This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft File: B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json) Hash identifier: DWmZ27joj6zEKBnVyrwiVaEc5F5yC5FelZxKzsi4xp8= Subject key identifier: AD:36:A0:A5:17:40:FB:04:83:05:9B:8C:1D:C3:E3:AD:50:0C:D1:B8 Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56 Certificate issuer: /CN=07730862dfb740166df453fb6e9c8508af5d9c56 Certificate serial: 019B27ADED4F3BA6CE6A927A7748C36A762E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft Manifest number: 152F Signing time: Tue 16 Dec 2025 15:01:08 +0000 Manifest this update: Tue 16 Dec 2025 15:01:08 +0000 Manifest next update: Wed 17 Dec 2025 15:01:08 +0000 Files and hashes: 1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: WyZliDnAD0BxW1xfEEhXY7SfqlHBsvWyeinOZ+lOuOk=) 2: z09mXVSXSd7UAacEzfV20oFsmYY.roa (hash: 1yRcdJ+SBO6uBICs/lRiYWbJ7McXCDERo9p2CuxM7s0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:ed:4f:3b:a6:ce:6a:92:7a:77:48:c3:6a:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56 Validity Not Before: Dec 16 15:01:08 2025 GMT Not After : Dec 17 15:01:08 2025 GMT Subject: CN=ad36a0a51740fb0483059b8c1dc3e3ad500cd1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:c3:0d:6d:63:81:d9:c3:2a:c2:eb:aa:d3: 54:75:f9:a5:8e:f2:3d:19:ae:8a:f2:49:75:23:a0: ac:e2:55:46:bb:12:3c:0f:42:40:35:d0:71:e5:8d: dd:6c:f4:c4:53:ae:ff:19:cb:1f:7b:b4:3d:0b:df: 46:aa:6a:cc:08:84:e8:9e:ee:aa:b9:57:6a:ba:6d: 09:a4:e8:64:21:6f:92:05:96:cc:82:06:fe:41:bd: 6a:fb:91:0c:b5:16:93:f1:1a:f7:11:0c:94:45:30: 82:2c:15:34:22:49:2e:74:d2:1c:43:d9:b6:cd:ff: fc:70:2b:69:08:b1:ff:09:35:75:ba:0b:47:f1:cc: 69:9c:bb:ce:79:ab:ac:08:6d:c7:0d:a2:6a:24:8e: 7b:b7:54:ad:b8:9f:72:1a:17:3a:71:87:c7:da:22: ab:2a:15:d8:3f:f6:50:6a:23:90:45:1f:00:82:d6: c4:54:dd:18:98:af:e3:70:78:35:3d:c2:f9:ad:fd: fd:af:ce:78:ae:ae:1f:01:27:76:3c:a3:65:ed:65: 81:ef:5b:49:59:88:ca:bc:b2:03:0a:52:62:80:33: c5:31:67:48:b6:57:e0:bc:0c:2a:1d:7f:33:93:da: 44:38:cc:d8:41:cf:28:dc:df:ab:1c:40:a8:d1:51: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:36:A0:A5:17:40:FB:04:83:05:9B:8C:1D:C3:E3:AD:50:0C:D1:B8 X509v3 Authority Key Identifier: keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:16:0d:19:07:dc:12:9b:5c:f7:42:a7:4e:c3:8b:a5:28: 7f:b0:c8:48:63:89:69:e0:ee:53:7d:62:d5:6b:91:84:f9:0b: 65:be:56:1e:80:18:57:73:0f:87:16:c7:43:64:fa:4d:e3:ba: 96:41:92:b3:6b:6d:8b:b4:d5:a2:22:84:eb:94:0c:0a:20:96: bf:a2:c7:5c:9f:96:fa:a8:93:ab:63:3f:a2:94:0e:e3:e5:40: 74:8b:cb:cd:9a:fb:c7:82:fc:01:42:09:58:b9:4f:cf:07:97: 9b:76:2d:ce:82:74:0d:aa:0d:22:a9:bd:a7:e7:09:26:c1:b6: fa:e0:8e:d3:0e:16:1c:89:b1:b4:4c:1f:3c:61:6c:13:22:56: 65:b8:11:e9:b8:e9:d4:09:27:a7:3a:77:4a:dc:0c:cb:0a:d5: 4b:9f:a4:35:21:85:74:61:51:99:dc:db:5c:1c:96:32:4e:2c: ac:73:8e:08:aa:b8:96:1f:c4:e4:40:b1:aa:e2:8f:86:5d:a7: b9:c9:38:b5:a0:c8:12:60:dc:9f:ae:43:45:dd:76:0e:6a:33: 85:8e:48:b2:d9:a3:86:6d:07:fa:60:cc:6b:9b:08:ba:bc:5f: a5:4a:0e:db:42:cc:79:22:28:1b:e7:47:f0:98:be:f6:30:43: 84:ff:ae:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnre1PO6bOapJ6d0jDanYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzMwODYyZGZiNzQwMTY2ZGY0NTNmYjZlOWM4NTA4YWY1 ZDljNTYwHhcNMjUxMjE2MTUwMTA4WhcNMjUxMjE3MTUwMTA4WjAzMTEwLwYDVQQD EyhhZDM2YTBhNTE3NDBmYjA0ODMwNTliOGMxZGMzZTNhZDUwMGNkMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWbDDW1jgdnDKsLrqtNUdfmljvI9 Ga6K8kl1I6Cs4lVGuxI8D0JANdBx5Y3dbPTEU67/Gcsfe7Q9C99GqmrMCITonu6q uVdqum0JpOhkIW+SBZbMggb+Qb1q+5EMtRaT8Rr3EQyURTCCLBU0IkkudNIcQ9m2 zf/8cCtpCLH/CTV1ugtH8cxpnLvOeausCG3HDaJqJI57t1StuJ9yGhc6cYfH2iKr KhXYP/ZQaiOQRR8AgtbEVN0YmK/jcHg1PcL5rf39r854rq4fASd2PKNl7WWB71tJ WYjKvLIDClJigDPFMWdItlfgvAwqHX8zk9pEOMzYQc8o3N+rHECo0VFjYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK02oKUXQPsEgwWbjB3D461QDNG4MB8GA1UdIwQY MBaAFAdzCGLft0AWbfRT+26chQivXZxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUt NWVlYmUzNTM1MmU4LzEvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81YzA2YzMtYjQ0Zi00YmU5LThiMmUtNWVlYmUzNTM1MmU4 LzEvQjNNSVl0LTNRQlp0OUZQN2JweUZDSzlkbkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaUWDRkH 3BKbXPdCp07Di6Uof7DISGOJaeDuU31i1WuRhPkLZb5WHoAYV3MPhxbHQ2T6TeO6 lkGSs2tti7TVoiKE65QMCiCWv6LHXJ+W+qiTq2M/opQO4+VAdIvLzZr7x4L8AUIJ WLlPzweXm3YtzoJ0DaoNIqm9p+cJJsG2+uCO0w4WHImxtEwfPGFsEyJWZbgR6bjp 1Aknpzp3StwMywrVS5+kNSGFdGFRmdzbXByWMk4srHOOCKq4lh/E5ECxquKPhl2n uck4taDIEmDcn65DRd12DmozhY5Istmjhm0H+mDMa5sIurxfpUoO20LMeSIoG+dH 8Ji+9jBDhP+ukQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:14:25 2025 by rpki-client