This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json) Hash identifier: F3UX/OeFpBbv4jlNixz0WXR6XsaXtqB94dYNYPXXnmE= Subject key identifier: D9:3E:8D:0F:40:73:13:F9:EF:A4:12:74:5F:13:75:89:72:5E:47:99 Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Certificate serial: 019B34200306436899C5A177393B76E74CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 01:01:11 +0000 Manifest this update: Fri 19 Dec 2025 01:01:11 +0000 Manifest next update: Sat 20 Dec 2025 01:01:11 +0000 Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=) 2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: 6KjqXPVFdItvttt5LtT8d2WDBbuFsAEiacN0oLm6T90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:03:06:43:68:99:c5:a1:77:39:3b:76:e7:4c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Validity Not Before: Dec 19 01:01:11 2025 GMT Not After : Dec 20 01:01:11 2025 GMT Subject: CN=d93e8d0f407313f9efa412745f137589725e4799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:55:de:20:f4:ea:b2:cc:ff:4d:81:44:95: b6:9f:0e:35:01:f4:01:96:07:f4:04:81:a0:66:63: 45:a5:a5:ee:6e:d1:60:7a:05:a9:aa:ff:9d:39:40: f0:5c:5f:f0:b1:a8:5e:b1:13:21:f3:5c:d6:ca:c2: 0e:1e:27:cc:26:e6:d0:0c:b7:91:7e:28:f8:86:93: 2b:e7:d0:73:ae:34:7a:29:2a:16:23:d2:ba:05:31: 13:17:9c:84:92:a7:21:91:de:56:5d:10:54:76:6a: 8f:cd:33:c8:d0:41:9d:70:79:2c:89:b2:2b:b2:6e: 8f:f8:0b:cc:ae:c8:0f:e1:e5:c4:2a:bc:cf:6a:75: fe:fc:6c:15:27:cb:9d:0f:9f:10:82:41:f7:0d:c8: 62:4c:75:fc:77:23:75:c7:74:6b:80:5c:f2:ca:79: 9e:03:e2:d9:9b:dc:6e:21:da:51:b7:50:1c:d8:0c: f1:39:ce:73:ec:40:5d:42:d6:9a:81:2a:90:36:67: 18:dc:26:64:09:fd:a6:c7:be:55:fa:65:b0:7f:c3: dc:96:ca:5d:8c:b9:68:30:6a:dc:c0:2e:83:81:fa: 78:13:1e:fa:2c:7c:1c:48:d0:b7:15:77:f1:64:92: 92:86:6a:b1:9d:a0:f9:71:d4:ad:37:f5:fb:6a:fd: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:8D:0F:40:73:13:F9:EF:A4:12:74:5F:13:75:89:72:5E:47:99 X509v3 Authority Key Identifier: keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:c2:98:7c:5c:95:a3:ff:b0:8a:d0:b8:13:98:ac:dc:12:b0: cb:fc:0e:10:b8:de:46:1b:8c:1f:55:c1:09:f0:89:93:b5:91: 64:47:89:39:cd:0d:28:46:d5:03:7b:6b:0b:3a:a2:5d:30:6b: c1:05:aa:86:07:2e:02:d4:c1:37:20:b5:3e:92:b8:04:9f:2f: fa:af:45:17:c2:f3:05:2e:65:76:dc:26:54:f6:f5:0b:40:5b: c7:9c:7b:9d:08:48:4b:1d:0d:9d:dd:1b:5a:83:cc:9b:3f:f2: 95:c0:2d:13:54:29:9c:21:1d:e4:11:75:03:0a:23:ed:6f:b9: d5:4b:8a:1e:77:fc:93:a0:22:74:60:bc:50:8a:b3:91:d1:c8: 70:51:a6:01:76:d7:60:29:9f:74:51:71:fc:57:03:87:58:9f: 5e:31:db:d6:96:74:38:64:1a:68:7b:9d:85:70:43:cc:b4:ff: 5b:ba:5a:ab:11:ca:ea:f2:f0:4a:5b:cc:7c:04:56:2b:46:5b: 45:e4:a7:45:ee:1a:27:97:02:d1:9e:ef:48:dc:0d:57:42:a1: f5:c8:46:6c:64:ff:51:e5:30:2d:25:8b:d9:4c:e0:e9:ae:b1: 3d:03:b3:bf:cc:31:6f:c3:ee:93:d8:8a:16:8b:55:82:91:06: 51:aa:b6:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAMGQ2iZxaF3OTt250zaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy ZTQ3ZGYwHhcNMjUxMjE5MDEwMTExWhcNMjUxMjIwMDEwMTExWjAzMTEwLwYDVQQD EyhkOTNlOGQwZjQwNzMxM2Y5ZWZhNDEyNzQ1ZjEzNzU4OTcyNWU0Nzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5V3iD06rLM/02BRJW2nw41AfQB lgf0BIGgZmNFpaXubtFgegWpqv+dOUDwXF/wsahesRMh81zWysIOHifMJubQDLeR fij4hpMr59BzrjR6KSoWI9K6BTETF5yEkqchkd5WXRBUdmqPzTPI0EGdcHksibIr sm6P+AvMrsgP4eXEKrzPanX+/GwVJ8udD58QgkH3DchiTHX8dyN1x3RrgFzyynme A+LZm9xuIdpRt1Ac2AzxOc5z7EBdQtaagSqQNmcY3CZkCf2mx75V+mWwf8Pclspd jLloMGrcwC6Dgfp4Ex76LHwcSNC3FXfxZJKShmqxnaD5cdStN/X7av0BSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk+jQ9AcxP576QSdF8TdYlyXkeZMB8GA1UdIwQY MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2MKYfFyV o/+witC4E5is3BKwy/wOELjeRhuMH1XBCfCJk7WRZEeJOc0NKEbVA3trCzqiXTBr wQWqhgcuAtTBNyC1PpK4BJ8v+q9FF8LzBS5ldtwmVPb1C0Bbx5x7nQhISx0Nnd0b WoPMmz/ylcAtE1QpnCEd5BF1Awoj7W+51UuKHnf8k6AidGC8UIqzkdHIcFGmAXbX YCmfdFFx/FcDh1ifXjHb1pZ0OGQaaHudhXBDzLT/W7paqxHK6vLwSlvMfARWK0Zb ReSnRe4aJ5cC0Z7vSNwNV0Kh9chGbGT/UeUwLSWL2Uzg6a6xPQOzv8wxb8Puk9iK FotVgpEGUaq2Ig== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:37 2025 by rpki-client