This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json) Hash identifier: bV3pLFt8AOILL/51VBnk39K43J2AuvdADyCnRq32bdU= Subject key identifier: 58:61:9B:AC:8B:49:12:DA:75:D4:B2:0C:B0:4A:B3:AD:51:AB:02:16 Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7 Certificate serial: 019B51BCC13A216764B0DBB80AAE53614F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft Manifest number: 14CA Signing time: Wed 24 Dec 2025 19:01:23 +0000 Manifest this update: Wed 24 Dec 2025 19:01:23 +0000 Manifest next update: Thu 25 Dec 2025 19:01:23 +0000 Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: ZgQj+bj1dcKpnYS2lEKAy4dsDAgD5uCE/GBqQOpP0Ns=) 2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:c1:3a:21:67:64:b0:db:b8:0a:ae:53:61:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7 Validity Not Before: Dec 24 19:01:23 2025 GMT Not After : Dec 25 19:01:23 2025 GMT Subject: CN=58619bac8b4912da75d4b20cb04ab3ad51ab0216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:7e:a1:5e:07:9a:d6:cb:c6:f3:d4:8c:28: 8f:f0:8e:b6:99:fc:4f:e6:5e:72:8f:89:a9:15:15: 11:d5:04:f9:27:fa:20:27:5b:8b:f8:32:20:e9:ab: f1:1c:51:bc:6e:67:e5:b7:be:73:e2:2f:7b:66:e0: 99:09:ae:d2:e4:4b:7e:8d:b1:d5:7f:10:a5:46:b7: d3:5d:c5:b2:76:dd:a6:fb:22:e2:51:c2:c9:d1:f5: 0c:19:e1:ee:9b:55:b2:b7:76:b0:ee:de:01:9e:71: 97:59:45:68:3c:73:6a:ef:76:70:1a:28:20:4b:d2: e4:44:c5:c2:0b:e5:be:87:38:75:b2:06:7d:65:ce: 1b:a3:25:83:90:4d:e8:7b:39:43:a0:e0:32:12:02: d0:16:3c:db:e0:ed:81:75:cf:19:0e:e1:c9:18:dd: a3:45:04:3f:59:ff:b2:74:4d:f8:a5:3e:da:c4:e0: 2e:a5:43:82:ee:72:8b:7f:71:bf:d6:5c:77:54:d3: 16:be:a7:5b:10:e4:b8:21:49:26:79:0c:0d:41:8a: 05:82:98:77:d6:91:b8:4d:29:af:84:fa:63:da:6d: 10:03:82:0d:ba:a0:78:c5:f5:f9:16:3d:20:55:fd: ae:b2:37:99:e3:e6:c4:59:d7:1b:9f:12:d2:2a:2f: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:9B:AC:8B:49:12:DA:75:D4:B2:0C:B0:4A:B3:AD:51:AB:02:16 X509v3 Authority Key Identifier: keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:83:74:d7:fa:c0:76:dd:8a:66:19:ca:70:a6:6f:7e:24:65: 37:5b:56:12:b8:2b:29:b0:16:5f:a4:71:06:80:f4:61:9f:7e: 3a:27:80:2c:0b:7a:56:8e:f1:26:34:0f:63:e4:58:87:1f:78: 29:c7:9f:ef:8f:c5:30:08:d4:9e:37:9e:d8:70:cd:77:2c:fe: aa:77:72:63:5e:cf:99:0b:ce:f2:98:52:6d:de:c6:19:45:3d: c0:32:5d:9a:f4:be:27:9d:a4:c9:2d:b5:7f:1f:04:6b:b0:de: 0f:10:2b:49:b1:c3:27:e5:20:90:b8:18:a4:8b:71:d3:e4:42: 9f:c7:bf:97:d4:32:9a:00:87:ad:91:fa:fe:d5:69:8a:61:1e: 32:32:96:e6:95:2e:fa:fb:b5:d2:38:16:74:a2:72:4d:e5:fb: 40:53:54:77:6e:03:4d:26:ef:28:be:4b:06:ff:c6:d2:4d:e7: f8:87:c0:c3:40:a8:23:bf:a9:2f:10:02:13:5f:3b:5b:f5:4a: 16:35:f9:5b:55:a2:af:df:b3:42:ce:da:e4:70:6d:bc:cd:a1: 48:85:dc:3d:0b:54:f5:b4:d8:e7:e6:9c:6b:b7:68:99:cb:b0: 76:0c:ca:88:46:61:cf:2b:0e:6b:42:c0:a7:aa:e9:46:62:51: 4b:4f:44:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvME6IWdksNu4Cq5TYU+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4 ODQyZDcwHhcNMjUxMjI0MTkwMTIzWhcNMjUxMjI1MTkwMTIzWjAzMTEwLwYDVQQD Eyg1ODYxOWJhYzhiNDkxMmRhNzVkNGIyMGNiMDRhYjNhZDUxYWIwMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkZ+oV4HmtbLxvPUjCiP8I62mfxP 5l5yj4mpFRUR1QT5J/ogJ1uL+DIg6avxHFG8bmflt75z4i97ZuCZCa7S5Et+jbHV fxClRrfTXcWydt2m+yLiUcLJ0fUMGeHum1Wyt3aw7t4BnnGXWUVoPHNq73ZwGigg S9LkRMXCC+W+hzh1sgZ9Zc4boyWDkE3oezlDoOAyEgLQFjzb4O2Bdc8ZDuHJGN2j RQQ/Wf+ydE34pT7axOAupUOC7nKLf3G/1lx3VNMWvqdbEOS4IUkmeQwNQYoFgph3 1pG4TSmvhPpj2m0QA4INuqB4xfX5Fj0gVf2usjeZ4+bEWdcbnxLSKi8HiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhhm6yLSRLaddSyDLBKs61RqwIWMB8GA1UdIwQY MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIN01/rA dt2KZhnKcKZvfiRlN1tWErgrKbAWX6RxBoD0YZ9+OieALAt6Vo7xJjQPY+RYhx94 Kcef74/FMAjUnjee2HDNdyz+qndyY17PmQvO8phSbd7GGUU9wDJdmvS+J52kyS21 fx8Ea7DeDxArSbHDJ+UgkLgYpItx0+RCn8e/l9QymgCHrZH6/tVpimEeMjKW5pUu +vu10jgWdKJyTeX7QFNUd24DTSbvKL5LBv/G0k3n+IfAw0CoI7+pLxACE187W/VK FjX5W1Wir9+zQs7a5HBtvM2hSIXcPQtU9bTY5+aca7domcuwdgzKiEZhzysOa0LA p6rpRmJRS09EMA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:19:22 2025 by rpki-client