This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          Tbxj1gd5oumz6fyf8WLTzMbOfevDau/dMjyrVwGAyLI=
Subject key identifier:   60:98:CB:79:02:8B:2F:1F:AE:57:8C:CE:D1:40:61:EA:4C:3A:53:D0
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019B1125F5A1A9F01829E839A9370719FE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          177A
Signing time:             Fri 12 Dec 2025 06:00:58 +0000
Manifest this update:     Fri 12 Dec 2025 06:00:58 +0000
Manifest next update:     Sat 13 Dec 2025 06:00:58 +0000
Files and hashes:         1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
                          2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: 9zhee1CTykqWkvNHGMxkwURTxxJFvfk2swnzgOmKO9A=)
                          4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
                          5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:f5:a1:a9:f0:18:29:e8:39:a9:37:07:19:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Dec 12 06:00:58 2025 GMT
            Not After : Dec 13 06:00:58 2025 GMT
        Subject: CN=6098cb79028b2f1fae578cced14061ea4c3a53d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:94:a4:a3:ec:39:1b:28:ca:6d:a8:eb:98:
                    e2:d2:d3:18:e1:29:1e:de:9c:c9:a5:ab:3c:86:07:
                    e5:cf:ca:2a:6e:2d:2f:db:2f:6a:ef:df:c8:ea:d4:
                    86:c0:41:64:9a:bf:27:7a:92:d2:ce:d7:1b:7c:e1:
                    db:db:54:47:f0:27:1b:e1:bf:21:5b:30:74:a6:5c:
                    05:80:88:dd:6d:7e:c1:01:35:38:56:c7:7e:33:df:
                    4d:06:b3:5e:a3:b8:b5:a9:7a:23:f6:99:37:17:88:
                    77:f9:ae:6b:7e:98:fc:df:0b:83:e1:04:fc:d3:26:
                    26:b2:83:7e:78:cd:6e:c4:e7:44:d1:20:e0:bb:f4:
                    45:37:74:a2:34:97:aa:f6:8f:92:69:a4:0e:10:d1:
                    95:f1:db:3b:69:c5:17:31:14:70:fb:af:d8:00:de:
                    c8:0a:20:3f:8b:56:8d:3d:e6:5e:22:b9:ee:b1:ca:
                    86:62:a7:c7:a6:e1:b7:e7:6f:98:19:64:d5:f5:67:
                    64:c1:08:14:82:fd:30:38:aa:88:40:14:33:29:e2:
                    ed:13:5a:f2:47:88:96:d9:0d:3f:ee:ef:65:52:cd:
                    ca:f4:b5:7b:0a:0a:67:61:ad:2f:04:74:1a:70:3b:
                    aa:d6:39:62:c5:f8:de:45:a3:ec:74:4d:0a:0f:9b:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:CB:79:02:8B:2F:1F:AE:57:8C:CE:D1:40:61:EA:4C:3A:53:D0
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:09:e5:98:0c:15:80:30:a5:a2:5d:c7:e2:53:f3:cc:f6:
         58:8f:73:76:48:18:df:8b:b4:dc:ec:78:a9:89:94:a7:57:2e:
         31:cc:54:95:98:59:14:94:64:4a:8c:f4:7d:c4:b6:8c:7a:24:
         43:7d:b5:1f:43:92:94:38:2c:4e:80:e4:55:c9:2e:dc:d4:42:
         fc:87:e9:49:72:bc:f9:8a:d7:f1:85:65:1e:3e:85:5b:c9:f5:
         c0:26:cb:26:d0:66:e2:99:f5:2c:5f:31:2a:d8:d0:d4:a1:9c:
         de:3b:0c:8e:cc:54:a0:71:10:fb:2b:7f:cd:b0:a3:c6:75:95:
         ad:30:a5:91:f4:44:9f:37:4c:1e:61:96:be:7d:dd:40:4e:da:
         bf:7b:79:91:65:14:9a:68:ef:2e:d0:3d:6c:c7:e2:43:4c:fa:
         ee:1f:ee:6d:f0:a1:a9:2c:1e:46:88:de:1b:d1:e1:8e:58:29:
         69:97:85:37:dd:ae:9f:17:7f:62:9a:33:25:40:2f:66:8c:ff:
         cf:85:2f:4a:29:ca:bb:78:32:2e:77:a3:5c:fa:48:2b:97:26:
         5a:66:c0:8a:2d:4d:7a:da:fd:91:f2:7d:ec:76:0a:c8:a1:a1:
         9c:43:49:fa:47:53:16:33:19:fe:0c:b8:be:34:ab:84:67:cf:
         43:7d:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:01:22 2025 by rpki-client