This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json) Hash identifier: 65d9RF3MjOBj/5h4a0nO+GiSyd9N5BfrgxC+R6k9IHg= Subject key identifier: 52:F8:3D:4D:BB:E0:45:F9:96:EE:4A:88:37:5A:03:F9:9A:37:85:0E Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Certificate serial: 019AF087EA95F06A219476CE3E1F8E318C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:00:30 +0000 Manifest this update: Fri 05 Dec 2025 22:00:30 +0000 Manifest next update: Sat 06 Dec 2025 22:00:30 +0000 Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: BQkJDH30HXVXwbWg2nasZ1ZlV5HgFu35yjiiCp2ubW4=) 2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=) 3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=) 4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ea:95:f0:6a:21:94:76:ce:3e:1f:8e:31:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Validity Not Before: Dec 5 22:00:30 2025 GMT Not After : Dec 6 22:00:30 2025 GMT Subject: CN=52f83d4dbbe045f996ee4a88375a03f99a37850e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:20:aa:56:a0:04:9c:e7:7e:06:41:81:7f: fe:48:f7:fb:a2:8b:81:d2:e7:af:8c:7a:94:b9:12: 55:c4:87:4a:17:84:64:45:1b:fb:76:ea:a8:ae:f6: f5:4c:16:96:fe:eb:1f:4e:ff:5c:69:4e:93:e1:97: 00:a2:d1:82:d7:f6:16:00:35:a2:6f:8b:7c:ca:15: 24:eb:1a:92:ac:10:cc:68:a8:0c:c5:b7:74:4f:ae: 70:37:86:bc:8e:fa:70:6d:6d:d2:0b:d1:7d:2c:39: 06:c0:f7:33:a9:1c:e6:3f:d6:92:d1:10:1e:e6:f5: b3:6a:52:64:eb:9a:45:cc:27:4e:97:81:f3:c1:43: 42:0d:52:ac:df:75:0e:48:87:1d:24:1c:ca:ac:72: 89:20:39:18:14:96:d1:43:58:14:98:98:e0:5f:c6: a5:bd:ad:24:04:a7:97:53:5e:db:d0:08:85:51:26: 2b:4e:fd:d2:93:3b:aa:8b:6f:2f:d8:43:af:c8:10: 70:97:09:f3:49:77:dd:2c:ca:08:6b:d7:bc:de:97: 61:d2:89:6f:a0:24:60:42:47:97:02:ee:92:49:02: 26:1b:54:f4:f7:b8:19:e0:e3:c0:d1:22:11:b1:2e: 51:49:d6:39:2f:94:24:3b:17:c8:43:0c:0a:16:79: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F8:3D:4D:BB:E0:45:F9:96:EE:4A:88:37:5A:03:F9:9A:37:85:0E X509v3 Authority Key Identifier: keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:66:6f:9e:ae:1e:20:6b:41:ba:6e:e4:93:23:b6:02:1f:6d: 50:ab:45:16:c1:47:08:7d:cf:3c:2b:17:4a:42:aa:24:05:e6: 08:22:5b:17:22:c2:0b:eb:64:dc:33:a2:f3:a9:13:56:0c:8a: fa:d4:01:72:8b:aa:ed:03:02:ad:ba:02:89:e9:36:12:5b:77: 18:ce:19:60:4c:59:05:fa:5c:f3:96:c3:06:74:6e:3f:0d:f4: 6d:d4:4a:23:49:67:fc:92:dd:7d:23:d0:70:60:ad:92:6f:75: bd:c1:1f:92:ca:2d:34:f8:f3:cf:28:ec:0f:5a:3e:f1:cc:f3: 91:52:ab:b3:17:97:87:ce:e5:0a:9c:9a:7f:6e:12:ac:5d:c8: c0:41:84:5c:34:36:6b:4e:95:db:db:7c:20:6c:5b:8e:71:d3: e2:22:b0:87:92:50:21:c6:37:76:59:65:79:ff:fc:57:ad:4b: b1:88:cf:92:41:b8:92:27:ab:52:9d:56:52:6f:92:61:86:1d: 83:0d:c9:e0:74:e4:aa:29:19:43:a6:a8:ff:c2:3a:f6:3e:8d: ca:7a:34:ba:5a:38:d1:eb:02:75:79:a5:d6:e4:ae:cf:0d:be: 51:4e:a6:67:e0:54:6b:6b:fe:d6:14:35:4a:a2:7e:e6:9d:7d: b5:11:eb:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+qV8GohlHbOPh+OMYwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2 NGFiNzEwHhcNMjUxMjA1MjIwMDMwWhcNMjUxMjA2MjIwMDMwWjAzMTEwLwYDVQQD Eyg1MmY4M2Q0ZGJiZTA0NWY5OTZlZTRhODgzNzVhMDNmOTlhMzc4NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonIgqlagBJznfgZBgX/+SPf7oouB 0uevjHqUuRJVxIdKF4RkRRv7duqorvb1TBaW/usfTv9caU6T4ZcAotGC1/YWADWi b4t8yhUk6xqSrBDMaKgMxbd0T65wN4a8jvpwbW3SC9F9LDkGwPczqRzmP9aS0RAe 5vWzalJk65pFzCdOl4HzwUNCDVKs33UOSIcdJBzKrHKJIDkYFJbRQ1gUmJjgX8al va0kBKeXU17b0AiFUSYrTv3Skzuqi28v2EOvyBBwlwnzSXfdLMoIa9e83pdh0olv oCRgQkeXAu6SSQImG1T097gZ4OPA0SIRsS5RSdY5L5QkOxfIQwwKFnkV5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFL4PU274EX5lu5KiDdaA/maN4UOMB8GA1UdIwQY MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt NGM4ODgzMzI3YTJhLzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmZvnq4e IGtBum7kkyO2Ah9tUKtFFsFHCH3PPCsXSkKqJAXmCCJbFyLCC+tk3DOi86kTVgyK +tQBcouq7QMCrboCiek2Elt3GM4ZYExZBfpc85bDBnRuPw30bdRKI0ln/JLdfSPQ cGCtkm91vcEfksotNPjzzyjsD1o+8czzkVKrsxeXh87lCpyaf24SrF3IwEGEXDQ2 a06V29t8IGxbjnHT4iKwh5JQIcY3dlllef/8V61LsYjPkkG4kierUp1WUm+SYYYd gw3J4HTkqikZQ6ao/8I69j6Nyno0ulo40esCdXml1uSuzw2+UU6mZ+BUa2v+1hQ1 SqJ+5p19tRHr6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:18 2025 by rpki-client