This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json) Hash identifier: gXABXdH5rQU+937kcw/1cM07kIRa+C8UgOBg8bPEImQ= Subject key identifier: 6D:FC:36:41:C5:7E:71:78:9C:2A:CB:D4:45:9F:17:48:84:7D:24:BF Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1 Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1 Certificate serial: 019AF23F8C5F25052BFF309033B4F087D169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=) 2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: bRC64dWQZc8kYpKZWtG/PCsdNX3f/wPVG716Y3ZdGC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8c:5f:25:05:2b:ff:30:90:33:b4:f0:87:d1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=6dfc3641c57e71789c2acbd4459f1748847d24bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:41:e9:e6:e4:c1:a1:33:f8:ad:a4:01:54: ce:43:04:bd:55:bb:9b:b1:4a:71:11:97:39:9a:2e: c5:19:fd:db:08:a2:94:16:db:74:3c:c0:aa:83:72: 00:f9:d9:c1:22:a7:a2:26:eb:ec:0e:af:95:a2:d8: 1e:a7:b3:20:90:6a:de:2a:27:5f:5d:5c:ba:92:9c: 58:1a:c4:d8:a3:59:e5:19:85:7e:d3:48:69:02:5e: 23:2a:1a:b4:b9:54:fd:6e:13:f8:d8:f2:9a:0e:2d: c0:ff:40:36:8a:c1:25:0c:2c:48:58:43:17:b2:81: d3:fe:45:db:15:8d:b0:d5:b5:b7:69:9f:61:9b:3d: aa:84:c0:15:22:e2:e9:b2:00:c4:6e:89:b8:7b:6a: a5:e1:37:4b:90:9b:9b:ab:94:1e:97:34:59:22:60: 5b:59:c9:10:55:f1:30:ca:e6:d7:69:37:f7:64:28: d0:0b:41:f9:5e:5e:01:90:70:21:40:a4:b1:3b:e0: 35:88:47:cc:df:7b:75:c5:d5:c4:c1:0d:7c:90:ee: a9:b1:81:90:36:09:f3:23:a3:b7:96:33:34:b1:e7: b7:a5:47:5d:7e:a0:f6:7c:98:6c:b4:59:d7:7a:24: 04:b5:bf:9a:59:29:e9:3a:9c:6d:9b:7a:90:40:ca: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FC:36:41:C5:7E:71:78:9C:2A:CB:D4:45:9F:17:48:84:7D:24:BF X509v3 Authority Key Identifier: keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a7:df:90:f7:1c:55:7c:de:41:ea:ef:d7:ae:3d:18:e3:30: 68:ea:3d:56:fc:38:eb:41:4c:40:7f:ab:18:34:60:40:1f:79: 9f:80:47:2d:08:12:b8:2b:62:fa:6c:d8:7e:e1:f6:f0:46:4c: 0a:0f:d7:7f:66:67:10:4a:2c:3c:9f:f8:fc:da:97:66:95:52: c1:4d:00:7e:fd:8c:b4:dc:dc:e4:20:ec:19:1f:e2:66:f0:08: 1f:77:e8:7b:91:24:56:52:d2:53:31:6a:f6:90:bf:3f:a1:33: cd:c3:7f:8e:b4:1c:e5:11:94:68:b2:87:d9:1f:95:df:a8:e1: 0a:47:5d:4a:7e:36:4a:67:8b:b7:d3:ee:c4:38:40:62:56:29: a9:ab:d0:d7:86:5c:43:07:3a:23:32:14:f5:86:ac:0b:96:ba: 64:20:e4:3c:f4:46:a5:bc:0a:49:41:d2:20:82:aa:93:25:e3: 24:b0:e5:6d:2c:d5:ad:89:dd:d1:c6:37:21:0f:43:42:6c:31: f8:c4:fc:f5:b9:ea:cc:59:72:e3:01:a9:e9:3a:e7:94:a6:85: ce:e5:30:4b:4e:17:45:cb:61:2a:f6:4f:41:9f:ca:65:17:06: c0:4c:3c:76:1d:67:db:08:d6:dd:20:5b:fa:09:9d:58:20:73: f1:73:b3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4xfJQUr/zCQM7Twh9FpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzliNThhM2JmYTM4YmU5MDkzNmMzMTRmMTRiMGQ5YzM1 OWFjYzEwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD Eyg2ZGZjMzY0MWM1N2U3MTc4OWMyYWNiZDQ0NTlmMTc0ODg0N2QyNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RVB6ebkwaEz+K2kAVTOQwS9Vbub sUpxEZc5mi7FGf3bCKKUFtt0PMCqg3IA+dnBIqeiJuvsDq+Votgep7MgkGreKidf XVy6kpxYGsTYo1nlGYV+00hpAl4jKhq0uVT9bhP42PKaDi3A/0A2isElDCxIWEMX soHT/kXbFY2w1bW3aZ9hmz2qhMAVIuLpsgDEbom4e2ql4TdLkJubq5QelzRZImBb WckQVfEwyubXaTf3ZCjQC0H5Xl4BkHAhQKSxO+A1iEfM33t1xdXEwQ18kO6psYGQ NgnzI6O3ljM0see3pUddfqD2fJhstFnXeiQEtb+aWSnpOpxtm3qQQMqrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG38NkHFfnF4nCrL1EWfF0iEfSS/MB8GA1UdIwQY MBaAFG95tYo7+ji+kJNsMU8UsNnDWazBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMt NTJkOTgyZDIxZGZmLzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMtNTJkOTgyZDIxZGZm LzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaffkPcc VXzeQerv1649GOMwaOo9Vvw460FMQH+rGDRgQB95n4BHLQgSuCti+mzYfuH28EZM Cg/Xf2ZnEEosPJ/4/NqXZpVSwU0Afv2MtNzc5CDsGR/iZvAIH3foe5EkVlLSUzFq 9pC/P6EzzcN/jrQc5RGUaLKH2R+V36jhCkddSn42SmeLt9PuxDhAYlYpqavQ14Zc Qwc6IzIU9YasC5a6ZCDkPPRGpbwKSUHSIIKqkyXjJLDlbSzVrYnd0cY3IQ9DQmwx +MT89bnqzFly4wGp6TrnlKaFzuUwS04XRcthKvZPQZ/KZRcGwEw8dh1n2wjW3SBb +gmdWCBz8XOzYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:58 2025 by rpki-client