This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json) Hash identifier: mtk4ONonZj+Iebf2HL0lSe+IP+xWt3XOg7R1iQ1PFec= Subject key identifier: 18:31:5E:6E:0F:33:33:74:DB:76:FA:24:6F:BE:E3:DA:3D:FF:D3:36 Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e Certificate serial: 019B500517F9C5F457F1DCE09FEB8FBD027A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft Manifest number: 0EB8 Signing time: Wed 24 Dec 2025 11:01:09 +0000 Manifest this update: Wed 24 Dec 2025 11:01:09 +0000 Manifest next update: Thu 25 Dec 2025 11:01:09 +0000 Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: gcEcdG+EYKE4eY9sXUfui4l9VSZe6w7Ji+ZX8UhqIkw=) 2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:17:f9:c5:f4:57:f1:dc:e0:9f:eb:8f:bd:02:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e Validity Not Before: Dec 24 11:01:09 2025 GMT Not After : Dec 25 11:01:09 2025 GMT Subject: CN=18315e6e0f333374db76fa246fbee3da3dffd336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:0a:15:84:af:5c:81:de:ac:b6:7d:ca:f9: 6a:39:24:d2:f0:b9:d5:4b:ec:ea:ec:91:0e:d9:2e: 56:c1:5e:08:81:69:ca:8e:85:1a:8f:2c:c9:52:f6: 97:b9:75:33:26:9c:f9:86:fd:d7:11:80:f5:d6:91: 6d:6b:56:15:67:15:ee:75:40:8d:c4:77:7e:b0:78: 9d:63:5f:81:7b:b1:73:fd:15:4d:d0:04:e0:de:c9: d7:f9:db:ea:84:db:83:3f:21:bf:5b:13:ec:26:2e: 71:16:2e:4a:ee:70:b2:a8:bf:1e:ac:02:4c:e0:94: 8e:85:b2:cc:e9:ba:d9:d3:20:ad:ae:68:34:27:2e: 93:5d:aa:4f:45:fb:68:c1:e3:dd:5b:07:06:c5:20: b0:96:c9:dd:34:33:f7:45:dd:29:83:99:83:e8:dc: 4e:31:24:65:8d:93:a8:0b:39:7b:02:33:5a:59:4f: b5:47:4e:81:5a:d1:58:af:77:00:b7:07:7f:2d:f4: 78:dd:0c:07:d5:68:d2:1e:e0:5a:f8:e6:be:fb:2a: ca:4c:be:ef:1a:15:90:82:18:8d:fd:6e:4f:62:2c: 4c:34:ba:54:80:5a:d4:ca:e0:e5:88:5e:24:5b:23: bf:57:f1:63:76:16:60:12:f5:cb:8e:32:ae:b9:3e: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:5E:6E:0F:33:33:74:DB:76:FA:24:6F:BE:E3:DA:3D:FF:D3:36 X509v3 Authority Key Identifier: keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3f:9f:3d:6f:5d:d4:3e:75:03:5e:5d:d9:1b:22:a9:b3:46: d2:06:3b:56:0b:07:45:ea:d8:f4:34:70:d6:f8:28:e8:44:af: 0d:2e:3b:ec:bf:ee:1f:96:29:03:0a:59:7f:4e:32:e9:ab:84: 26:c9:89:09:ca:2d:62:5e:90:be:2e:a0:08:d8:ad:56:f9:cb: f6:ab:ce:b6:48:dd:08:a6:bc:c8:2c:90:3c:48:00:cd:fa:e9: 16:02:50:09:18:71:0f:a5:15:9e:32:c5:dd:01:67:63:b5:49: cb:0c:e8:8c:8e:9d:67:ed:c1:52:e4:b1:72:4c:93:db:ee:f7: 4f:f6:29:cc:45:49:6a:3e:29:47:37:e4:c9:31:2c:5a:59:da: b9:45:bc:bd:03:7d:13:15:49:2e:bd:35:70:2e:2c:52:90:af: 57:62:55:91:84:1d:7d:68:71:3d:c0:b3:cd:21:41:7d:be:ae: 0b:1a:85:79:0c:ef:62:57:9a:6b:94:78:c9:f2:0f:ad:e8:75: 3a:c1:21:22:a6:d6:d1:5e:80:4a:d6:df:6c:8b:be:e2:92:52: 9b:10:9b:21:9c:ad:ca:b0:04:8d:12:a1:55:20:08:af:36:1a: 9b:72:f9:f8:bc:5b:e8:8b:06:7a:e3:fa:a2:31:ed:1b:b4:38: 2e:c2:be:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBRf5xfRX8dzgn+uPvQJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2JlM2FkMWY3YzU5NTBjZDQ2ZDQ4YmIxZjdlYTc3NTBh ZmE4MWUwHhcNMjUxMjI0MTEwMTA5WhcNMjUxMjI1MTEwMTA5WjAzMTEwLwYDVQQD EygxODMxNWU2ZTBmMzMzMzc0ZGI3NmZhMjQ2ZmJlZTNkYTNkZmZkMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08cKFYSvXIHerLZ9yvlqOSTS8LnV S+zq7JEO2S5WwV4IgWnKjoUajyzJUvaXuXUzJpz5hv3XEYD11pFta1YVZxXudUCN xHd+sHidY1+Be7Fz/RVN0ATg3snX+dvqhNuDPyG/WxPsJi5xFi5K7nCyqL8erAJM 4JSOhbLM6brZ0yCtrmg0Jy6TXapPRftowePdWwcGxSCwlsndNDP3Rd0pg5mD6NxO MSRljZOoCzl7AjNaWU+1R06BWtFYr3cAtwd/LfR43QwH1WjSHuBa+Oa++yrKTL7v GhWQghiN/W5PYixMNLpUgFrUyuDliF4kWyO/V/FjdhZgEvXLjjKuuT5RTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgxXm4PMzN023b6JG++49o9/9M2MB8GA1UdIwQY MBaAFG97460ffFlQzUbUi7H36ndQr6geMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEt YmZhODcyYzJmMzkyLzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEtYmZhODcyYzJmMzky LzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz+fPW9d 1D51A15d2RsiqbNG0gY7VgsHRerY9DRw1vgo6ESvDS477L/uH5YpAwpZf04y6auE JsmJCcotYl6Qvi6gCNitVvnL9qvOtkjdCKa8yCyQPEgAzfrpFgJQCRhxD6UVnjLF 3QFnY7VJywzojI6dZ+3BUuSxckyT2+73T/YpzEVJaj4pRzfkyTEsWlnauUW8vQN9 ExVJLr01cC4sUpCvV2JVkYQdfWhxPcCzzSFBfb6uCxqFeQzvYleaa5R4yfIPreh1 OsEhIqbW0V6AStbfbIu+4pJSmxCbIZytyrAEjRKhVSAIrzYam3L5+Lxb6IsGeuP6 ojHtG7Q4LsK+5g== -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:17 2025 by rpki-client