This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json) Hash identifier: eHgi608Gjd3tKCynmbuckz+V2r7l40Jhme6as6ZcmNw= Subject key identifier: 02:7C:8A:34:70:43:7A:5F:C0:51:45:E3:EE:7B:33:B1:57:09:67:8A Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Certificate serial: 019B4C5F474BD48479564E06C7E40F90852F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft Manifest number: 158D Signing time: Tue 23 Dec 2025 18:01:11 +0000 Manifest this update: Tue 23 Dec 2025 18:01:11 +0000 Manifest next update: Wed 24 Dec 2025 18:01:11 +0000 Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: OrpluenNYJGFui4EIhFFgoiSNogr0LR2dcfPpZybL/Q=) 2: q4kKsYZfOGon2mT-Eapypp72_Ec.roa (hash: w/Ifs9Hdm+PYXiSZpAXsafh4R7xPHRN+zAgqDILsgeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:47:4b:d4:84:79:56:4e:06:c7:e4:0f:90:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Validity Not Before: Dec 23 18:01:11 2025 GMT Not After : Dec 24 18:01:11 2025 GMT Subject: CN=027c8a3470437a5fc05145e3ee7b33b15709678a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:67:9a:67:56:5a:60:fc:0c:6d:0a:11:4c: b3:00:d6:30:9e:df:08:ff:96:41:0f:c9:cf:48:ac: e3:9f:d7:42:f3:e2:74:cf:0b:a2:60:b0:51:2b:b7: 0e:fd:b5:d6:5b:40:5b:6f:18:13:3c:1b:b0:f4:26: 55:68:95:2d:3c:bd:9b:d4:fd:11:69:c9:44:ef:9b: d6:18:79:bf:24:8f:a1:37:06:da:19:84:97:f5:88: 9a:7d:4c:50:ae:8f:01:33:81:e6:f2:57:80:25:02: 8e:53:d2:a2:8a:9e:54:f5:fa:45:63:06:56:82:83: d0:3b:88:6f:18:7d:6d:0f:9f:4f:97:81:51:60:06: e8:d9:78:f4:d7:3e:f2:52:39:a1:41:c7:40:25:92: f4:51:64:ac:1e:fc:9c:ab:30:f8:18:4d:6e:23:7b: af:4e:42:99:69:e9:8f:70:bd:31:fb:b9:a0:4a:b0: 72:ab:f4:5d:d8:be:f6:05:63:06:66:9b:a6:95:88: 3e:89:97:57:95:93:76:d7:d2:99:6f:c8:ee:aa:fc: 20:47:b5:64:4d:de:d4:17:09:68:fa:1a:3b:57:47: 8e:b5:76:0b:2a:eb:bd:86:8b:35:6a:22:2a:2b:2c: 97:60:9e:d7:61:7f:de:fd:d9:c0:75:4e:a7:11:5d: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:8A:34:70:43:7A:5F:C0:51:45:E3:EE:7B:33:B1:57:09:67:8A X509v3 Authority Key Identifier: keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2b:d6:e4:e1:c6:18:12:e2:0e:28:b4:f6:7f:7c:4e:16:a9: 1e:64:b3:2c:df:f6:53:25:b3:fd:7f:2d:39:f2:10:b0:46:e6: 75:71:98:c0:ec:32:3c:5f:cb:12:a5:0d:67:9a:4b:1b:51:b2: 96:a6:14:71:c6:7d:84:b7:73:ad:56:7f:00:08:1a:1b:14:eb: 3e:ed:b9:3c:52:97:d9:c0:04:ec:37:cd:d3:e8:a6:51:f8:ef: 8f:c2:d4:b3:cf:ed:4e:a3:86:58:28:bc:2a:09:c3:5a:8c:c0: 71:86:21:9f:cb:c5:6c:a7:4c:cf:0f:4f:a5:7b:1b:98:06:a3: 8b:5b:9b:56:18:af:fb:c5:ee:ba:21:13:ae:49:54:a6:49:bd: 7d:3e:b2:0e:15:a1:ed:57:15:46:23:8d:1d:ee:d4:8b:10:3f: d9:fa:c6:6e:7c:f6:f5:de:ec:41:6c:f0:a7:4a:2a:a8:d2:79: 94:75:4f:5b:ad:53:c0:3c:4d:18:85:3b:a2:5a:3f:ea:c7:e5: ec:e5:85:63:ae:79:24:2d:ce:0d:9c:70:a6:57:1b:6e:4a:31: df:a1:3b:34:76:41:6b:36:10:82:9f:2f:2a:a0:61:bd:80:5d: 22:0b:47:cd:77:3f:8d:6b:04:94:ee:09:02:b3:14:c8:8f:db: 4c:9c:7e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX0dL1IR5Vk4Gx+QPkIUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3N2EwZmI5OWU1MmFlNGZhMWQ2NmZhYWQ5M2Y0MmU2ZDA3 ODg2YTYwHhcNMjUxMjIzMTgwMTExWhcNMjUxMjI0MTgwMTExWjAzMTEwLwYDVQQD EygwMjdjOGEzNDcwNDM3YTVmYzA1MTQ1ZTNlZTdiMzNiMTU3MDk2NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XNnmmdWWmD8DG0KEUyzANYwnt8I /5ZBD8nPSKzjn9dC8+J0zwuiYLBRK7cO/bXWW0BbbxgTPBuw9CZVaJUtPL2b1P0R aclE75vWGHm/JI+hNwbaGYSX9YiafUxQro8BM4Hm8leAJQKOU9Kiip5U9fpFYwZW goPQO4hvGH1tD59Pl4FRYAbo2Xj01z7yUjmhQcdAJZL0UWSsHvycqzD4GE1uI3uv TkKZaemPcL0x+7mgSrByq/Rd2L72BWMGZpumlYg+iZdXlZN219KZb8juqvwgR7Vk Td7UFwlo+ho7V0eOtXYLKuu9hos1aiIqKyyXYJ7XYX/e/dnAdU6nEV3zmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ8ijRwQ3pfwFFF4+57M7FXCWeKMB8GA1UdIwQY MBaAFAd6D7meUq5PodZvqtk/QubQeIamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMt ZDQ2N2NjNmU3ZDhmLzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMtZDQ2N2NjNmU3ZDhm LzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyvW5OHG GBLiDii09n98ThapHmSzLN/2UyWz/X8tOfIQsEbmdXGYwOwyPF/LEqUNZ5pLG1Gy lqYUccZ9hLdzrVZ/AAgaGxTrPu25PFKX2cAE7DfN0+imUfjvj8LUs8/tTqOGWCi8 KgnDWozAcYYhn8vFbKdMzw9PpXsbmAaji1ubVhiv+8XuuiETrklUpkm9fT6yDhWh 7VcVRiONHe7UixA/2frGbnz29d7sQWzwp0oqqNJ5lHVPW61TwDxNGIU7olo/6sfl 7OWFY655JC3ODZxwplcbbkox36E7NHZBazYQgp8vKqBhvYBdIgtHzXc/jWsElO4J ArMUyI/bTJx+jQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:52:08 2025 by rpki-client