This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json) Hash identifier: zru9hqi6upRIwB8k9oR+szZCIDsV+T+Wud3qEEww5xE= Subject key identifier: 8F:39:51:CA:BF:21:1A:43:44:84:C7:5D:53:82:9E:24:E7:6D:E7:70 Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a Certificate serial: 019B3B6B30BF6F5ECBB5062D934F1FA197C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:00:39 +0000 Manifest this update: Sat 20 Dec 2025 11:00:39 +0000 Manifest next update: Sun 21 Dec 2025 11:00:39 +0000 Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: BLJl1rImepBRgLSiHGYKUiyJZzNaUjOvDPpN0GtqyqU=) 2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:30:bf:6f:5e:cb:b5:06:2d:93:4f:1f:a1:97:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077946f04742c66279acd322009be15e3d588a5a Validity Not Before: Dec 20 11:00:39 2025 GMT Not After : Dec 21 11:00:39 2025 GMT Subject: CN=8f3951cabf211a434484c75d53829e24e76de770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:67:94:e8:a1:e1:e1:b5:4d:eb:df:c5:80: c3:0d:9c:af:50:4e:dc:73:75:12:15:65:0d:a5:b0: 66:cb:51:02:3d:a0:65:f3:b5:f7:13:ba:b3:21:c7: 1c:49:df:7c:bd:f4:f8:54:13:9f:69:63:be:8b:da: 4d:40:58:e0:c1:7f:01:87:55:0c:f1:cb:72:f6:64: 43:28:4c:eb:ac:7d:81:f8:c4:a1:d0:70:65:be:11: ab:f3:ca:9f:c0:2c:64:81:b2:27:12:bd:86:30:82: f2:ce:a6:a6:1e:1d:ee:16:81:cf:34:b7:f6:5c:35: 0c:24:5e:89:6a:59:02:3c:5b:57:a6:7b:f6:58:03: 31:8c:19:63:a5:bd:6c:4c:dc:cf:80:ab:b0:6e:59: 4a:0d:66:10:3a:af:ad:2d:ff:1a:1d:3d:60:8d:29: 30:08:73:b2:a4:70:23:4d:8c:70:10:d4:5c:dd:51: 12:b0:82:44:5b:ff:82:66:56:59:61:85:ab:cd:ff: 4d:68:b7:c7:8f:eb:4a:7a:62:79:3b:d0:cc:df:ea: d8:6c:89:1f:f0:6c:87:9f:fa:6a:fb:de:75:b7:05: f1:0b:81:0b:55:52:53:b7:4d:ec:f1:75:f3:e4:11: 2e:aa:02:ac:ae:51:18:dd:38:90:20:11:4f:a1:0e: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:39:51:CA:BF:21:1A:43:44:84:C7:5D:53:82:9E:24:E7:6D:E7:70 X509v3 Authority Key Identifier: keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:11:40:e9:02:e0:f9:8d:d2:94:6f:e5:c8:e9:a6:c5:b3:a0: 62:ff:5f:d3:13:63:d8:78:46:de:0e:fc:19:08:0c:eb:e5:11: a2:27:a9:96:91:e7:6a:75:96:5a:e6:bf:87:16:16:20:59:ba: 2c:d1:19:e5:c9:a8:c7:b2:9d:b2:36:3e:47:6a:ad:97:0f:9b: 1b:04:69:39:8b:d7:50:de:0e:49:25:2e:d9:e7:68:b5:b8:97: b4:e8:e0:8b:6b:ff:7b:3b:ec:1f:c7:58:27:c3:92:ac:5e:4d: 8c:e1:e7:e5:0a:a0:3d:d6:17:3c:31:9b:c3:60:a8:02:0b:07: 7b:97:a5:8d:01:4e:80:12:cd:ff:84:fd:33:3e:e5:89:11:ec: 67:d6:ca:19:5a:58:97:6c:1d:13:ce:33:14:44:b6:c9:60:81: 8f:ed:38:64:2c:95:0e:6c:67:33:6d:38:f9:ea:c5:d8:36:ec: 8c:c4:ec:e2:90:c4:d0:2b:13:04:18:85:e5:d5:2f:f3:f6:12: bb:a0:ed:40:7e:d2:f8:40:2a:1f:88:19:98:e3:91:63:36:24: fc:5d:f2:92:28:70:fa:03:fc:09:ed:41:0a:8a:7c:e0:2a:53: 79:a5:92:71:52:ef:ec:c0:15:d7:41:94:92:e0:5b:a2:ed:48: 62:65:e4:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azC/b17LtQYtk08foZfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1 ODhhNWEwHhcNMjUxMjIwMTEwMDM5WhcNMjUxMjIxMTEwMDM5WjAzMTEwLwYDVQQD Eyg4ZjM5NTFjYWJmMjExYTQzNDQ4NGM3NWQ1MzgyOWUyNGU3NmRlNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNBnlOih4eG1TevfxYDDDZyvUE7c c3USFWUNpbBmy1ECPaBl87X3E7qzIcccSd98vfT4VBOfaWO+i9pNQFjgwX8Bh1UM 8cty9mRDKEzrrH2B+MSh0HBlvhGr88qfwCxkgbInEr2GMILyzqamHh3uFoHPNLf2 XDUMJF6JalkCPFtXpnv2WAMxjBljpb1sTNzPgKuwbllKDWYQOq+tLf8aHT1gjSkw CHOypHAjTYxwENRc3VESsIJEW/+CZlZZYYWrzf9NaLfHj+tKemJ5O9DM3+rYbIkf 8GyHn/pq+951twXxC4ELVVJTt03s8XXz5BEuqgKsrlEY3TiQIBFPoQ4GfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI85Ucq/IRpDRITHXVOCniTnbedwMB8GA1UdIwQY MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt YmUxNTE4MzlmMzY2LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2 LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhFA6QLg +Y3SlG/lyOmmxbOgYv9f0xNj2HhG3g78GQgM6+URoieplpHnanWWWua/hxYWIFm6 LNEZ5cmox7KdsjY+R2qtlw+bGwRpOYvXUN4OSSUu2edotbiXtOjgi2v/ezvsH8dY J8OSrF5NjOHn5QqgPdYXPDGbw2CoAgsHe5eljQFOgBLN/4T9Mz7liRHsZ9bKGVpY l2wdE84zFES2yWCBj+04ZCyVDmxnM204+erF2DbsjMTs4pDE0CsTBBiF5dUv8/YS u6DtQH7S+EAqH4gZmOORYzYk/F3ykihw+gP8Ce1BCop84CpTeaWScVLv7MAV10GU kuBbou1IYmXkgg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:21 2025 by rpki-client