This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json) Hash identifier: NST1dLYqUaVGBvxOhw7EvWA9OsybEBljh9J65subTAQ= Subject key identifier: CD:29:5E:3C:20:DD:2F:C6:6B:7F:6D:CA:2C:36:2F:74:DA:ED:5B:E8 Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Certificate serial: 019BF53E75F91BC14D53D68B1E60A4F30F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 13:01:09 +0000 Manifest this update: Sun 25 Jan 2026 13:01:09 +0000 Manifest next update: Mon 26 Jan 2026 13:01:09 +0000 Files and hashes: 1: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (hash: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE=) 2: LcBroKBLXoM6xXO9zi3GvH6KmR8.roa (hash: fH5tm86jikYUxeNxCkC081pHnyjYlsjUYmP8CBL7xrk=) 3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: kM6/eMdXuVh3g1lRfbUvEofNJFZ1Glb6J1Og/6wWkMo=) 4: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (hash: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8=) 5: tOte9icBvp7fZ4JFtJj262jmG2k.roa (hash: 9UlFr1VWg8sSAFkwJ6utTCjAp2VRA7ApImW+9wnEJvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:75:f9:1b:c1:4d:53:d6:8b:1e:60:a4:f3:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Validity Not Before: Jan 25 13:01:09 2026 GMT Not After : Jan 26 13:01:09 2026 GMT Subject: CN=cd295e3c20dd2fc66b7f6dca2c362f74daed5be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:e6:ef:49:cd:7e:03:10:99:fa:fe:a5:90: 54:0c:41:68:c0:4d:44:13:ee:99:82:65:55:e8:91: 3d:96:ce:3a:4b:fd:d7:49:00:a7:9b:16:92:7b:ab: 0a:3d:92:7b:ef:84:f6:ae:61:4a:16:f6:db:25:1c: 97:3d:75:db:04:03:38:67:81:ec:88:21:17:66:31: b6:b8:ae:f8:e8:cb:0c:33:1c:a7:90:12:e9:97:52: 46:38:40:f8:49:45:42:d9:b8:57:20:5d:46:fc:70: 3e:4b:a9:4a:f7:3f:9f:e3:b4:5e:08:33:44:3a:63: 88:fb:87:7b:73:38:d3:e0:e5:56:46:69:3c:16:3f: f6:32:c4:e6:16:01:11:29:a0:5b:64:78:03:33:46: 49:78:a9:ef:61:73:36:8a:2d:cf:bc:e9:ea:ab:7e: 54:bc:73:7f:b3:e8:42:47:64:30:05:a7:1a:bd:47: 31:1b:00:da:de:08:e7:a8:7a:50:6f:bf:d8:e0:53: 5e:98:bc:7e:67:0c:a3:90:75:3b:52:2f:63:45:88: e5:67:97:33:76:cc:9b:a2:be:9b:5a:09:63:9f:7c: 37:55:7c:7e:74:d2:ff:cf:fd:81:53:12:fb:9a:54: 79:b5:93:18:7e:a5:bd:e5:2e:f9:19:e3:75:4e:6b: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:5E:3C:20:DD:2F:C6:6B:7F:6D:CA:2C:36:2F:74:DA:ED:5B:E8 X509v3 Authority Key Identifier: keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:33:ff:37:bd:3d:d1:80:c4:19:aa:1a:c9:14:4b:2a:d4:b0: 58:2c:c7:d9:3e:aa:4f:b4:5c:67:ec:46:95:6d:10:e2:4d:4c: 6d:b9:14:13:99:3e:35:a8:0b:6c:7a:67:db:22:e2:fa:cf:a3: ce:ac:ee:82:5f:2d:83:30:62:5e:c9:14:bc:74:6f:7b:7f:1f: 00:c1:0e:bd:d2:81:92:2d:37:8e:84:18:18:58:c2:6a:f7:0b: a4:56:3e:19:35:18:2f:68:89:14:79:2c:d4:d5:02:c3:0d:f3: d7:22:0d:97:b9:33:d6:5d:e1:89:2d:21:e7:8f:a3:eb:83:ee: dc:14:e5:10:36:25:a9:3c:88:20:ce:e8:02:48:f1:d3:d3:16: 58:29:9b:9e:6e:b3:56:79:d5:d6:db:2c:d1:83:3a:f9:c2:67: 40:92:4c:e1:b2:39:c8:8d:03:b3:a8:fd:5f:1e:3d:6f:13:c7: 5e:dd:ca:2f:8a:02:1c:b1:1e:03:93:19:65:92:a6:18:78:ab: b9:e0:21:a2:a2:a6:f0:08:bd:c9:91:d5:fd:bb:17:e7:ad:33: f0:a4:cf:cf:1b:c0:5f:03:7f:ec:df:0c:77:ab:73:7a:a1:48: 9d:d1:ad:e9:aa:a0:9c:76:ce:b9:1e:bb:d2:f4:9c:a1:47:5c: 80:3a:df:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PnX5G8FNU9aLHmCk8w8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh N2Q2MmMwHhcNMjYwMTI1MTMwMTA5WhcNMjYwMTI2MTMwMTA5WjAzMTEwLwYDVQQD EyhjZDI5NWUzYzIwZGQyZmM2NmI3ZjZkY2EyYzM2MmY3NGRhZWQ1YmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKPm70nNfgMQmfr+pZBUDEFowE1E E+6ZgmVV6JE9ls46S/3XSQCnmxaSe6sKPZJ774T2rmFKFvbbJRyXPXXbBAM4Z4Hs iCEXZjG2uK746MsMMxynkBLpl1JGOED4SUVC2bhXIF1G/HA+S6lK9z+f47ReCDNE OmOI+4d7czjT4OVWRmk8Fj/2MsTmFgERKaBbZHgDM0ZJeKnvYXM2ii3PvOnqq35U vHN/s+hCR2QwBacavUcxGwDa3gjnqHpQb7/Y4FNemLx+ZwyjkHU7Ui9jRYjlZ5cz dsybor6bWgljn3w3VXx+dNL/z/2BUxL7mlR5tZMYfqW95S75GeN1TmvgGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0pXjwg3S/Ga39tyiw2L3Ta7VvoMB8GA1UdIwQY MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt ZDA3NDY0YjliMzc4LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4 LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzP/N709 0YDEGaoayRRLKtSwWCzH2T6qT7RcZ+xGlW0Q4k1MbbkUE5k+NagLbHpn2yLi+s+j zqzugl8tgzBiXskUvHRve38fAMEOvdKBki03joQYGFjCavcLpFY+GTUYL2iJFHks 1NUCww3z1yINl7kz1l3hiS0h54+j64Pu3BTlEDYlqTyIIM7oAkjx09MWWCmbnm6z VnnV1tss0YM6+cJnQJJM4bI5yI0Ds6j9Xx49bxPHXt3KL4oCHLEeA5MZZZKmGHir ueAhoqKm8Ai9yZHV/bsX560z8KTPzxvAXwN/7N8Md6tzeqFIndGt6aqgnHbOuR67 0vScoUdcgDrfGw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:34 2026 by rpki-client