This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: Vqr3kJMH3w45YdMZBMcyCJdhYebtNLr6c9CsTU9oZyQ= Subject key identifier: F5:2A:EE:3D:B7:A3:0B:11:4A:85:2E:FF:B4:8F:7C:53:5D:02:02:7B Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B3F48542B09A86506133EDF05DF81875C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 05:01:03 +0000 Manifest this update: Sun 21 Dec 2025 05:01:03 +0000 Manifest next update: Mon 22 Dec 2025 05:01:03 +0000 Files and hashes: 1: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (hash: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: XLCKwbJBt30MgG3cEX9Yp3SsV2yO05BnHn8FYnIQOMg=) 3: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (hash: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A=) 4: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (hash: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:54:2b:09:a8:65:06:13:3e:df:05:df:81:87:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 21 05:01:03 2025 GMT Not After : Dec 22 05:01:03 2025 GMT Subject: CN=f52aee3db7a30b114a852effb48f7c535d02027b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:29:1b:50:00:ea:5e:1a:ab:59:97:bc:7b: 42:6b:1d:e8:c3:79:95:97:55:46:81:8a:f6:10:5e: 9d:88:46:ca:74:0e:77:fc:55:04:78:e9:3b:f6:53: 76:a1:a5:69:c0:99:05:53:13:44:ad:79:15:90:6d: b1:d8:ce:c8:67:67:2e:d2:ab:c4:3a:2d:84:77:42: 62:ae:2c:37:a5:f7:be:b0:ba:0c:cb:ae:b8:c7:d4: 6e:06:c1:b8:27:12:95:cb:6c:f9:57:be:fb:8e:11: dc:6b:15:4a:f0:1c:b9:6c:5d:90:f3:bc:9c:32:ec: 8d:2a:4d:50:d3:b7:5d:e0:a3:7a:37:90:f1:a3:8b: 26:1d:77:e7:e2:e5:44:f1:46:89:91:7a:4e:68:52: 87:26:7e:0d:af:c5:ee:af:fb:ad:e6:fb:79:c4:a2: 8a:12:2a:4e:cf:8b:ab:79:e6:4d:ef:51:70:cc:20: 47:dd:4d:07:cf:5a:9b:17:25:ea:b3:80:82:eb:79: 00:32:c3:a8:89:dc:3c:bc:14:b8:df:9f:1f:2b:45: 3c:2b:7d:39:b6:c1:45:56:b3:a8:68:7e:51:67:51: c4:9b:ca:c1:25:f3:e7:13:df:b3:14:07:93:cf:4c: ff:73:27:a8:bd:bf:cc:df:80:18:e7:31:95:22:2f: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2A:EE:3D:B7:A3:0B:11:4A:85:2E:FF:B4:8F:7C:53:5D:02:02:7B X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:99:b0:7b:0f:29:c0:c3:9f:95:c6:f8:da:28:57:08:f7:98: 53:94:aa:b5:74:b0:0f:1b:55:e1:78:96:36:24:b5:fc:33:f0: 0a:4b:63:b5:74:b7:cd:e9:fb:9d:df:68:86:8d:91:d3:e8:47: 36:3b:9e:12:b5:df:ce:f3:1b:d0:74:41:d3:76:9d:b6:89:69: 8c:4f:46:01:80:bc:d6:ba:8a:a7:0a:69:90:9e:05:f9:88:2c: 12:3c:34:3c:b7:d1:0b:e4:42:d3:1f:db:a3:12:84:c8:92:42: a5:c2:ac:01:e7:43:ff:76:87:01:89:7e:49:fc:27:b8:52:f1: 8c:3c:ca:5f:98:f6:7e:d1:e8:28:85:2d:ff:db:a9:33:43:0e: 70:aa:8e:83:6a:2b:a0:c8:49:03:fc:ab:0d:e1:41:c1:9d:e4: 9b:9b:05:21:55:8a:02:f9:56:13:fc:a8:20:e4:c5:90:98:db: 13:27:8d:12:54:6f:17:4c:c5:f3:75:2d:77:68:a7:9a:94:b7: d2:40:81:c1:29:b8:f1:6b:c9:14:d6:09:74:15:8c:64:28:cc: c0:c7:9e:94:cb:e6:5c:20:8c:9f:bb:dc:35:40:d0:6e:1e:f7: 0b:72:2b:5e:fe:04:c0:0c:b7:63:1c:78:44:80:2f:c7:29:71: a3:c5:ed:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFQrCahlBhM+3wXfgYdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjIxMDUwMTAzWhcNMjUxMjIyMDUwMTAzWjAzMTEwLwYDVQQD EyhmNTJhZWUzZGI3YTMwYjExNGE4NTJlZmZiNDhmN2M1MzVkMDIwMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMpG1AA6l4aq1mXvHtCax3ow3mV l1VGgYr2EF6diEbKdA53/FUEeOk79lN2oaVpwJkFUxNErXkVkG2x2M7IZ2cu0qvE Oi2Ed0Jiriw3pfe+sLoMy664x9RuBsG4JxKVy2z5V777jhHcaxVK8By5bF2Q87yc MuyNKk1Q07dd4KN6N5Dxo4smHXfn4uVE8UaJkXpOaFKHJn4Nr8Xur/ut5vt5xKKK EipOz4ureeZN71FwzCBH3U0Hz1qbFyXqs4CC63kAMsOoidw8vBS4358fK0U8K305 tsFFVrOoaH5RZ1HEm8rBJfPnE9+zFAeTz0z/cyeovb/M34AY5zGVIi88dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUq7j23owsRSoUu/7SPfFNdAgJ7MB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJmwew8p wMOflcb42ihXCPeYU5SqtXSwDxtV4XiWNiS1/DPwCktjtXS3zen7nd9oho2R0+hH NjueErXfzvMb0HRB03adtolpjE9GAYC81rqKpwppkJ4F+YgsEjw0PLfRC+RC0x/b oxKEyJJCpcKsAedD/3aHAYl+SfwnuFLxjDzKX5j2ftHoKIUt/9upM0MOcKqOg2or oMhJA/yrDeFBwZ3km5sFIVWKAvlWE/yoIOTFkJjbEyeNElRvF0zF83Utd2inmpS3 0kCBwSm48WvJFNYJdBWMZCjMwMeelMvmXCCMn7vcNUDQbh73C3IrXv4EwAy3Yxx4 RIAvxylxo8XtOg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:32 2025 by rpki-client