This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft File: bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json) Hash identifier: 5uJY4cNMUVz5Z5qnUHpxxdV8Vh+CU/DLgQ0GYUA8Goo= Subject key identifier: A5:45:35:CD:4E:0F:B6:8C:3A:CD:F0:91:16:AB:FC:EF:BE:6D:8C:37 Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Certificate serial: 019B3D90E1D4420FE8E40F582B8888C8F0EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: PkuzLc70cdZNfzBONmq4AlueJ3c.roa (hash: IUupDkJ+pYc5DFM+j/FDYtvyoxCFZGawCLtSOO5xgU0=) 2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: h3mbl4nYGgHhg7DxRGM48P9aXJ1l3l2ZjmtcV2h3+cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e1:d4:42:0f:e8:e4:0f:58:2b:88:88:c8:f0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=a54535cd4e0fb68c3acdf09116abfcefbe6d8c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:8e:8d:eb:51:52:c8:37:c7:22:46:00:03: 32:ad:47:f9:46:93:26:6c:a7:82:eb:88:a7:b7:af: 2a:23:8e:4d:03:b4:2e:4a:ee:89:9d:04:ea:3e:21: 76:0a:3d:fd:a2:73:d7:ec:17:3d:b5:39:55:45:68: 99:b7:18:33:44:7c:19:e3:79:fa:8a:2c:74:2f:e7: 0a:c9:a1:fb:c9:c1:56:82:97:ed:de:b3:bc:0d:14: 4c:09:ae:94:24:58:be:62:ff:40:fb:4c:5f:c7:9f: 5b:dc:dc:77:83:17:64:95:38:0e:b0:0c:ac:31:af: d0:2f:b7:61:38:08:e5:37:19:bd:64:f5:ba:0c:57: 00:ad:60:07:02:c6:12:6b:1c:ab:56:70:3c:c1:29: df:c6:da:fc:15:a9:95:67:25:d2:15:69:92:88:03: 78:b1:c2:45:3c:a1:8e:9e:65:55:a8:b5:85:57:f5: bf:b9:16:a2:3b:42:70:30:1c:ae:54:fd:23:b9:93: 8f:ce:ec:1e:7f:7e:9c:09:2d:36:5d:7e:db:5a:ab: 75:82:22:df:8c:a1:70:b6:30:e6:09:44:cc:04:4f: b6:5f:48:59:b3:9a:6d:b7:8a:84:06:66:e3:b5:38: e8:b5:60:2d:be:a0:46:ac:fc:31:23:20:80:e3:2e: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:35:CD:4E:0F:B6:8C:3A:CD:F0:91:16:AB:FC:EF:BE:6D:8C:37 X509v3 Authority Key Identifier: keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:36:82:2b:42:56:e3:50:3d:71:52:00:c2:6f:94:e5:27: 97:fa:40:4d:4c:3b:a8:94:f5:85:04:09:e9:ce:9d:33:fb:2e: 39:c6:e8:a1:c3:01:98:20:7b:9d:b1:c6:8d:f7:dc:63:b3:ea: 2d:81:de:5c:13:ce:d2:53:15:28:73:09:69:b3:20:ec:70:3f: c5:7d:2c:36:6f:8d:ef:cd:3d:08:4c:19:a2:95:d3:7e:51:ba: 11:57:88:2c:ab:5d:5a:98:4b:cc:79:ed:5a:e2:9b:0e:2a:de: 02:f5:4d:64:7f:4c:ca:e5:67:26:3f:ef:9f:2a:a5:91:2f:ef: f6:b1:13:b1:1d:09:60:cc:dd:d5:aa:2c:ed:3d:8a:55:fa:8c: 5a:60:d3:83:9d:fe:2f:52:a5:7b:1b:40:46:90:a1:61:b0:b5: c7:9a:95:5a:0c:d9:ae:19:a2:39:80:dc:4a:88:df:b8:e8:0f: 67:88:63:8a:d8:6d:6a:1b:be:b4:e0:e2:4d:48:63:a3:a2:c0: 0a:21:5d:0c:16:45:bd:c3:74:8b:1e:3b:4e:cc:0b:d3:ff:58: 4c:c5:3b:73:24:1d:7e:81:52:c7:e8:25:eb:c5:04:cc:aa:da: 20:c2:b6:31:c2:fc:f9:be:ba:6e:07:aa:1c:7b:ac:ff:7c:2e: 1f:2c:b2:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOHUQg/o5A9YK4iIyPDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWJkMTlkYTk4YzI3ZmFiYWI3YjJmMjk0YmNmOWVjNmFm NDQ5MDUwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD EyhhNTQ1MzVjZDRlMGZiNjhjM2FjZGYwOTExNmFiZmNlZmJlNmQ4YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUuOjetRUsg3xyJGAAMyrUf5RpMm bKeC64int68qI45NA7QuSu6JnQTqPiF2Cj39onPX7Bc9tTlVRWiZtxgzRHwZ43n6 iix0L+cKyaH7ycFWgpft3rO8DRRMCa6UJFi+Yv9A+0xfx59b3Nx3gxdklTgOsAys Ma/QL7dhOAjlNxm9ZPW6DFcArWAHAsYSaxyrVnA8wSnfxtr8FamVZyXSFWmSiAN4 scJFPKGOnmVVqLWFV/W/uRaiO0JwMByuVP0juZOPzuwef36cCS02XX7bWqt1giLf jKFwtjDmCUTMBE+2X0hZs5ptt4qEBmbjtTjotWAtvqBGrPwxIyCA4y5rsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVFNc1OD7aMOs3wkRar/O++bYw3MB8GA1UdIwQY MBaAFG3r0Z2pjCf6urey8pS8+exq9EkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzct MjY0YWI5MzM3ZmEwLzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzctMjY0YWI5MzM3ZmEw LzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGY2gitC VuNQPXFSAMJvlOUnl/pATUw7qJT1hQQJ6c6dM/suOcboocMBmCB7nbHGjffcY7Pq LYHeXBPO0lMVKHMJabMg7HA/xX0sNm+N7809CEwZopXTflG6EVeILKtdWphLzHnt WuKbDireAvVNZH9MyuVnJj/vnyqlkS/v9rETsR0JYMzd1aos7T2KVfqMWmDTg53+ L1KlextARpChYbC1x5qVWgzZrhmiOYDcSojfuOgPZ4hjithtahu+tODiTUhjo6LA CiFdDBZFvcN0ix47TswL0/9YTMU7cyQdfoFSx+gl68UEzKraIMK2McL8+b66bgeq HHus/3wuHyyylg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:17:07 2025 by rpki-client