This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft File: B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json) Hash identifier: a14m1SwJUq4EHBcFv8rIl2/itnPEcBxRGpgy9Llrz/E= Subject key identifier: F5:B6:15:1B:1A:24:46:06:3C:06:AA:DA:4B:17:0B:05:CC:2C:0D:6F Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5 Certificate issuer: /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5 Certificate serial: 019B7A4A1682CD08B2619D61D32F077F2252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 16:00:34 +0000 Manifest this update: Thu 01 Jan 2026 16:00:34 +0000 Manifest next update: Fri 02 Jan 2026 16:00:34 +0000 Files and hashes: 1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: uRmLTGRPuQCeNDD059iQdWrz5pMFQjMQyjtZt+wFY38=) 2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:16:82:cd:08:b2:61:9d:61:d3:2f:07:7f:22:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5 Validity Not Before: Jan 1 16:00:34 2026 GMT Not After : Jan 2 16:00:34 2026 GMT Subject: CN=f5b6151b1a2446063c06aada4b170b05cc2c0d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:59:82:d5:ad:56:a6:6a:cc:70:07:d2:7c: 5f:75:e7:7e:48:80:e2:09:79:2e:ca:44:55:ad:19: 63:a7:82:36:7f:e2:95:c6:15:30:a2:84:72:af:6b: 9a:e7:f4:5f:ad:dc:3f:30:9e:03:d2:f7:1b:82:51: 2b:4b:bb:33:e6:a1:c1:b8:ba:31:f4:a9:12:ca:29: b8:24:85:e0:19:fd:67:18:9d:75:d5:54:67:2d:04: bd:9d:c2:ee:55:12:49:f6:35:0d:e6:30:d3:31:d6: 79:f6:99:d8:d8:11:f8:47:cd:f8:d7:a8:df:40:bf: 76:de:3b:a1:2f:5c:d2:84:0f:73:11:ab:d2:b1:8e: 3e:1c:40:ab:8f:ba:bf:39:b3:bc:9f:15:80:94:a5: 73:1a:85:9e:ca:6b:ae:d1:76:91:23:eb:d4:79:6d: 30:b8:85:40:b5:ef:2d:5c:61:9c:1e:9b:8f:8f:93: ec:1b:ff:6c:4c:39:2b:38:c4:00:3f:e5:a8:bf:19: 6b:c4:c2:85:06:7a:cd:d1:60:09:d4:61:96:96:59: 5f:b1:15:c2:e6:ff:f5:19:0d:3c:c0:9a:14:f5:22: f6:59:fd:89:04:16:c6:3e:7a:37:b0:41:fd:dd:f0: b7:7a:02:75:1d:9f:d5:9a:57:83:5f:33:a4:e6:27: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:15:1B:1A:24:46:06:3C:06:AA:DA:4B:17:0B:05:CC:2C:0D:6F X509v3 Authority Key Identifier: keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:bb:f2:c1:51:d5:10:62:63:9c:71:ca:33:e3:de:fe:e2: 3b:04:57:91:ef:2e:c3:ac:6e:db:81:47:25:a7:89:fa:0c:48: f7:9d:76:bb:6a:0e:57:88:71:fb:82:26:ff:b0:d9:4e:24:7f: ae:a6:3c:98:e4:89:0b:50:3f:74:de:21:c1:13:3c:ce:26:a3: 7a:cb:90:72:c9:9c:41:78:5e:e5:1f:eb:a1:d7:36:96:db:64: 2e:4c:d4:da:d8:34:c2:d8:b1:24:1f:f5:da:14:51:ec:90:8c: aa:22:2f:97:a0:78:7e:c3:17:1f:8b:54:b3:ce:c4:3a:39:25: 30:26:d1:19:79:38:c3:34:31:7c:5a:9d:5a:28:b0:21:8a:7f: 20:b4:3d:13:00:d8:94:46:df:31:ce:25:0b:5f:80:bd:bb:53: 87:05:cc:d1:78:e7:cf:c5:68:00:de:6c:f2:b2:bb:38:a4:1d: f9:b2:32:9e:c2:7f:ac:a3:bc:f2:ec:e9:35:9a:4c:19:43:4a: 40:14:ad:3a:04:40:9a:a8:d6:42:77:f1:20:4e:74:e4:5b:24: 55:c4:8b:c5:7e:18:b6:f3:32:f1:74:9c:94:4f:c5:4c:ec:cc: 6d:b8:54:1e:96:d1:8a:60:82:aa:c2:b9:8e:10:52:e4:7a:1d: 7e:c3:3e:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6ShaCzQiyYZ1h0y8HfyJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzMzZmM2M2I4ZjE4ODBlNWMwYWY2YjQ2NDNkMWUzMjE4 MWQ3YTUwHhcNMjYwMTAxMTYwMDM0WhcNMjYwMTAyMTYwMDM0WjAzMTEwLwYDVQQD EyhmNWI2MTUxYjFhMjQ0NjA2M2MwNmFhZGE0YjE3MGIwNWNjMmMwZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkFZgtWtVqZqzHAH0nxfded+SIDi CXkuykRVrRljp4I2f+KVxhUwooRyr2ua5/Rfrdw/MJ4D0vcbglErS7sz5qHBuLox 9KkSyim4JIXgGf1nGJ111VRnLQS9ncLuVRJJ9jUN5jDTMdZ59pnY2BH4R83416jf QL923juhL1zShA9zEavSsY4+HECrj7q/ObO8nxWAlKVzGoWeymuu0XaRI+vUeW0w uIVAte8tXGGcHpuPj5PsG/9sTDkrOMQAP+WovxlrxMKFBnrN0WAJ1GGWlllfsRXC 5v/1GQ08wJoU9SL2Wf2JBBbGPno3sEH93fC3egJ1HZ/VmleDXzOk5if6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW2FRsaJEYGPAaq2ksXCwXMLA1vMB8GA1UdIwQY MBaAFAdzP8Y7jxiA5cCva0ZD0eMhgdelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUt MTRkMDdiZDE4ODljLzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUtMTRkMDdiZDE4ODlj LzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL678sFR 1RBiY5xxyjPj3v7iOwRXke8uw6xu24FHJaeJ+gxI9512u2oOV4hx+4Im/7DZTiR/ rqY8mOSJC1A/dN4hwRM8ziajesuQcsmcQXhe5R/rodc2lttkLkzU2tg0wtixJB/1 2hRR7JCMqiIvl6B4fsMXH4tUs87EOjklMCbRGXk4wzQxfFqdWiiwIYp/ILQ9EwDY lEbfMc4lC1+AvbtThwXM0Xjnz8VoAN5s8rK7OKQd+bIynsJ/rKO88uzpNZpMGUNK QBStOgRAmqjWQnfxIE505FskVcSLxX4YtvMy8XSclE/FTOzMbbhUHpbRimCCqsK5 jhBS5HodfsM+9Q== -----END CERTIFICATE-----Generated at Thu Jan 1 19:38:29 2026 by rpki-client