This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json) Hash identifier: IM3whNwawYtwbIGp6gsx0/ozSxo4oSMixFgMd4dFkC0= Subject key identifier: D6:82:B0:7A:B7:55:EC:03:7A:8A:3D:53:40:81:0D:4A:F7:EF:17:12 Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Certificate serial: 019B0D80787A71D943839FAB10043105C2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 13:01:21 +0000 Manifest this update: Thu 11 Dec 2025 13:01:21 +0000 Manifest next update: Fri 12 Dec 2025 13:01:21 +0000 Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=) 2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: Ih3iQQ2sUtO+7dGT+ppRR2xpJ0pV+NG9E0hTUu9GtKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:78:7a:71:d9:43:83:9f:ab:10:04:31:05:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Validity Not Before: Dec 11 13:01:21 2025 GMT Not After : Dec 12 13:01:21 2025 GMT Subject: CN=d682b07ab755ec037a8a3d5340810d4af7ef1712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:ce:82:60:50:c9:ef:f1:79:e5:c8:ff:5c: 00:cf:c0:75:5d:53:18:4a:c4:15:58:69:3f:70:a3: ec:5f:19:cd:19:e5:4f:dc:c1:6a:b1:d5:03:36:9b: e3:36:7b:de:1a:a4:4c:10:2a:6c:af:31:89:1f:93: 42:80:36:44:47:56:2d:3a:91:16:49:59:fb:18:e0: 0f:29:d4:33:85:95:22:ef:63:4c:bd:2c:f1:67:47: ff:b5:28:a3:91:6f:91:13:21:d5:1a:de:36:bf:3f: 95:52:1a:d3:cf:f4:6e:f9:be:ad:52:54:38:5b:0c: 25:90:cf:bd:59:31:db:fe:73:25:8d:54:53:93:07: aa:e8:c0:1e:2b:73:44:cf:37:54:5c:e8:e4:90:05: 16:f1:a3:37:be:ac:93:50:21:65:2a:b1:2e:66:e4: ab:58:68:c0:c4:c7:7e:95:fb:9f:cf:d3:b2:5d:49: 19:49:c3:48:18:65:19:e7:9a:95:f0:80:da:5c:c8: 6f:15:3f:06:4e:44:85:95:48:ca:b7:44:8b:3d:23: a8:73:00:72:dc:a4:1f:23:63:22:f2:6a:04:80:27: 58:4f:72:d0:fb:9d:45:03:ab:b4:bb:e9:10:59:c4: 82:cb:b5:b6:58:46:7e:2e:82:62:db:01:17:9c:31: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:B0:7A:B7:55:EC:03:7A:8A:3D:53:40:81:0D:4A:F7:EF:17:12 X509v3 Authority Key Identifier: keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1b:08:51:6f:ce:ee:80:4a:57:7a:17:f0:e1:c0:5c:dc:76: 69:7e:f2:54:3e:6f:37:38:27:47:02:60:24:91:71:49:e4:56: db:88:d4:3f:48:2d:de:7c:3f:fc:98:e9:8d:5e:80:4c:c0:6f: e0:82:e2:00:cd:a7:20:aa:39:be:7a:73:ff:5a:a9:51:99:4b: f0:39:27:23:bb:3d:c0:06:a8:6e:c0:63:6a:69:63:31:d8:1b: 8d:0f:bf:74:c8:9b:7e:4f:ab:4a:d0:22:44:3e:66:cc:86:c1: f6:0e:04:c9:71:c7:00:84:b7:04:bc:72:83:34:f2:b7:3f:78: e3:bd:23:2f:8e:39:41:02:dd:df:eb:80:65:f2:f6:97:38:f2: 98:40:f6:ca:24:23:ac:9f:4b:23:85:a1:d4:09:d0:91:32:37: 1d:09:d5:f3:49:8c:8a:14:e0:ac:56:3e:0d:cb:61:2d:e2:ec: a3:16:62:a9:78:66:e6:76:a9:d8:3c:bf:c6:50:63:bf:4b:82: 74:7d:fd:42:84:c4:19:9d:a6:7b:9a:e7:d5:d4:ec:0f:92:73: d8:e7:b7:7d:79:68:ef:13:84:48:23:c0:73:44:43:97:4b:00: ea:84:16:ba:e6:48:22:11:43:1c:ed:5d:da:6e:59:08:35:90: e5:ab:7c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgHh6cdlDg5+rEAQxBcLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy ZTQ3ZGYwHhcNMjUxMjExMTMwMTIxWhcNMjUxMjEyMTMwMTIxWjAzMTEwLwYDVQQD EyhkNjgyYjA3YWI3NTVlYzAzN2E4YTNkNTM0MDgxMGQ0YWY3ZWYxNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshzOgmBQye/xeeXI/1wAz8B1XVMY SsQVWGk/cKPsXxnNGeVP3MFqsdUDNpvjNnveGqRMECpsrzGJH5NCgDZER1YtOpEW SVn7GOAPKdQzhZUi72NMvSzxZ0f/tSijkW+REyHVGt42vz+VUhrTz/Ru+b6tUlQ4 WwwlkM+9WTHb/nMljVRTkweq6MAeK3NEzzdUXOjkkAUW8aM3vqyTUCFlKrEuZuSr WGjAxMd+lfufz9OyXUkZScNIGGUZ55qV8IDaXMhvFT8GTkSFlUjKt0SLPSOocwBy 3KQfI2Mi8moEgCdYT3LQ+51FA6u0u+kQWcSCy7W2WEZ+LoJi2wEXnDGqkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaCsHq3VewDeoo9U0CBDUr37xcSMB8GA1UdIwQY MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBsIUW/O 7oBKV3oX8OHAXNx2aX7yVD5vNzgnRwJgJJFxSeRW24jUP0gt3nw//JjpjV6ATMBv 4ILiAM2nIKo5vnpz/1qpUZlL8DknI7s9wAaobsBjamljMdgbjQ+/dMibfk+rStAi RD5mzIbB9g4EyXHHAIS3BLxygzTytz94470jL445QQLd3+uAZfL2lzjymED2yiQj rJ9LI4Wh1AnQkTI3HQnV80mMihTgrFY+DcthLeLsoxZiqXhm5nap2Dy/xlBjv0uC dH39QoTEGZ2me5rn1dTsD5Jz2Oe3fXlo7xOESCPAc0RDl0sA6oQWuuZIIhFDHO1d 2m5ZCDWQ5at81A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:04 2025 by rpki-client