This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json) Hash identifier: P1HIIBwcWNOI8D1/8We+BKCZKvrBzfUCZzYJF+gcrHw= Subject key identifier: 71:71:DC:4F:84:F3:55:AC:AB:D6:43:0E:FC:1D:2E:A4:82:64:18:0C Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B31C41DE6F291005EEAB90277A67112BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft Manifest number: 13A5 Signing time: Thu 18 Dec 2025 14:01:34 +0000 Manifest this update: Thu 18 Dec 2025 14:01:34 +0000 Manifest next update: Fri 19 Dec 2025 14:01:34 +0000 Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: f5plBshJKUOaWf+Rzdq5/7eTXKyeI6Q5tpmvx1o1JUc=) 2: MHWEBb8RKZSn4dy7qA_izu7w91w.roa (hash: 44oBBFXwCkfSDHIkUc46ZuGmSEo2ss8zLAgd2waANh8=) 3: NwG29YuTRI5XksjMFNEM5lUSKWs.roa (hash: zIhjmOX+WnWAegfCFaKo2xLAqaq2QljDNtribVl5+Wc=) 4: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (hash: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=) 5: UYG02sedni6PF3l5885jWR9SDAU.roa (hash: F15eDYq10rpPatO7l2AwP8pJp/GPkxjGwfOAI4ndu8c=) 6: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (hash: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:1d:e6:f2:91:00:5e:ea:b9:02:77:a6:71:12:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Dec 18 14:01:34 2025 GMT Not After : Dec 19 14:01:34 2025 GMT Subject: CN=7171dc4f84f355acabd6430efc1d2ea48264180c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:b0:69:d3:4c:73:13:b1:2c:1c:fd:3f:a7: fa:25:f1:b8:45:a9:8f:c8:48:5e:74:b8:5e:cc:d5: b6:d5:8a:c1:a0:16:21:ce:96:ff:20:fb:6e:2c:39: fa:db:0b:12:e0:6d:83:58:77:d2:a3:a8:69:1b:36: 5c:78:d5:3a:de:00:5d:38:fa:e7:98:a4:44:34:bb: c9:1e:54:2f:68:6f:dc:21:d4:58:04:bb:fc:6d:70: c5:42:e4:7a:8a:94:e2:60:b2:32:ff:62:b2:b8:38: f4:11:b7:7a:83:78:5c:2b:ba:26:27:87:6d:e3:e6: 35:cc:1d:09:d0:e2:ed:2a:3d:9a:ad:5b:47:7c:66: 36:9a:ac:87:1a:ab:4b:bc:8e:7b:71:56:37:1f:ab: ce:91:71:5c:32:7b:65:6e:24:3a:26:cd:85:53:8f: 20:4c:fa:d3:59:83:44:ef:b3:08:d3:df:d9:6a:ab: 2f:a6:74:b4:b6:53:e5:63:27:30:91:9d:45:69:02: 99:9d:e4:be:91:60:74:08:e9:91:b6:64:8b:73:06: 69:f1:e1:94:dc:77:3b:81:5b:19:39:c5:5f:2b:60: 12:1e:3e:a2:91:9b:a8:20:cd:5c:5d:15:ad:2e:be: 16:7d:9b:6f:22:ce:fb:c1:86:70:be:c6:1e:f7:9a: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:DC:4F:84:F3:55:AC:AB:D6:43:0E:FC:1D:2E:A4:82:64:18:0C X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ef:42:a1:28:15:0c:c2:a3:e4:34:c3:8f:ba:5d:91:4f:43: 9e:72:df:f9:2a:0a:84:0e:fe:d1:4d:fb:08:fd:e2:cb:a6:17: 3b:b1:59:26:7d:ec:dd:01:08:5e:0e:9f:b0:85:b0:7d:79:06: 26:fa:90:6b:e6:ce:03:95:f7:8a:2d:f7:d0:28:7b:a0:cf:84: bd:0d:c4:e2:47:13:8c:d4:64:75:d0:19:93:63:3d:40:56:76: 1a:b3:df:f2:89:76:b3:db:1f:8e:ed:78:a0:8c:89:af:61:75: 92:49:db:9f:07:0f:e2:a5:d1:47:3e:7b:61:f5:2f:14:13:e9: f8:b9:f4:cf:40:6b:68:44:90:74:43:66:bf:62:4c:23:8e:c7: 24:a1:e2:73:33:45:1f:d9:c8:48:7b:b2:b0:7f:f0:de:17:c7: 58:7b:4f:50:95:67:89:1c:13:60:0a:ac:b8:37:c8:e1:81:4a: 28:50:b6:cc:57:5b:37:f6:0f:86:02:aa:59:cd:1b:d1:f0:dc: 81:96:2a:09:f2:54:2c:fa:ce:3d:f4:0c:3b:10:e3:7a:23:8f: 67:aa:44:a6:80:74:bd:37:e4:24:07:7b:8e:38:c3:b9:1a:0a: 2a:e6:32:f1:34:58:39:dc:da:b9:8b:af:2e:7c:5a:ad:ad:50: 14:2d:0f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxB3m8pEAXuq5AnemcRK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjUxMjE4MTQwMTM0WhcNMjUxMjE5MTQwMTM0WjAzMTEwLwYDVQQD Eyg3MTcxZGM0Zjg0ZjM1NWFjYWJkNjQzMGVmYzFkMmVhNDgyNjQxODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpmwadNMcxOxLBz9P6f6JfG4RamP yEhedLhezNW21YrBoBYhzpb/IPtuLDn62wsS4G2DWHfSo6hpGzZceNU63gBdOPrn mKRENLvJHlQvaG/cIdRYBLv8bXDFQuR6ipTiYLIy/2KyuDj0Ebd6g3hcK7omJ4dt 4+Y1zB0J0OLtKj2arVtHfGY2mqyHGqtLvI57cVY3H6vOkXFcMntlbiQ6Js2FU48g TPrTWYNE77MI09/ZaqsvpnS0tlPlYycwkZ1FaQKZneS+kWB0COmRtmSLcwZp8eGU 3Hc7gVsZOcVfK2ASHj6ikZuoIM1cXRWtLr4WfZtvIs77wYZwvsYe95oXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFx3E+E81Wsq9ZDDvwdLqSCZBgMMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO9CoSgV DMKj5DTDj7pdkU9DnnLf+SoKhA7+0U37CP3iy6YXO7FZJn3s3QEIXg6fsIWwfXkG JvqQa+bOA5X3ii330Ch7oM+EvQ3E4kcTjNRkddAZk2M9QFZ2GrPf8ol2s9sfju14 oIyJr2F1kknbnwcP4qXRRz57YfUvFBPp+Ln0z0BraESQdENmv2JMI47HJKHiczNF H9nISHuysH/w3hfHWHtPUJVniRwTYAqsuDfI4YFKKFC2zFdbN/YPhgKqWc0b0fDc gZYqCfJULPrOPfQMOxDjeiOPZ6pEpoB0vTfkJAd7jjjDuRoKKuYy8TRYOdzauYuv Lnxara1QFC0P4A== -----END CERTIFICATE-----Generated at Thu Dec 18 17:54:23 2025 by rpki-client