This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: q+7iOFL1ouW7Nyxf4IKxD8ZjQeWld6PKud0FmwqgcEI= Subject key identifier: EC:97:35:AB:8F:87:45:47:DF:B1:36:9F:51:EF:FE:E2:38:C7:0B:ED Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B3B6BEB8DD39F8CF1B3D767AF1485F9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 11:01:26 +0000 Manifest this update: Sat 20 Dec 2025 11:01:26 +0000 Manifest next update: Sun 21 Dec 2025 11:01:26 +0000 Files and hashes: 1: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (hash: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: Ymsxyrmc6ulFTH4eiUA6Au+QM6hyrmk0/TOas5jwJZU=) 3: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (hash: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A=) 4: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (hash: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:eb:8d:d3:9f:8c:f1:b3:d7:67:af:14:85:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 20 11:01:26 2025 GMT Not After : Dec 21 11:01:26 2025 GMT Subject: CN=ec9735ab8f874547dfb1369f51effee238c70bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:f3:26:2c:68:1c:7e:2d:80:1c:d2:ec:68: 65:0f:4d:0e:7d:45:be:89:c3:91:c7:35:79:8b:d9: fa:78:7b:a6:60:50:3b:01:5b:31:7b:48:10:6f:b3: bb:5e:93:75:af:25:57:2f:e0:38:d5:28:10:00:87: 89:5a:b5:db:ad:e1:b7:a8:b9:f7:3d:79:af:9a:3a: ca:0b:11:31:42:32:70:e8:7f:c7:6e:70:87:96:82: c0:56:f4:61:f3:ad:9a:df:9a:b4:ae:19:39:cd:0a: 16:2f:7c:60:94:a1:4c:fd:e3:d3:5d:27:9a:d8:3b: 06:72:96:6e:73:f4:41:4d:52:25:f5:2a:93:48:a5: 46:1c:26:2e:bd:c7:61:00:0a:a6:53:3a:c8:6f:94: 45:b4:86:55:f3:68:8a:f3:54:68:61:77:5e:fc:a1: f7:9c:4b:5b:39:ea:d1:a0:d3:a7:5e:36:57:dc:7f: 04:72:4b:57:ed:e5:7d:7f:bb:a2:98:2f:57:82:6f: 52:ba:2e:12:7b:f3:22:8d:82:93:70:7e:20:08:ef: ff:dc:dd:27:22:e8:df:43:cc:cf:7c:a1:60:f6:d5: 8f:af:38:d3:b4:83:6f:20:fa:b7:a9:82:67:f3:c1: 6b:85:c6:0b:d9:55:6d:b8:4e:e7:45:0a:20:9d:bb: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:97:35:AB:8F:87:45:47:DF:B1:36:9F:51:EF:FE:E2:38:C7:0B:ED X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:8e:ba:7d:61:52:23:ec:5c:23:9d:7a:0a:56:bc:0e:d5: 8c:59:08:00:4f:88:f0:a5:5a:86:d1:16:96:61:25:7f:c1:be: 83:50:5d:c1:c3:37:b9:26:fc:24:1b:83:25:1a:3e:b7:55:9b: 7f:38:6f:07:29:9f:23:13:b5:00:c0:cf:4e:19:15:18:9e:82: 64:47:38:a9:6b:64:79:2f:79:ea:0a:01:0d:ff:68:22:45:e6: f4:f3:97:12:43:c3:18:24:0d:87:4b:13:35:98:da:56:b0:e5: 05:2f:d1:8e:4a:a1:ee:80:bd:bd:cb:9f:9b:7a:cd:7f:6b:85: c7:8b:ec:ce:96:c3:1d:9c:c7:b3:2c:a9:bb:1d:7b:72:61:a2: 1c:3a:10:3a:79:73:05:15:db:cd:94:88:c4:7a:ff:72:e5:33: 10:df:81:0d:10:14:04:51:75:6a:66:8c:67:01:3f:0e:e2:88: ee:b5:10:30:01:c2:e4:98:6f:7f:c0:69:c4:5b:db:71:5c:78: 48:0c:03:e4:bd:ca:31:65:54:29:e4:0d:d5:34:7f:f3:9c:88: a2:38:9e:c6:99:e4:f6:1b:94:8f:e8:5b:21:b0:df:bc:55:ce: da:d3:e0:a3:4a:e2:8e:72:6b:87:ce:18:82:cb:93:d7:62:9f: 4b:9c:56:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+uN05+M8bPXZ68UhfngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjIwMTEwMTI2WhcNMjUxMjIxMTEwMTI2WjAzMTEwLwYDVQQD EyhlYzk3MzVhYjhmODc0NTQ3ZGZiMTM2OWY1MWVmZmVlMjM4YzcwYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zzJixoHH4tgBzS7GhlD00OfUW+ icORxzV5i9n6eHumYFA7AVsxe0gQb7O7XpN1ryVXL+A41SgQAIeJWrXbreG3qLn3 PXmvmjrKCxExQjJw6H/HbnCHloLAVvRh862a35q0rhk5zQoWL3xglKFM/ePTXSea 2DsGcpZuc/RBTVIl9SqTSKVGHCYuvcdhAAqmUzrIb5RFtIZV82iK81RoYXde/KH3 nEtbOerRoNOnXjZX3H8EcktX7eV9f7uimC9Xgm9Sui4Se/MijYKTcH4gCO//3N0n IujfQ8zPfKFg9tWPrzjTtINvIPq3qYJn88FrhcYL2VVtuE7nRQognbsv/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyXNauPh0VH37E2n1Hv/uI4xwvtMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVeOun1h UiPsXCOdegpWvA7VjFkIAE+I8KVahtEWlmElf8G+g1BdwcM3uSb8JBuDJRo+t1Wb fzhvBymfIxO1AMDPThkVGJ6CZEc4qWtkeS956goBDf9oIkXm9POXEkPDGCQNh0sT NZjaVrDlBS/Rjkqh7oC9vcufm3rNf2uFx4vszpbDHZzHsyypux17cmGiHDoQOnlz BRXbzZSIxHr/cuUzEN+BDRAUBFF1amaMZwE/DuKI7rUQMAHC5Jhvf8BpxFvbcVx4 SAwD5L3KMWVUKeQN1TR/85yIojiexpnk9huUj+hbIbDfvFXO2tPgo0rijnJrh84Y gsuT12KfS5xWPg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:41:34 2025 by rpki-client