This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json) Hash identifier: qNLk/JWn6Ihn8XJaRFEMTPN9xQTuRxHhvGk13a0OcJg= Subject key identifier: A7:C4:F8:A9:23:A7:77:8B:5E:24:3B:87:CF:23:7C:B7:18:1C:F2:62 Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Certificate serial: 019B33444E2BC830ED00665C099C2EB88730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 21:01:13 +0000 Manifest this update: Thu 18 Dec 2025 21:01:13 +0000 Manifest next update: Fri 19 Dec 2025 21:01:13 +0000 Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: Fvjkg7QOLH6BCQSpTvCjpVMHKkS6mefltg654UoIzzs=) 2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=) 3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=) 4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=) 5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=) 6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:4e:2b:c8:30:ed:00:66:5c:09:9c:2e:b8:87:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Validity Not Before: Dec 18 21:01:13 2025 GMT Not After : Dec 19 21:01:13 2025 GMT Subject: CN=a7c4f8a923a7778b5e243b87cf237cb7181cf262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:c0:6a:c4:fa:1f:6a:4a:44:94:3f:63:aa: 91:75:70:46:47:82:6f:83:6b:b0:c1:54:65:ae:e0: 1d:bc:ac:20:1f:a8:1e:fd:2d:6d:3a:57:69:ed:94: 23:36:94:c8:c3:35:a8:c2:4a:ac:95:1d:3b:cd:3f: f1:d5:c1:d5:ef:de:f1:05:9d:51:ae:6d:7c:70:0e: 0a:c3:73:db:19:98:c0:bf:38:19:8a:6e:a8:3e:3f: be:5b:db:27:9f:6c:05:5c:b0:a3:15:72:9d:2e:4f: 67:6c:bb:69:ea:43:0f:e0:af:ad:25:4b:6c:95:a6: ef:68:7c:1c:72:a4:b5:bd:fe:da:7f:40:f0:c1:f1: 8d:ae:fb:86:97:b0:a8:31:99:ae:d3:25:00:87:78: 68:6b:6e:ca:ab:e5:82:75:24:91:8a:14:b0:5d:1c: cd:c7:2f:3f:2b:66:f9:00:b6:eb:f3:2c:a5:5d:f6: 9c:f5:6f:a3:60:48:de:55:92:4a:11:67:e2:df:69: 42:a3:d8:80:ba:b0:00:b5:c4:45:bf:e8:cb:01:69: a6:3b:fd:2f:71:4d:e9:7f:8e:89:85:ba:2e:4d:fc: b0:ca:94:0e:45:82:a0:4b:b8:04:84:0f:4f:02:8e: 4a:1e:3a:5b:90:ed:1e:fe:35:c5:c0:81:e2:90:c0: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C4:F8:A9:23:A7:77:8B:5E:24:3B:87:CF:23:7C:B7:18:1C:F2:62 X509v3 Authority Key Identifier: keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c4:bd:4c:ba:e8:70:78:f1:30:0e:84:f9:14:3b:94:80:64: cb:21:15:70:9f:1a:c4:e3:49:ec:e7:a4:da:fe:83:d8:c6:75: 0a:51:6d:51:31:dd:8e:b2:ae:8f:cb:1b:8a:dc:33:8c:ab:4c: ca:3b:74:c6:bb:bc:f9:f6:ae:d4:ec:2c:32:2a:57:14:36:57: 36:e7:ac:9f:2d:2f:96:db:2d:7d:9b:d1:1e:53:c5:7e:61:c9: 01:5c:b5:4f:76:10:45:55:73:b3:b3:e7:59:d0:90:89:37:1d: af:3b:02:11:68:0a:70:a6:ca:bd:6a:99:b9:e0:27:9b:18:62: 48:1d:b6:c8:be:20:3e:06:56:e5:41:f4:f4:e4:5d:68:1b:51: 4e:c4:e4:2f:20:6a:68:aa:22:60:fe:a7:4e:19:5f:cd:9e:68: 61:0d:99:24:bf:94:31:9a:d2:84:13:d8:4c:58:d1:f1:d4:ce: df:8e:81:8c:69:18:c4:db:36:70:75:8d:89:31:61:c6:de:33: 89:97:43:35:25:75:d6:13:a5:70:f8:e0:a0:17:98:a5:b9:bb: ac:ae:eb:a3:c9:41:01:61:d3:e2:59:1e:0e:da:29:e7:a0:61: 7c:2a:d3:cf:14:9e:6b:61:77:ef:8e:15:6c:8d:91:ad:33:35: 8b:ef:be:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRE4ryDDtAGZcCZwuuIcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl OGM0ZGUwHhcNMjUxMjE4MjEwMTEzWhcNMjUxMjE5MjEwMTEzWjAzMTEwLwYDVQQD EyhhN2M0ZjhhOTIzYTc3NzhiNWUyNDNiODdjZjIzN2NiNzE4MWNmMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvAasT6H2pKRJQ/Y6qRdXBGR4Jv g2uwwVRlruAdvKwgH6ge/S1tOldp7ZQjNpTIwzWowkqslR07zT/x1cHV797xBZ1R rm18cA4Kw3PbGZjAvzgZim6oPj++W9snn2wFXLCjFXKdLk9nbLtp6kMP4K+tJUts labvaHwccqS1vf7af0DwwfGNrvuGl7CoMZmu0yUAh3hoa27Kq+WCdSSRihSwXRzN xy8/K2b5ALbr8yylXfac9W+jYEjeVZJKEWfi32lCo9iAurAAtcRFv+jLAWmmO/0v cU3pf46JhbouTfywypQORYKgS7gEhA9PAo5KHjpbkO0e/jXFwIHikMDBswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfE+Kkjp3eLXiQ7h88jfLcYHPJiMB8GA1UdIwQY MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt YWU0Yzk1Yzk0MDA1LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1 LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcS9TLro cHjxMA6E+RQ7lIBkyyEVcJ8axONJ7Oek2v6D2MZ1ClFtUTHdjrKuj8sbitwzjKtM yjt0xru8+fau1OwsMipXFDZXNuesny0vltstfZvRHlPFfmHJAVy1T3YQRVVzs7Pn WdCQiTcdrzsCEWgKcKbKvWqZueAnmxhiSB22yL4gPgZW5UH09ORdaBtRTsTkLyBq aKoiYP6nThlfzZ5oYQ2ZJL+UMZrShBPYTFjR8dTO346BjGkYxNs2cHWNiTFhxt4z iZdDNSV11hOlcPjgoBeYpbm7rK7ro8lBAWHT4lkeDtop56BhfCrTzxSea2F3744V bI2RrTM1i+++6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:29 2025 by rpki-client