This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json) Hash identifier: C5oyetKYUaENui84RxfXDWlyYLC45w6xzAfKp86bx+M= Subject key identifier: F3:58:45:AE:B7:B0:B5:C4:D5:21:98:47:BE:AC:3B:71:89:00:F0:E0 Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B522A35DB38A3417E2952810CC5FD1305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 21:00:56 +0000 Manifest this update: Wed 24 Dec 2025 21:00:56 +0000 Manifest next update: Thu 25 Dec 2025 21:00:56 +0000 Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: mJErSFc6XO/Swy6SSb6Af4z10nMw4OEag3mnhrI7nHA=) 2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=) 3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=) 4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=) 5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=) 6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:35:db:38:a3:41:7e:29:52:81:0c:c5:fd:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Dec 24 21:00:56 2025 GMT Not After : Dec 25 21:00:56 2025 GMT Subject: CN=f35845aeb7b0b5c4d5219847beac3b718900f0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:84:86:ad:59:8d:86:b0:3e:92:61:69:dc: 61:00:69:c3:4d:0e:14:10:b8:cd:cb:5d:09:1d:ab: a2:0b:0f:ea:e6:ec:37:d0:08:d9:4b:04:3a:4d:ad: 20:4a:57:33:88:48:95:18:db:94:d2:ec:6b:fb:7b: 00:7d:ac:00:ac:98:b4:f1:9c:1c:61:13:27:e1:eb: 46:42:25:3e:37:85:a5:ab:04:80:2f:e4:cc:de:7b: 8a:bc:9d:35:59:fd:43:72:71:46:2a:59:25:4b:75: 5d:7b:ed:ba:bf:c0:b3:4d:e0:cb:d1:76:a9:af:44: 23:4f:ef:fd:3d:59:5a:a7:60:9a:d0:ce:9e:72:8c: 8f:17:b9:5d:d3:20:6d:52:6b:84:0c:cf:1c:06:f0: 41:0b:53:e7:28:ca:16:ec:c4:d2:c0:a2:16:8b:dc: 91:52:bb:4f:e2:3c:c3:c3:7c:6a:6c:66:2c:9d:a7: bd:a8:23:ce:b2:dd:75:1b:dc:75:05:f0:71:dd:d3: 08:cb:af:d0:c0:51:21:df:b4:fa:0f:01:3f:44:30: 5e:18:cb:31:13:cd:0a:84:42:ef:6e:f2:66:b0:14: 1b:d0:88:a6:53:b3:86:06:10:99:be:42:c8:bc:c8: 15:d4:f7:39:96:dc:5d:62:04:3b:8a:b5:2c:d8:18: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:58:45:AE:B7:B0:B5:C4:D5:21:98:47:BE:AC:3B:71:89:00:F0:E0 X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e6:17:1c:aa:d3:fe:c9:5b:19:5d:a9:82:c0:ed:4a:c9:f8: 54:73:8d:b9:54:92:80:d1:30:26:82:7d:c9:98:9a:c3:63:8f: 2a:d7:2d:bb:83:d1:bb:2f:b9:a3:71:d8:b2:a7:ab:85:4d:71: 93:0b:21:76:94:70:34:a4:e2:5d:e0:3e:27:7e:de:75:b6:2e: cd:39:3e:d7:e1:dd:2d:c6:b1:eb:24:19:d2:13:1f:3d:99:58: 37:4c:84:08:bc:bb:c1:1b:23:33:f6:d1:d3:9c:85:f4:3e:58: 40:66:79:47:66:69:6e:b0:23:91:94:2f:bc:92:ad:da:6f:ad: c2:77:9e:bd:dc:4c:e5:81:78:5f:21:3e:32:52:3a:69:1c:12: fc:60:62:26:2e:4e:60:1c:06:30:7d:c2:2d:37:75:7d:1d:5a: b2:f7:03:4f:42:18:42:68:a2:60:d1:2a:0c:02:b8:47:b1:d7: 64:d0:f7:49:c9:19:42:d7:cb:55:e2:f4:5e:02:ee:88:cd:5c: b7:20:96:9a:e4:ce:2e:66:0b:c6:e4:6a:cc:d4:2a:37:4c:5f: 3e:9c:74:c2:b0:b4:39:d2:e1:41:12:c6:29:89:52:00:8a:4d: 81:3f:d1:2e:a9:ad:67:73:3e:2e:60:ae:c5:81:4c:31:89:9a: 70:48:56:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKjXbOKNBfilSgQzF/RMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjUxMjI0MjEwMDU2WhcNMjUxMjI1MjEwMDU2WjAzMTEwLwYDVQQD EyhmMzU4NDVhZWI3YjBiNWM0ZDUyMTk4NDdiZWFjM2I3MTg5MDBmMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0maEhq1ZjYawPpJhadxhAGnDTQ4U ELjNy10JHauiCw/q5uw30AjZSwQ6Ta0gSlcziEiVGNuU0uxr+3sAfawArJi08Zwc YRMn4etGQiU+N4WlqwSAL+TM3nuKvJ01Wf1DcnFGKlklS3Vde+26v8CzTeDL0Xap r0QjT+/9PVlap2Ca0M6ecoyPF7ld0yBtUmuEDM8cBvBBC1PnKMoW7MTSwKIWi9yR UrtP4jzDw3xqbGYsnae9qCPOst11G9x1BfBx3dMIy6/QwFEh37T6DwE/RDBeGMsx E80KhELvbvJmsBQb0IimU7OGBhCZvkLIvMgV1Pc5ltxdYgQ7irUs2Bhd5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNYRa63sLXE1SGYR76sO3GJAPDgMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeYXHKrT /slbGV2pgsDtSsn4VHONuVSSgNEwJoJ9yZiaw2OPKtctu4PRuy+5o3HYsqerhU1x kwshdpRwNKTiXeA+J37edbYuzTk+1+HdLcax6yQZ0hMfPZlYN0yECLy7wRsjM/bR 05yF9D5YQGZ5R2ZpbrAjkZQvvJKt2m+twneevdxM5YF4XyE+MlI6aRwS/GBiJi5O YBwGMH3CLTd1fR1asvcDT0IYQmiiYNEqDAK4R7HXZND3SckZQtfLVeL0XgLuiM1c tyCWmuTOLmYLxuRqzNQqN0xfPpx0wrC0OdLhQRLGKYlSAIpNgT/RLqmtZ3M+LmCu xYFMMYmacEhWbg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:17 2025 by rpki-client