This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json) Hash identifier: WivewdJaVZH8pxgtGORD2t61fyGwSYw83SNeekC9b4A= Subject key identifier: FC:F1:FD:A8:99:C4:7E:4A:37:5C:88:80:95:B9:34:5F:A4:9B:75:D6 Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Certificate serial: 019B3F489D9598FEC746ED39F99E0D2C0EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft Manifest number: 0D8A Signing time: Sun 21 Dec 2025 05:01:22 +0000 Manifest this update: Sun 21 Dec 2025 05:01:22 +0000 Manifest next update: Mon 22 Dec 2025 05:01:22 +0000 Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 7phFY1/nb9fYYL545KxjgCrvk6Hue4C9QI71WLwH+Pc=) 2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:9d:95:98:fe:c7:46:ed:39:f9:9e:0d:2c:0e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Validity Not Before: Dec 21 05:01:22 2025 GMT Not After : Dec 22 05:01:22 2025 GMT Subject: CN=fcf1fda899c47e4a375c888095b9345fa49b75d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:c6:36:9e:08:3d:c5:bb:e3:5c:ab:c2:7b: 46:4f:0d:ff:5f:10:3f:ba:d0:1b:ba:23:16:12:c5: 5a:c0:00:69:4c:68:7e:b0:6c:93:65:ea:f7:33:80: 15:1b:64:d2:30:a0:a3:ee:fb:09:98:1b:8d:2c:60: e4:be:34:f5:f3:40:78:8e:1d:eb:9e:ff:47:a3:b9: 97:71:1e:75:a4:88:98:42:9e:d6:be:75:1a:95:12: ec:09:74:85:2e:a5:80:b8:4d:9a:b4:14:39:e4:38: 46:88:58:42:86:78:01:a2:61:d8:e7:8a:2e:3b:ae: 21:45:d6:ae:78:26:f1:84:b3:f8:57:1a:53:83:e7: 93:40:4d:96:c5:81:43:bc:46:4d:93:49:0c:86:ce: 68:71:f2:07:41:dd:b1:fd:99:db:60:5a:80:d9:3e: 35:70:65:ee:9d:91:2b:89:9b:21:05:cf:bc:f1:9a: 56:e3:3c:94:4a:bc:30:0a:05:a6:a7:0a:91:8c:97: 56:fe:03:91:34:3f:ab:f9:8f:36:46:3f:da:7e:2e: 15:6a:ed:2e:80:6c:e4:9c:82:8f:e0:41:ea:a8:0c: 46:91:af:86:29:af:d0:8b:e6:21:03:48:b0:2e:b5: 71:ed:9e:24:50:0a:8a:d8:30:e6:a4:c7:36:f4:26: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F1:FD:A8:99:C4:7E:4A:37:5C:88:80:95:B9:34:5F:A4:9B:75:D6 X509v3 Authority Key Identifier: keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:12:99:2f:e8:4f:ea:94:cd:24:87:29:8c:14:5f:c5:52:75: bc:2f:49:f5:91:ca:35:9b:be:81:7a:77:3b:4e:98:ce:5b:92: 42:02:2e:a2:38:94:35:61:6d:89:a3:bd:b2:eb:5a:9c:66:c3: bc:9d:03:1c:c0:9d:4e:37:90:2f:a6:ba:0e:c2:c3:1d:d2:48: fa:d9:55:dc:69:90:ea:7e:92:68:68:a0:86:fa:d8:c0:28:31: 79:07:6a:e8:3f:a0:23:3d:75:40:f9:cd:11:53:75:26:74:d2: 45:3d:d7:39:a9:ac:ec:34:5a:30:10:8c:d8:d1:fe:22:9c:9e: 86:3f:6d:5b:6c:f8:40:00:96:06:22:70:cb:cd:ed:ec:4e:a9: 10:55:6e:c1:06:b0:0d:b9:df:b4:e9:87:d9:12:66:c2:af:e1: 94:51:9c:18:c0:e4:4b:cc:70:4e:75:1a:d8:16:58:9e:59:4e: 1c:a3:e5:bc:37:e0:2a:58:68:d7:04:27:5e:e5:bd:04:15:d5: 51:e1:35:d7:81:a7:6e:57:28:0d:25:54:a5:ec:2f:66:77:dd: 83:4b:3c:fb:2c:92:26:f6:a9:2a:0c:89:ec:5f:de:82:68:8a: 0e:5d:17:52:77:09:cd:5b:a9:04:ce:02:9f:b6:42:d5:bf:b2: ec:79:0e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJ2VmP7HRu05+Z4NLA7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4 YWMxOWIwHhcNMjUxMjIxMDUwMTIyWhcNMjUxMjIyMDUwMTIyWjAzMTEwLwYDVQQD EyhmY2YxZmRhODk5YzQ3ZTRhMzc1Yzg4ODA5NWI5MzQ1ZmE0OWI3NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsczGNp4IPcW741yrwntGTw3/XxA/ utAbuiMWEsVawABpTGh+sGyTZer3M4AVG2TSMKCj7vsJmBuNLGDkvjT180B4jh3r nv9Ho7mXcR51pIiYQp7WvnUalRLsCXSFLqWAuE2atBQ55DhGiFhChngBomHY54ou O64hRdaueCbxhLP4VxpTg+eTQE2WxYFDvEZNk0kMhs5ocfIHQd2x/ZnbYFqA2T41 cGXunZEriZshBc+88ZpW4zyUSrwwCgWmpwqRjJdW/gORND+r+Y82Rj/afi4Vau0u gGzknIKP4EHqqAxGka+GKa/Qi+YhA0iwLrVx7Z4kUAqK2DDmpMc29Cb7zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzx/aiZxH5KN1yIgJW5NF+km3XWMB8GA1UdIwQY MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0 LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3hKZL+hP 6pTNJIcpjBRfxVJ1vC9J9ZHKNZu+gXp3O06YzluSQgIuojiUNWFtiaO9sutanGbD vJ0DHMCdTjeQL6a6DsLDHdJI+tlV3GmQ6n6SaGighvrYwCgxeQdq6D+gIz11QPnN EVN1JnTSRT3XOams7DRaMBCM2NH+Ipyehj9tW2z4QACWBiJwy83t7E6pEFVuwQaw DbnftOmH2RJmwq/hlFGcGMDkS8xwTnUa2BZYnllOHKPlvDfgKlho1wQnXuW9BBXV UeE114GnblcoDSVUpewvZnfdg0s8+yySJvapKgyJ7F/egmiKDl0XUncJzVupBM4C n7ZC1b+y7HkONg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:43:07 2025 by rpki-client