This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json) Hash identifier: Qkc4jiEaWLen8obWwNURpVxEFtVQfyJjlhOVc2lcg/s= Subject key identifier: A3:B1:61:31:2B:FA:A8:97:A8:8D:49:EC:17:65:F5:4D:36:A4:A7:1E Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B21E315ED6ADB6254ADFD8A93FD299252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 12:01:28 +0000 Manifest this update: Mon 15 Dec 2025 12:01:28 +0000 Manifest next update: Tue 16 Dec 2025 12:01:28 +0000 Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: ufFJgRHSSe3B9RsxafhATmeAxH7gj9uuK1X3qzmYJ4k=) 2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=) 3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=) 4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=) 5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=) 6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:15:ed:6a:db:62:54:ad:fd:8a:93:fd:29:92:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Dec 15 12:01:28 2025 GMT Not After : Dec 16 12:01:28 2025 GMT Subject: CN=a3b161312bfaa897a88d49ec1765f54d36a4a71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:c4:9d:d0:3b:f9:23:91:a4:6a:d6:1c:37: a1:55:91:49:f3:19:5b:0e:de:0c:7b:66:df:b1:77: f0:c2:99:73:f9:2e:2c:d1:b9:dc:3b:56:02:1c:56: 7d:3e:b4:98:36:06:f0:c9:28:19:4b:12:f8:4b:da: 00:3e:d6:66:48:ec:6c:e6:36:58:0f:e9:d1:85:41: 90:15:98:a2:29:97:b8:8a:c1:f1:5e:51:aa:0d:9e: 56:b9:a0:66:54:80:47:a9:98:69:11:d2:d3:e0:78: b7:ea:ab:72:40:08:a3:7f:02:cc:0a:55:f0:43:6e: f8:a9:c8:1d:33:3e:51:00:2e:47:3c:42:f4:e5:aa: 26:be:ea:f3:d5:5c:25:dd:c7:a0:61:58:04:b8:77: d8:95:7c:9f:8a:c7:6b:b6:23:8e:a4:3c:bc:a6:38: 1e:a7:f7:dc:c4:96:6a:ad:ae:65:4e:a3:c5:ea:fb: ba:cd:e8:87:6b:59:0a:cc:5a:2d:92:ff:66:89:d8: c6:a8:07:4f:47:a0:1c:84:31:3e:9e:cf:2c:42:aa: 3d:e9:f0:96:de:d1:6f:2c:0d:b5:f7:f1:60:a4:59: e6:b8:19:bc:49:98:f9:e0:b6:2f:7c:e5:2e:2e:40: 29:95:41:a1:d2:f7:1b:3f:11:08:40:d7:53:2d:18: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:61:31:2B:FA:A8:97:A8:8D:49:EC:17:65:F5:4D:36:A4:A7:1E X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:42:95:e7:3f:22:56:63:b6:22:35:cf:76:63:f3:59:da:83: 61:71:55:d8:19:82:3b:56:1c:3e:6b:9e:a0:9d:a8:19:b8:b5: 97:90:4d:b5:67:6b:77:c2:d2:67:ea:07:9a:25:26:f6:bb:00: 26:76:49:ad:58:ca:8e:6c:51:8f:6e:bd:ad:0b:b4:62:6e:43: ce:c0:f1:0e:49:12:fa:74:f3:43:e4:5e:c5:89:a8:eb:07:9f: 79:67:67:24:3f:6f:84:5b:58:54:ea:46:be:0d:ed:ce:6b:3b: 8f:e7:b2:db:da:30:a7:6e:86:32:8f:55:26:8e:f6:b5:23:7c: 99:f2:7e:59:af:c7:b0:b2:fa:a8:c0:6e:6d:fc:4c:4f:16:31: 3d:86:a7:72:4c:5a:92:af:41:0f:b8:ca:01:02:56:14:f7:58: 49:25:69:de:d9:a6:85:b1:93:00:50:c2:9f:02:7d:87:ea:68: 14:a8:5b:5e:1d:27:76:6b:1b:f2:af:b7:02:67:32:67:11:70: fe:1f:1e:8c:ce:85:df:53:3c:b9:55:82:b5:a6:13:29:89:09: 62:1b:e1:20:4e:81:d9:90:e9:c9:99:d1:05:b1:72:e7:8d:dd: a4:18:76:dd:b1:1a:f6:b0:bd:35:cd:82:22:c6:6c:4e:a9:0e: 90:04:ae:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4xXtattiVK39ipP9KZJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjUxMjE1MTIwMTI4WhcNMjUxMjE2MTIwMTI4WjAzMTEwLwYDVQQD EyhhM2IxNjEzMTJiZmFhODk3YTg4ZDQ5ZWMxNzY1ZjU0ZDM2YTRhNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jbEndA7+SORpGrWHDehVZFJ8xlb Dt4Me2bfsXfwwplz+S4s0bncO1YCHFZ9PrSYNgbwySgZSxL4S9oAPtZmSOxs5jZY D+nRhUGQFZiiKZe4isHxXlGqDZ5WuaBmVIBHqZhpEdLT4Hi36qtyQAijfwLMClXw Q274qcgdMz5RAC5HPEL05aomvurz1Vwl3cegYVgEuHfYlXyfisdrtiOOpDy8pjge p/fcxJZqra5lTqPF6vu6zeiHa1kKzFotkv9midjGqAdPR6AchDE+ns8sQqo96fCW 3tFvLA219/FgpFnmuBm8SZj54LYvfOUuLkAplUGh0vcbPxEIQNdTLRjXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOxYTEr+qiXqI1J7Bdl9U02pKceMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0KV5z8i VmO2IjXPdmPzWdqDYXFV2BmCO1YcPmueoJ2oGbi1l5BNtWdrd8LSZ+oHmiUm9rsA JnZJrVjKjmxRj269rQu0Ym5DzsDxDkkS+nTzQ+RexYmo6wefeWdnJD9vhFtYVOpG vg3tzms7j+ey29owp26GMo9VJo72tSN8mfJ+Wa/HsLL6qMBubfxMTxYxPYanckxa kq9BD7jKAQJWFPdYSSVp3tmmhbGTAFDCnwJ9h+poFKhbXh0ndmsb8q+3AmcyZxFw /h8ejM6F31M8uVWCtaYTKYkJYhvhIE6B2ZDpyZnRBbFy543dpBh23bEa9rC9Nc2C IsZsTqkOkASuuA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:31 2025 by rpki-client