This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: B7AaqBsTuptNQHSE3cWDtwIyquNfOwo1rd6RlkwH9wE=
Subject key identifier: 48:6F:2A:55:0D:3A:37:0C:B5:5E:A3:89:47:BD:AF:B8:D0:72:1A:58
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019B3EDACB1D9ADC8F7D6B63123CAF12170D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 03:01:24 +0000
Manifest this update: Sun 21 Dec 2025 03:01:24 +0000
Manifest next update: Mon 22 Dec 2025 03:01:24 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: F18r8klNK4fay9Ktt55Qz4ruVUX8i9Ms8iNMttd17xQ=)
2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:da:cb:1d:9a:dc:8f:7d:6b:63:12:3c:af:12:17:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Dec 21 03:01:24 2025 GMT
Not After : Dec 22 03:01:24 2025 GMT
Subject: CN=486f2a550d3a370cb55ea38947bdafb8d0721a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:35:e3:93:85:9b:d5:8c:47:76:28:37:70:
ca:84:a6:fc:d7:af:97:09:9e:b3:91:e1:2f:88:9e:
db:8c:18:1b:7c:c1:39:51:85:74:54:9f:dd:95:db:
f8:35:e1:1f:bd:0f:d2:e2:7b:03:f0:0d:d7:f6:13:
a3:47:85:ed:6f:92:fd:8d:04:72:07:d8:53:59:6a:
d9:b0:85:18:1b:46:e0:d1:dd:80:ff:5e:41:2d:1e:
c0:64:e3:d7:23:8f:83:03:d2:68:85:70:df:20:64:
b1:9a:c5:fa:a1:7c:53:23:47:b2:eb:50:78:31:f5:
80:77:eb:88:8a:7b:81:ef:81:7a:39:07:1b:b5:e6:
b6:8a:c6:02:af:ae:6e:d0:d3:0b:6e:da:73:bc:0b:
b3:8a:e3:14:9a:dc:49:d4:d0:67:0a:a1:01:2f:42:
6f:08:19:4e:fb:5d:c6:3e:ae:57:19:26:65:a1:2e:
bd:73:d5:a2:83:e0:bd:2d:71:bb:3e:3b:94:01:34:
0d:69:15:b6:9c:2c:b4:9a:90:8b:90:92:91:f4:c5:
06:af:1a:f9:ed:c2:81:96:8a:1f:9b:27:14:73:05:
21:83:59:0b:b2:3c:48:61:43:aa:7e:3d:10:46:21:
49:63:ad:6c:0d:72:56:18:b9:23:73:33:0b:79:21:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:2A:55:0D:3A:37:0C:B5:5E:A3:89:47:BD:AF:B8:D0:72:1A:58
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4f:4a:32:40:f2:2e:56:e9:16:f9:fd:4c:8a:d7:75:ed:28:
5e:8b:82:f4:af:d7:99:c0:92:cb:22:f3:00:8e:4d:81:50:8a:
8f:7d:d1:84:fb:40:12:9d:34:28:0d:e4:74:47:94:9e:41:86:
69:1f:19:16:65:ad:d5:39:d1:82:0d:7e:70:0f:1e:d2:6a:e0:
df:aa:01:0a:16:d9:92:63:58:f1:1e:9a:3b:40:37:f0:f8:b9:
26:04:e1:5e:ae:01:e0:4f:f8:c9:28:f0:a2:e1:9f:61:70:43:
58:73:6d:92:e7:2f:ac:f3:35:1a:2d:9c:43:18:e3:94:0c:51:
5f:79:1c:ea:83:28:59:87:a5:3c:12:13:96:4e:09:5f:83:0c:
36:ec:f9:1e:1a:65:bb:e6:a0:d3:1e:48:77:3b:76:7a:90:44:
3e:ea:33:f0:ab:7e:4d:11:80:17:3a:67:69:69:1d:5f:46:70:
cd:3d:f6:8a:7d:63:b5:90:eb:65:aa:e0:49:36:83:ca:ea:be:
2d:1f:ec:d2:03:31:47:80:6e:00:b8:b9:e0:18:87:46:39:ed:
7b:30:a1:18:b0:50:53:b2:73:40:11:76:a7:0d:8e:81:9b:ee:
98:1d:0d:4a:21:fa:1d:ec:1a:9f:be:87:54:87:f8:20:26:ba:
5c:50:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:57:26 2025 by rpki-client