This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier: 1XN7TeachPZgGFI/Uk38KcFKgfXerws1Bei3V4wAL38=
Subject key identifier: 99:1B:51:FA:A2:96:27:50:CB:C0:36:A5:E4:55:E5:EA:21:AF:CB:15
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019B7D4AE249FC05087F679B5F0AABA62B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number: 13CD
Signing time: Fri 02 Jan 2026 06:00:18 +0000
Manifest this update: Fri 02 Jan 2026 06:00:18 +0000
Manifest next update: Sat 03 Jan 2026 06:00:18 +0000
Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: fZUYy3nuIS+BHlBoV8IrVmUWB+92nYBXaAAN1Du1J0U=)
2: JgAnCeNDpTLcRHgLzRkMzF025K0.roa (hash: Ove/nj1pY736un6NN+0QVHsa6jfrCM9fia6JOsT8LGE=)
3: W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa (hash: Ce5u3NFumbrG6KxipXK7ZFrTV36Y5P03dD20D+8E1Ho=)
4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
5: bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa (hash: Vzo2HY5zSLFaP0LajL8wuixJXJWl1u/UqY8ZpfyfUCo=)
6: eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa (hash: 8b2l6sLxKDcQzB4gntOXXFhK5d0o5i3qf8nwkLcMhwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:4a:e2:49:fc:05:08:7f:67:9b:5f:0a:ab:a6:2b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jan 2 06:00:18 2026 GMT
Not After : Jan 3 06:00:18 2026 GMT
Subject: CN=991b51faa2962750cbc036a5e455e5ea21afcb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:26:1e:8b:2b:b5:de:4d:ee:95:b1:91:18:
bb:35:30:07:0e:e2:c3:00:37:8e:7e:ec:be:90:60:
f8:e5:ba:ed:a6:53:2d:35:c8:be:13:27:8c:9c:1a:
b3:a8:79:70:dc:8e:ef:9e:c2:10:ff:95:00:34:df:
28:5a:d6:79:a1:0c:25:15:12:f6:27:e8:6f:cb:10:
cb:74:47:8b:e5:6e:fd:71:32:3c:78:ad:17:1b:bf:
6a:c4:0e:c4:63:93:88:8e:f5:e8:c4:d9:f4:0e:dd:
af:32:72:43:08:9b:5c:f5:7e:54:78:50:52:20:56:
7f:43:c7:c3:62:01:6a:2e:55:03:fd:f6:86:73:d0:
c6:10:3b:f1:cd:09:59:67:9a:2d:41:41:c2:be:f2:
72:98:a7:dd:bd:bd:d3:36:cd:c9:3a:db:bc:d9:c0:
8e:e0:90:e5:cb:f4:9d:75:64:28:f5:a1:5d:02:7e:
06:92:a3:49:3f:49:58:20:d8:00:14:c2:29:cf:f8:
6a:a9:f5:da:45:2e:5d:cd:ba:3c:47:c7:c9:18:69:
b7:41:50:af:ce:71:29:eb:2f:44:dc:e0:6b:0e:19:
de:64:85:ce:00:fd:db:9a:9f:3a:6c:a5:76:75:94:
06:e9:9f:88:da:3a:88:6a:9e:6a:24:c4:d5:c2:3b:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:51:FA:A2:96:27:50:CB:C0:36:A5:E4:55:E5:EA:21:AF:CB:15
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:ca:e8:07:9e:31:09:c1:91:57:c0:99:71:03:81:05:15:
0c:97:0a:e9:a2:7b:6f:8f:61:9a:50:76:66:d1:54:c5:5f:41:
5e:c3:cf:51:ae:d3:e0:7d:45:92:11:4b:e3:5b:30:14:9f:18:
05:54:e3:c4:46:26:43:a5:15:d8:13:5d:93:af:ac:a6:00:bb:
83:ef:96:7a:76:1a:a2:b7:11:13:4e:5f:e5:c6:37:51:1a:cc:
93:67:6b:24:f5:fc:39:b6:cf:9c:c7:16:1d:60:80:64:e9:e5:
8e:e0:15:f8:d4:4c:58:cb:a0:c9:41:7e:bd:ec:18:a9:43:55:
38:53:7d:55:ab:7b:2b:f9:1e:bd:8e:61:c8:90:bb:a8:5d:05:
f9:3d:33:3c:a6:0c:f3:4c:a7:be:91:b7:a8:88:c9:09:1f:57:
45:0a:ef:d9:19:36:d2:14:79:e0:ad:fc:47:73:44:4e:07:c6:
cd:65:85:e7:21:de:10:b3:72:f5:35:d4:fd:91:aa:18:ec:1a:
be:f5:f7:8c:4e:e1:a5:3d:be:4e:b9:3a:53:fe:d8:78:04:dc:
74:ad:5f:8c:f4:b6:63:8c:04:fe:8f:b0:7a:0a:9b:33:58:60:
f4:94:e7:b0:72:3d:bf:8a:98:70:08:08:3c:20:b7:b2:45:69:
97:ba:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:15:04 2026 by rpki-client