This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json) Hash identifier: tV9xPq5N2p+p5Sizv57ByFko3yUnpkNGgJrAvwXuARc= Subject key identifier: 6E:A1:01:63:1A:6C:87:D2:C6:4C:CC:18:08:46:97:EF:B1:6D:80:6A Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Certificate serial: 019B3F48470A58FDE993891F26606A1A868A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft Manifest number: 037E Signing time: Sun 21 Dec 2025 05:00:59 +0000 Manifest this update: Sun 21 Dec 2025 05:00:59 +0000 Manifest next update: Mon 22 Dec 2025 05:00:59 +0000 Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: MPbOStPNLNMQMtUPvyptTFqsMfPI7VhdaLwwyagL3zA=) 2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:47:0a:58:fd:e9:93:89:1f:26:60:6a:1a:86:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Validity Not Before: Dec 21 05:00:59 2025 GMT Not After : Dec 22 05:00:59 2025 GMT Subject: CN=6ea101631a6c87d2c64ccc18084697efb16d806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:4d:01:17:80:6f:1f:90:f3:94:e8:5a:1b: 8f:8b:41:7a:21:6d:75:3e:f3:1c:c8:d1:85:2c:ab: a3:c4:c4:d5:90:45:9e:e8:99:7f:1e:0d:34:8f:f7: af:db:4c:0b:30:dd:ed:bc:e1:07:1b:fe:c2:fc:4c: 84:31:aa:a5:0d:22:d1:c0:44:f8:0f:85:5a:7c:ef: 6a:ae:df:df:21:19:46:2c:5b:72:9e:1e:56:2e:4c: ad:1c:44:d9:4b:2b:c5:a9:06:c0:dc:70:7f:ba:03: 66:24:e9:c4:d3:9b:b5:1b:06:ff:d4:be:60:91:ec: 64:fa:54:b3:6d:95:00:dc:50:0b:c3:63:42:6e:09: 3c:24:16:3e:b1:a5:6d:a4:2d:96:ed:63:c8:b0:57: e6:31:80:0f:18:a0:9c:56:aa:a2:66:af:57:e7:86: 05:cf:53:70:36:f8:f5:1e:ab:56:56:2d:dd:b6:47: 47:d3:f7:b2:d8:90:08:35:a7:7a:48:60:1b:80:9e: 6a:ed:88:16:22:b8:92:c0:6d:7f:69:00:ba:a5:ad: 23:d8:a0:ef:fc:71:a5:68:4b:df:4f:cb:e1:c5:ed: 0f:57:07:23:db:08:f8:35:9d:63:f5:ab:78:82:78: 55:9e:6f:46:a6:ac:42:16:b3:43:fb:7b:16:b5:13: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A1:01:63:1A:6C:87:D2:C6:4C:CC:18:08:46:97:EF:B1:6D:80:6A X509v3 Authority Key Identifier: keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a7:13:03:3d:bb:24:29:91:92:4f:79:9d:cd:be:f8:c7:56: 46:22:cb:df:0c:18:ad:4b:70:27:63:a2:8d:04:ed:40:d5:f5: ec:ab:80:12:1a:ff:84:b8:7c:e0:66:32:cb:af:db:16:ba:6a: 16:2c:7d:b4:41:33:1c:67:da:6a:8a:b3:38:2b:05:71:4b:0a: c3:19:be:6d:a3:3b:9f:10:56:f6:45:58:89:f6:a7:69:5c:95: 20:aa:39:4e:12:71:e5:35:b6:de:e4:f8:02:1e:c9:cc:9c:0b: 0c:76:72:8d:3c:6c:88:fe:0d:c6:3e:30:fb:4b:19:1a:30:26: 73:33:34:0f:34:19:ed:4d:85:00:2a:03:1e:7d:40:9f:ae:17: 19:50:de:eb:67:ba:1a:4f:38:00:d1:87:d4:ff:63:51:24:33: 3b:73:b7:3b:88:a1:22:38:a5:a1:08:93:5e:08:d2:15:f1:2e: e5:7b:42:9f:76:2c:b4:c5:44:34:ab:87:a1:cd:01:fb:79:2d: ab:ff:ee:23:84:bf:17:2b:5f:31:45:58:e3:f0:ac:48:f5:6b: 93:20:d2:c8:98:88:2a:91:72:da:13:39:6d:75:28:f0:8e:8e: 7b:67:13:47:e3:7b:ed:91:07:c9:55:ae:de:e5:a2:ff:b4:06: ec:e3:e3:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEcKWP3pk4kfJmBqGoaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTc5NTI1OTExOWVlOGE2ZDEwOGU5YjVjYmUwYmI5MGMw OThlY2UwHhcNMjUxMjIxMDUwMDU5WhcNMjUxMjIyMDUwMDU5WjAzMTEwLwYDVQQD Eyg2ZWExMDE2MzFhNmM4N2QyYzY0Y2NjMTgwODQ2OTdlZmIxNmQ4MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00VNAReAbx+Q85ToWhuPi0F6IW11 PvMcyNGFLKujxMTVkEWe6Jl/Hg00j/ev20wLMN3tvOEHG/7C/EyEMaqlDSLRwET4 D4VafO9qrt/fIRlGLFtynh5WLkytHETZSyvFqQbA3HB/ugNmJOnE05u1Gwb/1L5g kexk+lSzbZUA3FALw2NCbgk8JBY+saVtpC2W7WPIsFfmMYAPGKCcVqqiZq9X54YF z1NwNvj1HqtWVi3dtkdH0/ey2JAINad6SGAbgJ5q7YgWIriSwG1/aQC6pa0j2KDv /HGlaEvfT8vhxe0PVwcj2wj4NZ1j9at4gnhVnm9GpqxCFrND+3sWtRPRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6hAWMabIfSxkzMGAhGl++xbYBqMB8GA1UdIwQY MBaAFPwXlSWRGe6KbRCOm1y+C7kMCY7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYt Y2ZhNmEyNTQzMmU5LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYtY2ZhNmEyNTQzMmU5 LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6cTAz27 JCmRkk95nc2++MdWRiLL3wwYrUtwJ2OijQTtQNX17KuAEhr/hLh84GYyy6/bFrpq Fix9tEEzHGfaaoqzOCsFcUsKwxm+baM7nxBW9kVYifanaVyVIKo5ThJx5TW23uT4 Ah7JzJwLDHZyjTxsiP4Nxj4w+0sZGjAmczM0DzQZ7U2FACoDHn1An64XGVDe62e6 Gk84ANGH1P9jUSQzO3O3O4ihIjiloQiTXgjSFfEu5XtCn3YstMVENKuHoc0B+3kt q//uI4S/FytfMUVY4/CsSPVrkyDSyJiIKpFy2hM5bXUo8I6Oe2cTR+N77ZEHyVWu 3uWi/7QG7OPjrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:38:58 2025 by rpki-client