This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft File: B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json) Hash identifier: NGzah48t/XaWayWm9qP9cH9isRLmjswPt/Rezu3tzr8= Subject key identifier: BD:B4:9B:68:A5:2D:FF:67:8B:4E:49:F1:4C:A3:41:F2:C1:51:56:9F Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5 Certificate issuer: /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5 Certificate serial: 019AF6F962E205DCF8EBF798C0B44E58CC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 04:02:10 +0000 Manifest this update: Sun 07 Dec 2025 04:02:10 +0000 Manifest next update: Mon 08 Dec 2025 04:02:10 +0000 Files and hashes: 1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: frnWwTwZwoiDJTWJaFet7SqZI0bU3YxIkAMaO5w/u8U=) 2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:62:e2:05:dc:f8:eb:f7:98:c0:b4:4e:58:cc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5 Validity Not Before: Dec 7 04:02:10 2025 GMT Not After : Dec 8 04:02:10 2025 GMT Subject: CN=bdb49b68a52dff678b4e49f14ca341f2c151569f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:32:34:26:59:84:74:5d:5c:e3:19:e1:ba: c2:d0:7c:c2:69:7d:bc:ac:05:4e:41:b2:d0:7d:8e: 00:b6:c2:a9:ac:fd:80:fe:6e:7f:2c:fc:cb:a7:c0: 3e:63:76:27:77:67:d5:bf:4d:5e:b5:54:61:00:67: 03:27:d1:5f:b0:e8:54:60:93:52:ed:57:39:19:b6: 78:40:4a:f3:6d:f6:0f:7d:00:aa:22:ce:f6:ed:6d: f4:7e:31:13:63:96:24:13:69:ce:1b:78:d5:c0:c7: 82:e7:0b:e9:6a:41:a2:29:0b:e5:df:95:65:4d:7b: 1f:be:f5:45:3f:90:b1:56:ac:a0:19:96:e0:c2:e5: e1:af:7e:33:ab:4e:43:3b:42:69:c1:fa:c1:3d:79: c0:6a:59:2b:fc:e1:a4:3f:71:f2:ec:c9:47:6f:ac: 36:c0:b5:ed:cb:c5:d2:dd:a0:5d:a7:8c:70:f7:a1: 12:f3:fa:bd:ff:3e:a0:89:71:b3:79:1d:40:1f:3c: a1:d4:53:4d:05:c5:97:56:c2:8b:57:2d:f6:47:0f: 8f:13:7c:d2:d1:23:0d:9a:a4:33:cb:0b:06:a8:8d: 50:b1:8f:25:cb:f4:0f:af:b7:48:2b:a3:c0:a8:a9: f8:22:a5:cd:f1:97:f1:73:69:49:43:a7:bd:00:88: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:9B:68:A5:2D:FF:67:8B:4E:49:F1:4C:A3:41:F2:C1:51:56:9F X509v3 Authority Key Identifier: keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:34:85:09:d4:ee:f3:7b:b8:40:98:63:3e:26:38:9c:30:20: 63:dd:bb:bb:8e:df:fb:74:c6:2c:75:e5:ea:0e:01:0a:62:77: 51:c1:06:93:e5:9e:fc:95:07:e1:9b:c6:f8:fd:35:89:e4:0a: 24:40:15:e2:40:94:d0:b4:66:9d:8d:1d:ed:58:fa:49:a2:ab: fc:d4:f1:6f:21:e8:42:2e:c3:bc:79:29:1b:aa:51:e0:3f:5c: 91:aa:f9:a7:5b:8a:24:28:5b:0e:83:fc:b9:8b:26:1b:30:84: b3:c7:f5:5f:2c:5c:97:3d:f3:0e:9b:53:4e:8e:91:36:41:ce: ef:88:d8:1a:1c:ed:c1:2c:95:e8:62:ba:54:5b:2c:f3:2a:4e: aa:8c:66:0d:92:90:92:be:df:33:39:ef:e3:70:60:ed:f1:bd: 31:7b:c6:22:ec:b6:13:b2:fa:30:34:e7:8d:bd:a7:f5:22:0c: f7:56:f0:79:ad:23:19:94:ff:0a:e3:ff:e5:9f:06:41:e3:17: 13:10:62:9f:09:2f:4f:42:08:fd:f8:e1:1f:f5:f8:c1:00:b6: bf:16:b8:47:da:a7:74:9d:67:e3:bf:62:84:5b:a6:e7:62:20: 50:9c:fc:b3:74:23:1b:5d:2f:ef:1c:28:e4:44:bc:d0:ce:7b: 0c:bf:ea:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+WLiBdz46/eYwLROWMxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NzMzZmM2M2I4ZjE4ODBlNWMwYWY2YjQ2NDNkMWUzMjE4 MWQ3YTUwHhcNMjUxMjA3MDQwMjEwWhcNMjUxMjA4MDQwMjEwWjAzMTEwLwYDVQQD EyhiZGI0OWI2OGE1MmRmZjY3OGI0ZTQ5ZjE0Y2EzNDFmMmMxNTE1NjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+UyNCZZhHRdXOMZ4brC0HzCaX28 rAVOQbLQfY4AtsKprP2A/m5/LPzLp8A+Y3Ynd2fVv01etVRhAGcDJ9FfsOhUYJNS 7Vc5GbZ4QErzbfYPfQCqIs727W30fjETY5YkE2nOG3jVwMeC5wvpakGiKQvl35Vl TXsfvvVFP5CxVqygGZbgwuXhr34zq05DO0JpwfrBPXnAalkr/OGkP3Hy7MlHb6w2 wLXty8XS3aBdp4xw96ES8/q9/z6giXGzeR1AHzyh1FNNBcWXVsKLVy32Rw+PE3zS 0SMNmqQzywsGqI1QsY8ly/QPr7dIK6PAqKn4IqXN8Zfxc2lJQ6e9AIhy9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL20m2ilLf9ni05J8UyjQfLBUVafMB8GA1UdIwQY MBaAFAdzP8Y7jxiA5cCva0ZD0eMhgdelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUt MTRkMDdiZDE4ODljLzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9jMzgzY2ItMzNlYS00M2NmLThlMmUtMTRkMDdiZDE4ODlj LzEvQjNNX3hqdVBHSURsd0s5clJrUFI0eUdCMTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDSFCdTu 83u4QJhjPiY4nDAgY927u47f+3TGLHXl6g4BCmJ3UcEGk+We/JUH4ZvG+P01ieQK JEAV4kCU0LRmnY0d7Vj6SaKr/NTxbyHoQi7DvHkpG6pR4D9ckar5p1uKJChbDoP8 uYsmGzCEs8f1Xyxclz3zDptTTo6RNkHO74jYGhztwSyV6GK6VFss8ypOqoxmDZKQ kr7fMznv43Bg7fG9MXvGIuy2E7L6MDTnjb2n9SIM91bwea0jGZT/CuP/5Z8GQeMX ExBinwkvT0II/fjhH/X4wQC2vxa4R9qndJ1n479ihFum52IgUJz8s3QjG10v7xwo 5ES80M57DL/q/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 11:19:21 2025 by rpki-client