This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json) Hash identifier: K080cTaew6uP1qnoUZN1bx2FPUeerhW/icibbzO5+Uw= Subject key identifier: 3F:89:C6:02:F3:5A:BD:32:1A:BA:83:93:3E:C7:CE:29:38:A0:1D:96 Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Certificate serial: 019AF2099DD3E6FA36EA8F5069400963D45E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: /DJVFr/fgoCypPmMN7g5YWGJfCWrsjhHek9uTmJk92s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9d:d3:e6:fa:36:ea:8f:50:69:40:09:63:d4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=3f89c602f35abd321aba83933ec7ce2938a01d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:21:9a:0e:ea:f9:16:da:b8:b3:75:ea:3c: da:98:d8:dd:19:b5:87:32:5e:34:b5:38:6a:fb:7c: 35:c7:9d:98:24:78:6d:64:df:11:ac:30:df:08:60: cb:16:38:ba:cc:70:6a:d5:d6:82:26:65:da:d4:ed: 1f:84:d0:1d:c9:52:20:74:15:39:e9:e1:a8:2b:32: 93:93:be:ec:21:c2:60:5b:46:8b:6f:d1:75:a9:b7: f4:bc:bd:f3:2f:4b:ba:33:1f:a3:f0:1e:5c:43:e3: 77:2f:9b:0f:75:29:0c:4a:6f:ba:11:48:d4:90:f7: e5:86:84:7e:8e:60:96:55:0a:ed:42:c6:67:9f:c2: 3d:13:34:cb:72:ca:35:56:b1:f9:cc:21:0f:76:01: 6b:23:81:26:81:0e:88:f8:37:b4:27:79:52:19:2f: 99:5c:af:2b:8e:f5:ab:47:43:bf:f6:4f:ff:2f:e2: 72:73:e2:c6:e2:3b:61:b8:3a:82:c3:db:b7:a9:cd: 67:36:30:94:27:5a:c8:45:2e:62:b0:49:ba:61:ea: 77:a3:d0:0c:51:02:5b:b1:e6:0b:41:62:26:54:87: ee:c6:2b:f3:e1:a4:65:ed:3d:d0:ef:9a:6d:82:3a: 8b:c1:0c:03:43:2c:d0:ce:95:49:64:97:d1:4f:82: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:C6:02:F3:5A:BD:32:1A:BA:83:93:3E:C7:CE:29:38:A0:1D:96 X509v3 Authority Key Identifier: keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d5:a4:67:21:4b:8d:7a:73:62:9f:73:b2:67:22:d7:de:8f: 17:fb:fd:93:55:f2:37:81:dd:65:bb:5b:7b:6b:a1:1a:27:8c: c5:13:75:24:13:6f:67:c2:96:e1:b2:75:77:80:dc:06:9a:65: 8b:41:de:35:05:43:b5:14:88:27:1b:9f:c7:f7:2e:09:13:31: 3b:d0:09:76:29:9c:d5:f7:8a:31:e5:3f:b7:fc:71:94:43:96: c3:48:ef:54:a1:46:ce:0f:12:ef:ec:8a:77:e2:d0:b5:c0:a2: ee:e0:8b:f5:e3:2d:a0:67:3e:a3:ea:ea:56:ec:10:f2:59:68: e8:77:95:85:fe:be:91:76:89:2a:64:2d:4c:6d:10:04:39:fb: 5f:ba:77:e3:21:ce:70:66:05:ec:63:3d:12:48:e1:58:66:42: 97:53:ca:2e:19:db:48:80:8a:83:c8:0c:94:5b:17:16:5b:26: 13:30:f3:17:5f:e6:47:fc:a0:84:7c:8a:bb:e4:bd:79:6d:82: 16:3a:2a:2a:ff:62:eb:c8:42:f5:25:9a:eb:f6:4b:be:2a:a3: 3f:fa:42:68:49:6c:55:7b:70:c0:74:e4:8a:56:91:f8:3a:26: 9c:e5:d3:92:40:b0:9a:f3:a8:44:e6:19:ec:55:5f:37:9f:e7: 20:10:49:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ3T5vo26o9QaUAJY9ReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzYzMzRkYzZmNzBmNTYzZTk5OGY2MDgwYWQzMjhhYWI3 ZjhkMGUwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygzZjg5YzYwMmYzNWFiZDMyMWFiYTgzOTMzZWM3Y2UyOTM4YTAxZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSshmg7q+RbauLN16jzamNjdGbWH Ml40tThq+3w1x52YJHhtZN8RrDDfCGDLFji6zHBq1daCJmXa1O0fhNAdyVIgdBU5 6eGoKzKTk77sIcJgW0aLb9F1qbf0vL3zL0u6Mx+j8B5cQ+N3L5sPdSkMSm+6EUjU kPflhoR+jmCWVQrtQsZnn8I9EzTLcso1VrH5zCEPdgFrI4EmgQ6I+De0J3lSGS+Z XK8rjvWrR0O/9k//L+Jyc+LG4jthuDqCw9u3qc1nNjCUJ1rIRS5isEm6Yep3o9AM UQJbseYLQWImVIfuxivz4aRl7T3Q75ptgjqLwQwDQyzQzpVJZJfRT4IlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+JxgLzWr0yGrqDkz7Hzik4oB2WMB8GA1UdIwQY MBaAFAd2M03G9w9WPpmPYICtMoqrf40OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQt ZTRjOGExOGJhNjQ1LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iYzM0YTAtMzIwMy00M2M3LTkxOWQtZTRjOGExOGJhNjQ1 LzEvQjNZelRjYjNEMVktbVk5Z2dLMHlpcXRfalE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNWkZyFL jXpzYp9zsmci196PF/v9k1XyN4HdZbtbe2uhGieMxRN1JBNvZ8KW4bJ1d4DcBppl i0HeNQVDtRSIJxufx/cuCRMxO9AJdimc1feKMeU/t/xxlEOWw0jvVKFGzg8S7+yK d+LQtcCi7uCL9eMtoGc+o+rqVuwQ8llo6HeVhf6+kXaJKmQtTG0QBDn7X7p34yHO cGYF7GM9EkjhWGZCl1PKLhnbSICKg8gMlFsXFlsmEzDzF1/mR/yghHyKu+S9eW2C FjoqKv9i68hC9SWa6/ZLviqjP/pCaElsVXtwwHTkilaR+DomnOXTkkCwmvOoROYZ 7FVfN5/nIBBJhw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:50 2025 by rpki-client