This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json) Hash identifier: Ou78lyGvOeWpDrBI9d69xZTGD53W7W10O8jxnhaXYBQ= Subject key identifier: 86:B3:1D:A4:42:B5:F2:BD:EC:AF:1F:56:0C:5F:F9:35:2D:99:89:45 Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7 Certificate serial: 019AF12D8CBF8F8F12C74448999AC9A83B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft Manifest number: 1498 Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: gzZ84pECRh+OsTxCUrJ61czOqLYUV1BJkD8u+RWtEBM=) 2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8c:bf:8f:8f:12:c7:44:48:99:9a:c9:a8:3b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7 Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=86b31da442b5f2bdecaf1f560c5ff9352d998945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:00:72:7f:cc:d0:14:41:3c:72:6b:85:82: af:61:64:1a:b6:6a:00:4a:48:bf:fa:8e:24:76:df: 52:90:18:5e:7a:47:a1:e9:fe:54:c6:88:df:08:75: 18:89:35:9a:fc:cc:e5:03:a4:b2:d0:14:e7:21:e3: 57:24:bb:a3:ee:79:f6:75:13:c2:68:f8:1b:bf:af: 0c:ca:62:53:68:b2:b1:c2:87:be:90:45:e1:4e:f8: 0a:01:43:8c:c7:1d:d3:0a:74:cf:d8:c6:2d:8b:00: 60:5a:5c:8e:6f:44:ee:93:a3:9a:ff:70:50:3b:13: 39:39:93:fb:b5:a5:0e:06:ad:bc:4d:3b:dc:a4:28: 5f:07:1a:d4:ba:d9:a4:21:94:fe:9b:61:2b:01:a0: 9b:f2:61:14:5d:54:89:86:78:38:73:c6:70:06:2d: 46:03:83:f0:9f:05:18:7c:3d:e4:19:1e:00:c2:b1: 18:6e:70:37:5e:89:eb:78:c8:18:62:a4:25:72:46: 24:05:47:0e:a4:c5:d0:91:6c:74:4b:d6:d5:73:ff: 26:7e:9e:cf:33:4c:e2:fe:f8:3b:69:5d:d8:7d:02: 27:38:54:56:08:17:af:be:1d:77:5f:70:b0:52:4f: f8:c4:c8:bf:d1:1e:e3:5e:7b:fa:a9:13:b1:72:3d: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B3:1D:A4:42:B5:F2:BD:EC:AF:1F:56:0C:5F:F9:35:2D:99:89:45 X509v3 Authority Key Identifier: keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e5:41:6f:c3:15:0c:3e:1f:8b:53:a3:a6:ec:91:9c:15:f1: 47:6d:5a:16:8e:4f:fb:12:a6:9b:e8:4f:87:57:94:8b:5e:d2: 91:7f:99:f1:cd:c6:2f:6a:c1:4a:59:70:ad:39:4a:92:d9:95: f0:14:34:60:6b:e1:ec:76:70:40:20:fb:e6:5e:9a:b3:e7:90: 29:f7:96:be:33:d2:19:b4:f2:67:75:5c:1c:4f:12:f1:77:77: 49:98:a6:7a:da:bc:b2:e3:29:9a:6e:3e:9a:78:cf:81:5d:20: 8c:92:4b:92:4f:55:86:99:5c:61:38:c0:57:9e:cd:6d:b3:86: 36:2e:b3:92:ff:13:7e:ae:3b:a2:65:5c:c5:ca:97:41:ea:40: 5e:39:b2:c7:65:68:b8:80:88:44:4d:3a:af:b1:bc:46:97:46: 53:54:7d:2e:a0:23:35:eb:be:6e:75:50:13:ab:82:2d:46:29: 16:3a:83:be:f7:85:56:ee:ba:63:d1:fe:b8:a7:4b:d2:26:3f: da:05:3b:a5:67:7c:db:47:30:3b:ed:d9:5a:a3:ac:0f:f7:c8: 51:d8:c2:9b:4e:71:de:5e:af:8a:f4:7f:8d:96:1e:d3:c0:55: 6b:ad:8d:59:8e:ff:e8:3e:f2:b3:05:9f:22:de:98:71:b2:32: 18:f7:03:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYy/j48Sx0RImZrJqDtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4 ODQyZDcwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD Eyg4NmIzMWRhNDQyYjVmMmJkZWNhZjFmNTYwYzVmZjkzNTJkOTk4OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHEAcn/M0BRBPHJrhYKvYWQatmoA Ski/+o4kdt9SkBheekeh6f5UxojfCHUYiTWa/MzlA6Sy0BTnIeNXJLuj7nn2dRPC aPgbv68MymJTaLKxwoe+kEXhTvgKAUOMxx3TCnTP2MYtiwBgWlyOb0Tuk6Oa/3BQ OxM5OZP7taUOBq28TTvcpChfBxrUutmkIZT+m2ErAaCb8mEUXVSJhng4c8ZwBi1G A4PwnwUYfD3kGR4AwrEYbnA3XonreMgYYqQlckYkBUcOpMXQkWx0S9bVc/8mfp7P M0zi/vg7aV3YfQInOFRWCBevvh13X3CwUk/4xMi/0R7jXnv6qROxcj1MRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIazHaRCtfK97K8fVgxf+TUtmYlFMB8GA1UdIwQY MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeVBb8MV DD4fi1OjpuyRnBXxR21aFo5P+xKmm+hPh1eUi17SkX+Z8c3GL2rBSllwrTlKktmV 8BQ0YGvh7HZwQCD75l6as+eQKfeWvjPSGbTyZ3VcHE8S8Xd3SZimetq8suMpmm4+ mnjPgV0gjJJLkk9VhplcYTjAV57NbbOGNi6zkv8Tfq47omVcxcqXQepAXjmyx2Vo uICIRE06r7G8RpdGU1R9LqAjNeu+bnVQE6uCLUYpFjqDvveFVu66Y9H+uKdL0iY/ 2gU7pWd820cwO+3ZWqOsD/fIUdjCm05x3l6vivR/jZYe08BVa62NWY7/6D7yswWf It6YcbIyGPcDTw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:52 2025 by rpki-client