This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft File: BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json) Hash identifier: YiK/8bQZGVgE0a0nQS6ENnk3tdKVKG95QBY/jMU0nnI= Subject key identifier: 8F:4B:76:A5:DD:F1:FE:1C:72:9D:10:88:DE:AA:86:C4:C8:18:29:A2 Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 Certificate issuer: /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Certificate serial: 019B631F5B33567D68E7A74432CAAA8A8890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft Manifest number: 0860 Signing time: Sun 28 Dec 2025 04:02:37 +0000 Manifest this update: Sun 28 Dec 2025 04:02:37 +0000 Manifest next update: Mon 29 Dec 2025 04:02:37 +0000 Files and hashes: 1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: vExgPA4YkpX+xSv0hs1c5mkw4rKVM35Y2kJdk28lCT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:5b:33:56:7d:68:e7:a7:44:32:ca:aa:8a:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Validity Not Before: Dec 28 04:02:37 2025 GMT Not After : Dec 29 04:02:37 2025 GMT Subject: CN=8f4b76a5ddf1fe1c729d1088deaa86c4c81829a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:98:9f:09:ce:f7:ac:ec:ba:1e:80:48:8c: d5:ce:04:2e:9e:e3:82:68:56:26:d4:f2:76:45:91: 2f:79:13:a8:66:80:05:00:f6:c2:60:6e:d6:05:f4: 3a:11:9d:b9:f3:2a:30:bb:fa:ba:fc:bb:cf:ad:73: b5:9a:fc:90:42:67:61:57:6d:76:90:69:dc:db:1b: 1c:22:9a:1a:d9:ca:77:bc:5e:1b:f3:90:b3:30:50: 9c:9a:df:8e:e4:0c:28:ae:62:c0:2e:ca:f1:da:33: f5:1a:a2:cf:3b:b0:12:82:8c:c2:d4:78:d2:e3:fa: 13:cf:2b:43:2b:ce:02:94:41:d8:78:91:60:fe:71: 71:b0:94:59:71:04:f4:db:39:40:8a:8c:f9:70:92: 06:3c:5f:fb:5e:8e:b8:68:98:87:aa:c1:b8:38:f1: 3f:ec:70:3f:51:d4:b2:1a:b8:e9:ea:50:72:cc:e6: 51:3f:3e:6d:e5:fc:a4:12:9c:58:db:10:d3:61:06: 88:f8:16:28:58:3b:07:4e:ec:2c:68:9c:c7:70:8e: 9e:f6:6b:b1:0a:5d:0d:1b:66:0c:6c:7c:51:3d:94: d3:32:cd:74:cc:db:e0:08:46:7d:f5:6a:e2:01:51: af:63:3c:6e:6d:f6:18:0f:f2:9c:75:d3:51:a6:f5: a7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:76:A5:DD:F1:FE:1C:72:9D:10:88:DE:AA:86:C4:C8:18:29:A2 X509v3 Authority Key Identifier: keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c3:3c:82:ae:af:fb:90:86:94:a3:c6:c4:44:7a:d9:e4:93: 84:d1:2e:82:a3:63:81:49:a2:e7:72:3f:ff:a1:20:b5:d9:b3: 90:e0:1a:d9:be:83:59:75:69:06:1d:40:80:cd:22:66:94:aa: db:6d:5b:e1:75:27:a8:ff:f9:af:50:70:de:4b:e0:0d:13:3e: 00:da:4a:37:b5:cc:0d:60:63:50:10:99:78:b2:09:80:32:1c: fe:6c:ee:ca:23:5d:e1:43:d8:5c:2e:fd:88:10:b2:6c:9c:db: 20:5c:2b:b3:ff:5a:57:db:03:f6:e8:e9:49:4d:60:9b:34:e8: be:83:fc:d6:fe:89:41:45:80:2b:46:4f:f8:19:d5:7b:08:b7: 42:32:54:94:c4:ac:08:e5:f5:36:68:76:26:0c:73:f7:70:ee: 44:3f:d0:1c:54:14:a0:cc:ad:4c:4f:de:40:7a:9e:ff:3f:f9: 25:46:7a:16:a6:6b:60:18:cf:dc:16:9e:85:63:ea:bd:98:e4: bd:e3:aa:c7:70:f8:4e:6e:c9:ee:9e:e8:95:8a:2a:18:33:5b: 08:a4:45:46:fe:be:a6:ae:1d:58:c2:ee:d1:f5:ce:69:07:58: 7e:e8:d9:d8:67:30:85:bb:34:a0:82:e1:a6:80:a2:01:8f:a7: 55:2c:a6:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjH1szVn1o56dEMsqqioiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGRhNWI3ZTJkYmY3Yzc2ZmNjNjZjOTZmZmU2NDhmZWFk NGIwNjAwHhcNMjUxMjI4MDQwMjM3WhcNMjUxMjI5MDQwMjM3WjAzMTEwLwYDVQQD Eyg4ZjRiNzZhNWRkZjFmZTFjNzI5ZDEwODhkZWFhODZjNGM4MTgyOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBaYnwnO96zsuh6ASIzVzgQunuOC aFYm1PJ2RZEveROoZoAFAPbCYG7WBfQ6EZ258yowu/q6/LvPrXO1mvyQQmdhV212 kGnc2xscIpoa2cp3vF4b85CzMFCcmt+O5AwormLALsrx2jP1GqLPO7ASgozC1HjS 4/oTzytDK84ClEHYeJFg/nFxsJRZcQT02zlAioz5cJIGPF/7Xo64aJiHqsG4OPE/ 7HA/UdSyGrjp6lByzOZRPz5t5fykEpxY2xDTYQaI+BYoWDsHTuwsaJzHcI6e9mux Cl0NG2YMbHxRPZTTMs10zNvgCEZ99WriAVGvYzxubfYYD/KcddNRpvWnhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9LdqXd8f4ccp0QiN6qhsTIGCmiMB8GA1UdIwQY MBaAFARNpbfi2/fHb8xmyW/+ZI/q1LBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMt YWNiYzlkNGUwODQzLzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMtYWNiYzlkNGUwODQz LzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcM8gq6v +5CGlKPGxER62eSThNEugqNjgUmi53I//6EgtdmzkOAa2b6DWXVpBh1AgM0iZpSq 221b4XUnqP/5r1Bw3kvgDRM+ANpKN7XMDWBjUBCZeLIJgDIc/mzuyiNd4UPYXC79 iBCybJzbIFwrs/9aV9sD9ujpSU1gmzTovoP81v6JQUWAK0ZP+BnVewi3QjJUlMSs COX1Nmh2Jgxz93DuRD/QHFQUoMytTE/eQHqe/z/5JUZ6FqZrYBjP3BaehWPqvZjk veOqx3D4Tm7J7p7olYoqGDNbCKRFRv6+pq4dWMLu0fXOaQdYfujZ2Gcwhbs0oILh poCiAY+nVSymDg== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:34 2025 by rpki-client