This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json) Hash identifier: srp+mgss6oJN9Kilq4TjmtX2/cPxyKNROWJsEjaHn2U= Subject key identifier: 69:DF:8B:FB:B9:D9:8B:C7:C3:82:63:42:49:F3:BE:3C:74:AC:88:1A Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Certificate serial: 019B5298D974158C40DA2EA98F6D930EE37E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft Manifest number: 025C Signing time: Wed 24 Dec 2025 23:01:47 +0000 Manifest this update: Wed 24 Dec 2025 23:01:47 +0000 Manifest next update: Thu 25 Dec 2025 23:01:47 +0000 Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: j4qtQ9Ypf2BOPayPaaW0vQwtvlisxtBYZpkk3nlWADo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:d9:74:15:8c:40:da:2e:a9:8f:6d:93:0e:e3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Validity Not Before: Dec 24 23:01:47 2025 GMT Not After : Dec 25 23:01:47 2025 GMT Subject: CN=69df8bfbb9d98bc7c382634249f3be3c74ac881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:2e:c0:7d:22:fe:21:9d:08:6e:a2:61:04: e7:d7:b3:aa:1b:7d:68:dc:4a:29:2e:71:eb:28:c1: ba:06:26:bd:8e:c1:a2:ff:6c:5e:62:ae:c1:b8:5a: 6a:00:12:1b:31:b9:cb:09:47:08:92:12:8e:23:5a: 4e:8e:d1:05:d0:0f:79:fe:ee:2d:db:25:83:d2:41: 1f:ea:38:5d:a7:11:f5:9f:c7:36:83:1d:98:d5:ae: ab:e2:cd:16:72:e6:07:8c:d6:37:ed:02:77:e6:4e: fa:e9:70:cb:2d:eb:6e:fa:cc:57:66:6f:67:c5:1d: 2f:ec:bd:2c:a3:3e:2f:50:a4:a7:1b:1a:42:aa:cd: 50:c1:2f:da:29:2c:ad:8c:9d:b4:5d:e1:f7:ec:70: 86:4c:9e:69:d1:d4:66:c6:89:ad:c4:7f:4a:59:26: 13:b1:40:6e:55:af:90:d2:1a:b2:25:d0:32:fb:e2: a3:45:17:2f:9e:aa:d1:4f:a2:ba:df:a5:f1:e6:d8: 3b:f1:1f:40:e4:a6:f9:cd:18:ea:32:96:73:52:8e: a5:3e:e9:e7:65:3c:98:99:a0:43:be:fc:b6:60:21: 1d:ec:96:4b:ad:0a:0f:6d:d2:13:1e:48:e7:c9:42: 8e:8f:e9:9e:2e:a6:4b:af:54:75:99:e2:68:8a:11: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:8B:FB:B9:D9:8B:C7:C3:82:63:42:49:F3:BE:3C:74:AC:88:1A X509v3 Authority Key Identifier: keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e8:42:15:cb:8c:e8:f1:a3:ac:88:8e:82:b9:bc:12:04:65: 85:89:e7:47:98:4d:66:39:a3:66:da:b8:0a:97:68:15:1a:11: fd:75:7d:a7:1d:64:2c:ae:fe:5e:06:56:bd:3c:1b:5a:10:26: a7:8f:0e:9f:e9:13:12:19:57:be:17:bb:62:8e:d4:77:13:f2: c2:2f:9f:1d:46:e4:aa:51:91:b2:98:00:a4:24:ae:8b:6a:09: 48:1f:05:da:06:ab:ca:7b:1d:e6:1d:85:05:68:ef:14:7e:ab: f1:4a:07:ac:cc:2f:4b:77:c6:01:9a:32:f0:64:30:70:54:82: b5:dd:54:b6:d9:ac:04:12:0e:9a:38:66:3e:43:7e:25:75:f4: 98:5f:16:cd:04:33:02:e9:f6:1d:e0:e0:81:02:87:d6:3e:2f: 6f:7a:28:36:66:c5:26:c4:2e:88:46:8a:d6:a9:d8:62:5e:98: 54:91:8b:30:b9:c2:12:88:0e:e3:e6:48:85:4f:2b:8e:41:23: 6e:9b:aa:f0:d2:e6:3d:14:c5:74:5d:f7:b6:b7:dc:b4:21:f0: 28:8e:b6:58:dc:58:cd:d0:e5:11:c3:ff:7e:24:dc:41:ec:cd: d6:2e:05:8f:af:e5:58:f7:db:5d:1c:d3:cb:6c:28:ba:41:6a: 2c:b0:8d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmNl0FYxA2i6pj22TDuN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3 ZjhkMGUwHhcNMjUxMjI0MjMwMTQ3WhcNMjUxMjI1MjMwMTQ3WjAzMTEwLwYDVQQD Eyg2OWRmOGJmYmI5ZDk4YmM3YzM4MjYzNDI0OWYzYmUzYzc0YWM4ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm8uwH0i/iGdCG6iYQTn17OqG31o 3EopLnHrKMG6Bia9jsGi/2xeYq7BuFpqABIbMbnLCUcIkhKOI1pOjtEF0A95/u4t 2yWD0kEf6jhdpxH1n8c2gx2Y1a6r4s0WcuYHjNY37QJ35k766XDLLetu+sxXZm9n xR0v7L0soz4vUKSnGxpCqs1QwS/aKSytjJ20XeH37HCGTJ5p0dRmxomtxH9KWSYT sUBuVa+Q0hqyJdAy++KjRRcvnqrRT6K636Xx5tg78R9A5Kb5zRjqMpZzUo6lPunn ZTyYmaBDvvy2YCEd7JZLrQoPbdITHkjnyUKOj+meLqZLr1R1meJoihE3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnfi/u52YvHw4JjQknzvjx0rIgaMB8GA1UdIwQY MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt ZTRjOGExOGJhNjQ1LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1 LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+hCFcuM 6PGjrIiOgrm8EgRlhYnnR5hNZjmjZtq4CpdoFRoR/XV9px1kLK7+XgZWvTwbWhAm p48On+kTEhlXvhe7Yo7UdxPywi+fHUbkqlGRspgApCSui2oJSB8F2garynsd5h2F BWjvFH6r8UoHrMwvS3fGAZoy8GQwcFSCtd1UttmsBBIOmjhmPkN+JXX0mF8WzQQz Aun2HeDggQKH1j4vb3ooNmbFJsQuiEaK1qnYYl6YVJGLMLnCEogO4+ZIhU8rjkEj bpuq8NLmPRTFdF33trfctCHwKI62WNxYzdDlEcP/fiTcQezN1i4Fj6/lWPfbXRzT y2woukFqLLCN7Q== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:25 2025 by rpki-client