This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json) Hash identifier: bp0y+RowvQFgukeb0/JoUv9Ap/XA1MjxJGwsem15nJk= Subject key identifier: 95:BD:B1:01:10:2C:6F:58:FF:DB:1E:45:5A:1F:32:4B:F3:04:5F:20 Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1 Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1 Certificate serial: 019B35D6E672FC7EBCCA88044C1308C55FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft Manifest number: 0E7A Signing time: Fri 19 Dec 2025 09:00:34 +0000 Manifest this update: Fri 19 Dec 2025 09:00:34 +0000 Manifest next update: Sat 20 Dec 2025 09:00:34 +0000 Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=) 2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: 7F8HT24Vg7e5O3g8/wQ7MXVnPMnRBsc5jNwdh/0YgV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:e6:72:fc:7e:bc:ca:88:04:4c:13:08:c5:5f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1 Validity Not Before: Dec 19 09:00:34 2025 GMT Not After : Dec 20 09:00:34 2025 GMT Subject: CN=95bdb101102c6f58ffdb1e455a1f324bf3045f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:6b:7a:71:0b:66:1b:f1:d9:9e:e2:1f:c1: d3:3d:26:ec:9f:fd:70:88:ca:f6:33:58:f8:9d:ef: 33:2a:21:54:e3:bb:c5:a8:52:b4:7c:e9:e7:37:56: e5:fb:54:51:d0:02:41:b6:bd:96:24:a1:52:09:c8: 47:37:ab:8a:ab:94:3f:85:e1:2c:9e:02:a1:80:3d: 6d:24:6f:f1:a9:e8:e3:48:e6:a6:a2:a5:d5:3b:ef: 64:4c:43:c1:6d:d5:79:fd:c5:e9:da:04:ac:7f:01: 3c:6c:61:57:51:a7:33:8d:16:23:40:55:23:12:aa: f3:e3:49:08:e1:2a:17:27:d5:90:a2:eb:e4:f0:3c: 6e:f2:9b:7b:0f:33:b4:7b:aa:c8:e5:6b:fc:8c:6b: 10:62:29:6e:1f:a9:3f:1f:34:d3:21:f0:92:64:85: 1b:2f:87:43:bc:99:18:34:61:b0:47:f4:83:34:b8: aa:cc:4a:de:8c:56:7b:14:b4:c8:69:cd:0d:f8:39: a3:77:b7:84:f6:ea:22:f8:eb:6e:8e:bc:5b:e5:9a: 52:8a:c0:78:e6:bc:ee:ca:06:86:d3:e8:8f:65:e8: 5e:16:13:20:33:fd:8c:62:cd:95:81:35:85:cc:5d: 27:b2:27:31:e5:81:1b:17:45:9e:98:52:c0:91:10: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BD:B1:01:10:2C:6F:58:FF:DB:1E:45:5A:1F:32:4B:F3:04:5F:20 X509v3 Authority Key Identifier: keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:91:ec:8f:e0:ee:fa:80:eb:fd:ec:1e:ad:e2:e1:d2:47: 4a:cc:ed:d3:76:91:45:5b:1b:93:79:33:b7:39:e7:5d:ad:b6: b8:8d:cf:b3:1b:c9:a8:7b:95:49:89:58:88:c6:35:a2:11:25: 5a:80:f6:1b:e8:ee:54:c4:49:d8:f8:e1:ca:ae:fd:f5:89:38: ea:19:22:d4:1e:93:cc:64:ea:d2:96:81:8e:9c:54:2b:ce:ab: 4a:fa:87:27:77:59:e0:11:b7:e2:e4:f1:34:1f:06:dc:81:37: a2:11:5e:58:12:03:1f:54:d8:0c:8c:48:0d:8b:39:8f:7e:9e: 60:88:c8:d5:e7:91:c9:07:9c:f8:ca:a3:59:20:05:df:42:c6: 48:e7:74:ab:6b:01:54:79:04:0c:5d:fd:8b:c2:f7:88:78:92: a4:e6:da:c7:dc:c8:b0:af:e3:b6:4b:19:02:04:fa:4c:62:a1: 8f:49:1c:94:22:9e:80:d6:26:46:bf:69:0e:eb:d4:a9:1e:6c: 56:4f:05:b5:b6:f2:41:68:bd:46:87:c4:a3:9c:f4:5b:aa:71: ce:c9:22:5c:28:bf:3b:b1:66:0f:04:cf:45:2d:36:4a:d5:70: 85:9f:3b:90:80:21:cb:12:56:73:e0:27:f2:5e:8e:01:c4:1e: 18:20:16:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11uZy/H68yogETBMIxV+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzliNThhM2JmYTM4YmU5MDkzNmMzMTRmMTRiMGQ5YzM1 OWFjYzEwHhcNMjUxMjE5MDkwMDM0WhcNMjUxMjIwMDkwMDM0WjAzMTEwLwYDVQQD Eyg5NWJkYjEwMTEwMmM2ZjU4ZmZkYjFlNDU1YTFmMzI0YmYzMDQ1ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUBrenELZhvx2Z7iH8HTPSbsn/1w iMr2M1j4ne8zKiFU47vFqFK0fOnnN1bl+1RR0AJBtr2WJKFSCchHN6uKq5Q/heEs ngKhgD1tJG/xqejjSOamoqXVO+9kTEPBbdV5/cXp2gSsfwE8bGFXUaczjRYjQFUj Eqrz40kI4SoXJ9WQouvk8Dxu8pt7DzO0e6rI5Wv8jGsQYiluH6k/HzTTIfCSZIUb L4dDvJkYNGGwR/SDNLiqzErejFZ7FLTIac0N+Dmjd7eE9uoi+Otujrxb5ZpSisB4 5rzuygaG0+iPZeheFhMgM/2MYs2VgTWFzF0nsicx5YEbF0WemFLAkRCQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW9sQEQLG9Y/9seRVofMkvzBF8gMB8GA1UdIwQY MBaAFG95tYo7+ji+kJNsMU8UsNnDWazBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMt NTJkOTgyZDIxZGZmLzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMtNTJkOTgyZDIxZGZm LzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5CR7I/g 7vqA6/3sHq3i4dJHSszt03aRRVsbk3kztznnXa22uI3PsxvJqHuVSYlYiMY1ohEl WoD2G+juVMRJ2Pjhyq799Yk46hki1B6TzGTq0paBjpxUK86rSvqHJ3dZ4BG34uTx NB8G3IE3ohFeWBIDH1TYDIxIDYs5j36eYIjI1eeRyQec+MqjWSAF30LGSOd0q2sB VHkEDF39i8L3iHiSpObax9zIsK/jtksZAgT6TGKhj0kclCKegNYmRr9pDuvUqR5s Vk8FtbbyQWi9RofEo5z0W6pxzskiXCi/O7FmDwTPRS02StVwhZ87kIAhyxJWc+An 8l6OAcQeGCAWqw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:55:04 2025 by rpki-client