This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json) Hash identifier: B7AaqBsTuptNQHSE3cWDtwIyquNfOwo1rd6RlkwH9wE= Subject key identifier: 48:6F:2A:55:0D:3A:37:0C:B5:5E:A3:89:47:BD:AF:B8:D0:72:1A:58 Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B3EDACB1D9ADC8F7D6B63123CAF12170D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:01:24 +0000 Manifest this update: Sun 21 Dec 2025 03:01:24 +0000 Manifest next update: Mon 22 Dec 2025 03:01:24 +0000 Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: F18r8klNK4fay9Ktt55Qz4ruVUX8i9Ms8iNMttd17xQ=) 2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=) 3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=) 4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=) 5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=) 6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:cb:1d:9a:dc:8f:7d:6b:63:12:3c:af:12:17:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Dec 21 03:01:24 2025 GMT Not After : Dec 22 03:01:24 2025 GMT Subject: CN=486f2a550d3a370cb55ea38947bdafb8d0721a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:35:e3:93:85:9b:d5:8c:47:76:28:37:70: ca:84:a6:fc:d7:af:97:09:9e:b3:91:e1:2f:88:9e: db:8c:18:1b:7c:c1:39:51:85:74:54:9f:dd:95:db: f8:35:e1:1f:bd:0f:d2:e2:7b:03:f0:0d:d7:f6:13: a3:47:85:ed:6f:92:fd:8d:04:72:07:d8:53:59:6a: d9:b0:85:18:1b:46:e0:d1:dd:80:ff:5e:41:2d:1e: c0:64:e3:d7:23:8f:83:03:d2:68:85:70:df:20:64: b1:9a:c5:fa:a1:7c:53:23:47:b2:eb:50:78:31:f5: 80:77:eb:88:8a:7b:81:ef:81:7a:39:07:1b:b5:e6: b6:8a:c6:02:af:ae:6e:d0:d3:0b:6e:da:73:bc:0b: b3:8a:e3:14:9a:dc:49:d4:d0:67:0a:a1:01:2f:42: 6f:08:19:4e:fb:5d:c6:3e:ae:57:19:26:65:a1:2e: bd:73:d5:a2:83:e0:bd:2d:71:bb:3e:3b:94:01:34: 0d:69:15:b6:9c:2c:b4:9a:90:8b:90:92:91:f4:c5: 06:af:1a:f9:ed:c2:81:96:8a:1f:9b:27:14:73:05: 21:83:59:0b:b2:3c:48:61:43:aa:7e:3d:10:46:21: 49:63:ad:6c:0d:72:56:18:b9:23:73:33:0b:79:21: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:2A:55:0D:3A:37:0C:B5:5E:A3:89:47:BD:AF:B8:D0:72:1A:58 X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4f:4a:32:40:f2:2e:56:e9:16:f9:fd:4c:8a:d7:75:ed:28: 5e:8b:82:f4:af:d7:99:c0:92:cb:22:f3:00:8e:4d:81:50:8a: 8f:7d:d1:84:fb:40:12:9d:34:28:0d:e4:74:47:94:9e:41:86: 69:1f:19:16:65:ad:d5:39:d1:82:0d:7e:70:0f:1e:d2:6a:e0: df:aa:01:0a:16:d9:92:63:58:f1:1e:9a:3b:40:37:f0:f8:b9: 26:04:e1:5e:ae:01:e0:4f:f8:c9:28:f0:a2:e1:9f:61:70:43: 58:73:6d:92:e7:2f:ac:f3:35:1a:2d:9c:43:18:e3:94:0c:51: 5f:79:1c:ea:83:28:59:87:a5:3c:12:13:96:4e:09:5f:83:0c: 36:ec:f9:1e:1a:65:bb:e6:a0:d3:1e:48:77:3b:76:7a:90:44: 3e:ea:33:f0:ab:7e:4d:11:80:17:3a:67:69:69:1d:5f:46:70: cd:3d:f6:8a:7d:63:b5:90:eb:65:aa:e0:49:36:83:ca:ea:be: 2d:1f:ec:d2:03:31:47:80:6e:00:b8:b9:e0:18:87:46:39:ed: 7b:30:a1:18:b0:50:53:b2:73:40:11:76:a7:0d:8e:81:9b:ee: 98:1d:0d:4a:21:fa:1d:ec:1a:9f:be:87:54:87:f8:20:26:ba: 5c:50:dc:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2ssdmtyPfWtjEjyvEhcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjUxMjIxMDMwMTI0WhcNMjUxMjIyMDMwMTI0WjAzMTEwLwYDVQQD Eyg0ODZmMmE1NTBkM2EzNzBjYjU1ZWEzODk0N2JkYWZiOGQwNzIxYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5I145OFm9WMR3YoN3DKhKb816+X CZ6zkeEviJ7bjBgbfME5UYV0VJ/dldv4NeEfvQ/S4nsD8A3X9hOjR4Xtb5L9jQRy B9hTWWrZsIUYG0bg0d2A/15BLR7AZOPXI4+DA9JohXDfIGSxmsX6oXxTI0ey61B4 MfWAd+uIinuB74F6OQcbtea2isYCr65u0NMLbtpzvAuziuMUmtxJ1NBnCqEBL0Jv CBlO+13GPq5XGSZloS69c9Wig+C9LXG7PjuUATQNaRW2nCy0mpCLkJKR9MUGrxr5 7cKBloofmycUcwUhg1kLsjxIYUOqfj0QRiFJY61sDXJWGLkjczMLeSE26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhvKlUNOjcMtV6jiUe9r7jQchpYMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsk9KMkDy LlbpFvn9TIrXde0oXouC9K/XmcCSyyLzAI5NgVCKj33RhPtAEp00KA3kdEeUnkGG aR8ZFmWt1TnRgg1+cA8e0mrg36oBChbZkmNY8R6aO0A38Pi5JgThXq4B4E/4ySjw ouGfYXBDWHNtkucvrPM1Gi2cQxjjlAxRX3kc6oMoWYelPBITlk4JX4MMNuz5Hhpl u+ag0x5Idzt2epBEPuoz8Kt+TRGAFzpnaWkdX0ZwzT32in1jtZDrZargSTaDyuq+ LR/s0gMxR4BuALi54BiHRjntezChGLBQU7JzQBF2pw2OgZvumB0NSiH6Hewan76H VIf4ICa6XFDcUw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:26 2025 by rpki-client