This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json) Hash identifier: O+fxWfz/zQnCoEcqEGhQIfkW5HTwwFcX7+lLv5fyNgk= Subject key identifier: 1F:D8:CA:71:BA:38:B9:9F:BE:BC:0C:2A:F3:8A:A7:A3:09:14:FA:C0 Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13 Certificate serial: 019BF3195186A6A89B8CD753D395CA97E682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft Manifest number: 140A Signing time: Sun 25 Jan 2026 03:01:21 +0000 Manifest this update: Sun 25 Jan 2026 03:01:21 +0000 Manifest next update: Mon 26 Jan 2026 03:01:21 +0000 Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: 7/ed3eVsJJ0SElEOQCliW+endiaxKfdhk/EFmC2018c=) 2: JgAnCeNDpTLcRHgLzRkMzF025K0.roa (hash: Ove/nj1pY736un6NN+0QVHsa6jfrCM9fia6JOsT8LGE=) 3: W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa (hash: Ce5u3NFumbrG6KxipXK7ZFrTV36Y5P03dD20D+8E1Ho=) 4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=) 5: bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa (hash: Vzo2HY5zSLFaP0LajL8wuixJXJWl1u/UqY8ZpfyfUCo=) 6: eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa (hash: 8b2l6sLxKDcQzB4gntOXXFhK5d0o5i3qf8nwkLcMhwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:51:86:a6:a8:9b:8c:d7:53:d3:95:ca:97:e6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13 Validity Not Before: Jan 25 03:01:21 2026 GMT Not After : Jan 26 03:01:21 2026 GMT Subject: CN=1fd8ca71ba38b99fbebc0c2af38aa7a30914fac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:ef:90:52:ac:0e:36:c6:c5:95:76:c1:3a: 1b:87:b1:04:5e:99:f5:a3:6a:aa:a0:ae:b5:20:9d: ef:79:82:ed:be:b8:6a:11:f5:3b:c2:c3:5d:05:e4: 4c:f5:f2:5f:64:8e:76:5e:4d:c8:ac:92:62:d2:ee: dc:e8:e4:31:aa:89:c3:52:27:23:b1:3c:fd:4b:e7: 7e:28:26:a5:94:0a:8e:76:fa:79:7d:53:fc:ba:ab: 35:8f:74:fb:4b:40:31:53:94:fa:23:2b:8b:e1:fc: 3f:72:44:16:0f:74:07:7e:d9:e9:19:6c:87:30:1c: 68:e3:be:b3:40:fe:ec:62:86:62:69:a7:f4:80:49: a4:d2:90:f3:d0:31:24:f5:77:e2:77:3f:5d:cb:78: 25:1c:2d:19:87:20:7d:71:49:d3:47:2f:ec:fb:51: bf:5b:d9:56:fc:b4:9b:24:bc:ee:1d:5e:45:f2:c5: 9c:bd:2d:e3:a0:33:46:62:eb:56:79:da:a3:24:be: 15:ff:46:87:98:ef:84:34:c2:a4:7f:40:19:02:7e: 25:ec:4a:37:5c:de:2e:f3:88:0b:53:01:2b:51:7c: f1:5c:15:95:31:3a:4b:c9:c7:89:e9:53:38:97:56: 30:41:69:f6:15:39:27:9f:cb:e9:90:77:d8:72:c8: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:CA:71:BA:38:B9:9F:BE:BC:0C:2A:F3:8A:A7:A3:09:14:FA:C0 X509v3 Authority Key Identifier: keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:09:b8:bb:32:dc:41:4a:53:50:5f:17:52:ea:39:61:7d:ea: d8:62:fe:e4:c7:bc:57:d0:6c:bb:d3:d7:48:5b:08:78:de:38: ec:bb:ab:0e:6e:a7:21:f3:c2:50:65:59:a3:85:f7:9c:8f:e6: 45:77:01:28:67:97:0d:9d:fc:ca:6d:32:35:1e:c4:0a:3e:80: 7e:f0:76:f4:5d:92:1e:9c:85:91:97:0b:4b:8a:97:9d:b0:e1: 9c:d4:d3:b8:7c:86:c4:70:ed:4f:ff:b2:53:75:f6:c7:fe:85: 4d:f6:62:2c:46:88:7a:52:70:70:3f:51:84:ad:db:cf:a7:d5: 5c:f4:da:c3:c9:9d:23:bb:75:64:bd:39:b6:09:c3:b1:fa:27: 7e:c0:9a:9c:c2:89:cb:fe:2b:de:14:71:9c:88:31:da:32:bc: 45:2a:f0:64:3f:92:43:66:47:a3:59:92:d2:ad:c2:03:72:2a: b2:27:ea:46:60:61:8a:6a:35:59:21:2c:a7:2d:06:de:c3:bf: 34:22:33:a9:31:65:ce:a0:5b:0a:93:da:84:f0:c6:93:55:ba: e1:d5:43:7e:83:ca:4e:ce:23:15:59:5e:47:6f:78:75:2b:fb: 35:57:b8:de:94:36:c5:fb:33:c9:85:11:b8:a2:af:bd:65:f8: d6:b2:63:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGVGGpqibjNdT05XKl+aCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0 ZmVjMTMwHhcNMjYwMTI1MDMwMTIxWhcNMjYwMTI2MDMwMTIxWjAzMTEwLwYDVQQD EygxZmQ4Y2E3MWJhMzhiOTlmYmViYzBjMmFmMzhhYTdhMzA5MTRmYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy67vkFKsDjbGxZV2wTobh7EEXpn1 o2qqoK61IJ3veYLtvrhqEfU7wsNdBeRM9fJfZI52Xk3IrJJi0u7c6OQxqonDUicj sTz9S+d+KCallAqOdvp5fVP8uqs1j3T7S0AxU5T6IyuL4fw/ckQWD3QHftnpGWyH MBxo476zQP7sYoZiaaf0gEmk0pDz0DEk9Xfidz9dy3glHC0ZhyB9cUnTRy/s+1G/ W9lW/LSbJLzuHV5F8sWcvS3joDNGYutWedqjJL4V/0aHmO+ENMKkf0AZAn4l7Eo3 XN4u84gLUwErUXzxXBWVMTpLyceJ6VM4l1YwQWn2FTknn8vpkHfYcshtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/YynG6OLmfvrwMKvOKp6MJFPrAMB8GA1UdIwQY MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct MDg1ZmEwYTU2MDUyLzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQm4uzLc QUpTUF8XUuo5YX3q2GL+5Me8V9Bsu9PXSFsIeN447LurDm6nIfPCUGVZo4X3nI/m RXcBKGeXDZ38ym0yNR7ECj6AfvB29F2SHpyFkZcLS4qXnbDhnNTTuHyGxHDtT/+y U3X2x/6FTfZiLEaIelJwcD9RhK3bz6fVXPTaw8mdI7t1ZL05tgnDsfonfsCanMKJ y/4r3hRxnIgx2jK8RSrwZD+SQ2ZHo1mS0q3CA3IqsifqRmBhimo1WSEspy0G3sO/ NCIzqTFlzqBbCpPahPDGk1W64dVDfoPKTs4jFVleR294dSv7NVe43pQ2xfszyYUR uKKvvWX41rJj5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:20:02 2026 by rpki-client