This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json) Hash identifier: sIDEkjBnw1dO+iiX1NmLrQwX7vk2euJ6kS9/W7RUgO4= Subject key identifier: BE:C7:E1:08:AC:29:0B:A4:7A:B6:F9:E6:83:DF:D9:56:A5:EF:2F:4A Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef Certificate serial: 019AF31C8258088E39ACDB65DCDAD3A60F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft Manifest number: 0E22 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: v/4A98pGZ3eQmZW+WlKn2XBZrtGsi3mZjtPVyZ6bqe0=) 2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:82:58:08:8e:39:ac:db:65:dc:da:d3:a6:0f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=bec7e108ac290ba47ab6f9e683dfd956a5ef2f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:c3:a9:94:09:39:15:18:33:18:ad:a1:df: 77:7c:e4:8e:68:3b:b4:ad:f4:cb:e0:54:3a:3f:5c: db:36:24:ed:6c:5e:6d:7c:0f:b4:2a:d0:65:40:cb: d5:fd:af:05:36:d2:f6:c6:d7:ae:9d:07:ac:ba:5d: 22:14:80:93:f0:a8:41:30:34:95:31:27:66:88:5f: 5a:06:8c:d8:f3:15:b4:1c:17:92:f2:26:d0:8c:0e: 24:e0:7f:af:9e:74:8d:04:b2:58:24:75:2a:80:d2: db:43:19:1f:67:36:f0:cd:9d:b9:2b:fc:0f:ad:54: 01:9d:1b:0b:dc:a4:91:05:84:e5:ec:54:0a:0d:f7: 6d:8a:29:72:b9:98:a7:5a:09:04:d1:4e:20:3f:87: 41:f2:96:26:d1:50:6b:47:46:e6:03:0c:da:d1:7d: 62:28:4a:17:5b:75:30:13:84:6c:ed:0c:2b:20:e8: 35:ce:f5:bf:91:51:a1:0b:07:60:a8:95:d1:64:a5: f5:37:4c:f6:9b:bf:60:cc:7b:88:58:71:ee:14:24: 54:6b:cd:bb:8b:00:aa:d2:73:05:8e:22:0f:b8:8a: f0:17:6e:3a:c8:5d:4c:6f:89:55:43:00:54:02:c6: b8:50:e5:2c:f7:7b:45:39:41:dc:77:64:3b:8d:9f: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C7:E1:08:AC:29:0B:A4:7A:B6:F9:E6:83:DF:D9:56:A5:EF:2F:4A X509v3 Authority Key Identifier: keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ae:20:18:22:08:6f:18:09:ac:c9:d3:2c:d5:6d:3f:a9:64: d6:45:01:d4:f8:4c:ff:56:15:f9:8c:a4:b2:57:2c:74:b2:91: 00:8a:a5:2a:e9:cd:02:71:68:70:a9:da:1b:f3:6a:08:cc:eb: 71:44:ca:75:09:3c:04:54:f7:81:e6:2e:34:eb:fc:04:7c:79: 75:5c:c7:d6:12:88:3b:40:31:ed:d3:5a:87:1d:f1:65:64:57: cd:ca:87:51:ef:2c:20:b5:f1:b7:d2:bd:c5:9f:65:d2:a4:2e: d2:9c:8a:fc:f1:b0:c5:c1:35:1c:16:31:16:3b:83:10:b5:56: c6:5e:91:ae:db:c7:a3:8f:6e:7d:f2:9e:cb:3c:35:dc:51:50: 06:b1:1f:39:e8:12:e0:ae:ec:9e:97:8c:a4:55:07:65:28:68: da:95:39:75:9f:c2:35:ed:46:98:a9:33:15:ee:39:ce:ab:69: f4:25:2d:20:ea:c3:4c:f5:cd:88:a7:22:e0:c3:d3:dd:26:e0: 35:96:f3:56:3f:e9:08:c0:76:fd:55:43:2f:c3:c5:e8:29:b4: 7f:91:bc:a1:6c:97:d9:0e:09:28:42:cb:9f:c1:d1:d2:e9:ac: 78:cd:2e:c4:34:3c:c0:bf:1b:28:9b:29:ce:b4:c5:61:2e:b9: 79:8b:76:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIJYCI45rNtl3NrTpg9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4 MTI2ZWYwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EyhiZWM3ZTEwOGFjMjkwYmE0N2FiNmY5ZTY4M2RmZDk1NmE1ZWYyZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9nDqZQJORUYMxitod93fOSOaDu0 rfTL4FQ6P1zbNiTtbF5tfA+0KtBlQMvV/a8FNtL2xteunQesul0iFICT8KhBMDSV MSdmiF9aBozY8xW0HBeS8ibQjA4k4H+vnnSNBLJYJHUqgNLbQxkfZzbwzZ25K/wP rVQBnRsL3KSRBYTl7FQKDfdtiilyuZinWgkE0U4gP4dB8pYm0VBrR0bmAwza0X1i KEoXW3UwE4Rs7QwrIOg1zvW/kVGhCwdgqJXRZKX1N0z2m79gzHuIWHHuFCRUa827 iwCq0nMFjiIPuIrwF246yF1Mb4lVQwBUAsa4UOUs93tFOUHcd2Q7jZ+k0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7H4QisKQukerb55oPf2Val7y9KMB8GA1UdIwQY MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK4gGCII bxgJrMnTLNVtP6lk1kUB1PhM/1YV+YykslcsdLKRAIqlKunNAnFocKnaG/NqCMzr cUTKdQk8BFT3geYuNOv8BHx5dVzH1hKIO0Ax7dNahx3xZWRXzcqHUe8sILXxt9K9 xZ9l0qQu0pyK/PGwxcE1HBYxFjuDELVWxl6RrtvHo49uffKeyzw13FFQBrEfOegS 4K7snpeMpFUHZSho2pU5dZ/CNe1GmKkzFe45zqtp9CUtIOrDTPXNiKci4MPT3Sbg NZbzVj/pCMB2/VVDL8PF6Cm0f5G8oWyX2Q4JKELLn8HR0umseM0uxDQ8wL8bKJsp zrTFYS65eYt2hA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:59 2025 by rpki-client