This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json) Hash identifier: lb8QdOpE5gnY18Rbl1dCYq/uDHeLhIiG2loWAljMXBc= Subject key identifier: 2A:F7:43:37:0C:A7:74:80:1A:F4:D6:EF:18:90:2F:C1:66:09:EA:80 Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78 Certificate serial: 019AE3A80825D0CEC6C2B67066594A7B1E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft Manifest number: 1007 Signing time: Wed 03 Dec 2025 10:00:31 +0000 Manifest this update: Wed 03 Dec 2025 10:00:31 +0000 Manifest next update: Thu 04 Dec 2025 10:00:31 +0000 Files and hashes: 1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=) 2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: IwauDPGQZFJbveO6nNyTC1YSVH1w1s5AXqgxwWQzBME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a8:08:25:d0:ce:c6:c2:b6:70:66:59:4a:7b:1e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78 Validity Not Before: Dec 3 10:00:31 2025 GMT Not After : Dec 4 10:00:31 2025 GMT Subject: CN=2af743370ca774801af4d6ef18902fc16609ea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:41:1a:e6:dc:c1:e9:33:0d:7a:93:c0:fa: a3:a1:95:d4:16:43:ad:e3:79:02:f6:8f:ea:1e:63: 77:79:2d:e9:c6:f2:ff:b7:97:e9:62:e8:d0:72:fc: 02:b1:25:92:50:e9:8b:c8:6b:5c:7d:76:b7:92:0c: 49:31:d7:14:41:0a:14:46:d7:68:b6:d6:03:a8:0a: bd:bc:09:bb:52:3e:2a:5f:7c:b7:74:f3:99:9b:cf: fd:03:5b:51:21:d4:71:49:be:80:54:dd:5c:0a:6d: bc:4f:9e:a5:19:a1:77:da:e4:af:9c:00:04:01:c0: 9b:f3:bf:54:ed:18:7e:cd:02:9f:b9:1b:ef:b3:6c: f6:41:b1:44:d9:64:bb:1e:b4:a7:db:98:61:f0:66: d9:9b:78:5b:d9:e8:cc:fa:eb:f3:b0:43:fd:7e:d5: 18:5e:32:33:38:a3:40:64:67:e8:e2:31:52:ff:63: c4:9c:5f:af:db:6c:f6:f7:91:61:9e:46:63:ec:70: 6e:c5:5a:b3:f4:ab:05:f5:b6:17:c1:5f:2a:da:92: 93:e4:f8:89:11:df:91:fd:a5:a4:7b:25:ca:03:2e: 04:5a:4e:10:9c:a7:27:52:e6:f4:31:d7:95:da:37: 68:9e:84:99:a6:43:ee:a7:c8:1b:c3:ce:51:7e:59: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:43:37:0C:A7:74:80:1A:F4:D6:EF:18:90:2F:C1:66:09:EA:80 X509v3 Authority Key Identifier: keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e0:23:47:86:9d:1b:42:c9:87:e1:e9:10:74:63:9a:8d:5f: a3:92:a2:8c:90:de:62:71:ed:3e:e4:76:d7:35:3e:8e:5c:1f: 53:5d:e0:0b:98:52:dd:12:ff:03:96:25:11:97:c1:02:90:3c: bb:31:1c:15:83:a4:c6:b8:73:f1:b8:2c:fd:93:f5:8e:49:d8: 54:19:29:46:26:6b:ad:b1:19:2d:5d:c2:8e:36:0b:7c:c0:e1: b5:8d:1c:e2:58:62:84:aa:e3:78:55:35:5a:f2:fe:ea:88:45: 25:e8:29:35:56:fb:eb:4a:eb:b3:ba:9f:92:1b:78:71:7a:5d: aa:ec:0d:f5:ac:5f:7f:37:b8:aa:63:a2:00:67:70:a9:e8:99: 2c:28:e1:4a:49:60:8a:87:98:e4:0f:a1:ec:62:2c:46:12:ed: 53:96:a1:9e:39:30:6e:54:8b:65:96:bb:bc:a6:ed:c0:33:4d: df:18:72:7c:ad:6b:31:46:d1:fe:45:5c:96:64:31:53:60:d1: bf:60:73:8f:b6:17:ba:e8:65:a0:f9:08:fa:d7:07:41:39:e6: ff:d6:89:de:3d:21:9e:eb:80:8f:ea:0c:5b:03:79:3b:2f:24: b7:12:b6:b8:5a:e6:08:9a:66:df:35:df:32:93:3a:9a:42:41: 37:0a:6d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqAgl0M7GwrZwZllKex5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNzczNGRmZWExMjA2NTc0MTJlYTg2N2RkYmM3Yjg0ZDEz MmJmNzgwHhcNMjUxMjAzMTAwMDMxWhcNMjUxMjA0MTAwMDMxWjAzMTEwLwYDVQQD EygyYWY3NDMzNzBjYTc3NDgwMWFmNGQ2ZWYxODkwMmZjMTY2MDllYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZhBGubcwekzDXqTwPqjoZXUFkOt 43kC9o/qHmN3eS3pxvL/t5fpYujQcvwCsSWSUOmLyGtcfXa3kgxJMdcUQQoURtdo ttYDqAq9vAm7Uj4qX3y3dPOZm8/9A1tRIdRxSb6AVN1cCm28T56lGaF32uSvnAAE AcCb879U7Rh+zQKfuRvvs2z2QbFE2WS7HrSn25hh8GbZm3hb2ejM+uvzsEP9ftUY XjIzOKNAZGfo4jFS/2PEnF+v22z295FhnkZj7HBuxVqz9KsF9bYXwV8q2pKT5PiJ Ed+R/aWkeyXKAy4EWk4QnKcnUub0MdeV2jdonoSZpkPup8gbw85Rfln00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr3QzcMp3SAGvTW7xiQL8FmCeqAMB8GA1UdIwQY MBaAFH93NN/qEgZXQS6oZ928e4TRMr94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYt MTk2OTMxOTYyZDNjLzEvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYtMTk2OTMxOTYyZDNj LzEvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuAjR4ad G0LJh+HpEHRjmo1fo5KijJDeYnHtPuR21zU+jlwfU13gC5hS3RL/A5YlEZfBApA8 uzEcFYOkxrhz8bgs/ZP1jknYVBkpRiZrrbEZLV3CjjYLfMDhtY0c4lhihKrjeFU1 WvL+6ohFJegpNVb760rrs7qfkht4cXpdquwN9axffze4qmOiAGdwqeiZLCjhSklg ioeY5A+h7GIsRhLtU5ahnjkwblSLZZa7vKbtwDNN3xhyfK1rMUbR/kVclmQxU2DR v2Bzj7YXuuhloPkI+tcHQTnm/9aJ3j0hnuuAj+oMWwN5Oy8ktxK2uFrmCJpm3zXf MpM6mkJBNwptxg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:54 2025 by rpki-client