This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json) Hash identifier: FXK8z9lHoVKGgom+YlEtUY1gCVIcRSUAzVvHrCVme0Y= Subject key identifier: B7:31:00:19:FE:0B:EE:EA:ED:F7:74:32:49:6E:34:1E:A8:C8:2F:26 Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f Certificate serial: 019AF91D3A0FE57C352B66EA6B39C9C0A417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft Manifest number: 13D5 Signing time: Sun 07 Dec 2025 14:00:33 +0000 Manifest this update: Sun 07 Dec 2025 14:00:33 +0000 Manifest next update: Mon 08 Dec 2025 14:00:33 +0000 Files and hashes: 1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: vbs2FVCllROtfNjc/nGvJ2VZHKOxmsgDDRywI+QD89w=) 2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=) 3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=) 4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=) 5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=) 6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:3a:0f:e5:7c:35:2b:66:ea:6b:39:c9:c0:a4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f Validity Not Before: Dec 7 14:00:33 2025 GMT Not After : Dec 8 14:00:33 2025 GMT Subject: CN=b7310019fe0beeeaedf77432496e341ea8c82f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:3f:1a:82:32:52:05:cb:49:25:ef:19:b9: 6b:25:1a:53:c7:e0:59:8d:25:a4:80:8e:18:92:ed: 6b:2e:3b:70:26:a7:64:2a:29:aa:34:65:07:63:46: 2a:d4:a9:4a:75:fc:09:15:f0:e9:13:57:17:cd:03: d6:bf:95:0c:6a:74:f0:00:33:2d:88:60:52:66:fa: 1d:31:db:18:ba:ab:a4:a3:19:d2:9a:13:cd:50:fe: b0:37:1b:ea:08:ef:70:26:6d:6a:0c:e2:ba:8c:1d: 2c:74:22:89:76:b0:57:62:f5:2f:1b:90:75:62:d3: f4:d0:71:62:45:80:0b:a9:eb:83:2d:19:08:8d:cc: 49:43:d3:01:33:c8:54:bf:01:c6:f3:b6:0b:10:c7: df:29:c7:46:44:52:d5:65:04:f8:9a:c8:9b:6b:16: 01:58:1e:33:61:0a:db:24:ab:d7:77:5b:4d:7d:dd: 21:7d:b9:5a:63:14:af:40:dc:98:7b:7e:ca:23:81: d6:66:51:61:5a:b4:fc:67:f7:6f:05:0e:3e:cb:4f: a0:72:ce:0f:e9:77:e3:c1:43:80:d3:3d:e2:1a:63: 42:52:d3:ac:21:db:b8:ff:cc:6f:8a:b7:15:b4:1c: 3d:6b:78:e6:40:c6:a5:c6:1c:a9:7f:0d:70:32:25: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:00:19:FE:0B:EE:EA:ED:F7:74:32:49:6E:34:1E:A8:C8:2F:26 X509v3 Authority Key Identifier: keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ef:35:96:3d:60:5e:c4:42:8b:44:50:0c:3d:f4:b6:af:93: 5a:ed:9c:92:b4:c3:46:b8:c3:54:99:cc:d8:fd:87:01:c6:72: eb:56:7e:7f:44:81:92:fe:fe:71:1b:5a:df:50:e6:eb:57:31: c1:48:c1:0c:b6:58:da:8f:aa:56:61:e1:ae:46:2c:62:28:74: f9:48:f5:20:56:61:e2:bc:6c:7d:10:00:d3:1a:f0:1b:ce:3d: fd:44:18:56:19:5f:b0:f1:b5:f4:a1:bb:18:15:3b:21:81:ce: f7:ee:a6:2f:fc:d2:bb:5f:ff:24:40:65:9b:dc:ed:da:6f:64: 9c:1e:4a:18:44:5f:41:b3:ee:ff:b3:5c:b8:f0:e1:a4:81:b4: 74:05:65:2a:c8:43:21:4b:e7:c0:b1:50:20:b0:b5:18:77:f5: 63:3f:b2:fa:f6:e6:15:b3:61:e5:8c:0c:cd:fd:6c:4a:b6:e0: e3:4e:47:81:b5:43:ed:31:d8:fb:2a:e9:02:89:23:34:46:24: e2:28:18:32:85:d8:66:c4:b2:71:12:9d:e0:64:55:be:c4:8a: bb:49:ef:93:d8:9f:76:07:b4:ea:81:56:cb:ad:34:3f:ff:6e: 0d:d9:e9:c8:9f:99:9a:13:94:44:e5:56:80:1d:85:d7:77:68: 0f:c2:e4:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HToP5Xw1K2bqaznJwKQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl MDQ4MWYwHhcNMjUxMjA3MTQwMDMzWhcNMjUxMjA4MTQwMDMzWjAzMTEwLwYDVQQD EyhiNzMxMDAxOWZlMGJlZWVhZWRmNzc0MzI0OTZlMzQxZWE4YzgyZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8c/GoIyUgXLSSXvGblrJRpTx+BZ jSWkgI4Yku1rLjtwJqdkKimqNGUHY0Yq1KlKdfwJFfDpE1cXzQPWv5UManTwADMt iGBSZvodMdsYuqukoxnSmhPNUP6wNxvqCO9wJm1qDOK6jB0sdCKJdrBXYvUvG5B1 YtP00HFiRYALqeuDLRkIjcxJQ9MBM8hUvwHG87YLEMffKcdGRFLVZQT4msibaxYB WB4zYQrbJKvXd1tNfd0hfblaYxSvQNyYe37KI4HWZlFhWrT8Z/dvBQ4+y0+gcs4P 6XfjwUOA0z3iGmNCUtOsIdu4/8xvircVtBw9a3jmQMalxhypfw1wMiX+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcxABn+C+7q7fd0MkluNB6oyC8mMB8GA1UdIwQY MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt MjdkMDNlMzkzZmI3LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3 LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIO81lj1g XsRCi0RQDD30tq+TWu2ckrTDRrjDVJnM2P2HAcZy61Z+f0SBkv7+cRta31Dm61cx wUjBDLZY2o+qVmHhrkYsYih0+Uj1IFZh4rxsfRAA0xrwG849/UQYVhlfsPG19KG7 GBU7IYHO9+6mL/zSu1//JEBlm9zt2m9knB5KGERfQbPu/7NcuPDhpIG0dAVlKshD IUvnwLFQILC1GHf1Yz+y+vbmFbNh5YwMzf1sSrbg405HgbVD7THY+yrpAokjNEYk 4igYMoXYZsSycRKd4GRVvsSKu0nvk9ifdge06oFWy600P/9uDdnpyJ+ZmhOUROVW gB2F13doD8LkuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 22:25:02 2025 by rpki-client