This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json) Hash identifier: UISU02gSpym67RAgBmtm12OjNqyyBm14pvFMAng2+Xw= Subject key identifier: 74:FD:67:FB:9D:F8:D5:72:26:60:DA:64:EB:B1:D5:45:25:7F:DD:8E Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Certificate serial: 019AF5785D3635D6CF201952290CB667C534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft Manifest number: 1560 Signing time: Sat 06 Dec 2025 21:01:37 +0000 Manifest this update: Sat 06 Dec 2025 21:01:37 +0000 Manifest next update: Sun 07 Dec 2025 21:01:37 +0000 Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: EIdwItiFtxVUUBpaXf0Cg62gJ3Sji9Xf/pWMNanaaas=) 2: q4kKsYZfOGon2mT-Eapypp72_Ec.roa (hash: w/Ifs9Hdm+PYXiSZpAXsafh4R7xPHRN+zAgqDILsgeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5d:36:35:d6:cf:20:19:52:29:0c:b6:67:c5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Validity Not Before: Dec 6 21:01:37 2025 GMT Not After : Dec 7 21:01:37 2025 GMT Subject: CN=74fd67fb9df8d5722660da64ebb1d545257fdd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:f0:84:e9:a8:34:6c:53:ee:51:52:fb:1e: 24:ab:1f:3f:32:e7:a9:c1:5f:83:39:3e:a3:9e:0b: 6c:79:f3:16:66:af:2b:38:80:86:1e:82:c4:06:d4: fc:60:8b:d9:35:30:6d:54:08:36:3b:c2:6f:5a:3b: 2d:4a:f9:dd:88:8c:e0:5a:fa:01:c9:58:23:6e:b2: 3d:34:77:91:6f:9c:b6:3b:8f:1f:eb:42:ba:d6:8b: 59:c6:a7:5d:e3:77:99:d5:63:68:93:3d:93:a0:19: 09:67:40:10:df:8d:df:c4:e0:9c:f9:03:c3:52:9d: b0:b2:95:0c:93:a9:47:6b:43:5b:ac:a9:93:5b:73: 23:bf:ec:1c:c4:44:55:ce:5d:7b:d4:7c:a2:8c:8b: f2:a7:c3:13:0b:51:df:bd:84:29:06:b0:d1:3d:20: a3:15:3d:11:e7:fa:32:83:dc:cc:6f:71:61:c6:a0: 88:f1:10:86:3c:92:7c:77:7e:d2:15:b6:99:9c:2d: cd:40:91:5e:20:e4:cf:41:52:e2:aa:14:44:b2:ee: a9:94:36:e1:22:8b:4d:4b:5a:9f:4d:a0:32:44:42: 06:61:0e:39:6b:ac:3b:cc:ab:64:a5:83:07:81:f7: 9b:2c:dd:89:f2:d6:6e:d7:63:9f:41:5d:dc:b2:c2: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FD:67:FB:9D:F8:D5:72:26:60:DA:64:EB:B1:D5:45:25:7F:DD:8E X509v3 Authority Key Identifier: keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:82:54:4e:af:92:9a:42:41:47:14:30:1d:2f:8e:26:9e:b9: 0b:c0:68:9a:82:25:a9:75:9c:1b:7a:ce:ff:25:b9:fd:7e:9b: 12:ec:ed:e8:9e:31:55:45:79:1c:02:9a:36:3e:97:4c:4d:ec: c5:30:25:25:37:94:69:11:b8:27:9e:ef:13:96:0b:c3:9a:b8: c6:8d:e1:17:86:1a:50:9b:24:e1:d3:85:18:1d:40:d7:41:6c: cc:78:93:7f:b8:a4:b6:f0:a0:7b:30:ac:8a:99:86:c7:9e:74: 08:12:63:e6:87:a1:2e:81:9d:86:14:6b:50:4c:a2:2d:89:5a: 67:1d:4b:82:71:3b:cf:d8:b4:23:d3:79:fd:5d:6e:95:c2:6e: 09:e0:1d:3b:82:82:cf:09:d1:ca:1a:0c:f6:56:ed:b5:54:c5: 16:f0:86:08:5c:f0:5f:ae:63:31:42:c0:19:26:85:62:c6:2d: 23:39:b1:f3:52:e8:4a:86:bb:84:34:52:ad:37:bf:f5:45:1a: 10:f5:54:b9:bb:1c:32:f2:ff:f8:da:6d:fa:77:65:9d:6a:80: 0d:2a:40:70:cf:19:4b:9d:38:fe:30:f3:82:25:7a:ea:ac:df: a8:d4:5c:ea:6c:d0:93:61:d0:bb:a1:25:3f:f0:69:1c:ea:79: d0:b2:7b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eF02NdbPIBlSKQy2Z8U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3N2EwZmI5OWU1MmFlNGZhMWQ2NmZhYWQ5M2Y0MmU2ZDA3 ODg2YTYwHhcNMjUxMjA2MjEwMTM3WhcNMjUxMjA3MjEwMTM3WjAzMTEwLwYDVQQD Eyg3NGZkNjdmYjlkZjhkNTcyMjY2MGRhNjRlYmIxZDU0NTI1N2ZkZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxPwhOmoNGxT7lFS+x4kqx8/Muep wV+DOT6jngtsefMWZq8rOICGHoLEBtT8YIvZNTBtVAg2O8JvWjstSvndiIzgWvoB yVgjbrI9NHeRb5y2O48f60K61otZxqdd43eZ1WNokz2ToBkJZ0AQ343fxOCc+QPD Up2wspUMk6lHa0NbrKmTW3Mjv+wcxERVzl171HyijIvyp8MTC1HfvYQpBrDRPSCj FT0R5/oyg9zMb3FhxqCI8RCGPJJ8d37SFbaZnC3NQJFeIOTPQVLiqhREsu6plDbh IotNS1qfTaAyREIGYQ45a6w7zKtkpYMHgfebLN2J8tZu12OfQV3cssL9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT9Z/ud+NVyJmDaZOux1UUlf92OMB8GA1UdIwQY MBaAFAd6D7meUq5PodZvqtk/QubQeIamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMt ZDQ2N2NjNmU3ZDhmLzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMtZDQ2N2NjNmU3ZDhm LzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYJUTq+S mkJBRxQwHS+OJp65C8BomoIlqXWcG3rO/yW5/X6bEuzt6J4xVUV5HAKaNj6XTE3s xTAlJTeUaRG4J57vE5YLw5q4xo3hF4YaUJsk4dOFGB1A10FszHiTf7iktvCgezCs ipmGx550CBJj5oehLoGdhhRrUEyiLYlaZx1LgnE7z9i0I9N5/V1ulcJuCeAdO4KC zwnRyhoM9lbttVTFFvCGCFzwX65jMULAGSaFYsYtIzmx81LoSoa7hDRSrTe/9UUa EPVUubscMvL/+Npt+ndlnWqADSpAcM8ZS504/jDzgiV66qzfqNRc6mzQk2HQu6El P/BpHOp50LJ7dw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:04 2025 by rpki-client