This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json) Hash identifier: NYmUK/PQAAdvq111/d9jxVfnAdjuwhlFl8pT0PQQ3+g= Subject key identifier: 95:3C:89:7D:F2:FD:79:BF:DB:2B:AB:28:EC:2D:2C:4A:4D:7B:7A:10 Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B3CEBFAA8822F2DAB11006CE77FCDD39C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: Hvc/aEm6pdxHdLsHlmD5SZ6J1G3qf4sjJav1jwNsrrg=) 2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=) 3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=) 4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=) 5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=) 6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fa:a8:82:2f:2d:ab:11:00:6c:e7:7f:cd:d3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=953c897df2fd79bfdb2bab28ec2d2c4a4d7b7a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:d7:bf:6c:d7:e7:b7:2c:f5:67:66:d3:d6: 8c:63:6c:2d:99:8d:5e:44:45:c6:13:71:58:72:b4: f9:c1:24:ee:0e:ce:57:b8:2b:d3:46:d8:f2:73:06: 25:02:90:8f:47:d8:57:8b:38:a1:ef:02:cb:66:99: b1:e8:b0:85:ef:45:a7:a6:04:e5:84:19:72:7a:c7: 8c:96:a1:61:1d:6b:c3:6b:0f:9d:08:0f:fe:94:e5: 44:72:e7:c2:3f:03:ac:91:65:09:ce:a8:37:3f:30: 47:f6:a8:2f:d1:0a:70:e4:92:90:ab:de:df:fe:70: 47:aa:99:d8:99:ad:a2:2a:ed:77:bb:db:83:8d:8b: d3:52:b2:80:96:65:e5:dc:1c:cf:34:8f:6c:c9:75: 8d:af:f4:ad:9c:04:97:4d:fa:32:7e:42:f2:42:03: 5a:6b:d6:ea:8a:10:6b:4d:2d:60:2c:ac:f1:d1:62: a3:97:f5:89:ee:4d:a5:cd:5a:28:f0:d2:0e:21:63: d2:56:50:a4:bf:b5:19:e2:cc:cb:bc:5c:46:e2:03: 8b:43:e5:98:ea:52:ff:53:96:8a:ee:30:f0:66:f6: 31:13:4a:66:19:3d:e9:9c:ad:b4:cb:e7:08:9e:3d: 87:0e:07:64:5f:48:e0:75:8d:87:ed:41:21:94:a6: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3C:89:7D:F2:FD:79:BF:DB:2B:AB:28:EC:2D:2C:4A:4D:7B:7A:10 X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:83:f8:00:5b:39:c4:b6:5b:db:7f:cf:07:cc:a7:ec:0b: 01:b2:83:f3:c3:b9:27:6a:f6:41:c1:1b:c3:c5:2e:e8:0b:44: aa:55:b5:87:23:54:65:b7:24:02:f4:e8:15:c6:a4:02:2b:ca: d7:f3:11:50:ff:19:4c:07:cb:a5:c1:66:db:43:17:53:5b:04: 5d:40:3b:e5:3d:27:3e:46:d3:6e:92:a5:97:ed:d3:72:1b:5a: c6:c9:39:ab:64:41:a7:b0:4e:83:47:72:1d:dc:74:76:eb:6b: af:73:34:02:e9:b8:24:fb:04:86:13:c3:25:90:2f:15:29:ef: fb:10:b7:45:56:e3:ad:c7:1c:9e:fb:ed:95:e7:a8:29:9d:a5: a9:d4:88:0f:2e:10:28:6b:53:99:02:08:1a:89:39:bc:29:7d: 89:79:25:95:4b:c4:3d:15:02:fd:6b:11:6f:67:a1:5b:bc:54: 1d:ea:ef:8c:e4:24:d9:ed:ed:c4:50:5f:17:84:33:d0:cf:68: 16:f9:66:f3:07:31:cf:ca:b7:7e:cc:7f:ce:ff:71:6c:94:01: 3b:c8:d9:26:03:83:fd:cf:c7:3b:3d:5b:94:6c:68:7f:fd:68: 2c:85:80:68:07:91:5c:53:f7:b9:2b:71:d6:40:fd:b8:98:e1: 4e:3b:f0:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/qogi8tqxEAbOd/zdOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD Eyg5NTNjODk3ZGYyZmQ3OWJmZGIyYmFiMjhlYzJkMmM0YTRkN2I3YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73HXv2zX57cs9Wdm09aMY2wtmY1e REXGE3FYcrT5wSTuDs5XuCvTRtjycwYlApCPR9hXizih7wLLZpmx6LCF70WnpgTl hBlyeseMlqFhHWvDaw+dCA/+lOVEcufCPwOskWUJzqg3PzBH9qgv0Qpw5JKQq97f /nBHqpnYma2iKu13u9uDjYvTUrKAlmXl3BzPNI9syXWNr/StnASXTfoyfkLyQgNa a9bqihBrTS1gLKzx0WKjl/WJ7k2lzVoo8NIOIWPSVlCkv7UZ4szLvFxG4gOLQ+WY 6lL/U5aK7jDwZvYxE0pmGT3pnK20y+cInj2HDgdkX0jgdY2H7UEhlKY5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU8iX3y/Xm/2yurKOwtLEpNe3oQMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsyD+ABb OcS2W9t/zwfMp+wLAbKD88O5J2r2QcEbw8Uu6AtEqlW1hyNUZbckAvToFcakAivK 1/MRUP8ZTAfLpcFm20MXU1sEXUA75T0nPkbTbpKll+3Tchtaxsk5q2RBp7BOg0dy Hdx0dutrr3M0Aum4JPsEhhPDJZAvFSnv+xC3RVbjrcccnvvtleeoKZ2lqdSIDy4Q KGtTmQIIGok5vCl9iXkllUvEPRUC/WsRb2ehW7xUHervjOQk2e3txFBfF4Qz0M9o Fvlm8wcxz8q3fsx/zv9xbJQBO8jZJgOD/c/HOz1blGxof/1oLIWAaAeRXFP3uStx 1kD9uJjhTjvwUg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:53:12 2025 by rpki-client