:4f:da:3f:36:72:79: b9:de:06:55:f9:60:14:df:10:6f:ce:5b:6e:06:b7: 8d:63:7a:10:75:0d:fd:af:4c:f1:32:cf:32:ce:54: a6:46:d7:56:a7:14:85:5b:db:37:e7:e6:a6:fd:fe: ce:d0:c5:04:64:0b:c8:07:80:d2:7f:eb:e3:89:aa: 55:74:3d:f7:b2:ac:a8:7c:2f:ab:e9:e7:ad:b6:0d: ca:34:93:f7:c6:5f:e9:52:7f:a8:db:37:ed:2f:14: 6e:bc:58:94:c5:a0:20:c0:b0:d4:3c:8d:80:1e:de: 68:44:dc:ff:98:c8:de:5f:80:ee:b8:2d:af:86:c9: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:4F:FB:2C:C4:02:9C:5F:03:35:E7:2B:DC:AF:2A:0E:41:8F:E0 X509v3 Authority Key Identifier: keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:1e:07:bb:c9:20:3f:8d:ae:76:ec:9c:c0:1f:49:b1:4e: 88:4d:18:82:a3:fd:e9:5a:0a:63:a6:a3:a3:69:86:d0:68:99: 6b:c0:97:bc:83:3e:dd:d3:56:41:9d:ee:cc:c5:3e:cb:84:5f: 7d:9f:d6:68:2c:81:4c:76:e0:f3:fa:4c:6c:0e:b7:9e:46:26: b4:ff:3b:7e:62:fc:ad:bd:eb:e5:8d:08:d6:32:a5:58:ea:fd: 56:f2:0f:c9:ec:64:5d:87:19:ac:75:63:bf:36:a6:c7:a3:e9: f8:fe:f1:b7:43:89:62:e2:5f:1d:10:1c:19:91:48:61:d9:9b: 50:17:a3:e4:6e:c2:86:68:d9:32:ee:bb:5c:56:8d:b6:ae:76: a1:e9:71:72:cc:8a:39:b7:78:71:25:86:b6:84:92:5d:28:05: b9:fa:16:5d:89:cb:9f:4b:1b:cc:41:01:66:82:11:f9:0e:74: 50:8c:ad:ce:d6:36:61:1e:b4:be:da:93:04:88:d5:0e:c6:ee: d4:fc:bd:57:c1:35:19:02:69:82:80:e2:41:67:12:57:9a:ff: 1d:58:9e:7a:4e:c3:4f:47:89:8c:2f:b5:75:d8:24:90:c8:68: 70:25:c3:a4:a2:7f:1e:73:09:90:4e:e0:bb:b5:fa:a5:39:4a: fc:9b:01:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVAhXq1brBdmx1CAcXhtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4 MTI2ZWYwHhcNMjUxMjI3MDEwMjI2WhcNMjUxMjI4MDEwMjI2WjAzMTEwLwYDVQQD EygxYTU2NGZmYjJjYzQwMjljNWYwMzM1ZTcyYmRjYWYyYTBlNDE4ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaynjuq1HBce4LssDw3ddskChUcj IVS3/8i0kb5Tz5Znz4AABZJhNAdXlsXCx+XTaBsHrtdwoU8uJj3UYnEy2kQqcMDS ssMWO+A7ej2KXf7lJNR53HIT8EXO6EpDjtru4JmXOP0xiv7d9I8zqzQfHEsFHnyK zqYJrkDVCrWvAuNP2j82cnm53gZV+WAU3xBvzltuBreNY3oQdQ39r0zxMs8yzlSm RtdWpxSFW9s35+am/f7O0MUEZAvIB4DSf+vjiapVdD33sqyofC+r6eettg3KNJP3 xl/pUn+o2zftLxRuvFiUxaAgwLDUPI2AHt5oRNz/mMjeX4DuuC2vhsm2WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpWT/ssxAKcXwM15yvcryoOQY/gMB8GA1UdIwQY MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOEeB7vJ ID+NrnbsnMAfSbFOiE0YgqP96VoKY6ajo2mG0GiZa8CXvIM+3dNWQZ3uzMU+y4Rf fZ/WaCyBTHbg8/pMbA63nkYmtP87fmL8rb3r5Y0I1jKlWOr9VvIPyexkXYcZrHVj vzamx6Pp+P7xt0OJYuJfHRAcGZFIYdmbUBej5G7ChmjZMu67XFaNtq52oelxcsyK Obd4cSWGtoSSXSgFufoWXYnLn0sbzEEBZoIR+Q50UIytztY2YR60vtqTBIjVDsbu 1Py9V8E1GQJpgoDiQWcSV5r/HVieek7DT0eJjC+1ddgkkMhocCXDpKJ/HnMJkE7g u7X6pTlK/JsB8A== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:32 2025 by rpki-client