This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: aiywIbaHd2ssZZKHgiW2RynaLS7gn9FcUpoBcp4p8tc= Subject key identifier: 06:D8:59:41:5D:89:A6:AD:3F:FF:49:05:C4:EB:72:C1:8A:AE:E4:A4 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B397D42D52CAD7B6DC06A3C8ED97CAC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 02:01:08 +0000 Manifest this update: Sat 20 Dec 2025 02:01:08 +0000 Manifest next update: Sun 21 Dec 2025 02:01:08 +0000 Files and hashes: 1: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (hash: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: wB4hd0NeWeV3ynPjfz/bx99sBTbkBoXc35xk8MfXl/M=) 3: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (hash: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A=) 4: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (hash: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:42:d5:2c:ad:7b:6d:c0:6a:3c:8e:d9:7c:ac:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 20 02:01:08 2025 GMT Not After : Dec 21 02:01:08 2025 GMT Subject: CN=06d859415d89a6ad3fff4905c4eb72c18aaee4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:e6:64:a0:ae:8e:a3:6a:a6:cd:3b:24:2d: f4:aa:5d:e9:59:57:42:fa:fc:3a:a0:84:ca:d7:5b: f8:27:fe:f3:3d:44:a8:ea:c1:22:e6:48:d6:46:16: af:49:d8:5d:da:3f:05:e1:4d:eb:21:f1:28:c7:5a: 75:50:16:29:15:61:06:8d:25:8e:92:43:bf:6f:0a: 0f:e5:c7:4a:8d:aa:2e:84:6a:4c:24:ae:25:cc:48: 9e:e8:d9:a0:14:dc:25:be:3f:56:d8:a6:34:61:ae: 8a:23:49:11:a9:e5:e3:81:5a:26:c7:dc:d3:fc:a2: 50:fe:bf:94:75:af:65:59:b4:b5:94:90:e4:c9:12: b8:de:4c:5d:15:99:8e:e4:c1:1d:53:53:31:c0:51: ac:3b:84:27:15:9f:ea:1a:e1:03:e7:50:b5:09:e8: f8:9c:a5:86:92:78:00:48:02:e1:a8:21:2e:d6:c8: a1:ac:84:69:02:cb:ac:35:70:ed:45:b0:fc:16:6f: 64:75:1c:8e:29:c1:40:1e:5f:ca:89:b0:3f:9b:83: ed:de:56:bf:ae:3b:a4:7b:8e:92:31:0c:d7:b5:6c: 54:bb:db:e1:8f:93:92:5f:c5:c0:24:35:06:4c:e3: 1e:ce:81:20:ea:e5:88:42:07:8b:70:f9:7f:76:f7: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D8:59:41:5D:89:A6:AD:3F:FF:49:05:C4:EB:72:C1:8A:AE:E4:A4 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a5:19:d5:d9:18:9c:f2:ac:df:ee:f9:c8:f9:78:c7:fe:3f: 18:55:0f:32:67:1a:50:67:21:b0:76:cc:4c:5b:50:98:9e:27: ea:83:9c:24:d9:74:73:50:fc:3d:f1:0b:09:92:fb:74:9b:af: 40:15:25:7b:8f:de:44:ac:f9:b9:11:f3:96:61:cb:d4:fe:87: e6:86:20:c8:37:0c:9e:98:8a:19:78:9e:89:ef:32:e3:57:96: ff:a4:6c:e3:50:22:dc:bb:f0:bb:7f:c1:cf:04:2e:3b:70:eb: 50:bf:6d:94:37:a8:f7:fa:e9:2d:5a:60:7e:e3:cc:47:68:11: 55:9f:bb:59:8c:df:80:75:d8:54:ba:17:7a:45:0f:6f:1b:d0: 3b:98:8a:41:72:e4:73:de:fb:df:18:c3:13:b0:77:e5:4b:55: 6f:56:60:86:08:81:dd:d3:40:2e:93:b9:85:db:f9:f2:d3:55: e7:59:ec:05:00:82:5c:06:8f:12:45:2b:b3:06:12:46:86:c6: 7a:37:4b:d9:04:9e:92:56:ab:25:f6:b9:f1:19:ae:93:8b:d1: e7:db:cf:03:77:60:8a:5a:a8:50:ae:1a:b1:53:1c:10:80:a0: 6a:19:54:1d:58:b5:8c:d1:ff:93:c8:9d:23:eb:34:c5:12:aa: 07:80:fe:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fULVLK17bcBqPI7ZfKyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjIwMDIwMTA4WhcNMjUxMjIxMDIwMTA4WjAzMTEwLwYDVQQD EygwNmQ4NTk0MTVkODlhNmFkM2ZmZjQ5MDVjNGViNzJjMThhYWVlNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK/mZKCujqNqps07JC30ql3pWVdC +vw6oITK11v4J/7zPUSo6sEi5kjWRhavSdhd2j8F4U3rIfEox1p1UBYpFWEGjSWO kkO/bwoP5cdKjaouhGpMJK4lzEie6NmgFNwlvj9W2KY0Ya6KI0kRqeXjgVomx9zT /KJQ/r+Uda9lWbS1lJDkyRK43kxdFZmO5MEdU1MxwFGsO4QnFZ/qGuED51C1Cej4 nKWGkngASALhqCEu1sihrIRpAsusNXDtRbD8Fm9kdRyOKcFAHl/KibA/m4Pt3la/ rjuke46SMQzXtWxUu9vhj5OSX8XAJDUGTOMezoEg6uWIQgeLcPl/dvfGCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbYWUFdiaatP/9JBcTrcsGKruSkMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6UZ1dkY nPKs3+75yPl4x/4/GFUPMmcaUGchsHbMTFtQmJ4n6oOcJNl0c1D8PfELCZL7dJuv QBUle4/eRKz5uRHzlmHL1P6H5oYgyDcMnpiKGXieie8y41eW/6Rs41Ai3Lvwu3/B zwQuO3DrUL9tlDeo9/rpLVpgfuPMR2gRVZ+7WYzfgHXYVLoXekUPbxvQO5iKQXLk c9773xjDE7B35UtVb1ZghgiB3dNALpO5hdv58tNV51nsBQCCXAaPEkUrswYSRobG ejdL2QSeklarJfa58Rmuk4vR59vPA3dgilqoUK4asVMcEICgahlUHVi1jNH/k8id I+s0xRKqB4D+0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:11:32 2025 by rpki-client