This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier: kNn9hr3JIOjAK+F1OjOwULwNAhl/D7wZX96eUzqyc6g=
Subject key identifier: 94:BB:BC:12:0B:6A:E8:C5:82:55:27:EE:88:A9:4D:10:16:A9:CC:E3
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 019B3AC6467B9FCC49A4CD8CAF990EC4DD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number: 13F7
Signing time: Sat 20 Dec 2025 08:00:31 +0000
Manifest this update: Sat 20 Dec 2025 08:00:31 +0000
Manifest next update: Sun 21 Dec 2025 08:00:31 +0000
Files and hashes: 1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: sbQeDqz4oQUz8PjtImVF/6AMl6Llf4m2OF+H4KWzhnM=)
2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=)
3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=)
4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=)
5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=)
6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:c6:46:7b:9f:cc:49:a4:cd:8c:af:99:0e:c4:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Dec 20 08:00:31 2025 GMT
Not After : Dec 21 08:00:31 2025 GMT
Subject: CN=94bbbc120b6ae8c5825527ee88a94d1016a9cce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:e2:d4:e7:d6:b9:bb:da:c4:a8:44:2c:fe:
f2:6e:46:82:a4:7a:35:62:ec:c7:70:7c:25:c2:e1:
93:ca:c0:57:b0:37:b9:d6:1d:d6:e7:a4:d0:23:fe:
1b:85:f2:39:f0:41:86:21:9a:78:e2:fe:4c:ff:55:
f7:e5:db:0b:69:41:f5:4c:05:7e:d4:2d:09:e9:69:
b4:33:86:5a:bb:57:f2:8e:42:b6:64:11:e5:77:74:
fe:94:32:e4:6b:56:81:5a:a2:10:a7:08:fb:b8:e2:
62:3e:82:b1:5c:a3:79:72:cd:d1:51:19:40:5a:59:
c6:c9:f1:9c:29:65:8f:3e:e1:73:8f:e2:1b:ee:40:
e8:be:d3:0c:d5:08:90:43:d6:9b:dd:f1:86:79:61:
3e:95:cc:b2:99:d1:8f:73:f4:bc:04:a6:75:6e:9f:
e9:ad:68:17:78:fd:98:a1:5d:bd:71:53:27:81:3e:
a6:31:f7:05:95:e0:a3:5b:5a:c5:4c:49:56:a2:7c:
84:1d:61:19:0e:18:5a:e0:9e:79:37:73:99:f9:dd:
fb:23:1b:05:b1:ea:73:a4:1c:dc:6e:70:98:51:ca:
cc:b3:69:de:a4:ae:be:4c:36:b8:90:2c:03:a5:fd:
f5:18:d3:84:c3:1f:72:d5:fd:9b:10:d2:06:09:a2:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:BC:12:0B:6A:E8:C5:82:55:27:EE:88:A9:4D:10:16:A9:CC:E3
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:98:2b:98:b3:8f:6a:29:7a:a1:1b:93:5c:ce:c9:1e:c7:
19:ac:af:13:10:4a:b9:b7:e9:d1:3d:f0:54:7a:2f:1a:bc:91:
1b:fc:7b:fb:4e:87:8a:a8:c2:de:46:3e:a5:50:8a:13:6b:7e:
c5:b6:41:e9:00:02:66:33:f1:a1:5f:06:68:6b:bf:b5:ef:42:
cb:d4:36:aa:85:3a:a1:49:02:e5:b4:fe:89:d3:d1:53:f3:d2:
8c:9e:3d:94:c6:44:41:ea:35:93:cd:d5:e0:06:ca:bd:54:56:
d4:a7:dc:43:66:15:47:90:c0:bf:e2:fb:9c:f9:01:cf:68:8c:
a0:59:5e:64:34:32:cf:d7:b4:c0:44:f8:d9:52:ca:44:8d:cd:
5a:8f:e4:a6:23:92:19:ff:fc:83:09:a2:00:81:83:bb:c8:43:
2c:cc:a3:ef:a8:2d:39:fd:a7:be:57:0d:b6:db:94:eb:8d:d6:
74:3d:34:f4:ae:9c:7f:b6:43:23:99:0d:2b:fe:99:a1:a0:18:
e7:c6:60:a5:cf:81:18:30:b2:14:9e:38:84:4e:b3:01:52:0a:
79:1e:17:f8:1f:4f:fb:73:bd:54:24:61:3f:99:d7:42:40:80:
5a:ff:85:d2:df:ec:46:b2:69:c7:1f:af:86:ab:44:76:dc:5d:
ce:f9:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:12:23 2025 by rpki-client