This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft File: b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json) Hash identifier: TBD/IqFqd0IXdJgun7AO+BNwI/TpkSy7a5AzvYYcY/0= Subject key identifier: 1F:37:00:64:28:7B:D6:56:BD:95:FA:74:92:D9:16:87:60:F0:12:29 Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Certificate serial: 019B59E3FB473D746732AE156AF33CFD7E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft Manifest number: 0148 Signing time: Fri 26 Dec 2025 09:01:11 +0000 Manifest this update: Fri 26 Dec 2025 09:01:11 +0000 Manifest next update: Sat 27 Dec 2025 09:01:11 +0000 Files and hashes: 1: 4F8H7nNNelFubPxa-Se_4jhtbVs.roa (hash: 0pMog6BIURq0CwttFDOe27twy9MaL7OZIJcruUdS1Oc=) 2: XU5of-sO5C2kcDo6tI15PQJLpSE.roa (hash: yMviCrZaaiQvFu0zaMoGhkE3HEZqEZ5DgntX+OnEfio=) 3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: uzGyjJvYAzLn//jygSp5YlK2Uv7oJGgLFjqPUeZBuqs=) 4: to9OwOfY2gYabsE2e_ZELvsI_rU.roa (hash: s0SkGoiQxrVm7KkMC6Ajpkq1MgO1vuYl0n5PRb27DnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:fb:47:3d:74:67:32:ae:15:6a:f3:3c:fd:7e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218 Validity Not Before: Dec 26 09:01:11 2025 GMT Not After : Dec 27 09:01:11 2025 GMT Subject: CN=1f370064287bd656bd95fa7492d9168760f01229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:07:e4:39:46:cb:95:fa:d3:23:6c:26:a6: e8:59:f0:00:65:aa:33:dd:2c:20:1d:b5:c0:4a:4e: 0e:da:c0:68:76:4b:e0:d6:90:9e:41:a7:a4:76:9c: be:7d:11:ea:1d:70:cc:67:9e:eb:49:6c:1d:39:fd: 91:72:e0:8d:5f:a3:5b:ef:2f:96:a8:20:de:e7:f1: dc:5c:33:74:18:38:28:1e:b8:75:17:f9:0d:b8:b2: bf:2e:60:b3:96:bd:1e:d6:0f:e0:fe:46:fa:3a:94: 21:0a:3f:b6:6e:35:46:7f:88:2b:31:13:7d:9d:7c: 6d:de:e8:7e:b2:6b:28:e8:56:52:ad:24:af:dd:c1: b4:1e:33:d9:6d:cf:76:f3:3d:e2:06:18:61:f2:54: e9:36:dc:4e:04:1c:f7:1a:12:07:3f:d3:3b:35:5c: 68:00:9d:a3:af:c9:a9:e9:b8:a2:63:0d:71:45:6b: 1b:9a:88:4c:0c:87:ec:57:3d:1d:56:1e:80:9b:70: 79:5c:b6:6d:20:79:ec:fb:86:b9:08:10:7a:a4:5e: 9c:e2:97:00:e5:65:bb:71:d7:21:89:43:51:86:f4: 08:36:a0:cf:7e:67:93:74:e7:b3:2f:77:fe:5a:16: 53:c9:24:1f:34:3c:f6:46:a3:fb:fb:46:f9:b2:4a: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:37:00:64:28:7B:D6:56:BD:95:FA:74:92:D9:16:87:60:F0:12:29 X509v3 Authority Key Identifier: keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3a:bf:4a:be:fd:37:4a:49:55:7d:73:af:40:2e:8c:eb:f1: 8b:19:10:22:95:5b:67:dd:49:8d:af:fc:91:cf:15:20:29:e7: 5d:06:b7:66:af:57:bf:7e:ff:da:43:71:9e:c7:37:2c:39:fb: da:84:c7:45:e6:c8:bb:2d:18:ef:3f:da:22:87:0e:d7:66:1f: 65:ba:ac:ba:32:4b:be:54:ea:e0:fc:b1:6a:42:48:dc:28:e9: 88:74:5f:f6:15:31:26:00:ec:fb:28:dc:f3:ec:b2:df:82:4a: 05:46:a6:6f:d4:8c:88:c6:76:fd:59:d0:73:05:1d:56:4a:a2: ce:ec:b6:69:e6:c3:78:e5:ca:06:f3:ba:cf:89:9c:33:70:1d: e8:c6:2c:1c:59:6c:e2:6b:75:3b:e8:cc:b5:fd:08:b9:ba:46: 8d:ca:6d:53:c9:bb:54:7b:64:e0:76:18:02:de:13:7a:49:43: 45:6e:c4:88:30:d0:1a:71:70:58:85:02:4c:75:fc:85:e5:a3: 7f:b7:b2:9b:51:ae:64:89:07:07:b4:0a:c7:c5:04:a7:45:8e: cd:ef:13:15:3c:a7:2a:1e:02:5d:0b:fa:b3:e5:e9:55:d5:fe: 96:1c:65:f9:8e:2c:4b:b0:ee:82:ac:0a:a5:2f:c9:00:fd:e4: b5:fb:21:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/tHPXRnMq4VavM8/X5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2IzNWMwOGJhNDkzMDFhNmNjNDMwYWRhOTQ5M2NlZDdl ZDQyMTgwHhcNMjUxMjI2MDkwMTExWhcNMjUxMjI3MDkwMTExWjAzMTEwLwYDVQQD EygxZjM3MDA2NDI4N2JkNjU2YmQ5NWZhNzQ5MmQ5MTY4NzYwZjAxMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzkH5DlGy5X60yNsJqboWfAAZaoz 3SwgHbXASk4O2sBodkvg1pCeQaekdpy+fRHqHXDMZ57rSWwdOf2RcuCNX6Nb7y+W qCDe5/HcXDN0GDgoHrh1F/kNuLK/LmCzlr0e1g/g/kb6OpQhCj+2bjVGf4grMRN9 nXxt3uh+smso6FZSrSSv3cG0HjPZbc928z3iBhhh8lTpNtxOBBz3GhIHP9M7NVxo AJ2jr8mp6biiYw1xRWsbmohMDIfsVz0dVh6Am3B5XLZtIHns+4a5CBB6pF6c4pcA 5WW7cdchiUNRhvQINqDPfmeTdOezL3f+WhZTySQfNDz2RqP7+0b5sko0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB83AGQoe9ZWvZX6dJLZFodg8BIpMB8GA1UdIwQY MBaAFG97NcCLpJMBpsxDCtqUk87X7UIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEt ZDI0YzM1ZGZhYzk0LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OGQwNjAtOThmMi00MDAzLThmZjEtZDI0YzM1ZGZhYzk0 LzEvYjNzMXdJdWtrd0dtekVNSzJwU1R6dGZ0UWhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDq/Sr79 N0pJVX1zr0AujOvxixkQIpVbZ91Jja/8kc8VICnnXQa3Zq9Xv37/2kNxnsc3LDn7 2oTHRebIuy0Y7z/aIocO12YfZbqsujJLvlTq4PyxakJI3CjpiHRf9hUxJgDs+yjc 8+yy34JKBUamb9SMiMZ2/VnQcwUdVkqizuy2aebDeOXKBvO6z4mcM3Ad6MYsHFls 4mt1O+jMtf0IubpGjcptU8m7VHtk4HYYAt4TeklDRW7EiDDQGnFwWIUCTHX8heWj f7eym1GuZIkHB7QKx8UEp0WOze8TFTynKh4CXQv6s+XpVdX+lhxl+Y4sS7DugqwK pS/JAP3ktfsh0A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:26 2025 by rpki-client