This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier: T95QBVVO9BzmUM/Liq2h0Rpcpgyt50wKkfXHXLlcBRM=
Subject key identifier: B8:8E:00:07:CC:33:93:7E:9E:34:D6:A3:62:79:CE:5F:43:F7:07:81
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019B066B9FE88B1358381C4A55E736919716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number: 0EEC
Signing time: Wed 10 Dec 2025 04:01:15 +0000
Manifest this update: Wed 10 Dec 2025 04:01:15 +0000
Manifest next update: Thu 11 Dec 2025 04:01:15 +0000
Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=)
2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=)
3: 6sCOzHkQ-muwDrkw5pOHoUfXNBk.roa (hash: 7FwYeaXkfgVbCXFiUge2n1VEhJxyS2ClQiqjC+nu4kY=)
4: F0suYji7pyda6Pgm_yX79A_qaTE.roa (hash: XG7UorX0bbwleiT45k2X3jyWBSNu43oe/Y2K8gmt6hs=)
5: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=)
6: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
7: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=)
8: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
9: VJ56WuOhxsUse2Wjh194KIfDmWo.roa (hash: bUKkm23vexWNMu4lKi52LXPYZkbmuyNIcxiAB5ddWRg=)
10: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: RdwT1RikQQ7ayK0D6Xktdw6ia53qewVdRv8l8DXdNd8=)
11: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
12: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=)
13: od1ADzeqOn5bVC20zBnBeUVSNKw.roa (hash: VVSLdqnSFTyWUJsI+ZA3ZZGNebOqLFzR1C2rEUolb/0=)
14: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
15: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=)
16: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=)
17: zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa (hash: DKYofoTdihA+aTa5YdADLPg4Qah6RWaucr279EDCxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:6b:9f:e8:8b:13:58:38:1c:4a:55:e7:36:91:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 10 04:01:15 2025 GMT
Not After : Dec 11 04:01:15 2025 GMT
Subject: CN=b88e0007cc33937e9e34d6a36279ce5f43f70781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:4a:96:71:45:ea:5d:31:26:50:99:5f:a0:
c8:1e:aa:35:86:7b:5d:42:65:bb:06:6c:6c:16:ad:
5b:ed:8a:d0:7d:dc:9d:fc:1a:e9:39:b3:f2:c7:17:
62:75:f3:ca:53:d9:b0:06:0e:2b:91:9e:f6:5a:a6:
a1:0a:ce:4e:b9:ac:27:63:e3:b5:fa:12:f2:a5:f9:
04:f1:70:8c:7b:cd:6b:72:f1:e4:ce:0a:91:3c:5a:
5a:ba:fc:cb:55:7d:29:06:00:8b:bf:28:aa:82:ee:
6f:63:6a:9f:a5:8f:1d:31:81:03:59:c2:3d:14:f7:
8d:d1:9f:19:c6:6a:ee:d2:fb:04:38:02:44:ad:6a:
25:c6:8b:cf:47:ea:73:60:0b:a2:a5:72:aa:16:19:
3c:62:97:06:e1:a8:a0:e0:42:95:90:fa:16:47:b6:
b3:ec:37:6c:31:51:48:26:9f:db:e1:39:fd:5e:a2:
de:15:81:8c:eb:27:91:61:ed:7f:a2:0a:da:05:44:
22:1c:73:94:15:5f:a1:92:5c:37:a7:08:77:87:c8:
98:65:d4:d0:75:00:d9:81:9d:53:f0:7b:b3:76:cc:
bf:e5:08:01:f5:c9:48:59:de:1a:1c:31:d8:d3:c5:
9d:91:cf:c5:13:71:04:0a:4e:cd:4a:ea:5d:ab:76:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:00:07:CC:33:93:7E:9E:34:D6:A3:62:79:CE:5F:43:F7:07:81
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:f4:6f:25:5c:3c:87:ab:09:fe:b8:1a:54:50:e0:94:8e:
21:be:39:e8:8e:87:83:6d:85:0e:ed:4f:8a:c5:e1:ef:ee:bc:
db:04:6b:07:d7:81:70:e2:2c:80:f7:94:72:f1:bc:0a:bc:4d:
90:87:65:4c:8e:8f:02:29:f4:ed:71:5b:70:1b:27:e6:1f:3e:
8a:d4:ac:10:2d:84:3e:b9:de:b3:38:01:77:53:1d:65:e4:e9:
54:1d:98:2a:fe:88:e1:84:4c:a8:24:de:b2:38:93:56:45:66:
3c:24:46:57:c8:51:40:d8:1e:d6:3e:44:af:01:1d:f1:0e:96:
fe:47:bc:46:35:96:c4:fb:06:2e:54:00:73:ed:fe:2a:3b:af:
65:85:87:1d:bf:d0:60:6e:1b:23:39:44:2a:97:97:b7:9f:36:
ee:55:73:cc:ba:03:c1:a4:ca:28:ad:e5:2e:02:08:7b:86:20:
ea:ae:f5:a7:6a:42:d3:dc:9e:bf:3e:1e:f2:ce:ea:b6:57:4a:
29:47:5c:9a:fe:0a:c1:b0:a2:07:54:7d:f0:b2:f3:a0:af:b2:
6b:88:6c:3d:77:56:f8:3c:a7:4c:b9:22:8c:6a:2d:83:4e:f3:
22:e3:e3:9d:17:5f:2e:8f:75:fa:5b:79:6d:cb:f0:f1:47:92:
7d:ce:e8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGa5/oixNYOBxKVec2kZcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUxMjEwMDQwMTE1WhcNMjUxMjExMDQwMTE1WjAzMTEwLwYDVQQD
EyhiODhlMDAwN2NjMzM5MzdlOWUzNGQ2YTM2Mjc5Y2U1ZjQzZjcwNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UFKlnFF6l0xJlCZX6DIHqo1hntd
QmW7BmxsFq1b7YrQfdyd/BrpObPyxxdidfPKU9mwBg4rkZ72WqahCs5OuawnY+O1
+hLypfkE8XCMe81rcvHkzgqRPFpauvzLVX0pBgCLvyiqgu5vY2qfpY8dMYEDWcI9
FPeN0Z8Zxmru0vsEOAJErWolxovPR+pzYAuipXKqFhk8YpcG4aig4EKVkPoWR7az
7DdsMVFIJp/b4Tn9XqLeFYGM6yeRYe1/ograBUQiHHOUFV+hklw3pwh3h8iYZdTQ
dQDZgZ1T8Huzdsy/5QgB9clIWd4aHDHY08Wdkc/FE3EECk7NSupdq3YK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiOAAfMM5N+njTWo2J5zl9D9weBMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYT0byVc
PIerCf64GlRQ4JSOIb456I6Hg22FDu1PisXh7+682wRrB9eBcOIsgPeUcvG8CrxN
kIdlTI6PAin07XFbcBsn5h8+itSsEC2EPrneszgBd1MdZeTpVB2YKv6I4YRMqCTe
sjiTVkVmPCRGV8hRQNge1j5ErwEd8Q6W/ke8RjWWxPsGLlQAc+3+KjuvZYWHHb/Q
YG4bIzlEKpeXt5827lVzzLoDwaTKKK3lLgIIe4Yg6q71p2pC09yevz4e8s7qtldK
KUdcmv4KwbCiB1R98LLzoK+ya4hsPXdW+DynTLkijGotg07zIuPjnRdfLo91+lt5
bcvw8UeSfc7oBA==
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:29:27 2025 by rpki-client