This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json) Hash identifier: Q9YY4ReTwfYKF5u9+qKfFg30UjyEiWCs4/S8XqrP8Qo= Subject key identifier: DF:60:00:23:E8:F2:6B:F8:29:47:AB:AB:1C:A9:05:D9:B0:5B:9A:43 Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019AF46539A727DCF6AEB48E421C7D541663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 16:01:05 +0000 Manifest this update: Sat 06 Dec 2025 16:01:05 +0000 Manifest next update: Sun 07 Dec 2025 16:01:05 +0000 Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=) 2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: +k4/FRPXToDTlUF0U1pwQ2OecKhb4rzJso64ZiutGxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:39:a7:27:dc:f6:ae:b4:8e:42:1c:7d:54:16:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Dec 6 16:01:05 2025 GMT Not After : Dec 7 16:01:05 2025 GMT Subject: CN=df600023e8f26bf82947abab1ca905d9b05b9a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:37:6c:56:f1:46:3c:d4:42:6f:ce:3d:5b: a8:bb:56:61:40:b0:34:ec:f7:42:a3:b1:33:90:26: d7:dd:f8:2e:3f:31:25:9d:b3:a2:19:e6:56:f2:bb: 57:64:d1:6b:cb:fb:fb:3c:48:40:04:c2:a5:e4:f0: 0b:6c:1f:28:89:5f:59:21:62:72:10:98:89:a1:3b: e7:5a:0c:54:e6:33:c0:5d:38:7a:e2:fe:c2:68:8f: 64:42:ef:fb:ac:77:22:bf:95:d4:dc:73:96:7a:6b: 78:97:b2:06:63:89:7d:b0:4c:70:84:73:62:0b:bc: 8b:f2:7f:83:b5:82:0e:74:d1:82:a2:bf:17:be:67: d9:9b:b1:f5:aa:90:af:f3:bb:e7:67:fb:c4:de:9b: 67:3c:df:4c:f7:98:63:d2:45:78:48:67:3f:a7:56: a9:c5:e0:a3:22:ea:13:71:34:6d:cb:a1:73:18:10: f7:61:02:00:76:b2:67:69:94:16:6f:2b:44:a6:c7: e1:ca:c9:33:e9:ea:86:14:5b:e4:b8:0a:cd:8e:ea: b3:bd:2b:57:a5:e3:d5:bd:c3:1f:aa:98:cc:ed:67: 2c:9e:92:ee:0a:6d:c2:03:dd:93:5b:0b:be:7d:b7: 0c:4f:fd:d8:13:ee:fa:63:cf:26:73:2f:5d:b3:d4: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:60:00:23:E8:F2:6B:F8:29:47:AB:AB:1C:A9:05:D9:B0:5B:9A:43 X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:26:fc:28:7e:b1:d3:20:32:64:d6:f0:78:64:7c:70:dc:8c: 12:db:df:9e:fe:a4:2f:80:da:0e:66:6a:13:f6:29:dc:9c:d5: 4b:7c:ba:03:a3:14:f8:bb:34:c3:0d:f5:10:a2:e5:31:57:16: f9:b0:af:40:be:37:af:a9:49:25:e8:7b:77:3f:4b:ec:d1:f5: 2a:61:33:8e:66:e3:d2:4c:b1:ba:42:10:ea:e3:cb:a8:8a:9e: cb:bb:05:02:08:ee:a1:41:62:7d:79:ab:39:a6:38:91:6e:a0: cd:33:56:c9:1b:aa:3f:90:9b:ef:59:39:a0:e2:13:3f:13:ff: 1d:2a:30:17:62:07:c5:a5:35:99:12:50:f7:99:7a:3e:0b:50: 34:fe:35:fb:07:05:12:41:89:47:6d:4e:e6:77:12:0a:fd:e0: eb:cc:12:58:f9:ff:a6:89:43:bb:79:94:28:88:8a:f0:7f:7c: 22:fd:5c:d4:62:1f:81:30:21:3d:ed:13:ba:13:6e:eb:49:8e: 83:08:17:28:4a:86:b7:96:56:03:42:99:08:c2:9d:c1:3e:a5: 62:5e:34:b6:40:26:38:82:2c:e5:54:8b:f0:d7:c3:61:77:b3: 55:9e:5f:96:24:d7:4a:ec:47:3d:55:a7:e9:82:92:ad:f4:13: f2:9f:55:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTmnJ9z2rrSOQhx9VBZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjUxMjA2MTYwMTA1WhcNMjUxMjA3MTYwMTA1WjAzMTEwLwYDVQQD EyhkZjYwMDAyM2U4ZjI2YmY4Mjk0N2FiYWIxY2E5MDVkOWIwNWI5YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDs3bFbxRjzUQm/OPVuou1ZhQLA0 7PdCo7EzkCbX3fguPzElnbOiGeZW8rtXZNFry/v7PEhABMKl5PALbB8oiV9ZIWJy EJiJoTvnWgxU5jPAXTh64v7CaI9kQu/7rHciv5XU3HOWemt4l7IGY4l9sExwhHNi C7yL8n+DtYIOdNGCor8XvmfZm7H1qpCv87vnZ/vE3ptnPN9M95hj0kV4SGc/p1ap xeCjIuoTcTRty6FzGBD3YQIAdrJnaZQWbytEpsfhyskz6eqGFFvkuArNjuqzvStX pePVvcMfqpjM7WcsnpLuCm3CA92TWwu+fbcMT/3YE+76Y88mcy9ds9RanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9gACPo8mv4KUerqxypBdmwW5pDMB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSb8KH6x 0yAyZNbweGR8cNyMEtvfnv6kL4DaDmZqE/Yp3JzVS3y6A6MU+Ls0ww31EKLlMVcW +bCvQL43r6lJJeh7dz9L7NH1KmEzjmbj0kyxukIQ6uPLqIqey7sFAgjuoUFifXmr OaY4kW6gzTNWyRuqP5Cb71k5oOITPxP/HSowF2IHxaU1mRJQ95l6PgtQNP41+wcF EkGJR21O5ncSCv3g68wSWPn/polDu3mUKIiK8H98Iv1c1GIfgTAhPe0TuhNu60mO gwgXKEqGt5ZWA0KZCMKdwT6lYl40tkAmOIIs5VSL8NfDYXezVZ5fliTXSuxHPVWn 6YKSrfQT8p9Vrg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:37 2025 by rpki-client