This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json) Hash identifier: yN5lMEM94JS7j5LZiAmWmXeCXC7swbmE5Ntxv6I/U+8= Subject key identifier: 4C:5C:01:1D:36:7E:D5:C4:97:31:2C:3B:10:0B:BC:18:40:E7:56:F1 Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Certificate serial: 019B3DC74AF596FCB0F4B3AAE45234B66563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:29 +0000 Manifest this update: Sat 20 Dec 2025 22:00:29 +0000 Manifest next update: Sun 21 Dec 2025 22:00:29 +0000 Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: no/L3cLEm8Qx2YmdXbv6nNhKLXHku7DgvznxwSsu7Ic=) 2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=) 3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=) 4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:4a:f5:96:fc:b0:f4:b3:aa:e4:52:34:b6:65:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Validity Not Before: Dec 20 22:00:29 2025 GMT Not After : Dec 21 22:00:29 2025 GMT Subject: CN=4c5c011d367ed5c497312c3b100bbc1840e756f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:b5:5a:d1:1e:9d:86:c7:c8:2f:56:29:76: e9:ea:4b:c7:db:94:19:3c:b4:bf:ce:50:87:69:c0: 7f:a7:a1:6a:29:9a:e9:3f:10:b5:58:0e:8a:1b:d6: 17:9b:1d:60:72:37:ff:6b:28:69:4c:fc:8f:cd:b7: c3:7d:e8:2e:56:75:a5:43:c3:13:b7:36:e5:b3:27: a5:b0:46:47:4c:6b:cd:77:6c:3b:d3:82:d4:94:87: 2a:d3:77:70:3d:9c:13:a4:19:26:41:b6:b0:51:6d: de:8f:87:1e:1e:0b:a7:e9:73:40:4f:d7:51:f0:4e: 7d:64:7f:be:2f:e5:55:ac:f4:8b:83:8e:20:e3:27: 4b:08:61:e5:76:62:29:9e:0c:bf:c1:ae:5c:00:8e: e4:db:2b:a3:7c:b3:dc:4c:f4:02:0f:d3:54:40:cc: 0d:5f:60:2b:15:eb:93:a4:96:07:ae:bb:db:3f:ac: b9:c1:81:55:b8:ec:e5:b4:a7:e6:69:71:98:4b:ad: 33:0e:45:03:0e:67:ae:42:b9:99:5b:9a:6a:64:e7: 31:47:32:7d:f8:d8:80:d2:97:e2:45:08:5a:f4:b4: a1:f8:87:cb:fc:8a:61:a5:9f:e9:96:0f:51:3a:5f: 91:ae:ec:c8:a4:46:4a:af:bf:a6:85:8b:5b:7a:b3: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:01:1D:36:7E:D5:C4:97:31:2C:3B:10:0B:BC:18:40:E7:56:F1 X509v3 Authority Key Identifier: keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ff:6b:9a:b5:f8:8e:b3:05:a6:43:3f:b5:5b:26:a9:fd:e3: 21:cb:30:7b:f1:cd:0c:5c:f6:99:9f:bf:31:67:61:f9:1f:02: be:80:75:20:ec:c4:96:f0:3e:21:bb:54:bf:e4:e7:e3:c3:0f: 37:70:dc:f3:29:b6:23:1b:f8:16:e0:1c:80:a2:9e:e5:67:b1: 28:39:85:ae:37:93:7b:84:55:3f:01:07:cd:e6:e7:41:bb:81: 81:fe:a1:c0:45:82:51:c7:71:4d:27:30:6d:8d:ce:ce:53:6e: 7a:1a:b8:ba:5e:88:3b:fe:7a:b8:d6:ff:55:66:1c:ad:f0:0a: 29:b2:94:82:33:7b:e8:fd:1a:36:91:0d:db:73:7e:00:50:b1: 55:cf:d7:58:e1:9d:2e:67:6a:49:d1:9f:dd:c5:49:b2:34:45: f7:6c:2a:5a:42:90:3a:ab:3f:7e:02:81:7d:b6:1c:f1:89:94: 88:0f:e3:1c:d8:0c:55:0e:b8:ed:45:4d:d0:51:1d:81:07:15: 4d:c8:e5:ca:e7:df:7e:cd:4a:f9:8a:88:51:57:0e:67:ed:a9: cb:75:f6:e1:ed:bb:94:cc:61:41:db:54:13:28:c3:21:fd:b7: 96:2a:19:3f:3d:ae:5b:97:29:1c:67:3b:d4:a6:d6:c8:d8:56: 44:5e:b7:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x0r1lvyw9LOq5FI0tmVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2 NGFiNzEwHhcNMjUxMjIwMjIwMDI5WhcNMjUxMjIxMjIwMDI5WjAzMTEwLwYDVQQD Eyg0YzVjMDExZDM2N2VkNWM0OTczMTJjM2IxMDBiYmMxODQwZTc1NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/e1WtEenYbHyC9WKXbp6kvH25QZ PLS/zlCHacB/p6FqKZrpPxC1WA6KG9YXmx1gcjf/ayhpTPyPzbfDfeguVnWlQ8MT tzblsyelsEZHTGvNd2w704LUlIcq03dwPZwTpBkmQbawUW3ej4ceHgun6XNAT9dR 8E59ZH++L+VVrPSLg44g4ydLCGHldmIpngy/wa5cAI7k2yujfLPcTPQCD9NUQMwN X2ArFeuTpJYHrrvbP6y5wYFVuOzltKfmaXGYS60zDkUDDmeuQrmZW5pqZOcxRzJ9 +NiA0pfiRQha9LSh+IfL/IphpZ/plg9ROl+RruzIpEZKr7+mhYtberP4XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExcAR02ftXElzEsOxALvBhA51bxMB8GA1UdIwQY MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt NGM4ODgzMzI3YTJhLzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv9rmrX4 jrMFpkM/tVsmqf3jIcswe/HNDFz2mZ+/MWdh+R8CvoB1IOzElvA+IbtUv+Tn48MP N3Dc8ym2Ixv4FuAcgKKe5WexKDmFrjeTe4RVPwEHzebnQbuBgf6hwEWCUcdxTScw bY3OzlNuehq4ul6IO/56uNb/VWYcrfAKKbKUgjN76P0aNpEN23N+AFCxVc/XWOGd LmdqSdGf3cVJsjRF92wqWkKQOqs/fgKBfbYc8YmUiA/jHNgMVQ647UVN0FEdgQcV Tcjlyufffs1K+YqIUVcOZ+2py3X24e27lMxhQdtUEyjDIf23lioZPz2uW5cpHGc7 1KbWyNhWRF63bw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:21:45 2025 by rpki-client