This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json) Hash identifier: G0LwOuIlJmNd0cWCUyFmjqHjWMFC10/eOWI0KSQSkzE= Subject key identifier: FE:6E:FE:42:B5:5F:F9:D0:DA:C9:F3:CA:ED:1B:E4:6E:CB:6C:DD:12 Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Certificate serial: 019AF653AFFA9BA44FB34C2A3852F02343E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft Manifest number: 16F6 Signing time: Sun 07 Dec 2025 01:01:10 +0000 Manifest this update: Sun 07 Dec 2025 01:01:10 +0000 Manifest next update: Mon 08 Dec 2025 01:01:10 +0000 Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=) 2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: Gn+7o+SQvko/UDnDoz7W9pBPNmDuvOIkVvdR8PO6a4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:af:fa:9b:a4:4f:b3:4c:2a:38:52:f0:23:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df Validity Not Before: Dec 7 01:01:10 2025 GMT Not After : Dec 8 01:01:10 2025 GMT Subject: CN=fe6efe42b55ff9d0dac9f3caed1be46ecb6cdd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:2e:9a:e3:73:76:6b:aa:2d:07:83:b3:a1: e2:a5:89:42:ac:08:9e:f2:c0:38:fc:3a:22:1e:e7: fa:2a:13:51:c9:01:60:10:26:cb:e9:48:4e:a0:85: 9b:f7:24:96:85:9a:47:e3:14:27:ba:47:2c:77:4c: 0c:32:89:6a:ed:c1:d3:fa:cd:d4:10:f4:11:0d:8c: 8c:44:89:47:ee:9b:c6:10:c3:68:f7:dd:f1:1d:d0: 52:e6:ed:ec:f1:c7:6a:f6:7e:20:05:9d:ea:41:80: 8a:9d:59:a2:88:56:2f:e4:9b:f0:61:72:bc:a7:6e: 88:18:4d:28:32:67:e7:a2:d6:12:7c:b6:cf:e6:aa: 08:31:13:8c:bd:90:b2:26:5c:94:1a:10:cd:28:62: 33:8d:81:de:b7:71:39:d6:f1:1e:46:33:72:b6:0c: d9:3e:e4:72:c0:d5:22:f2:11:ed:41:dc:28:4a:d8: 68:19:89:1b:3b:7c:fe:40:37:ac:9a:7c:7e:32:e8: ba:6a:21:7b:01:a8:cb:38:f3:9d:1d:7e:f0:13:5e: 56:55:9c:93:36:1c:c7:b9:59:e0:98:16:44:96:2a: 9e:8c:21:53:6d:0f:ab:cb:ab:82:77:fc:44:70:63: 2a:42:1a:a1:1e:11:db:89:af:6e:98:ba:6c:bb:e2: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:FE:42:B5:5F:F9:D0:DA:C9:F3:CA:ED:1B:E4:6E:CB:6C:DD:12 X509v3 Authority Key Identifier: keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:ec:75:91:c7:cd:ad:ae:0e:81:99:1b:7c:01:eb:44:9a:29: cb:b9:7e:1a:f6:3f:57:44:be:4e:82:86:da:1e:d2:fe:3c:e0: 6b:97:41:60:6d:b7:ae:33:5d:26:cf:84:34:8c:eb:42:3d:d6: c8:c3:e3:19:28:d2:fb:fd:8e:ac:74:66:a3:98:01:0b:9b:6a: 68:7c:20:f9:25:5d:45:e3:ea:27:ae:64:a2:c9:db:8a:88:7d: 56:be:3d:d4:b2:3f:41:c6:5c:1d:35:09:b6:8b:b3:89:33:bd: a2:7f:d0:81:73:7e:0b:03:e0:35:56:5d:57:fa:6c:08:e5:4e: bc:33:ed:fb:74:28:63:d0:16:a8:14:2d:d6:1b:d1:d7:a7:6a: 3c:9d:3f:40:16:96:d9:d4:b9:7f:ed:a4:4e:c1:5c:b8:e2:c3: 8a:a9:dd:44:72:b9:37:df:eb:13:a1:8b:79:99:2b:d0:c3:7a: 2c:f6:5d:00:37:91:4e:48:cf:78:ab:95:b8:84:a3:9f:a6:6f: a5:fb:4e:a4:a9:4c:f8:ae:17:25:41:6a:58:63:24:c4:95:e3: b2:db:bb:29:18:5c:00:b4:af:3e:19:c0:0a:34:86:31:ad:4a: fa:59:47:d0:ef:1f:1e:88:ef:0e:6e:cc:74:bd:d7:0e:bc:f6: f4:4b:40:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6/6m6RPs0wqOFLwI0PoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy ZTQ3ZGYwHhcNMjUxMjA3MDEwMTEwWhcNMjUxMjA4MDEwMTEwWjAzMTEwLwYDVQQD EyhmZTZlZmU0MmI1NWZmOWQwZGFjOWYzY2FlZDFiZTQ2ZWNiNmNkZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CYumuNzdmuqLQeDs6HipYlCrAie 8sA4/DoiHuf6KhNRyQFgECbL6UhOoIWb9ySWhZpH4xQnukcsd0wMMolq7cHT+s3U EPQRDYyMRIlH7pvGEMNo993xHdBS5u3s8cdq9n4gBZ3qQYCKnVmiiFYv5JvwYXK8 p26IGE0oMmfnotYSfLbP5qoIMROMvZCyJlyUGhDNKGIzjYHet3E51vEeRjNytgzZ PuRywNUi8hHtQdwoSthoGYkbO3z+QDesmnx+Mui6aiF7AajLOPOdHX7wE15WVZyT NhzHuVngmBZEliqejCFTbQ+ry6uCd/xEcGMqQhqhHhHbia9umLpsu+LSYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5u/kK1X/nQ2snzyu0b5G7LbN0SMB8GA1UdIwQY MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Ox1kcfN ra4OgZkbfAHrRJopy7l+GvY/V0S+ToKG2h7S/jzga5dBYG23rjNdJs+ENIzrQj3W yMPjGSjS+/2OrHRmo5gBC5tqaHwg+SVdRePqJ65kosnbioh9Vr491LI/QcZcHTUJ touziTO9on/QgXN+CwPgNVZdV/psCOVOvDPt+3QoY9AWqBQt1hvR16dqPJ0/QBaW 2dS5f+2kTsFcuOLDiqndRHK5N9/rE6GLeZkr0MN6LPZdADeRTkjPeKuVuISjn6Zv pftOpKlM+K4XJUFqWGMkxJXjstu7KRhcALSvPhnACjSGMa1K+llH0O8fHojvDm7M dL3XDrz29EtAng== -----END CERTIFICATE-----Generated at Sun Dec 7 10:06:15 2025 by rpki-client