This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json) Hash identifier: IUrWyEGj1Ow2ndRXnZu1DIBTrqe07Tf7WHDHy+rzeKI= Subject key identifier: EB:B3:1F:84:62:0F:78:F5:76:59:82:93:50:9C:5D:82:58:37:D4:AD Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8 Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8 Certificate serial: 019B3AFDB60F6A58955464D6C753E5FF4A1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 09:01:04 +0000 Manifest this update: Sat 20 Dec 2025 09:01:04 +0000 Manifest next update: Sun 21 Dec 2025 09:01:04 +0000 Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: lRYQ4r8lhOhgEKgikIDAjSKN+nmOJ8g7MlOyy7i5wXE=) 2: h-sMApBMhDHgCGWpW-gple58v6Y.roa (hash: fbZWIQuOefiBmYf/a9pDVe0/h4tBsG3+EM0yhcaJGFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b6:0f:6a:58:95:54:64:d6:c7:53:e5:ff:4a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8 Validity Not Before: Dec 20 09:01:04 2025 GMT Not After : Dec 21 09:01:04 2025 GMT Subject: CN=ebb31f84620f78f576598293509c5d825837d4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:a6:ac:61:9d:6c:dc:87:be:f7:e9:28:b2: 7c:2d:74:eb:4e:1f:b7:68:98:77:f1:5d:e1:11:62: 76:06:64:28:68:17:da:fb:bc:f2:36:ab:e3:61:3d: 56:58:1b:3e:e5:ed:d0:de:7a:a2:f0:e6:89:6a:2b: 39:8b:40:f8:f9:c8:8f:75:53:47:dc:a7:6f:cf:d0: 6a:23:99:30:44:59:66:93:5b:fd:c6:30:f4:74:52: ee:9f:cc:65:12:9c:f0:45:6c:71:4b:93:2d:6f:5d: 18:88:20:31:71:0c:3e:04:e6:63:bb:3a:ee:66:32: 32:e7:e4:18:0b:fe:7f:b6:5a:d0:b6:25:96:87:9d: 37:1f:26:d3:c3:e6:4a:28:d0:79:5b:30:be:26:58: dc:ff:0c:c9:4a:c5:81:25:7e:ad:3b:2d:9a:06:ad: 56:83:6b:11:f9:d4:4b:cf:7e:f2:78:78:0e:21:14: 78:ed:1f:5b:8e:40:32:d5:eb:f7:38:88:ab:08:86: c4:38:2c:d3:0d:8a:1f:ac:71:68:c3:16:cb:10:27: 0a:f6:57:a4:32:2e:37:44:dc:d3:8b:d8:46:61:3f: 43:26:9b:b7:86:68:1f:7e:3d:22:6b:72:f2:37:d3: 9f:d6:c5:32:08:fd:17:87:6f:e9:df:d3:75:d6:ff: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B3:1F:84:62:0F:78:F5:76:59:82:93:50:9C:5D:82:58:37:D4:AD X509v3 Authority Key Identifier: keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:d0:a2:6a:1f:ee:2a:85:66:d9:68:c2:43:ec:33:d5:e6: 4d:37:af:e4:2a:4b:af:f8:74:69:33:c7:0a:0a:bc:22:0e:74: 84:6a:41:6e:87:f5:27:cc:53:32:80:0b:a6:13:36:3f:b2:d7: d6:13:80:50:8d:ea:1c:80:fc:e6:29:ff:b9:db:ca:a2:3c:78: d9:ee:3e:fc:7e:5f:b3:3d:bd:50:a8:04:03:84:d6:67:b0:e2: 8a:63:b7:60:0e:b4:49:dd:b9:7e:81:df:7c:43:64:a2:ff:d2: e6:d3:af:13:b2:10:d1:5d:ce:3e:24:88:06:45:14:dd:b7:4e: 80:44:3d:84:58:4c:29:8a:f1:3f:de:c9:e3:45:69:41:6f:2a: b2:1a:92:82:0a:77:c7:60:40:73:3b:eb:f7:f1:a4:cf:c3:dc: ea:c8:92:73:fe:95:d3:ea:2f:06:56:81:d5:14:19:8f:5f:5b: 4a:d2:de:b9:ef:36:54:72:df:d1:72:26:3a:68:e2:96:ff:d2: 74:5f:5f:2f:1c:86:30:23:2a:6c:36:10:7d:54:94:4a:b5:d0: f6:69:8b:48:85:9b:2a:14:60:a3:b1:77:af:26:fc:be:74:52: 41:a3:3f:7c:ce:88:1c:31:f1:46:38:5c:f4:0d:94:d5:c1:0f: ff:b8:8c:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bYPaliVVGTWx1Pl/0ocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4 Njk1ZDgwHhcNMjUxMjIwMDkwMTA0WhcNMjUxMjIxMDkwMTA0WjAzMTEwLwYDVQQD EyhlYmIzMWY4NDYyMGY3OGY1NzY1OTgyOTM1MDljNWQ4MjU4MzdkNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOmrGGdbNyHvvfpKLJ8LXTrTh+3 aJh38V3hEWJ2BmQoaBfa+7zyNqvjYT1WWBs+5e3Q3nqi8OaJais5i0D4+ciPdVNH 3Kdvz9BqI5kwRFlmk1v9xjD0dFLun8xlEpzwRWxxS5Mtb10YiCAxcQw+BOZjuzru ZjIy5+QYC/5/tlrQtiWWh503HybTw+ZKKNB5WzC+Jljc/wzJSsWBJX6tOy2aBq1W g2sR+dRLz37yeHgOIRR47R9bjkAy1ev3OIirCIbEOCzTDYofrHFowxbLECcK9lek Mi43RNzTi9hGYT9DJpu3hmgffj0ia3LyN9Of1sUyCP0Xh2/p39N11v+FYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuzH4RiD3j1dlmCk1CcXYJYN9StMB8GA1UdIwQY MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5 LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOTQomof 7iqFZtlowkPsM9XmTTev5CpLr/h0aTPHCgq8Ig50hGpBbof1J8xTMoALphM2P7LX 1hOAUI3qHID85in/udvKojx42e4+/H5fsz29UKgEA4TWZ7DiimO3YA60Sd25foHf fENkov/S5tOvE7IQ0V3OPiSIBkUU3bdOgEQ9hFhMKYrxP97J40VpQW8qshqSggp3 x2BAczvr9/Gkz8Pc6siSc/6V0+ovBlaB1RQZj19bStLeue82VHLf0XImOmjilv/S dF9fLxyGMCMqbDYQfVSUSrXQ9mmLSIWbKhRgo7F3ryb8vnRSQaM/fM6IHDHxRjhc 9A2U1cEP/7iM6w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:18:58 2025 by rpki-client