This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json) Hash identifier: AW+IAux0KtLpGhM6vyGcG3CTENkYhZi41Sy0FM89Pn8= Subject key identifier: 7F:EE:52:72:9F:6F:AD:29:FB:61:12:D4:DC:FC:71:46:3B:DB:30:A5 Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e Certificate serial: 019B2B5393193D53345E172C76C7BBEE4932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft Manifest number: 0EA5 Signing time: Wed 17 Dec 2025 08:00:55 +0000 Manifest this update: Wed 17 Dec 2025 08:00:55 +0000 Manifest next update: Thu 18 Dec 2025 08:00:55 +0000 Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: oGpLv2T54shbCyGcH8j/KDAw8K0dPEiOd2A0GbJY0JI=) 2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:93:19:3d:53:34:5e:17:2c:76:c7:bb:ee:49:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e Validity Not Before: Dec 17 08:00:55 2025 GMT Not After : Dec 18 08:00:55 2025 GMT Subject: CN=7fee52729f6fad29fb6112d4dcfc71463bdb30a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:4c:e4:f5:de:b6:5a:0b:0b:65:8a:4e:91: 2c:9d:46:7d:d3:29:ac:b9:b9:9f:0f:47:48:e3:98: 36:2b:fe:47:8e:be:16:ac:12:5f:8c:bb:cc:05:81: 85:08:44:0d:ec:56:cc:79:e7:cc:a1:d4:e7:d2:a3: c0:06:c5:a8:6f:bb:85:29:3b:61:7f:d5:7f:da:6b: 03:b8:7f:6b:5e:43:d7:5a:13:bb:92:21:af:15:c1: d3:76:3d:61:60:bf:73:f1:f1:a1:fd:30:46:ab:e5: a5:e1:8a:f8:c8:65:33:f5:4a:28:36:f5:3d:02:ed: 3b:ec:1d:3f:45:7b:e2:f4:17:20:3d:bd:71:18:37: ab:98:bb:7e:ca:2f:e7:70:d0:45:3d:e8:94:41:d5: 21:af:9b:04:10:e5:d0:23:8f:d8:8a:77:28:61:d9: 97:72:39:4f:74:87:28:2e:69:02:a1:51:b4:36:f1: ee:4b:35:18:0d:35:c7:56:11:fb:e2:fe:eb:98:3c: bf:69:8d:46:a3:11:f2:0e:3f:5b:7e:0b:fc:95:52: ea:5e:c0:6d:1a:17:6d:61:65:13:a9:95:3d:d8:ce: 91:26:50:84:44:35:2f:b2:c1:34:0d:67:a0:91:c7: ef:4a:4b:4d:19:55:aa:91:4d:9d:89:8d:32:e4:27: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:52:72:9F:6F:AD:29:FB:61:12:D4:DC:FC:71:46:3B:DB:30:A5 X509v3 Authority Key Identifier: keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ec:bd:0b:58:97:2b:df:0a:38:43:61:aa:d9:4a:bc:70:34: 8e:ab:50:58:ff:cd:a6:6d:25:f8:3d:34:77:29:a6:c0:2d:2b: b5:bd:02:cb:91:4a:83:d7:ec:9c:3a:ba:26:54:a4:b3:0b:62: a7:a6:e5:3d:e7:53:f4:0f:ef:0a:cb:a5:ef:ac:4f:89:eb:a5: 74:eb:85:34:56:49:0a:92:9c:25:f0:bf:79:d6:87:6f:31:70: 8d:b2:ad:7c:54:00:5d:5a:f4:7c:ca:ae:84:83:46:ec:30:a7: 64:68:73:8f:01:2c:e4:4c:fa:ee:8c:f5:e5:e7:d7:63:ea:b7: 25:00:91:91:07:e2:50:54:77:51:5a:74:7b:e8:70:79:3a:bb: 4f:76:ed:1d:9e:64:c8:99:6d:d1:97:88:f8:6d:6d:39:24:10: dd:b7:14:e6:00:c6:ed:68:8c:9a:86:56:b6:ed:0e:6d:ad:b4: 80:16:a9:2d:1f:84:62:04:f6:09:a8:30:6d:d7:42:37:55:d2: da:c8:a9:96:68:d9:e2:8c:b6:8e:aa:57:79:0b:08:84:13:e1: 50:13:e1:a5:0b:40:91:f4:17:0e:2b:ff:7e:df:d4:f9:1e:eb: fc:ed:6d:72:e4:3a:3f:1f:94:93:fb:be:15:e2:75:49:70:1f: 90:77:2f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU5MZPVM0Xhcsdse77kkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2JlM2FkMWY3YzU5NTBjZDQ2ZDQ4YmIxZjdlYTc3NTBh ZmE4MWUwHhcNMjUxMjE3MDgwMDU1WhcNMjUxMjE4MDgwMDU1WjAzMTEwLwYDVQQD Eyg3ZmVlNTI3MjlmNmZhZDI5ZmI2MTEyZDRkY2ZjNzE0NjNiZGIzMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAochM5PXetloLC2WKTpEsnUZ90yms ubmfD0dI45g2K/5Hjr4WrBJfjLvMBYGFCEQN7FbMeefModTn0qPABsWob7uFKTth f9V/2msDuH9rXkPXWhO7kiGvFcHTdj1hYL9z8fGh/TBGq+Wl4Yr4yGUz9UooNvU9 Au077B0/RXvi9BcgPb1xGDermLt+yi/ncNBFPeiUQdUhr5sEEOXQI4/YincoYdmX cjlPdIcoLmkCoVG0NvHuSzUYDTXHVhH74v7rmDy/aY1GoxHyDj9bfgv8lVLqXsBt GhdtYWUTqZU92M6RJlCERDUvssE0DWegkcfvSktNGVWqkU2diY0y5Cc6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/uUnKfb60p+2ES1Nz8cUY72zClMB8GA1UdIwQY MBaAFG97460ffFlQzUbUi7H36ndQr6geMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEt YmZhODcyYzJmMzkyLzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEtYmZhODcyYzJmMzky LzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+y9C1iX K98KOENhqtlKvHA0jqtQWP/Npm0l+D00dymmwC0rtb0Cy5FKg9fsnDq6JlSkswti p6blPedT9A/vCsul76xPieuldOuFNFZJCpKcJfC/edaHbzFwjbKtfFQAXVr0fMqu hING7DCnZGhzjwEs5Ez67oz15efXY+q3JQCRkQfiUFR3UVp0e+hweTq7T3btHZ5k yJlt0ZeI+G1tOSQQ3bcU5gDG7WiMmoZWtu0Oba20gBapLR+EYgT2CagwbddCN1XS 2siplmjZ4oy2jqpXeQsIhBPhUBPhpQtAkfQXDiv/ft/U+R7r/O1tcuQ6Px+Uk/u+ FeJ1SXAfkHcvjw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:55 2025 by rpki-client