This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json) Hash identifier: vkR4uUd91ZxnhWa9w4EMXgduVhTt/9e8Tg0ev8/hcTs= Subject key identifier: BB:83:26:1B:B7:57:26:4F:CC:96:E0:E4:5F:D0:BE:5E:2C:35:EC:68 Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Certificate serial: 019B3D90C0219A5826640457135B31DF0C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 21:00:55 +0000 Manifest this update: Sat 20 Dec 2025 21:00:55 +0000 Manifest next update: Sun 21 Dec 2025 21:00:55 +0000 Files and hashes: 1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=) 2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=) 3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: AapuGkFK9CiIFD8zojYLTa0s9JS5i9sQktFColpQ/zE=) 4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=) 5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c0:21:9a:58:26:64:04:57:13:5b:31:df:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Validity Not Before: Dec 20 21:00:55 2025 GMT Not After : Dec 21 21:00:55 2025 GMT Subject: CN=bb83261bb757264fcc96e0e45fd0be5e2c35ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:de:92:4c:69:9a:ef:24:57:5c:18:09:68: 54:42:da:92:00:0a:4e:c5:a0:36:38:18:59:b6:b6: 22:17:a1:81:f4:7e:e4:d6:a8:27:d9:34:50:c8:2f: 39:3e:b1:9c:77:15:65:44:df:8a:2f:9e:25:a6:44: 68:0e:4c:0a:99:cf:d9:4d:1c:2f:67:6c:d2:4b:dd: 70:6b:c9:2f:07:fc:71:24:71:19:95:80:f3:a9:a6: 3a:59:79:88:37:9c:a3:41:92:40:57:ed:65:cd:7e: 0a:80:d7:99:7a:e0:37:b3:16:30:8d:f5:04:80:d9: 8b:c2:2f:29:e9:11:ab:5d:f9:a1:51:2d:fc:db:dc: 1e:d2:b5:6e:5c:76:cb:93:31:b9:30:c0:96:65:8e: c7:a9:0f:c6:b2:af:0d:99:cf:e7:97:c7:f1:e7:77: 48:b1:fa:75:09:45:ce:46:59:74:7f:5a:7f:5f:ac: 84:a1:ff:82:be:14:97:a9:f5:12:c0:27:96:78:48: 43:f9:f0:3f:e5:68:b0:17:4f:fc:72:b9:34:eb:af: 24:0c:78:49:a5:39:bd:8d:b2:08:39:76:13:30:b8: e2:bf:72:59:d8:fe:89:14:95:51:94:19:9f:4e:a5: 69:6a:fc:a6:a5:60:3b:fe:6e:cf:4d:47:30:bf:0d: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:83:26:1B:B7:57:26:4F:CC:96:E0:E4:5F:D0:BE:5E:2C:35:EC:68 X509v3 Authority Key Identifier: keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9a:99:fc:55:9f:ac:59:26:e2:53:fc:1e:9d:76:65:99:4c: ea:85:84:d1:9f:92:49:9b:96:57:3f:c1:79:a2:67:8a:b4:e6: b4:70:cc:bb:32:f4:94:89:46:27:b1:da:b2:fb:52:ba:c4:be: e3:10:05:e8:57:a9:bc:ce:9e:66:46:ae:51:2e:42:06:a5:52: d2:b7:ae:39:1e:6e:1a:2f:d7:5d:19:82:59:2e:33:78:da:18: 30:e3:8d:20:a1:b8:0e:18:09:cd:f6:f1:59:a9:a3:9d:27:39: 6a:04:74:89:e3:5d:3f:93:a5:51:13:de:cf:84:85:96:d7:12: 54:25:89:f4:05:d8:8f:24:35:9a:05:78:30:d9:30:de:4a:93: df:d1:92:6d:5a:c8:32:2e:55:6b:60:5e:c0:98:fb:75:7f:3f: c5:62:d4:bd:47:d2:56:39:59:8e:0e:b5:93:05:44:44:d2:dd: 16:29:3e:68:69:48:54:c1:ee:41:92:bb:15:eb:8c:68:d0:6e: f0:22:d4:8b:6b:d9:c3:80:e7:ef:0f:e3:13:83:d5:24:14:07: e8:98:60:1b:9c:e0:c0:5e:bf:fb:d4:ee:f0:a1:2a:f5:c6:eb: e4:ac:18:fb:53:37:b4:7a:5e:34:0f:09:dd:7c:7f:79:d5:bf: 44:50:79:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMAhmlgmZARXE1sx3wxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh N2Q2MmMwHhcNMjUxMjIwMjEwMDU1WhcNMjUxMjIxMjEwMDU1WjAzMTEwLwYDVQQD EyhiYjgzMjYxYmI3NTcyNjRmY2M5NmUwZTQ1ZmQwYmU1ZTJjMzVlYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG/ekkxpmu8kV1wYCWhUQtqSAApO xaA2OBhZtrYiF6GB9H7k1qgn2TRQyC85PrGcdxVlRN+KL54lpkRoDkwKmc/ZTRwv Z2zSS91wa8kvB/xxJHEZlYDzqaY6WXmIN5yjQZJAV+1lzX4KgNeZeuA3sxYwjfUE gNmLwi8p6RGrXfmhUS3829we0rVuXHbLkzG5MMCWZY7HqQ/Gsq8Nmc/nl8fx53dI sfp1CUXORll0f1p/X6yEof+CvhSXqfUSwCeWeEhD+fA/5WiwF0/8crk0668kDHhJ pTm9jbIIOXYTMLjiv3JZ2P6JFJVRlBmfTqVpavympWA7/m7PTUcwvw2oNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuDJhu3VyZPzJbg5F/Qvl4sNexoMB8GA1UdIwQY MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt ZDA3NDY0YjliMzc4LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4 LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZqZ/FWf rFkm4lP8Hp12ZZlM6oWE0Z+SSZuWVz/BeaJnirTmtHDMuzL0lIlGJ7HasvtSusS+ 4xAF6FepvM6eZkauUS5CBqVS0reuOR5uGi/XXRmCWS4zeNoYMOONIKG4DhgJzfbx WamjnSc5agR0ieNdP5OlURPez4SFltcSVCWJ9AXYjyQ1mgV4MNkw3kqT39GSbVrI Mi5Va2BewJj7dX8/xWLUvUfSVjlZjg61kwVERNLdFik+aGlIVMHuQZK7FeuMaNBu 8CLUi2vZw4Dn7w/jE4PVJBQH6JhgG5zgwF6/+9Tu8KEq9cbr5KwY+1M3tHpeNA8J 3Xx/edW/RFB5Nw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:31:38 2025 by rpki-client