This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json) Hash identifier: /GQg/ofLL3o0sLAAtpPe6McGr2rQaDbYjAxZksdP5RE= Subject key identifier: BC:19:1B:8A:69:FD:CA:97:47:13:A6:B8:E1:7D:16:38:3D:74:2C:CF Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019B476F56574544DB0EE4B7BC8164B0C5D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 19:00:37 +0000 Manifest this update: Mon 22 Dec 2025 19:00:37 +0000 Manifest next update: Tue 23 Dec 2025 19:00:37 +0000 Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=) 2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: Q2OUpdm8elUmqbmC3q5c7Jw3ZgNp0Hv5xpctRdb4fcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:56:57:45:44:db:0e:e4:b7:bc:81:64:b0:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Dec 22 19:00:37 2025 GMT Not After : Dec 23 19:00:37 2025 GMT Subject: CN=bc191b8a69fdca974713a6b8e17d16383d742ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:da:08:a2:a3:06:8b:7e:37:a1:d4:7d:31: e6:15:e6:1f:1f:b8:21:43:f9:b2:7c:b4:1b:c2:e9: 14:8b:58:c7:2a:5f:cd:98:3c:66:0d:2f:ff:d4:ee: 65:89:33:e2:db:29:d6:79:52:77:56:7b:9e:27:8f: ea:ad:17:6b:53:1d:e8:33:4f:90:d3:f3:20:57:0e: 2a:5c:3d:7f:3c:f7:77:76:43:41:8b:55:9d:d6:18: 83:81:d4:a8:d7:66:e0:fd:13:cf:15:c9:9c:12:ff: c1:04:ff:37:29:c4:70:ba:1c:0a:0a:fb:b3:ea:5c: 28:19:11:63:8e:f1:c6:de:3c:1b:89:28:82:74:6d: e8:46:c1:27:66:05:dd:c8:f0:5e:6e:41:8b:60:4f: 89:b0:01:70:40:8b:5f:d5:a1:e2:4d:85:ad:f3:77: d8:a2:af:ca:b8:d3:59:9a:53:07:9c:4a:ad:3a:62: d0:44:49:b8:06:1c:4f:e0:33:5f:e8:f9:4c:a6:94: ab:58:a8:ef:c8:da:61:7d:ef:d2:ab:1f:ff:ff:c3: bc:ae:17:b5:b8:25:42:48:2a:d0:2f:9e:3c:7a:6c: 84:2d:02:82:e5:5c:da:ad:ab:92:8d:55:e7:38:9c: e7:61:d2:14:35:3f:e2:e8:9e:b4:ad:0f:e0:af:4e: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:1B:8A:69:FD:CA:97:47:13:A6:B8:E1:7D:16:38:3D:74:2C:CF X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:15:1e:ca:3c:cc:88:68:32:d3:15:fe:8a:59:31:fa:31:82: e4:4b:57:d4:c9:00:ce:d2:53:39:8e:a4:86:a3:36:c8:c3:1b: 2d:f9:02:ae:87:c3:10:55:0c:65:a1:22:f4:08:d3:66:69:68: 4d:3e:2b:34:a4:c8:fa:ab:04:7e:f3:6a:2c:fd:94:7d:7f:16: 02:09:f1:2a:d7:d0:39:f0:9e:7e:d7:57:d8:9f:8f:0a:49:d4: a6:4b:9c:58:7c:37:69:f5:1c:30:b2:e7:70:68:c5:d4:21:86: 6d:82:e1:78:64:73:48:3f:f6:e9:a1:df:31:f3:19:54:89:42: 9b:65:47:d3:64:f0:c7:88:8e:3f:65:40:1a:ab:7e:91:8d:d2: bc:c1:6a:9e:79:3c:ca:f8:03:fa:7f:7a:85:98:d5:ed:93:0d: 93:72:24:be:11:4a:a1:02:44:48:2a:2d:14:f0:53:b1:a0:17: 0a:34:e8:f8:d2:b7:20:1f:dc:70:dd:af:16:1e:8e:d0:15:f9: 3f:4e:46:57:7d:6f:6a:8a:7e:48:31:96:8c:e1:50:25:8e:d4: 66:2f:49:54:a2:d6:59:b5:76:fb:61:6d:73:e7:9a:e2:56:9d: f3:2a:b2:31:b6:7d:c9:3d:46:f6:7f:16:00:37:67:aa:34:66: 60:c6:a8:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb1ZXRUTbDuS3vIFksMXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjUxMjIyMTkwMDM3WhcNMjUxMjIzMTkwMDM3WjAzMTEwLwYDVQQD EyhiYzE5MWI4YTY5ZmRjYTk3NDcxM2E2YjhlMTdkMTYzODNkNzQyY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S7aCKKjBot+N6HUfTHmFeYfH7gh Q/myfLQbwukUi1jHKl/NmDxmDS//1O5liTPi2ynWeVJ3VnueJ4/qrRdrUx3oM0+Q 0/MgVw4qXD1/PPd3dkNBi1Wd1hiDgdSo12bg/RPPFcmcEv/BBP83KcRwuhwKCvuz 6lwoGRFjjvHG3jwbiSiCdG3oRsEnZgXdyPBebkGLYE+JsAFwQItf1aHiTYWt83fY oq/KuNNZmlMHnEqtOmLQREm4BhxP4DNf6PlMppSrWKjvyNphfe/Sqx///8O8rhe1 uCVCSCrQL548emyELQKC5VzarauSjVXnOJznYdIUNT/i6J60rQ/gr06VeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwZG4pp/cqXRxOmuOF9Fjg9dCzPMB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxUeyjzM iGgy0xX+ilkx+jGC5EtX1MkAztJTOY6khqM2yMMbLfkCrofDEFUMZaEi9AjTZmlo TT4rNKTI+qsEfvNqLP2UfX8WAgnxKtfQOfCeftdX2J+PCknUpkucWHw3afUcMLLn cGjF1CGGbYLheGRzSD/26aHfMfMZVIlCm2VH02Twx4iOP2VAGqt+kY3SvMFqnnk8 yvgD+n96hZjV7ZMNk3IkvhFKoQJESCotFPBTsaAXCjTo+NK3IB/ccN2vFh6O0BX5 P05GV31vaop+SDGWjOFQJY7UZi9JVKLWWbV2+2Ftc+ea4lad8yqyMbZ9yT1G9n8W ADdnqjRmYMaoLA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:51:13 2025 by rpki-client