This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json) Hash identifier: hmergwCJ9gXR/PaflmXur1/B2egGR7pfw6OmGx8dWWY= Subject key identifier: C9:63:A7:7B:ED:7C:6D:FE:A0:AA:FD:BA:DB:47:65:C1:4B:A1:4D:8A Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019B41A434F8FEC21E53B0CE6364255D0AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 16:00:38 +0000 Manifest this update: Sun 21 Dec 2025 16:00:38 +0000 Manifest next update: Mon 22 Dec 2025 16:00:38 +0000 Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=) 2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: 2WHw16Yu3TFlGjNv7xzwMuJGhZw0U1X/L8xJD+z9qRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:34:f8:fe:c2:1e:53:b0:ce:63:64:25:5d:0a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Dec 21 16:00:38 2025 GMT Not After : Dec 22 16:00:38 2025 GMT Subject: CN=c963a77bed7c6dfea0aafdbadb4765c14ba14d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:fd:46:5b:99:ee:c3:0a:7e:15:07:38:60: 4d:e5:21:fa:2c:ce:ce:2b:80:63:f5:62:f5:d7:56: ac:ce:dc:ee:8d:92:41:62:af:85:70:92:53:4d:74: 3d:f4:36:00:ea:37:99:1e:42:48:5a:bc:99:1f:11: cc:72:19:4d:09:82:da:75:5d:4c:fc:3e:96:51:17: 53:99:b1:18:10:75:fe:f6:73:f0:c5:4d:48:23:25: a8:4f:4f:17:65:19:10:63:cb:76:b3:24:21:0e:a5: 8f:26:30:2b:ae:9f:b9:f1:8c:96:75:25:53:8c:9c: 92:6b:e4:b8:e6:0c:22:7a:62:9e:d7:d3:e8:63:49: f1:98:de:ce:c8:9e:6a:41:9c:42:8b:d0:c9:25:72: e1:63:ca:d2:88:33:50:d7:ae:ec:c5:17:5f:81:c8: f5:58:5c:b0:f6:31:85:6c:26:a7:0f:24:d4:25:da: 65:88:ad:b1:bc:fa:f1:45:84:e3:a3:95:da:06:02: 61:5b:4f:ae:5e:6d:0b:55:89:b6:3c:01:f1:17:21: 49:be:f3:29:48:de:85:1b:44:14:f9:f6:fa:89:ed: 3a:41:df:04:e7:00:29:dc:d2:d4:8b:d8:d4:5e:10: ee:b0:c9:fb:90:f0:ea:87:d1:d4:82:84:82:8e:3d: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:A7:7B:ED:7C:6D:FE:A0:AA:FD:BA:DB:47:65:C1:4B:A1:4D:8A X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fa:f8:7e:8c:ef:44:1b:40:58:7d:a6:92:b4:db:6e:fd:fe: a1:ee:02:bc:b0:ba:30:87:06:c4:22:78:a9:a7:9a:11:fe:ed: 7f:07:ee:09:4f:09:f1:bc:32:a5:6a:ea:df:75:6b:42:f9:8c: 90:e0:d9:3b:e2:78:48:b2:fb:97:6d:f0:2d:69:8f:d2:85:da: 51:1a:79:4b:b7:a7:6f:84:c6:26:48:dd:47:a4:d4:51:9c:45: e6:31:11:fe:66:4c:0f:b0:25:a5:22:4b:e3:85:dc:ec:dc:87: 27:ac:ea:06:0e:a3:db:a0:69:cd:7e:5f:84:39:f5:98:e7:66: b4:68:62:03:0c:82:61:fd:59:11:f6:39:27:64:2c:b0:25:05: d1:f9:f3:74:54:2e:33:82:41:d7:5b:3f:f7:8b:3b:7b:59:06: 59:67:fb:34:b4:b3:8c:3f:8a:db:19:59:ee:87:25:44:51:62: 79:cb:46:b4:3b:28:06:d3:c6:e1:41:ed:e3:21:16:17:7a:e2: 64:55:e7:57:ff:38:59:f4:4d:94:f6:d0:a7:58:f1:48:eb:0a: a4:e9:c8:bb:25:b1:a7:e6:66:36:5a:5a:f0:a4:61:dd:26:65: 4c:8e:97:5b:7c:90:04:d6:24:29:59:79:e0:37:b8:41:6f:b9: 48:46:7e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDT4/sIeU7DOY2QlXQqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjUxMjIxMTYwMDM4WhcNMjUxMjIyMTYwMDM4WjAzMTEwLwYDVQQD EyhjOTYzYTc3YmVkN2M2ZGZlYTBhYWZkYmFkYjQ3NjVjMTRiYTE0ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08b9RluZ7sMKfhUHOGBN5SH6LM7O K4Bj9WL111asztzujZJBYq+FcJJTTXQ99DYA6jeZHkJIWryZHxHMchlNCYLadV1M /D6WURdTmbEYEHX+9nPwxU1IIyWoT08XZRkQY8t2syQhDqWPJjArrp+58YyWdSVT jJySa+S45gwiemKe19PoY0nxmN7OyJ5qQZxCi9DJJXLhY8rSiDNQ167sxRdfgcj1 WFyw9jGFbCanDyTUJdpliK2xvPrxRYTjo5XaBgJhW0+uXm0LVYm2PAHxFyFJvvMp SN6FG0QU+fb6ie06Qd8E5wAp3NLUi9jUXhDusMn7kPDqh9HUgoSCjj13jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMljp3vtfG3+oKr9uttHZcFLoU2KMB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/r4fozv RBtAWH2mkrTbbv3+oe4CvLC6MIcGxCJ4qaeaEf7tfwfuCU8J8bwypWrq33VrQvmM kODZO+J4SLL7l23wLWmP0oXaURp5S7enb4TGJkjdR6TUUZxF5jER/mZMD7AlpSJL 44Xc7NyHJ6zqBg6j26BpzX5fhDn1mOdmtGhiAwyCYf1ZEfY5J2QssCUF0fnzdFQu M4JB11s/94s7e1kGWWf7NLSzjD+K2xlZ7oclRFFiectGtDsoBtPG4UHt4yEWF3ri ZFXnV/84WfRNlPbQp1jxSOsKpOnIuyWxp+ZmNlpa8KRh3SZlTI6XW3yQBNYkKVl5 4De4QW+5SEZ+8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 20:33:45 2025 by rpki-client