This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json) Hash identifier: IoMRjw+ri/xEKDL1RV/JAT3BI9XGyxFJbjbpu72T7zM= Subject key identifier: 0A:08:4B:B6:D1:16:22:C5:CB:27:8C:32:C1:6A:75:0E:1B:B7:51:31 Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a Certificate serial: 019B1C8582BD3F3A80B340F9A2FC3B072346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 11:01:10 +0000 Manifest this update: Sun 14 Dec 2025 11:01:10 +0000 Manifest next update: Mon 15 Dec 2025 11:01:10 +0000 Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: iLDCKmdslVnN2mrJkdxLnEBpFx++JeJW3pPlNEeXjLU=) 2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:82:bd:3f:3a:80:b3:40:f9:a2:fc:3b:07:23:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077946f04742c66279acd322009be15e3d588a5a Validity Not Before: Dec 14 11:01:10 2025 GMT Not After : Dec 15 11:01:10 2025 GMT Subject: CN=0a084bb6d11622c5cb278c32c16a750e1bb75131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:bd:3a:45:01:ac:c2:02:0d:c7:69:b2:58: 53:ac:16:3f:e4:7a:9d:8f:d6:b0:0c:21:81:fe:79: 8b:52:e5:33:fc:a4:03:8a:25:4e:2b:e9:f0:2f:f4: 1d:b0:e8:33:23:a3:84:e6:95:94:63:ed:7f:0c:5c: bf:a1:8c:59:81:af:67:11:7f:07:fc:b1:e1:f8:44: 35:93:45:8c:1e:0e:5d:9c:17:7f:68:fb:71:0f:79: 62:9c:ec:1a:75:be:a2:a5:28:cc:e5:1c:ae:2e:b8: 4e:a3:dc:33:0e:af:89:1d:dd:6a:81:53:1e:30:ba: 2d:17:19:d4:13:21:0f:11:4e:d2:72:6e:56:96:2d: b6:3f:1c:60:d0:ac:31:2e:3b:2a:68:7d:e7:14:54: 9b:e2:e7:70:e8:35:b8:53:c8:e9:b1:ff:a4:66:d5: 96:b9:45:09:ba:f5:20:d9:7c:53:4f:43:02:ca:f4: 7f:12:0b:6b:80:0e:43:16:4e:4c:00:65:8c:39:12: e3:be:4d:39:f1:d1:7c:4a:eb:e1:c1:02:41:84:18: a3:bc:5e:10:6a:37:bd:fb:a1:1e:80:f6:22:5c:71: d5:19:a1:19:d9:26:75:95:29:1b:a2:80:a1:dd:41: bf:1d:95:fc:c6:b2:09:dc:cb:49:90:2b:1a:91:7c: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:4B:B6:D1:16:22:C5:CB:27:8C:32:C1:6A:75:0E:1B:B7:51:31 X509v3 Authority Key Identifier: keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1e:8f:c5:fd:45:31:06:19:d7:0b:6e:12:71:8e:53:c7:64: 28:cd:6e:ed:af:ce:0f:da:79:5f:87:d6:0a:7d:4b:46:af:a3: b8:11:9a:cf:0b:98:f2:c6:a6:fc:51:a4:f4:66:9f:20:2f:a5: 3a:c2:a8:8d:e0:32:b3:0e:88:6c:5b:06:2e:a1:98:6d:28:df: 64:ad:c7:a3:43:cb:01:ad:88:e3:bd:d2:f4:c9:5f:bc:26:00: bc:e7:d5:3a:6b:23:48:10:95:97:e6:31:1a:02:35:f2:56:9a: 74:dd:67:ce:97:5c:9a:1e:2b:2f:97:09:5c:51:5e:5a:50:35: d2:69:2e:2c:33:ac:45:d4:1e:90:14:10:1e:68:2a:64:69:37: 21:0f:98:e4:1b:ec:a3:29:69:41:55:51:b0:45:96:e0:2a:fe: 5e:e9:ac:f2:ca:8b:d0:ff:df:53:ff:25:f4:bb:8e:f0:00:3d: 44:28:53:66:6a:65:77:42:2a:87:3e:61:ee:c9:9d:4e:29:e0: e9:bf:21:e7:27:7b:cc:4e:e3:de:58:b9:a3:ed:79:d7:bc:16: ac:37:e8:7f:3f:b2:b4:de:ae:ef:a4:00:36:14:23:cc:e8:91: 8f:9e:b2:53:18:fe:ba:0b:a6:5b:20:64:de:f0:7a:1e:6e:52: 5b:06:a8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYK9PzqAs0D5ovw7ByNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1 ODhhNWEwHhcNMjUxMjE0MTEwMTEwWhcNMjUxMjE1MTEwMTEwWjAzMTEwLwYDVQQD EygwYTA4NGJiNmQxMTYyMmM1Y2IyNzhjMzJjMTZhNzUwZTFiYjc1MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuES9OkUBrMICDcdpslhTrBY/5Hqd j9awDCGB/nmLUuUz/KQDiiVOK+nwL/QdsOgzI6OE5pWUY+1/DFy/oYxZga9nEX8H /LHh+EQ1k0WMHg5dnBd/aPtxD3linOwadb6ipSjM5RyuLrhOo9wzDq+JHd1qgVMe MLotFxnUEyEPEU7Scm5Wli22Pxxg0KwxLjsqaH3nFFSb4udw6DW4U8jpsf+kZtWW uUUJuvUg2XxTT0MCyvR/EgtrgA5DFk5MAGWMORLjvk058dF8SuvhwQJBhBijvF4Q aje9+6EegPYiXHHVGaEZ2SZ1lSkbooCh3UG/HZX8xrIJ3MtJkCsakXyDawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoIS7bRFiLFyyeMMsFqdQ4bt1ExMB8GA1UdIwQY MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt YmUxNTE4MzlmMzY2LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2 LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx6Pxf1F MQYZ1wtuEnGOU8dkKM1u7a/OD9p5X4fWCn1LRq+juBGazwuY8sam/FGk9GafIC+l OsKojeAysw6IbFsGLqGYbSjfZK3Ho0PLAa2I473S9MlfvCYAvOfVOmsjSBCVl+Yx GgI18laadN1nzpdcmh4rL5cJXFFeWlA10mkuLDOsRdQekBQQHmgqZGk3IQ+Y5Bvs oylpQVVRsEWW4Cr+Xums8sqL0P/fU/8l9LuO8AA9RChTZmpld0Iqhz5h7smdTing 6b8h5yd7zE7j3li5o+1517wWrDfofz+ytN6u76QANhQjzOiRj56yUxj+ugumWyBk 3vB6Hm5SWwaoVA== -----END CERTIFICATE-----Generated at Sun Dec 14 17:28:03 2025 by rpki-client