This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json) Hash identifier: sq0xilz8C3gEdy0+YeYQ8SILLd50CVcWFu9AxYt6jdo= Subject key identifier: E7:BB:B3:19:BA:3F:D7:94:0A:D0:48:BC:7D:87:C6:CA:29:CB:61:74 Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d Certificate serial: 019B4A02A3DE8525D4C76C9A3D8227249ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft Manifest number: 1326 Signing time: Tue 23 Dec 2025 07:00:45 +0000 Manifest this update: Tue 23 Dec 2025 07:00:45 +0000 Manifest next update: Wed 24 Dec 2025 07:00:45 +0000 Files and hashes: 1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=) 2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: QyG0eJlG/t2rSYaE2IGPXo/94v+u9Nw7uGcMZHcuSsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:a3:de:85:25:d4:c7:6c:9a:3d:82:27:24:9e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d Validity Not Before: Dec 23 07:00:45 2025 GMT Not After : Dec 24 07:00:45 2025 GMT Subject: CN=e7bbb319ba3fd7940ad048bc7d87c6ca29cb6174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:c4:27:b1:3f:83:e1:45:a0:56:c4:97:82: e0:fb:97:32:33:7a:9f:1e:81:95:d0:5d:e5:39:a8: 9d:fe:21:9e:9d:59:52:e9:53:84:cf:cc:d7:d3:9d: 5c:c7:6e:40:e7:b6:f4:ee:7b:ac:ab:00:e3:ab:eb: b9:de:7c:01:a8:2e:9f:c5:e7:44:72:78:c7:0a:53: c4:0c:7c:24:92:d4:ca:82:00:fa:ca:51:c1:b3:00: ff:a2:0c:6f:3f:0f:64:1d:c2:fb:0c:6a:b2:b8:f3: 76:76:dd:91:34:12:c5:4b:f8:7a:ab:cf:c5:1c:7f: e7:1c:5d:46:2c:bd:16:e6:b6:0c:02:d3:a3:28:fb: c3:89:9d:ff:da:c8:e0:0b:99:60:08:33:66:b4:93: da:08:f1:1d:1a:4c:6a:1d:b4:c2:75:7d:e9:84:50: 2f:b4:c0:66:69:ac:0a:c0:1a:b1:5b:89:12:5e:c4: 35:5f:e0:92:59:77:8a:0f:60:48:7c:3f:43:57:2c: 2f:d5:c4:9c:ce:a3:5d:e6:d3:47:e4:f9:97:7f:d1: ed:98:f8:56:0c:5b:6e:4a:d5:7e:57:9a:98:f0:e5: da:96:1e:fc:45:22:79:33:74:6d:97:d9:ad:38:b7: 8e:01:1c:07:b3:42:c6:e1:75:a5:8f:85:c9:12:88: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BB:B3:19:BA:3F:D7:94:0A:D0:48:BC:7D:87:C6:CA:29:CB:61:74 X509v3 Authority Key Identifier: keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7d:f7:89:ff:7b:32:bd:e6:a3:ef:06:f3:02:98:be:46:31: 3c:3c:a7:3a:ec:35:ff:8e:ab:79:df:20:ac:0f:69:60:a7:3d: 88:2c:95:fc:ed:23:d8:53:47:3b:33:41:10:69:95:df:24:f2: 18:3e:d1:50:14:a9:0f:ad:ea:ab:12:c3:85:b1:db:04:01:dd: 88:bb:c3:ce:c2:29:d0:66:7e:c6:1e:20:6e:1a:49:8a:aa:1c: a0:b0:a4:fd:13:0a:91:22:0b:44:21:2e:e2:b1:2a:85:2c:58: 3a:02:36:27:a5:7d:7c:70:9c:50:f3:69:20:a5:4d:8b:02:4d: fc:12:e3:8a:a4:e7:22:44:d1:fe:b7:d8:2a:f9:d7:55:db:76: dc:f2:7b:aa:40:77:94:24:39:da:38:0c:23:91:6c:e5:90:da: e7:c2:ec:12:b1:52:cc:31:eb:8c:98:75:26:39:26:2d:63:da: 9d:90:4e:90:b4:f6:78:b6:37:49:2c:e8:7c:8f:10:e4:49:5b: 57:c3:f7:4a:ef:75:b0:ad:d0:31:ce:ea:84:bb:f6:72:34:e7: a0:a1:2d:43:16:72:b5:49:e0:7e:f6:b3:cb:8f:13:2a:71:f0: bd:30:6b:8c:c7:a7:91:9c:ba:b8:7d:6f:a3:10:0a:16:12:29: e9:80:ac:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAqPehSXUx2yaPYInJJ7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmRkY2EwYWIyZWJlOGI4NTI5YTdjOWNlMWRkNmU4ZWE1 NTVjM2QwHhcNMjUxMjIzMDcwMDQ1WhcNMjUxMjI0MDcwMDQ1WjAzMTEwLwYDVQQD EyhlN2JiYjMxOWJhM2ZkNzk0MGFkMDQ4YmM3ZDg3YzZjYTI5Y2I2MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfjEJ7E/g+FFoFbEl4Lg+5cyM3qf HoGV0F3lOaid/iGenVlS6VOEz8zX051cx25A57b07nusqwDjq+u53nwBqC6fxedE cnjHClPEDHwkktTKggD6ylHBswD/ogxvPw9kHcL7DGqyuPN2dt2RNBLFS/h6q8/F HH/nHF1GLL0W5rYMAtOjKPvDiZ3/2sjgC5lgCDNmtJPaCPEdGkxqHbTCdX3phFAv tMBmaawKwBqxW4kSXsQ1X+CSWXeKD2BIfD9DVywv1cSczqNd5tNH5PmXf9HtmPhW DFtuStV+V5qY8OXalh78RSJ5M3Rtl9mtOLeOARwHs0LG4XWlj4XJEogBVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOe7sxm6P9eUCtBIvH2Hxsopy2F0MB8GA1UdIwQY MBaAFG293KCrLr6LhSmnyc4d1ujqVVw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYt MzlmZDNjYTc2Y2Q2LzEvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83M2U3OGUtNDVjZi00NWYwLTgyYmYtMzlmZDNjYTc2Y2Q2 LzEvYmIzY29Lc3V2b3VGS2FmSnpoM1c2T3BWWEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkH33if97 Mr3mo+8G8wKYvkYxPDynOuw1/46red8grA9pYKc9iCyV/O0j2FNHOzNBEGmV3yTy GD7RUBSpD63qqxLDhbHbBAHdiLvDzsIp0GZ+xh4gbhpJiqocoLCk/RMKkSILRCEu 4rEqhSxYOgI2J6V9fHCcUPNpIKVNiwJN/BLjiqTnIkTR/rfYKvnXVdt23PJ7qkB3 lCQ52jgMI5Fs5ZDa58LsErFSzDHrjJh1JjkmLWPanZBOkLT2eLY3SSzofI8Q5Elb V8P3Su91sK3QMc7qhLv2cjTnoKEtQxZytUngfvazy48TKnHwvTBrjMenkZy6uH1v oxAKFhIp6YCskg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:04:43 2025 by rpki-client