This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json) Hash identifier: bc6vImmM/C3vtwXgdC+x1qrL7GydjWOaVlpd+IYDbIM= Subject key identifier: 59:98:98:6D:A7:D0:25:F7:97:5C:AF:3E:27:A0:68:72:9C:62:F2:89 Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9 Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9 Certificate serial: 019B3C0FDB282579DCD3FB3AAAB71386A6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=) 2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: PDXNHqJtISIj3nzAinTdLE4iBtv/hon+QGeYXRxEYj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:db:28:25:79:dc:d3:fb:3a:aa:b7:13:86:a6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9 Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=5998986da7d025f7975caf3e27a068729c62f289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:3b:15:78:bd:5e:94:94:2a:fc:ce:bc:55: b5:b8:4a:e4:75:7b:a1:c2:d7:ac:21:bd:07:6f:b2: 02:32:2d:db:13:50:a4:ea:d1:4f:67:e4:f6:97:b5: f8:e6:2a:3c:92:fe:c3:3a:8d:44:fd:ad:b2:74:9f: 95:7f:e1:47:57:68:3f:91:74:d2:c3:b0:10:20:33: 0b:5e:ab:fd:5f:5f:6d:78:9c:44:88:e9:64:8f:01: 2d:e6:dc:ff:08:30:23:45:69:cf:67:75:ee:c8:91: 4a:88:2f:99:d3:52:8d:8f:10:a7:f2:26:a5:ea:a0: b6:45:b4:bf:da:77:6a:a4:9e:49:4b:c9:fb:28:f3: 74:2a:e7:c5:1c:d2:fd:4a:d9:6e:e9:90:47:99:f5: 79:d2:24:dd:bc:77:81:6b:0c:0b:08:f5:8e:10:2f: e0:62:a0:0c:82:b2:39:2a:3d:cc:f4:fe:84:28:78: 0d:5b:e9:c4:29:3c:30:19:65:10:e9:90:0e:c1:57: 66:7a:84:8d:12:53:f8:76:c8:20:20:4a:d5:3d:55: 26:cb:01:d8:53:1b:43:ec:72:63:ba:c5:36:2b:ac: 8e:6c:09:fd:7e:aa:6b:9e:39:54:98:c8:76:22:dc: 1c:da:73:10:b9:ec:ca:57:f4:0e:eb:f4:a2:e2:de: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:98:98:6D:A7:D0:25:F7:97:5C:AF:3E:27:A0:68:72:9C:62:F2:89 X509v3 Authority Key Identifier: keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:b2:92:29:b9:91:4d:20:35:80:21:71:b1:44:86:1d:40: 41:77:4b:ce:ad:31:27:91:e9:59:3f:42:a9:b2:18:31:43:69: f3:7c:3d:28:f8:61:a5:03:d3:97:72:fd:dd:f3:bf:66:76:50: 21:9e:d5:46:c0:0e:5b:0e:82:8c:54:ac:93:4f:ec:4b:b0:a1: 4c:2d:25:c2:a2:3d:2d:94:3a:bf:0e:85:95:3a:4d:4a:ce:30: 77:e5:4c:a7:0f:96:75:b2:f0:c3:0b:3e:2f:09:bc:f7:eb:33: 1b:e6:3b:41:d6:55:1d:c8:c5:5b:e6:2f:5e:5a:ba:ec:14:b6: 42:b4:f9:3a:7e:d5:43:a0:d9:d6:aa:30:d9:71:e0:05:75:e2: ce:a0:c5:cc:fe:61:a6:b8:bd:43:9f:fe:4f:e3:fa:5b:2a:4a: d5:19:3c:1d:1b:bd:a5:6f:2b:6a:19:1a:81:7f:72:a4:13:77: 86:6c:31:e1:18:f3:97:e1:80:a8:90:70:b0:20:3a:a9:52:e5: d1:f4:30:35:33:a7:6e:63:f3:1f:50:42:6e:a2:68:0d:73:a2: aa:0c:d8:8b:dc:17:a2:0b:95:30:0f:1b:e2:9c:9c:83:7b:14: 13:1f:28:62:d8:09:ba:30:b5:08:8a:37:e3:ac:de:c3:62:36: 58:f2:9b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9soJXnc0/s6qrcThqbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz N2UyZDkwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD Eyg1OTk4OTg2ZGE3ZDAyNWY3OTc1Y2FmM2UyN2EwNjg3MjljNjJmMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK07FXi9XpSUKvzOvFW1uErkdXuh wtesIb0Hb7ICMi3bE1Ck6tFPZ+T2l7X45io8kv7DOo1E/a2ydJ+Vf+FHV2g/kXTS w7AQIDMLXqv9X19teJxEiOlkjwEt5tz/CDAjRWnPZ3XuyJFKiC+Z01KNjxCn8ial 6qC2RbS/2ndqpJ5JS8n7KPN0KufFHNL9Stlu6ZBHmfV50iTdvHeBawwLCPWOEC/g YqAMgrI5Kj3M9P6EKHgNW+nEKTwwGWUQ6ZAOwVdmeoSNElP4dsggIErVPVUmywHY UxtD7HJjusU2K6yObAn9fqprnjlUmMh2Itwc2nMQuezKV/QO6/Si4t7ooQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmYmG2n0CX3l1yvPiegaHKcYvKJMB8GA1UdIwQY MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYeykim5 kU0gNYAhcbFEhh1AQXdLzq0xJ5HpWT9CqbIYMUNp83w9KPhhpQPTl3L93fO/ZnZQ IZ7VRsAOWw6CjFSsk0/sS7ChTC0lwqI9LZQ6vw6FlTpNSs4wd+VMpw+WdbLwwws+ Lwm89+szG+Y7QdZVHcjFW+YvXlq67BS2QrT5On7VQ6DZ1qow2XHgBXXizqDFzP5h pri9Q5/+T+P6WypK1Rk8HRu9pW8rahkagX9ypBN3hmwx4Rjzl+GAqJBwsCA6qVLl 0fQwNTOnbmPzH1BCbqJoDXOiqgzYi9wXoguVMA8b4pycg3sUEx8oYtgJujC1CIo3 46zew2I2WPKbrA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:57 2025 by rpki-client