This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json) Hash identifier: b9oRUpNkGlz/IgjVRotPyxMEGzK+G/1NqWf3PxlS1kk= Subject key identifier: BF:08:06:65:2E:BE:4F:2D:E1:87:B9:6D:C7:E7:39:5F:B8:67:59:15 Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Certificate serial: 019B5A51427D7A9D7FC3BF483758F93B745E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft Manifest number: 069A Signing time: Fri 26 Dec 2025 11:00:33 +0000 Manifest this update: Fri 26 Dec 2025 11:00:33 +0000 Manifest next update: Sat 27 Dec 2025 11:00:33 +0000 Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=) 2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: K5LLH3p8db3z0c0DQUdZ9bER+X7C4yJ70oBrgyV2RY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:42:7d:7a:9d:7f:c3:bf:48:37:58:f9:3b:74:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Validity Not Before: Dec 26 11:00:33 2025 GMT Not After : Dec 27 11:00:33 2025 GMT Subject: CN=bf0806652ebe4f2de187b96dc7e7395fb8675915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:3e:ef:93:2c:19:be:23:54:ca:ff:ec:c4: c5:b3:fe:24:7c:0f:e9:6b:87:a9:a9:47:d7:5a:ee: d0:de:1c:66:bd:a4:21:e5:92:1f:e1:59:e2:ab:19: 0e:b1:b3:37:88:66:82:d7:ad:da:5b:2f:d8:cc:28: 12:94:21:bc:38:4a:53:29:2e:9c:11:41:b1:40:f8: 46:4c:84:ea:4a:0d:f4:8d:f5:bf:3e:de:74:f5:7f: 14:dd:40:18:a9:35:b0:e7:1b:f2:2d:1f:0e:94:ab: f9:68:c0:64:e7:b5:d8:59:0e:7d:32:ec:17:91:55: 61:c6:5a:10:e6:bf:1f:b7:d4:f3:74:91:9a:ac:90: e2:04:8c:74:19:b4:31:07:83:9c:e8:c3:fd:54:3d: a7:91:8e:11:14:60:14:dc:f4:bc:1f:fa:18:39:75: 3c:fa:3d:86:02:e2:5a:d9:f8:ba:03:63:07:84:fb: 8d:4c:80:64:b3:10:52:ed:ee:d2:c8:3a:7b:14:e3: 3f:89:0e:b4:40:da:95:0c:15:31:28:1b:a5:68:17: 57:46:7c:c6:55:9a:aa:0d:e7:f8:36:ea:b2:e4:58: a1:31:8b:6e:ed:6f:47:53:c1:8e:85:79:89:a8:3c: 78:14:f3:e2:5d:8d:20:6e:33:9d:cf:69:06:8d:d6: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:08:06:65:2E:BE:4F:2D:E1:87:B9:6D:C7:E7:39:5F:B8:67:59:15 X509v3 Authority Key Identifier: keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3b:e5:93:c7:bc:22:64:82:a4:09:f2:73:9b:99:db:16:2f: 32:96:4a:6d:51:92:85:f8:26:66:63:62:38:97:38:57:30:a3: 50:99:c2:ef:09:10:91:06:ba:db:e7:5f:37:2d:56:8b:28:ca: 8b:26:bc:7a:b0:72:49:cc:1d:f3:01:2f:eb:3b:df:97:e4:f7: 1f:6d:18:cb:90:02:df:e3:62:7f:db:54:03:5a:66:e2:fd:b7: f3:6f:39:ba:45:b4:a0:2b:3f:fd:f2:40:f1:30:5d:67:17:51: 67:08:6f:65:bd:21:3e:65:13:e7:a3:ad:fe:a4:79:2e:75:69: 43:c9:06:c1:c8:ec:45:f2:2d:ec:57:bc:cb:ff:a9:43:1c:2f: d2:31:10:4e:0d:5b:61:f9:b7:6b:5c:53:90:fb:05:20:aa:f3: 73:30:d4:e5:6b:35:22:06:26:1e:79:aa:29:a1:2d:b3:91:41: b1:a8:dc:bd:0b:cc:40:cd:c7:ef:fb:da:a0:ad:4f:b6:aa:b4: 6d:90:81:c1:6b:8f:1d:a1:ed:6a:9a:dc:3e:91:8d:2e:95:57: e4:e7:81:59:ff:2f:95:68:33:90:46:02:31:08:b2:45:96:cc: 26:3b:75:83:83:d9:42:2e:93:b9:ef:e4:37:af:cb:45:42:65: 96:f9:67:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUJ9ep1/w79IN1j5O3ReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4 NWU5ZjcwHhcNMjUxMjI2MTEwMDMzWhcNMjUxMjI3MTEwMDMzWjAzMTEwLwYDVQQD EyhiZjA4MDY2NTJlYmU0ZjJkZTE4N2I5NmRjN2U3Mzk1ZmI4Njc1OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHo+75MsGb4jVMr/7MTFs/4kfA/p a4epqUfXWu7Q3hxmvaQh5ZIf4VniqxkOsbM3iGaC163aWy/YzCgSlCG8OEpTKS6c EUGxQPhGTITqSg30jfW/Pt509X8U3UAYqTWw5xvyLR8OlKv5aMBk57XYWQ59MuwX kVVhxloQ5r8ft9TzdJGarJDiBIx0GbQxB4Oc6MP9VD2nkY4RFGAU3PS8H/oYOXU8 +j2GAuJa2fi6A2MHhPuNTIBksxBS7e7SyDp7FOM/iQ60QNqVDBUxKBulaBdXRnzG VZqqDef4Nuqy5FihMYtu7W9HU8GOhXmJqDx4FPPiXY0gbjOdz2kGjdYttQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8IBmUuvk8t4Ye5bcfnOV+4Z1kVMB8GA1UdIwQY MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0 LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzvlk8e8 ImSCpAnyc5uZ2xYvMpZKbVGShfgmZmNiOJc4VzCjUJnC7wkQkQa62+dfNy1WiyjK iya8erByScwd8wEv6zvfl+T3H20Yy5AC3+Nif9tUA1pm4v238285ukW0oCs//fJA 8TBdZxdRZwhvZb0hPmUT56Ot/qR5LnVpQ8kGwcjsRfIt7Fe8y/+pQxwv0jEQTg1b Yfm3a1xTkPsFIKrzczDU5Ws1IgYmHnmqKaEts5FBsajcvQvMQM3H7/vaoK1Ptqq0 bZCBwWuPHaHtaprcPpGNLpVX5OeBWf8vlWgzkEYCMQiyRZbMJjt1g4PZQi6Tue/k N6/LRUJllvlnSA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:04 2025 by rpki-client