This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft File: 3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json) Hash identifier: ITBf9ZA6T9Cff3+xzJzTt+P2zxocbAKapVW9yeHcvbM= Subject key identifier: 27:C0:98:02:FC:23:1E:95:1D:5C:3E:47:A0:7A:BE:45:0C:CC:66:2A Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Certificate serial: 019B405AB1894F8741F132399D2EC4C034AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft Manifest number: 08AB Signing time: Sun 21 Dec 2025 10:00:44 +0000 Manifest this update: Sun 21 Dec 2025 10:00:44 +0000 Manifest next update: Mon 22 Dec 2025 10:00:44 +0000 Files and hashes: 1: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (hash: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=) 2: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: H3vfmT3iPODwGvVHqOejU12eUI/JT7gIxpVX2/BpKJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:b1:89:4f:87:41:f1:32:39:9d:2e:c4:c0:34:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Validity Not Before: Dec 21 10:00:44 2025 GMT Not After : Dec 22 10:00:44 2025 GMT Subject: CN=27c09802fc231e951d5c3e47a07abe450ccc662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:90:02:d8:87:d4:bd:97:70:60:75:d3:8a: b7:bf:e5:e0:16:d5:32:d1:70:f1:a6:44:0a:54:5a: 12:19:1c:31:82:28:7d:54:9e:fc:83:4a:66:fe:85: d0:a4:1a:0a:8d:17:a5:ff:41:97:7a:21:0a:71:6a: 3b:de:15:43:46:95:ce:1d:81:57:1a:26:89:42:4a: 1d:a1:48:a4:30:4d:8f:24:a0:60:44:a2:9f:b1:cc: a1:ad:b5:93:7c:1a:c7:60:7e:f5:c0:5b:6e:29:df: c5:d5:00:e4:67:29:04:fc:45:4d:cf:ad:a2:ba:c2: a0:be:26:96:b0:ed:fa:a3:52:37:89:dd:2f:dc:57: 5a:77:8b:f7:17:59:6d:4c:91:87:af:77:fb:ad:ea: 91:3c:ad:26:79:aa:2f:05:33:6a:49:69:3c:75:60: 28:f4:5d:6c:fd:9f:6f:01:c2:e5:aa:35:0f:35:79: 46:6a:84:4c:72:2d:0f:0e:35:51:ba:0f:ed:71:b9: 87:a8:23:a1:ff:77:09:c4:7d:b9:07:ba:5b:99:28: eb:f9:8e:6f:8f:26:5b:cb:ce:22:4e:c7:4e:4d:ef: d3:1f:5c:96:1f:5f:46:42:e6:78:92:cf:09:f7:18: 8f:8b:91:f5:4a:43:7a:ab:2e:7e:c0:20:51:df:17: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C0:98:02:FC:23:1E:95:1D:5C:3E:47:A0:7A:BE:45:0C:CC:66:2A X509v3 Authority Key Identifier: keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a9:99:14:5c:3e:89:9c:7d:73:c6:1f:3c:7a:42:e1:4f:78: b4:43:3b:91:3a:9d:bc:f2:4b:86:0c:9e:6a:4b:de:c7:73:14: 1c:0a:4a:3e:7d:eb:f1:b2:35:3f:06:36:4a:37:6e:33:36:5e: 10:34:c6:48:03:60:65:b8:74:c9:76:14:90:0b:14:50:69:25: bb:9f:11:2b:d7:60:a8:9f:51:da:9b:e5:5d:c7:f3:eb:71:e5: cf:bd:9b:a7:bc:87:00:e4:a2:fa:20:4e:6a:d2:ef:a0:03:39: 15:2f:af:bf:c4:9a:21:b9:43:8a:a4:8f:f2:ce:eb:5f:71:cb: 8b:d7:ea:37:1f:41:1b:21:db:d0:ec:64:e0:6b:72:c0:f1:f5: b5:d4:7d:48:23:a9:d0:38:33:62:ba:40:6e:10:b1:3c:b7:ae: 13:a0:84:39:f3:c8:ad:43:3e:85:80:ca:86:66:63:69:45:bd: 41:31:ab:6e:c9:11:20:ca:f5:28:c5:82:70:ae:9a:d5:bb:1f: 01:64:65:24:96:42:d2:fa:64:0f:d5:f2:4d:80:08:93:fa:e5: 46:eb:54:ae:75:33:1b:70:61:5b:fd:38:a5:af:58:64:f6:db: 1e:87:55:0d:00:cf:e5:d9:de:c4:ca:5b:a1:51:8f:80:71:66: 62:0a:b2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWrGJT4dB8TI5nS7EwDSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTY3Mzc5YjU5MWU5NTcxMGNmN2YzMWRlMmVjNzNmZmJm YjVhZTcwHhcNMjUxMjIxMTAwMDQ0WhcNMjUxMjIyMTAwMDQ0WjAzMTEwLwYDVQQD EygyN2MwOTgwMmZjMjMxZTk1MWQ1YzNlNDdhMDdhYmU0NTBjY2M2NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kWQAtiH1L2XcGB104q3v+XgFtUy 0XDxpkQKVFoSGRwxgih9VJ78g0pm/oXQpBoKjRel/0GXeiEKcWo73hVDRpXOHYFX GiaJQkodoUikME2PJKBgRKKfscyhrbWTfBrHYH71wFtuKd/F1QDkZykE/EVNz62i usKgviaWsO36o1I3id0v3Fdad4v3F1ltTJGHr3f7reqRPK0meaovBTNqSWk8dWAo 9F1s/Z9vAcLlqjUPNXlGaoRMci0PDjVRug/tcbmHqCOh/3cJxH25B7pbmSjr+Y5v jyZby84iTsdOTe/TH1yWH19GQuZ4ks8J9xiPi5H1SkN6qy5+wCBR3xdt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfAmAL8Ix6VHVw+R6B6vkUMzGYqMB8GA1UdIwQY MBaAFNwWc3m1kelXEM9/Md4uxz/7+1rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUt NWY2MjBiMzhiOTA4LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUtNWY2MjBiMzhiOTA4 LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqmZFFw+ iZx9c8YfPHpC4U94tEM7kTqdvPJLhgyeakvex3MUHApKPn3r8bI1PwY2SjduMzZe EDTGSANgZbh0yXYUkAsUUGklu58RK9dgqJ9R2pvlXcfz63Hlz72bp7yHAOSi+iBO atLvoAM5FS+vv8SaIblDiqSP8s7rX3HLi9fqNx9BGyHb0Oxk4GtywPH1tdR9SCOp 0DgzYrpAbhCxPLeuE6CEOfPIrUM+hYDKhmZjaUW9QTGrbskRIMr1KMWCcK6a1bsf AWRlJJZC0vpkD9XyTYAIk/rlRutUrnUzG3BhW/04pa9YZPbbHodVDQDP5dnexMpb oVGPgHFmYgqyPw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:05 2025 by rpki-client