This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft File: b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json) Hash identifier: 1cBniKRfi4j2cmZDgQ6yF9Zq5wjpMzeBpHRiCYXXINc= Subject key identifier: 06:C7:0A:AF:14:F2:80:11:4A:AD:5D:C8:E1:F8:DE:8A:89:91:B9:9D Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e Certificate serial: 019B281C3B894926245A4A1447760DF15B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft Manifest number: 0A09 Signing time: Tue 16 Dec 2025 17:01:37 +0000 Manifest this update: Tue 16 Dec 2025 17:01:37 +0000 Manifest next update: Wed 17 Dec 2025 17:01:37 +0000 Files and hashes: 1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=) 2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: 4X71Bw6gs4YAhrEUOzbjl9UeMGs0Y3F5Gcs7Zv055bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1c:3b:89:49:26:24:5a:4a:14:47:76:0d:f1:5b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e Validity Not Before: Dec 16 17:01:37 2025 GMT Not After : Dec 17 17:01:37 2025 GMT Subject: CN=06c70aaf14f280114aad5dc8e1f8de8a8991b99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:17:48:ce:91:df:a3:24:21:56:c6:3e:d3: 6d:fa:57:a9:ed:db:32:91:fc:39:20:b7:3e:2d:a7: ac:1c:cc:5a:34:21:9f:f3:ee:b1:54:2a:8d:e7:42: 8b:30:0f:ee:3c:94:0e:c0:c5:a0:ca:51:ec:1b:aa: 89:ad:4c:90:97:0c:e2:2c:9f:82:db:91:49:12:5c: 1c:fd:31:00:ec:1d:f9:bd:12:f1:16:d1:d0:6c:c0: 37:68:67:de:fc:d9:1b:3e:d6:d4:4b:68:7b:02:5b: 39:4f:fc:5f:fb:79:2f:fc:64:d7:83:45:c1:39:14: 8c:8b:fa:57:6d:58:3c:f4:8e:b9:9e:70:b6:39:28: 61:2a:a0:73:79:97:4e:88:8f:4f:e6:ce:e9:b2:be: 10:5e:b2:61:91:31:25:7e:58:d1:42:a8:e7:f7:95: 8e:7f:2e:1f:d5:84:18:04:50:14:64:dc:9a:8f:2a: 27:2a:37:19:67:ad:da:f0:7f:1f:37:c4:68:6e:fd: b7:59:b7:93:bc:41:17:0a:a6:cf:10:ce:7e:82:73: 23:bd:fa:e5:51:81:85:74:d1:56:dd:96:c6:c0:65: dc:ff:c9:85:bd:47:76:51:ae:03:77:80:df:09:ee: 97:6a:98:5e:72:f2:a9:b5:21:aa:a9:e2:31:0c:fc: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C7:0A:AF:14:F2:80:11:4A:AD:5D:C8:E1:F8:DE:8A:89:91:B9:9D X509v3 Authority Key Identifier: keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:73:47:cf:28:16:c7:d9:89:ec:c5:b0:97:2b:a7:7e:a0:ce: 3f:55:4f:0c:5f:b5:23:c5:f6:85:86:52:64:aa:f3:28:f6:90: f4:17:16:07:35:16:1f:0e:f5:3a:09:0e:51:a7:a3:58:c8:60: 25:7e:fa:8b:5b:f1:0d:b6:c2:ff:8a:f9:be:24:47:2a:d7:07: d3:c9:9f:83:ed:57:0c:21:06:d5:6c:96:60:18:55:d8:cc:26: 2d:ee:50:9e:a8:71:af:fb:60:e6:ef:43:34:e5:bf:c7:c6:48: 93:2c:88:e9:ee:c7:37:ac:d2:c0:b4:4e:5d:50:45:6d:9d:fe: d4:7c:4b:e8:b0:d7:70:d2:6a:ed:34:0f:8e:cb:27:c0:e7:c4: 87:a6:be:f5:b6:c6:be:ea:24:3b:69:cd:03:b1:03:b9:82:4b: 68:b7:a9:03:7f:e8:00:75:97:7c:0a:48:17:06:a3:f3:23:4d: 6f:c8:a9:e5:8b:92:55:e8:22:69:e8:86:84:09:48:bb:9f:56: 45:f8:39:64:f3:f5:a3:3b:1b:ed:6f:21:7f:71:14:01:43:c1: 56:ea:a4:e2:b3:af:3c:c2:a9:b2:ac:a1:f2:ce:00:9c:9d:8e: e0:34:7d:75:66:93:19:41:f8:4f:33:e7:b1:f6:b6:9b:1b:f4: cc:42:b5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoHDuJSSYkWkoUR3YN8VtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmN2ZhMzcxODVhMjI5NDRhNjA3ZDlhOTRmOTg4NTk5N2Q4 NTFiMWUwHhcNMjUxMjE2MTcwMTM3WhcNMjUxMjE3MTcwMTM3WjAzMTEwLwYDVQQD EygwNmM3MGFhZjE0ZjI4MDExNGFhZDVkYzhlMWY4ZGU4YTg5OTFiOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmUXSM6R36MkIVbGPtNt+lep7dsy kfw5ILc+LaesHMxaNCGf8+6xVCqN50KLMA/uPJQOwMWgylHsG6qJrUyQlwziLJ+C 25FJElwc/TEA7B35vRLxFtHQbMA3aGfe/NkbPtbUS2h7Als5T/xf+3kv/GTXg0XB ORSMi/pXbVg89I65nnC2OShhKqBzeZdOiI9P5s7psr4QXrJhkTElfljRQqjn95WO fy4f1YQYBFAUZNyajyonKjcZZ63a8H8fN8Robv23WbeTvEEXCqbPEM5+gnMjvfrl UYGFdNFW3ZbGwGXc/8mFvUd2Ua4Dd4DfCe6XaphecvKptSGqqeIxDPwjVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbHCq8U8oARSq1dyOH43oqJkbmdMB8GA1UdIwQY MBaAFG9/o3GFoilEpgfZqU+YhZl9hRseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMt YTM0YTRjOGIwYzhhLzEvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOTA5ZjgtNzBjNC00NjVkLWJjNmMtYTM0YTRjOGIwYzhh LzEvYjMtamNZV2lLVVNtQjltcFQ1aUZtWDJGR3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnNHzygW x9mJ7MWwlyunfqDOP1VPDF+1I8X2hYZSZKrzKPaQ9BcWBzUWHw71OgkOUaejWMhg JX76i1vxDbbC/4r5viRHKtcH08mfg+1XDCEG1WyWYBhV2MwmLe5Qnqhxr/tg5u9D NOW/x8ZIkyyI6e7HN6zSwLROXVBFbZ3+1HxL6LDXcNJq7TQPjssnwOfEh6a+9bbG vuokO2nNA7EDuYJLaLepA3/oAHWXfApIFwaj8yNNb8ip5YuSVegiaeiGhAlIu59W Rfg5ZPP1ozsb7W8hf3EUAUPBVuqk4rOvPMKpsqyh8s4AnJ2O4DR9dWaTGUH4TzPn sfa2mxv0zEK1Pg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:58:14 2025 by rpki-client