This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json) Hash identifier: 3H0voSpcR6xVCg5Nv6K7v4HavZf007SfxMfzw/aiINk= Subject key identifier: D0:58:13:A5:AC:38:11:EA:5F:19:00:27:AA:DC:2B:63:96:0C:29:08 Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2 Certificate serial: 019B4A711ECCA882B366AA1CC5C429A2FBA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft Manifest number: 0A6E Signing time: Tue 23 Dec 2025 09:01:25 +0000 Manifest this update: Tue 23 Dec 2025 09:01:25 +0000 Manifest next update: Wed 24 Dec 2025 09:01:25 +0000 Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: 6nJrOR8P2mFbkFA9flMPH2iwTk+K0+43X0Vx/6v7y5E=) 2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:1e:cc:a8:82:b3:66:aa:1c:c5:c4:29:a2:fb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2 Validity Not Before: Dec 23 09:01:25 2025 GMT Not After : Dec 24 09:01:25 2025 GMT Subject: CN=d05813a5ac3811ea5f190027aadc2b63960c2908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:aa:7a:a2:bc:9b:32:f7:1b:59:b2:0f:cd: 58:3d:fb:b3:a7:f5:47:2f:fb:66:ba:62:1c:e7:b9: 66:0a:b6:ba:96:4c:ae:0a:ef:83:a4:b4:03:01:6c: 67:35:34:c3:3b:b4:13:2e:94:a8:3d:98:c0:e3:74: a6:38:4c:69:d6:95:63:b1:fc:10:0d:75:07:37:68: 88:51:a9:d4:aa:60:b3:24:c5:19:d9:02:ef:2f:bc: bc:3a:f4:9d:72:12:5a:0d:6b:db:15:7e:02:4a:d9: 85:4f:0d:60:36:ac:61:bc:ac:81:3a:65:da:7f:5d: f2:8f:30:61:6d:39:03:db:01:c2:ec:91:db:0e:d7: 30:d4:5e:8a:77:fd:79:a9:a0:aa:58:df:c9:a5:48: 4c:b2:15:0d:75:1f:91:19:7e:55:38:3c:62:03:c9: ff:96:ec:d9:1a:22:d7:17:eb:67:87:92:45:28:15: de:00:19:f4:2c:2e:14:58:16:cb:b9:cc:af:8f:34: e5:fc:5e:68:b2:29:19:ac:64:f7:9c:82:9f:79:80: 3a:25:95:d1:ca:49:10:ce:40:40:9a:43:52:e7:61: 96:28:e3:48:de:8a:d0:13:1c:f0:81:3d:ac:b3:cc: cb:19:d3:29:ad:8c:da:dc:31:31:46:52:35:ee:8d: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:58:13:A5:AC:38:11:EA:5F:19:00:27:AA:DC:2B:63:96:0C:29:08 X509v3 Authority Key Identifier: keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ff:b0:3a:f3:bc:94:e9:f6:b1:8e:f1:33:55:ac:c8:9f:f0: da:d9:9e:83:94:90:ba:4f:dd:53:70:56:47:fd:42:53:6d:a7: 13:63:d6:20:3f:4d:75:6b:ef:86:ac:79:38:02:9c:2c:87:00: 3d:4b:60:99:52:31:91:65:c5:f0:54:86:1c:93:81:39:a5:a7: e9:69:6f:ad:32:f2:bb:1a:dc:9a:d0:e2:01:3c:a0:33:bc:66: 4e:9a:69:33:87:4e:6c:74:a2:41:b5:a6:e0:10:6c:5d:de:a5: 8c:ed:e6:70:83:7f:2b:c2:b6:08:36:9a:55:2a:2c:11:64:74: ee:75:f9:ba:69:bd:21:00:7e:13:bf:58:34:89:d0:8b:1b:47: da:af:6b:af:18:a8:42:23:34:25:51:06:6d:32:11:87:66:cd: 65:f5:84:a2:30:18:bf:52:b2:18:9f:ab:47:38:16:d3:5c:d5: 0d:9d:b5:3b:b2:4d:e4:f1:e2:85:df:e0:6c:72:d9:76:a3:89: a6:15:86:32:fa:af:91:51:71:f7:1d:da:75:f4:67:ce:99:2d: 08:e9:2d:c2:3b:f5:00:81:f7:fe:48:f4:82:11:6d:4a:ba:1f: a3:65:42:ec:a8:7e:b5:17:60:bc:19:21:0a:17:ea:34:d4:08: 55:90:14:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcR7MqIKzZqocxcQpovuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2 NGE2ZjIwHhcNMjUxMjIzMDkwMTI1WhcNMjUxMjI0MDkwMTI1WjAzMTEwLwYDVQQD EyhkMDU4MTNhNWFjMzgxMWVhNWYxOTAwMjdhYWRjMmI2Mzk2MGMyOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve2qeqK8mzL3G1myD81YPfuzp/VH L/tmumIc57lmCra6lkyuCu+DpLQDAWxnNTTDO7QTLpSoPZjA43SmOExp1pVjsfwQ DXUHN2iIUanUqmCzJMUZ2QLvL7y8OvSdchJaDWvbFX4CStmFTw1gNqxhvKyBOmXa f13yjzBhbTkD2wHC7JHbDtcw1F6Kd/15qaCqWN/JpUhMshUNdR+RGX5VODxiA8n/ luzZGiLXF+tnh5JFKBXeABn0LC4UWBbLucyvjzTl/F5osikZrGT3nIKfeYA6JZXR ykkQzkBAmkNS52GWKONI3orQExzwgT2ss8zLGdMprYza3DExRlI17o34/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBYE6WsOBHqXxkAJ6rcK2OWDCkIMB8GA1UdIwQY MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4 LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef+wOvO8 lOn2sY7xM1WsyJ/w2tmeg5SQuk/dU3BWR/1CU22nE2PWID9NdWvvhqx5OAKcLIcA PUtgmVIxkWXF8FSGHJOBOaWn6WlvrTLyuxrcmtDiATygM7xmTpppM4dObHSiQbWm 4BBsXd6ljO3mcIN/K8K2CDaaVSosEWR07nX5umm9IQB+E79YNInQixtH2q9rrxio QiM0JVEGbTIRh2bNZfWEojAYv1KyGJ+rRzgW01zVDZ21O7JN5PHihd/gbHLZdqOJ phWGMvqvkVFx9x3adfRnzpktCOktwjv1AIH3/kj0ghFtSrofo2VC7Kh+tRdgvBkh ChfqNNQIVZAUog== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:29 2025 by rpki-client