This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json) Hash identifier: RNBaK15p17CWwJEweKKUBi8eGT41ef3IEHC0wb5tl3k= Subject key identifier: E9:D4:88:38:22:CE:A0:24:0A:12:F7:C2:A3:85:AB:3B:75:63:48:5C Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b Certificate serial: 019B3E6E0AF9AB46F11D095053B529F213D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft Manifest number: 0ACD Signing time: Sun 21 Dec 2025 01:02:37 +0000 Manifest this update: Sun 21 Dec 2025 01:02:37 +0000 Manifest next update: Mon 22 Dec 2025 01:02:37 +0000 Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: qq8/0EkjaNaSMgLUIaTDKqJvmnROZzNYtSreu5IvLeI=) 2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=) 3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:0a:f9:ab:46:f1:1d:09:50:53:b5:29:f2:13:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b Validity Not Before: Dec 21 01:02:37 2025 GMT Not After : Dec 22 01:02:37 2025 GMT Subject: CN=e9d4883822cea0240a12f7c2a385ab3b7563485c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:c0:ed:cf:17:c5:32:6a:90:9e:a9:2a:34: ff:19:b4:a9:a4:2c:f9:86:a2:4e:5b:1a:d9:36:bd: 81:c5:8d:65:fe:75:54:e0:27:43:10:35:4a:2a:41: 95:da:85:b7:ff:1d:9a:71:67:c7:77:6d:09:9e:f6: 29:4e:74:4a:41:52:37:e4:31:b1:d4:65:5a:09:96: 09:4b:69:83:51:9f:c5:c3:86:0c:d6:d2:b8:c4:9d: c8:b9:cd:e5:32:fe:d1:b8:a3:19:fe:61:5b:c7:6d: 7c:10:e8:bf:51:27:c4:67:44:56:a1:77:74:ad:64: 5d:63:bf:70:48:6a:d4:d4:27:5b:23:58:9a:4e:28: b1:d4:46:f9:35:44:eb:b5:e8:3e:e9:6e:aa:79:5c: 29:dd:fd:36:e7:7b:ae:5c:fa:eb:42:c7:ec:11:eb: 59:67:05:eb:61:b6:99:6f:65:6f:f0:97:82:3b:02: 0b:7e:6c:74:ec:c7:89:de:e3:1b:3b:0f:d7:c1:b6: d0:77:74:93:b4:07:96:db:4e:f9:fa:1d:cb:a8:4a: c3:60:40:43:53:a8:ae:65:52:97:4d:bc:26:b0:be: 76:6b:e9:00:24:7c:e6:b3:59:72:6f:5e:1d:37:a6: 5d:f2:45:26:27:af:9e:1f:77:b3:81:c8:e4:68:b8: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D4:88:38:22:CE:A0:24:0A:12:F7:C2:A3:85:AB:3B:75:63:48:5C X509v3 Authority Key Identifier: keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:33:03:d6:97:56:ee:b3:3d:fb:6d:55:38:cc:d4:0e:a6:46: 19:06:77:2a:33:2d:ef:b7:97:33:a8:55:b9:a0:39:bb:26:27: 9a:cc:c9:df:21:f4:a7:1f:4c:27:71:7e:e9:db:e4:9c:6e:6c: 0f:08:27:d3:08:c3:b3:1c:92:ee:42:6d:71:a2:f2:a6:26:0f: 88:11:08:b4:31:05:cd:f4:c0:d8:aa:bd:01:16:c3:7a:fe:63: 0e:a6:36:97:8a:c4:04:80:f2:0f:87:2d:c1:0c:40:2a:46:53: b1:07:5a:ea:31:0b:b8:d6:55:3d:ed:dd:60:de:17:94:1d:9d: ac:1a:0e:4a:ac:28:ac:4a:7c:83:36:ef:08:fb:4e:5a:ab:4a: 46:5a:a8:cc:43:a1:36:d8:15:64:08:ba:5a:4f:fa:09:74:ae: 2a:65:4b:3f:35:ef:cc:a8:31:59:27:8f:57:d4:75:91:f1:8e: 1c:b6:7d:bf:59:a7:f3:84:80:f1:b6:95:3a:97:47:80:fe:7a: d3:d4:b5:06:34:eb:3e:73:ba:4e:5f:c3:b1:25:27:b7:c9:de: 56:07:4d:a8:fc:ef:53:69:50:06:fb:3a:98:94:4b:07:c3:13: da:85:c1:3f:5e:33:b1:23:76:fd:ce:6c:91:cb:ae:93:fc:74: a6:dd:3c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bgr5q0bxHQlQU7Up8hPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj YjRmMmIwHhcNMjUxMjIxMDEwMjM3WhcNMjUxMjIyMDEwMjM3WjAzMTEwLwYDVQQD EyhlOWQ0ODgzODIyY2VhMDI0MGExMmY3YzJhMzg1YWIzYjc1NjM0ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmrA7c8XxTJqkJ6pKjT/GbSppCz5 hqJOWxrZNr2BxY1l/nVU4CdDEDVKKkGV2oW3/x2acWfHd20JnvYpTnRKQVI35DGx 1GVaCZYJS2mDUZ/Fw4YM1tK4xJ3Iuc3lMv7RuKMZ/mFbx218EOi/USfEZ0RWoXd0 rWRdY79wSGrU1CdbI1iaTiix1Eb5NUTrteg+6W6qeVwp3f0253uuXPrrQsfsEetZ ZwXrYbaZb2Vv8JeCOwILfmx07MeJ3uMbOw/XwbbQd3STtAeW2075+h3LqErDYEBD U6iuZVKXTbwmsL52a+kAJHzms1lyb14dN6Zd8kUmJ6+eH3ezgcjkaLjhrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnUiDgizqAkChL3wqOFqzt1Y0hcMB8GA1UdIwQY MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3 LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTMD1pdW 7rM9+21VOMzUDqZGGQZ3KjMt77eXM6hVuaA5uyYnmszJ3yH0px9MJ3F+6dvknG5s Dwgn0wjDsxyS7kJtcaLypiYPiBEItDEFzfTA2Kq9ARbDev5jDqY2l4rEBIDyD4ct wQxAKkZTsQda6jELuNZVPe3dYN4XlB2drBoOSqworEp8gzbvCPtOWqtKRlqozEOh NtgVZAi6Wk/6CXSuKmVLPzXvzKgxWSePV9R1kfGOHLZ9v1mn84SA8baVOpdHgP56 09S1BjTrPnO6Tl/DsSUnt8neVgdNqPzvU2lQBvs6mJRLB8MT2oXBP14zsSN2/c5s kcuuk/x0pt08fg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:28 2025 by rpki-client