This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json) Hash identifier: dEAf+EIxZ2KVBOfMR6qB5qTwEC1Jc6PfAaFW6Bs21Us= Subject key identifier: 21:10:97:6A:A1:BB:90:DA:1F:72:DC:50:66:80:8A:ED:DF:72:AC:F1 Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Certificate serial: 019B34C46D769F8E2086C15D634D231B10F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:00:46 +0000 Manifest this update: Fri 19 Dec 2025 04:00:46 +0000 Manifest next update: Sat 20 Dec 2025 04:00:46 +0000 Files and hashes: 1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=) 2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: et6uy1X1Z38+uYO2QJpSwZpAcnuu3qbJ1KXdqLTiAp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:6d:76:9f:8e:20:86:c1:5d:63:4d:23:1b:10:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Validity Not Before: Dec 19 04:00:46 2025 GMT Not After : Dec 20 04:00:46 2025 GMT Subject: CN=2110976aa1bb90da1f72dc5066808aeddf72acf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:a0:72:a6:65:83:46:f5:82:cf:0b:3c:2b: b4:98:3a:7a:80:a9:d5:e3:cc:53:1b:27:14:c7:a2: 49:34:3c:fc:63:1b:00:9d:68:13:ab:05:68:2b:b8: cd:fa:e8:9d:dc:e2:a0:e2:19:5b:98:fa:60:d2:73: fa:f8:e2:94:59:e2:bf:21:28:1a:a3:20:e2:12:19: d5:2e:6a:50:c3:7a:08:c3:18:6e:b1:5f:1a:13:11: 1f:ac:b7:37:91:e4:ea:19:e4:dd:0e:a5:a5:a2:f8: f4:77:ef:bc:b5:31:1d:fc:17:a0:d6:d6:80:01:4e: 7e:17:4c:3f:7d:26:57:d6:21:d7:53:f1:ea:a0:a5: 5b:de:2a:cb:21:c7:37:84:18:08:32:8b:4d:3d:99: c3:84:90:21:04:a5:c8:f0:9f:e1:e6:94:08:8c:55: 4d:d9:f0:d5:3a:87:52:0b:1d:fd:30:2d:1b:17:35: b1:a9:63:ca:59:36:a4:da:24:bf:d7:98:c6:7a:4a: de:ff:e0:5e:f8:42:eb:e1:c4:90:65:0d:58:9b:ba: 05:e7:3a:78:47:1b:aa:82:a3:26:17:f8:94:95:2a: 1a:c0:ce:11:20:ab:49:fd:93:55:77:8e:60:94:64: 3d:64:54:96:87:12:2e:17:3e:7d:66:55:2d:d0:18: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:97:6A:A1:BB:90:DA:1F:72:DC:50:66:80:8A:ED:DF:72:AC:F1 X509v3 Authority Key Identifier: keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:51:b7:cf:d5:7c:97:2b:a1:76:f2:88:5f:51:c5:08:bb:65: 1e:45:4a:32:dc:a5:12:56:41:67:de:df:61:4b:8c:ed:66:04: f9:10:30:d9:c6:df:2e:97:eb:dc:12:bf:b6:da:7b:89:8e:8a: 20:07:54:0e:74:06:1d:98:52:ad:9d:33:a3:d9:83:ec:63:1c: ae:b8:ae:b5:ed:f4:e7:ce:08:fa:e2:20:be:b8:fa:4c:91:c4: f4:e5:df:cc:49:44:58:a6:31:93:80:20:4d:87:75:06:a7:2b: 15:e5:e1:e4:1f:b9:55:4b:60:9a:96:74:f1:1f:cf:c4:0f:ff: f8:43:1e:1a:bb:08:f3:50:49:dd:73:46:44:c0:4e:e0:02:0a: 8a:5d:18:6a:71:e3:bc:ae:56:0a:b0:4b:b5:50:ac:bf:4c:f4: ed:bf:fa:18:87:5a:bc:cf:ed:5f:46:73:d3:c6:87:57:07:d7: 83:50:fb:67:22:71:49:9d:14:ee:22:17:e7:42:1b:a8:21:c7: 59:45:90:f0:1a:65:e3:81:b0:b8:58:63:af:43:a0:71:c5:99: fd:da:90:df:18:60:94:d7:11:e5:65:9f:c4:2d:02:dd:30:12: e6:1f:32:83:22:f4:bd:25:b9:3b:81:14:da:60:5b:2d:8b:ec: 3c:75:1b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xG12n44ghsFdY00jGxD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi NWQ3MmEwHhcNMjUxMjE5MDQwMDQ2WhcNMjUxMjIwMDQwMDQ2WjAzMTEwLwYDVQQD EygyMTEwOTc2YWExYmI5MGRhMWY3MmRjNTA2NjgwOGFlZGRmNzJhY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTagcqZlg0b1gs8LPCu0mDp6gKnV 48xTGycUx6JJNDz8YxsAnWgTqwVoK7jN+uid3OKg4hlbmPpg0nP6+OKUWeK/ISga oyDiEhnVLmpQw3oIwxhusV8aExEfrLc3keTqGeTdDqWlovj0d++8tTEd/Beg1taA AU5+F0w/fSZX1iHXU/HqoKVb3irLIcc3hBgIMotNPZnDhJAhBKXI8J/h5pQIjFVN 2fDVOodSCx39MC0bFzWxqWPKWTak2iS/15jGekre/+Be+ELr4cSQZQ1Ym7oF5zp4 RxuqgqMmF/iUlSoawM4RIKtJ/ZNVd45glGQ9ZFSWhxIuFz59ZlUt0BifdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEQl2qhu5DaH3LcUGaAiu3fcqzxMB8GA1UdIwQY MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt MWE5YWJhYjI0ZGM5LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5 LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVG3z9V8 lyuhdvKIX1HFCLtlHkVKMtylElZBZ97fYUuM7WYE+RAw2cbfLpfr3BK/ttp7iY6K IAdUDnQGHZhSrZ0zo9mD7GMcrriute30584I+uIgvrj6TJHE9OXfzElEWKYxk4Ag TYd1BqcrFeXh5B+5VUtgmpZ08R/PxA//+EMeGrsI81BJ3XNGRMBO4AIKil0YanHj vK5WCrBLtVCsv0z07b/6GIdavM/tX0Zz08aHVwfXg1D7ZyJxSZ0U7iIX50IbqCHH WUWQ8Bpl44GwuFhjr0OgccWZ/dqQ3xhglNcR5WWfxC0C3TAS5h8ygyL0vSW5O4EU 2mBbLYvsPHUbpw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:21:08 2025 by rpki-client