This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft File: 3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json) Hash identifier: GlnhuYZsgxKIy4qESpASgimiNtQBleMUHN8iZKeWU8g= Subject key identifier: 6A:EE:7D:0A:F7:62:BD:A5:BC:17:7C:AD:D8:0E:7C:D7:FA:BA:73:3D Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Certificate serial: 019B34C4631CE6AE3B4860F59EBDBF30273E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft Manifest number: 08A5 Signing time: Fri 19 Dec 2025 04:00:44 +0000 Manifest this update: Fri 19 Dec 2025 04:00:44 +0000 Manifest next update: Sat 20 Dec 2025 04:00:44 +0000 Files and hashes: 1: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (hash: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=) 2: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: Z/sR+VB8Wgr0NUnE3V68ulw1zbIK8Zf48xXHnxck1HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:63:1c:e6:ae:3b:48:60:f5:9e:bd:bf:30:27:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Validity Not Before: Dec 19 04:00:44 2025 GMT Not After : Dec 20 04:00:44 2025 GMT Subject: CN=6aee7d0af762bda5bc177cadd80e7cd7faba733d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:d8:fa:7d:fe:6d:cc:85:58:b4:60:4b:6a: 9c:b5:f2:3a:69:92:8b:d0:bf:17:1b:e5:9f:91:f6: 1d:e7:be:dc:e1:41:8d:87:6d:9e:31:1a:d4:1f:cc: 1b:1d:0c:fe:8f:f9:e6:f3:7d:8c:c8:81:27:46:c5: ed:f8:12:b8:2e:46:27:7e:e9:11:8b:d4:b3:a2:52: ad:35:8f:7c:64:24:ac:73:72:c9:d4:b8:8b:49:af: 91:40:57:e0:39:49:fe:5c:53:25:d9:86:25:75:ee: 65:20:a7:04:72:47:bf:33:95:f0:dc:6c:23:ef:ec: bf:8c:0a:49:bf:e9:94:eb:79:60:74:d9:5a:cf:5e: 29:87:f3:19:a9:cd:40:cd:9a:61:c8:95:ff:b3:a6: 3f:fd:de:4f:fd:72:95:cf:12:28:c7:b4:08:ad:a7: 8b:b5:0e:69:5e:85:6a:5d:72:b5:ff:c1:7d:af:c9: 9b:64:0e:28:bc:29:91:3b:c3:9a:70:8f:95:f2:4c: 1d:0a:05:65:a5:60:21:80:fa:c7:c5:92:18:51:7f: 82:24:68:cd:b2:5c:7a:9b:23:bc:bb:83:27:09:2b: a4:ed:5a:cc:ce:7a:9d:4d:c7:7e:2d:1e:a7:ac:96: f6:a7:f1:78:8b:30:a0:22:a7:f9:03:ce:85:7b:b6: e7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:7D:0A:F7:62:BD:A5:BC:17:7C:AD:D8:0E:7C:D7:FA:BA:73:3D X509v3 Authority Key Identifier: keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3b:79:51:66:c5:aa:73:60:61:6f:c9:a9:9e:88:fb:fd:f6: a5:55:6d:de:87:0f:dc:c3:3c:cc:81:dd:a3:bc:d6:3c:8b:1b: 2c:47:c4:fc:1c:74:27:55:b3:47:21:22:68:76:ca:e6:58:15: ba:d9:af:31:f6:16:26:47:10:ad:b2:75:31:10:af:1d:3a:e1: 8d:95:7c:c1:e6:d6:73:0e:fa:83:4d:ea:06:e5:6e:e0:b1:9a: c1:14:bd:21:bf:a1:9f:45:13:87:df:43:88:f5:b5:98:f2:a8: ce:68:38:a3:fc:8b:15:a0:7c:25:3a:a2:fe:64:e1:7a:46:bb: 33:d3:6e:c0:97:1c:83:9a:ee:52:11:e0:81:b2:54:a7:01:c0: 69:a6:ff:f9:c0:eb:63:b3:c5:f7:53:19:c3:34:92:b1:ac:23: 85:c9:b9:c7:e2:58:7b:76:cd:06:51:08:b3:b8:e0:4e:30:24: 29:8a:93:19:f3:93:59:80:80:11:a1:5f:16:d2:43:07:e1:d1: 8e:31:1a:35:2c:8d:36:65:54:a8:cf:d7:c4:0d:fd:28:f1:76: 9e:8a:6b:1d:a2:43:29:fc:b3:38:34:c2:8e:15:5d:b7:6e:d4: 5b:9d:2f:1f:1d:04:f9:6f:dd:f4:e7:9c:98:05:d0:6f:9b:97: 49:a4:5d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xGMc5q47SGD1nr2/MCc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTY3Mzc5YjU5MWU5NTcxMGNmN2YzMWRlMmVjNzNmZmJm YjVhZTcwHhcNMjUxMjE5MDQwMDQ0WhcNMjUxMjIwMDQwMDQ0WjAzMTEwLwYDVQQD Eyg2YWVlN2QwYWY3NjJiZGE1YmMxNzdjYWRkODBlN2NkN2ZhYmE3MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvnY+n3+bcyFWLRgS2qctfI6aZKL 0L8XG+WfkfYd577c4UGNh22eMRrUH8wbHQz+j/nm832MyIEnRsXt+BK4LkYnfukR i9SzolKtNY98ZCSsc3LJ1LiLSa+RQFfgOUn+XFMl2YYlde5lIKcEcke/M5Xw3Gwj 7+y/jApJv+mU63lgdNlaz14ph/MZqc1AzZphyJX/s6Y//d5P/XKVzxIox7QIraeL tQ5pXoVqXXK1/8F9r8mbZA4ovCmRO8OacI+V8kwdCgVlpWAhgPrHxZIYUX+CJGjN slx6myO8u4MnCSuk7VrMznqdTcd+LR6nrJb2p/F4izCgIqf5A86Fe7bn8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrufQr3Yr2lvBd8rdgOfNf6unM9MB8GA1UdIwQY MBaAFNwWc3m1kelXEM9/Md4uxz/7+1rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUt NWY2MjBiMzhiOTA4LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUtNWY2MjBiMzhiOTA4 LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDt5UWbF qnNgYW/JqZ6I+/32pVVt3ocP3MM8zIHdo7zWPIsbLEfE/Bx0J1WzRyEiaHbK5lgV utmvMfYWJkcQrbJ1MRCvHTrhjZV8webWcw76g03qBuVu4LGawRS9Ib+hn0UTh99D iPW1mPKozmg4o/yLFaB8JTqi/mTheka7M9NuwJccg5ruUhHggbJUpwHAaab/+cDr Y7PF91MZwzSSsawjhcm5x+JYe3bNBlEIs7jgTjAkKYqTGfOTWYCAEaFfFtJDB+HR jjEaNSyNNmVUqM/XxA39KPF2noprHaJDKfyzODTCjhVdt27UW50vHx0E+W/d9Oec mAXQb5uXSaRdvw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:23 2025 by rpki-client