This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json) Hash identifier: JDCBoiffaB7ppYdLjvLfw7pUkS+PY8Lp9Tg3ukrOUEE= Subject key identifier: D1:C5:5C:E0:82:C2:66:4B:AD:2F:42:9F:1C:23:F0:03:54:20:03:EC Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a Certificate serial: 019AF3F71515DA2A42172C64C09968147271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:00:47 +0000 Manifest this update: Sat 06 Dec 2025 14:00:47 +0000 Manifest next update: Sun 07 Dec 2025 14:00:47 +0000 Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: I5GbQXsjJJ3o4ME8QNpL/GtgzGO3KJ4Ikc8joJRQYvc=) 2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:15:15:da:2a:42:17:2c:64:c0:99:68:14:72:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077946f04742c66279acd322009be15e3d588a5a Validity Not Before: Dec 6 14:00:47 2025 GMT Not After : Dec 7 14:00:47 2025 GMT Subject: CN=d1c55ce082c2664bad2f429f1c23f003542003ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:36:ed:a4:bf:be:61:2a:4d:48:d5:0b:9b: e5:27:bf:d9:91:08:cc:24:62:03:d0:c3:38:58:6d: f8:ab:a2:ac:a8:40:e4:6b:bf:d2:59:d9:10:f6:b8: 81:1e:5f:9f:e1:d9:94:86:72:f7:8b:e9:48:82:19: 6a:9b:45:cf:f4:48:0e:f2:77:94:2a:87:51:c5:73: 33:8c:b2:93:1a:5f:07:04:d2:5f:ca:38:9e:ea:c7: d4:0b:98:98:e6:3b:63:2b:7e:da:4a:c8:8d:8e:d8: 0a:a8:87:a9:f7:ed:fb:24:5d:ce:fd:b0:7a:76:27: b1:15:4a:48:50:72:34:50:84:d3:c8:c2:9c:cb:ac: 5b:bc:88:c6:8d:8c:53:3e:d9:18:c0:7d:c2:45:0b: 3c:9b:91:f2:ef:48:f6:e0:f1:3b:51:30:99:d5:a2: 58:33:e4:e2:49:0b:a7:29:a6:46:f3:7f:67:56:72: 12:cb:e1:75:0c:d6:e8:12:1a:fe:ea:c1:16:a9:d6: 30:84:7f:73:8f:d8:9b:63:d5:9b:9a:81:9f:8d:32: 67:55:70:9b:c0:76:9a:8b:24:5a:fa:0f:a6:2b:60: 25:d8:b1:ca:de:a1:77:45:df:e7:e7:7e:80:9b:6b: e3:27:52:88:9a:37:ad:14:02:7e:31:ab:34:b2:43: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:5C:E0:82:C2:66:4B:AD:2F:42:9F:1C:23:F0:03:54:20:03:EC X509v3 Authority Key Identifier: keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7c:25:8a:ab:08:1f:5c:37:0c:1e:56:50:d2:fe:f2:9d:50: 30:f1:6e:e0:6f:d6:df:21:df:cb:9a:9e:c3:28:2f:81:53:13: f7:fd:30:03:81:ee:43:47:46:5a:c2:d0:08:1b:35:b2:b4:df: 47:9d:ed:02:a1:9d:5c:bb:d0:ad:52:ea:5d:09:94:93:45:8e: 4d:e2:82:3d:8b:7f:39:7f:0b:62:c8:08:d0:01:b4:7e:78:3e: 59:df:51:a7:bc:08:0d:95:58:50:08:c4:0e:ef:fa:e5:33:59: cb:c2:b2:9e:08:3d:94:06:3c:70:ed:36:bb:15:69:6d:50:a1: e6:a8:ea:75:5e:3b:84:53:2b:55:a2:d5:de:16:50:21:5d:2d: 62:1e:77:f6:b1:d5:6d:44:a5:bb:a9:3b:11:02:ba:57:e3:ca: 96:b1:78:4a:28:49:a5:c8:42:31:14:52:2b:3b:71:ec:0f:33: a3:14:d3:99:33:7a:de:8c:ae:bf:a3:95:70:cf:fa:a6:21:fa: d4:84:de:67:16:fa:a5:1e:e1:1f:c5:4a:79:61:d9:de:7c:35: 9a:43:9e:7e:61:2c:a8:62:a1:63:1f:70:8f:80:84:6b:ba:64: fb:47:04:6c:b5:56:95:7a:ad:ea:f7:4c:1b:b2:8c:6f:c0:f7: c8:72:20:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xUV2ipCFyxkwJloFHJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1 ODhhNWEwHhcNMjUxMjA2MTQwMDQ3WhcNMjUxMjA3MTQwMDQ3WjAzMTEwLwYDVQQD EyhkMWM1NWNlMDgyYzI2NjRiYWQyZjQyOWYxYzIzZjAwMzU0MjAwM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiA27aS/vmEqTUjVC5vlJ7/ZkQjM JGID0MM4WG34q6KsqEDka7/SWdkQ9riBHl+f4dmUhnL3i+lIghlqm0XP9EgO8neU KodRxXMzjLKTGl8HBNJfyjie6sfUC5iY5jtjK37aSsiNjtgKqIep9+37JF3O/bB6 diexFUpIUHI0UITTyMKcy6xbvIjGjYxTPtkYwH3CRQs8m5Hy70j24PE7UTCZ1aJY M+TiSQunKaZG839nVnISy+F1DNboEhr+6sEWqdYwhH9zj9ibY9WbmoGfjTJnVXCb wHaaiyRa+g+mK2Al2LHK3qF3Rd/n536Am2vjJ1KImjetFAJ+Mas0skP5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHFXOCCwmZLrS9Cnxwj8ANUIAPsMB8GA1UdIwQY MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt YmUxNTE4MzlmMzY2LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2 LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXwliqsI H1w3DB5WUNL+8p1QMPFu4G/W3yHfy5qewygvgVMT9/0wA4HuQ0dGWsLQCBs1srTf R53tAqGdXLvQrVLqXQmUk0WOTeKCPYt/OX8LYsgI0AG0fng+Wd9Rp7wIDZVYUAjE Du/65TNZy8Kyngg9lAY8cO02uxVpbVCh5qjqdV47hFMrVaLV3hZQIV0tYh539rHV bUSlu6k7EQK6V+PKlrF4SihJpchCMRRSKztx7A8zoxTTmTN63oyuv6OVcM/6piH6 1ITeZxb6pR7hH8VKeWHZ3nw1mkOefmEsqGKhYx9wj4CEa7pk+0cEbLVWlXqt6vdM G7KMb8D3yHIgkA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:26 2025 by rpki-client