This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json) Hash identifier: rI14mUcMyXVV/r2Rqr3dYndgom5qga6vV0sntEdoYcY= Subject key identifier: E4:0F:63:D2:BD:12:C5:97:BE:0B:96:1F:47:DB:9D:AA:95:8B:06:51 Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Certificate serial: 019B281B74A11F057C16CAF196A77C257318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft Manifest number: 093D Signing time: Tue 16 Dec 2025 17:00:46 +0000 Manifest this update: Tue 16 Dec 2025 17:00:46 +0000 Manifest next update: Wed 17 Dec 2025 17:00:46 +0000 Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: faaKr3KvX2L3XgndMx7gIWKQXet6M5RzTx446D4Dqcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:74:a1:1f:05:7c:16:ca:f1:96:a7:7c:25:73:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Validity Not Before: Dec 16 17:00:46 2025 GMT Not After : Dec 17 17:00:46 2025 GMT Subject: CN=e40f63d2bd12c597be0b961f47db9daa958b0651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:a3:d6:91:e6:33:3b:d4:0f:e2:a2:c7:58: ef:ad:83:69:52:26:a9:70:13:9e:87:fe:b5:24:1b: 6c:ef:16:c2:c2:cd:61:59:1c:a9:f4:8a:d6:cf:df: b4:05:c1:4e:e7:4e:c1:23:12:fd:a8:80:5c:92:11: 67:67:8d:18:bc:61:6a:fe:6d:76:f4:33:cb:06:dc: ff:8e:b2:86:7d:25:c2:67:8c:9a:76:9d:d2:0d:e7: 11:5e:ee:f3:8f:11:dc:94:e9:07:11:ab:91:5e:ae: f5:e2:9c:c0:05:1f:d1:7e:8f:4d:d2:7a:c9:a5:9d: 32:4a:24:ce:df:70:ec:80:90:a6:2f:f4:28:c4:82: d1:bf:5e:ca:20:f6:2a:e8:2d:5a:8a:25:d4:54:76: 11:5b:64:fb:d2:0a:68:a0:c2:34:96:a0:8e:b1:f1: d9:c2:14:36:cc:9c:4a:65:3a:f9:14:02:cb:04:48: 78:5c:23:3c:0a:7b:89:2d:ae:8e:a1:80:8c:71:2d: 74:1a:0d:8f:b3:3e:b9:77:b7:ac:9a:36:e7:56:f2: e9:96:a6:4e:f3:33:9c:f1:91:19:e1:7c:34:d7:f0: e3:a6:55:6b:a9:5f:c6:bc:1c:7d:80:5a:2f:85:4e: ef:8d:01:44:0c:7e:00:8e:2f:e9:b3:6b:13:67:38: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:63:D2:BD:12:C5:97:BE:0B:96:1F:47:DB:9D:AA:95:8B:06:51 X509v3 Authority Key Identifier: keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:58:8c:70:5f:58:ad:57:b3:13:85:6c:c0:55:c0:a9:f9:3c: 7c:17:48:f4:3b:23:32:ba:1d:1c:7a:ce:de:94:9d:bd:74:43: 68:52:91:78:f5:97:80:90:53:e6:3d:60:65:02:05:f5:4c:90: e6:0a:0f:00:e9:07:c4:12:6e:91:5b:ae:05:7a:b3:70:7e:23: ed:38:94:d9:b2:fe:62:16:d2:17:99:d3:f6:2b:07:f8:cb:12: 61:60:37:6a:97:51:66:4e:27:28:0b:7a:87:ae:77:eb:ef:70: 8f:68:86:bd:72:3d:6e:25:96:26:70:d5:e6:00:0c:3a:6b:9f: 15:87:b2:27:52:d6:74:f0:f2:5f:25:31:03:4a:93:14:5f:40: 38:22:ee:8f:8a:38:90:0d:03:45:b2:ed:22:a3:8a:64:58:a8: 5e:59:68:c9:af:94:d0:f8:26:f1:9b:e9:0c:36:bd:f1:78:a5: db:ac:90:b1:54:9b:bd:c4:54:23:26:f6:d3:e2:b0:60:22:e3: 88:05:8c:54:82:4d:80:af:d6:c1:6f:bc:fc:0f:d2:51:10:36: ae:84:04:28:d6:ff:10:6a:e1:db:cf:08:71:ba:37:a1:5f:e1: 9b:a6:94:e2:0a:79:96:e4:75:d1:0b:6a:e4:f8:0c:d7:7e:a9: 27:37:d7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG3ShHwV8Fsrxlqd8JXMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5 ZjlmNGEwHhcNMjUxMjE2MTcwMDQ2WhcNMjUxMjE3MTcwMDQ2WjAzMTEwLwYDVQQD EyhlNDBmNjNkMmJkMTJjNTk3YmUwYjk2MWY0N2RiOWRhYTk1OGIwNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsguj1pHmMzvUD+Kix1jvrYNpUiap cBOeh/61JBts7xbCws1hWRyp9IrWz9+0BcFO507BIxL9qIBckhFnZ40YvGFq/m12 9DPLBtz/jrKGfSXCZ4yadp3SDecRXu7zjxHclOkHEauRXq714pzABR/Rfo9N0nrJ pZ0ySiTO33DsgJCmL/QoxILRv17KIPYq6C1aiiXUVHYRW2T70gpooMI0lqCOsfHZ whQ2zJxKZTr5FALLBEh4XCM8CnuJLa6OoYCMcS10Gg2Psz65d7esmjbnVvLplqZO 8zOc8ZEZ4Xw01/DjplVrqV/GvBx9gFovhU7vjQFEDH4Aji/ps2sTZzhwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQPY9K9EsWXvguWH0fbnaqViwZRMB8GA1UdIwQY MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1 LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1iMcF9Y rVezE4VswFXAqfk8fBdI9DsjMrodHHrO3pSdvXRDaFKRePWXgJBT5j1gZQIF9UyQ 5goPAOkHxBJukVuuBXqzcH4j7TiU2bL+YhbSF5nT9isH+MsSYWA3apdRZk4nKAt6 h6536+9wj2iGvXI9biWWJnDV5gAMOmufFYeyJ1LWdPDyXyUxA0qTFF9AOCLuj4o4 kA0DRbLtIqOKZFioXlloya+U0Pgm8ZvpDDa98Xil26yQsVSbvcRUIyb20+KwYCLj iAWMVIJNgK/WwW+8/A/SURA2roQEKNb/EGrh288Icbo3oV/hm6aU4gp5luR10Qtq 5PgM136pJzfXqA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:24:14 2025 by rpki-client