This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json) Hash identifier: x4cqb8/7d6D34OzG+tVS6k3MWlKgpVJphJOdrqG6bGk= Subject key identifier: 69:94:E6:9C:42:5B:10:02:16:49:21:20:6C:75:36:11:53:4F:50:A1 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019B378F35B068DF7B0DDBEBDEEBBF8797BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft Manifest number: 13A8 Signing time: Fri 19 Dec 2025 17:01:30 +0000 Manifest this update: Fri 19 Dec 2025 17:01:30 +0000 Manifest next update: Sat 20 Dec 2025 17:01:30 +0000 Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: e7/JCo/dSdbne5TfL0al22TLdRONhlKric9yJskPqPc=) 2: MHWEBb8RKZSn4dy7qA_izu7w91w.roa (hash: 44oBBFXwCkfSDHIkUc46ZuGmSEo2ss8zLAgd2waANh8=) 3: NwG29YuTRI5XksjMFNEM5lUSKWs.roa (hash: zIhjmOX+WnWAegfCFaKo2xLAqaq2QljDNtribVl5+Wc=) 4: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (hash: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=) 5: UYG02sedni6PF3l5885jWR9SDAU.roa (hash: F15eDYq10rpPatO7l2AwP8pJp/GPkxjGwfOAI4ndu8c=) 6: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (hash: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:35:b0:68:df:7b:0d:db:eb:de:eb:bf:87:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Dec 19 17:01:30 2025 GMT Not After : Dec 20 17:01:30 2025 GMT Subject: CN=6994e69c425b1002164921206c753611534f50a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:60:04:f0:ec:d9:9f:fd:da:7e:86:80:db: e4:de:31:78:d2:01:2b:72:6b:c9:ee:c4:63:06:82: 63:67:41:fb:c2:d9:8e:07:77:7c:67:bb:33:44:31: 33:fc:7a:0c:55:80:2e:2c:7c:bf:83:e6:f4:cd:a6: 37:ad:07:73:c3:38:e9:dd:bb:cb:b1:a0:42:92:3b: 42:ed:80:21:4c:df:56:22:1e:14:12:20:1e:61:77: ba:31:44:22:88:c2:3e:ea:43:18:6a:6c:a7:12:a3: d3:26:b6:ab:c2:9b:63:8e:63:e3:55:5e:1e:4d:3c: ff:49:e9:55:8d:e8:40:30:12:80:d6:94:98:bf:bb: 21:ad:0c:fa:6f:c5:5e:51:4d:d6:03:82:d8:51:8a: f7:46:d3:60:9a:e0:af:db:6f:00:e6:7b:d3:35:3e: 40:20:e3:2e:2a:82:3f:74:fd:1f:f4:12:f3:20:3d: 9e:7c:4d:b1:ae:a9:d8:40:2c:ef:aa:c9:60:6c:0c: 03:7a:1f:df:ac:36:4b:7e:3b:58:8d:e8:4f:b5:32: ea:b0:93:a4:67:cf:13:ee:03:86:42:64:dc:30:54: fc:e4:cd:7e:f4:13:10:45:84:c8:07:01:20:f4:9e: 0c:c0:5f:c1:fa:45:0c:ea:c7:85:68:a5:18:90:63: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:E6:9C:42:5B:10:02:16:49:21:20:6C:75:36:11:53:4F:50:A1 X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3c:8e:d1:fd:d5:53:34:37:1d:92:54:7b:b8:4b:1c:13:4d: ec:9d:2b:9c:68:45:60:78:79:eb:4a:a1:22:a5:e5:22:9f:e5: c9:5c:a0:1e:47:67:92:d8:34:3e:c8:fb:1e:96:c8:39:cf:b8: 81:81:32:47:43:cc:86:ac:61:bd:60:77:16:07:c4:05:1f:49: 7e:aa:5d:8f:a2:10:f4:10:69:83:bd:e1:e0:25:28:e7:fe:61: b1:8a:50:7e:35:f0:04:12:de:c1:f0:0b:9d:05:f1:f0:3a:86: 38:c5:e7:25:51:f3:fa:99:cc:5f:04:b6:e2:94:8c:8a:39:89: 0b:eb:84:92:44:14:83:05:f7:3c:e0:ef:4f:0d:01:4b:d0:98: 0d:a1:65:1c:f3:29:3a:06:5f:e3:0d:fe:61:c1:65:d9:ed:cd: 3f:b4:f5:8c:a5:05:d4:bf:4f:5e:27:5a:b2:81:99:09:bc:54: c6:6b:f5:38:a1:1b:a4:8b:4d:2d:69:32:3b:35:c1:cc:63:9f: 6a:48:b8:27:be:33:4d:c6:0c:a0:16:48:f2:f2:27:4c:f5:c4: 79:c6:f8:ad:95:7e:9a:87:d2:98:4c:1c:23:57:3b:24:60:c4: a4:8a:c6:b8:2e:53:15:08:69:6e:df:02:e3:a7:37:4f:0b:53: da:f9:37:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jzWwaN97Ddvr3uu/h5e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjUxMjE5MTcwMTMwWhcNMjUxMjIwMTcwMTMwWjAzMTEwLwYDVQQD Eyg2OTk0ZTY5YzQyNWIxMDAyMTY0OTIxMjA2Yzc1MzYxMTUzNGY1MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR9gBPDs2Z/92n6GgNvk3jF40gEr cmvJ7sRjBoJjZ0H7wtmOB3d8Z7szRDEz/HoMVYAuLHy/g+b0zaY3rQdzwzjp3bvL saBCkjtC7YAhTN9WIh4UEiAeYXe6MUQiiMI+6kMYamynEqPTJrarwptjjmPjVV4e TTz/SelVjehAMBKA1pSYv7shrQz6b8VeUU3WA4LYUYr3RtNgmuCv228A5nvTNT5A IOMuKoI/dP0f9BLzID2efE2xrqnYQCzvqslgbAwDeh/frDZLfjtYjehPtTLqsJOk Z88T7gOGQmTcMFT85M1+9BMQRYTIBwEg9J4MwF/B+kUM6seFaKUYkGNEOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmU5pxCWxACFkkhIGx1NhFTT1ChMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjyO0f3V UzQ3HZJUe7hLHBNN7J0rnGhFYHh560qhIqXlIp/lyVygHkdnktg0Psj7HpbIOc+4 gYEyR0PMhqxhvWB3FgfEBR9Jfqpdj6IQ9BBpg73h4CUo5/5hsYpQfjXwBBLewfAL nQXx8DqGOMXnJVHz+pnMXwS24pSMijmJC+uEkkQUgwX3PODvTw0BS9CYDaFlHPMp OgZf4w3+YcFl2e3NP7T1jKUF1L9PXidasoGZCbxUxmv1OKEbpItNLWkyOzXBzGOf aki4J74zTcYMoBZI8vInTPXEecb4rZV+mofSmEwcI1c7JGDEpIrGuC5TFQhpbt8C 46c3TwtT2vk3hQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:50:41 2025 by rpki-client