This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json) Hash identifier: lFmbUQ5gONXISZom65kKF761bQm6Ms1yQUN+wCS+l3I= Subject key identifier: E0:F4:92:73:F9:66:BC:CF:88:E4:B1:05:E6:EA:B1:41:A6:A7:38:ED Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019B37FC2ACF267B13E3846B251FDDF8DCCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 19:00:31 +0000 Manifest this update: Fri 19 Dec 2025 19:00:31 +0000 Manifest next update: Sat 20 Dec 2025 19:00:31 +0000 Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=) 2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: PXpnxWgCCTmVfMuRJeXEMPevrQw9zMItlBAEGm9PJPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:2a:cf:26:7b:13:e3:84:6b:25:1f:dd:f8:dc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Dec 19 19:00:31 2025 GMT Not After : Dec 20 19:00:31 2025 GMT Subject: CN=e0f49273f966bccf88e4b105e6eab141a6a738ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:3d:96:74:8b:bf:a8:5b:a3:80:47:2b:18: 4f:02:da:d3:f2:3f:45:59:2e:bf:f3:3f:7b:9d:4f: 07:5f:65:d3:a5:88:63:eb:74:bb:65:80:ec:0b:4b: 58:4f:56:ff:e4:58:47:d0:a4:12:2d:4e:a7:51:57: 5e:0f:39:ce:ff:19:40:eb:59:cb:70:0c:5f:3f:af: 01:aa:e3:b9:fe:91:3a:7e:19:8e:2a:13:a5:e3:4e: ec:c7:f0:0c:de:e4:f3:19:8a:74:bf:31:68:05:e6: 8e:9a:40:05:6a:8a:24:34:2c:78:af:4d:12:85:be: 4c:8e:7f:27:02:60:a5:c7:1d:11:ab:f0:19:83:b4: ef:f3:61:40:8e:2b:52:af:6c:87:35:20:11:db:1d: 90:79:b2:2e:d5:c8:1a:fb:d1:ec:72:b1:83:10:d0: 98:62:57:1c:53:8e:51:5d:79:66:6d:52:ea:60:6b: 03:0a:2b:b4:1f:02:e0:69:2c:28:a4:c0:6f:43:e4: d0:36:37:82:1e:8a:73:ae:b8:68:97:12:ef:14:9c: f3:80:5a:ec:4c:2d:88:c8:3e:98:bf:7f:32:15:52: 29:00:1f:67:9b:68:4c:ef:f3:71:65:64:57:87:d2: 15:48:c7:c9:f6:dc:67:c1:d4:43:8a:ca:5c:f2:f9: 87:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F4:92:73:F9:66:BC:CF:88:E4:B1:05:E6:EA:B1:41:A6:A7:38:ED X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:49:9d:6f:48:14:62:96:a1:8b:7c:72:08:98:a3:81:03:ef: 37:28:14:8e:9c:cd:76:f0:90:51:c9:ae:b8:ec:ba:27:8e:41: 8e:05:48:7c:6b:c7:0a:18:a8:50:b5:cb:3f:61:81:3d:92:80: 4c:dd:16:8d:5e:ed:72:30:07:1f:cf:15:78:64:cb:3d:6d:fb: c2:6c:cb:c2:13:f4:ab:da:4a:79:37:bf:16:62:32:a2:30:e7: 61:bd:cd:b6:9c:22:c4:01:1c:30:c7:08:b8:ed:27:27:7a:d9: 8e:df:3d:f3:f8:de:2f:2d:4a:03:aa:bb:a1:b3:77:72:bb:18: a5:97:bc:f4:d0:a1:16:c6:71:34:34:b3:18:cb:11:d6:64:8a: 6d:22:f4:7e:47:40:c1:01:82:2b:98:00:c6:13:a8:14:8b:d3: 2e:7f:21:8a:9c:7a:05:71:df:9e:9b:51:40:0b:0a:bd:d1:31: 52:39:f8:4f:38:74:8b:24:12:9a:28:b7:05:ec:85:85:d2:dd: 71:d2:ae:f4:17:e9:05:d5:c4:de:b4:2d:ad:14:8a:06:18:4b: 0f:a8:49:99:7c:ac:18:a3:5a:f7:08:06:99:7f:5c:ef:9e:6e: 8e:dd:fc:12:99:02:e8:12:11:d7:46:d2:23:91:0d:7f:a1:2b: c9:d6:81:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/CrPJnsT44RrJR/d+NzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjUxMjE5MTkwMDMxWhcNMjUxMjIwMTkwMDMxWjAzMTEwLwYDVQQD EyhlMGY0OTI3M2Y5NjZiY2NmODhlNGIxMDVlNmVhYjE0MWE2YTczOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24E9lnSLv6hbo4BHKxhPAtrT8j9F WS6/8z97nU8HX2XTpYhj63S7ZYDsC0tYT1b/5FhH0KQSLU6nUVdeDznO/xlA61nL cAxfP68BquO5/pE6fhmOKhOl407sx/AM3uTzGYp0vzFoBeaOmkAFaookNCx4r00S hb5Mjn8nAmClxx0Rq/AZg7Tv82FAjitSr2yHNSAR2x2QebIu1cga+9HscrGDENCY YlccU45RXXlmbVLqYGsDCiu0HwLgaSwopMBvQ+TQNjeCHopzrrholxLvFJzzgFrs TC2IyD6Yv38yFVIpAB9nm2hM7/NxZWRXh9IVSMfJ9txnwdRDispc8vmH6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD0knP5ZrzPiOSxBebqsUGmpzjtMB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkmdb0gU Ypahi3xyCJijgQPvNygUjpzNdvCQUcmuuOy6J45BjgVIfGvHChioULXLP2GBPZKA TN0WjV7tcjAHH88VeGTLPW37wmzLwhP0q9pKeTe/FmIyojDnYb3NtpwixAEcMMcI uO0nJ3rZjt898/jeLy1KA6q7obN3crsYpZe89NChFsZxNDSzGMsR1mSKbSL0fkdA wQGCK5gAxhOoFIvTLn8hipx6BXHfnptRQAsKvdExUjn4Tzh0iyQSmii3BeyFhdLd cdKu9BfpBdXE3rQtrRSKBhhLD6hJmXysGKNa9wgGmX9c755ujt38EpkC6BIR10bS I5ENf6ErydaB2A== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:19 2025 by rpki-client