This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json) Hash identifier: 3vpOBdlw9HHlZK2BGUcYbpof/Kcna+TElwBkzWKKlvk= Subject key identifier: A3:DE:61:20:96:FD:B0:91:67:AE:8F:AF:01:61:C4:75:42:2F:C0:38 Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03 Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03 Certificate serial: 019B3CEBFEA0BF0ADB987B8E8CE7DDA9DA9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft Manifest number: 0E20 Signing time: Sat 20 Dec 2025 18:00:57 +0000 Manifest this update: Sat 20 Dec 2025 18:00:57 +0000 Manifest next update: Sun 21 Dec 2025 18:00:57 +0000 Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=) 2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: +44zebtErKiyUlOw0lzFl5ZHXy6ZyO3NujTwJUAvMOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fe:a0:bf:0a:db:98:7b:8e:8c:e7:dd:a9:da:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03 Validity Not Before: Dec 20 18:00:57 2025 GMT Not After : Dec 21 18:00:57 2025 GMT Subject: CN=a3de612096fdb09167ae8faf0161c475422fc038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:90:5f:81:a1:e4:d7:20:0f:f3:34:38:af: fe:e7:6b:28:b9:14:77:fd:85:17:2a:36:68:cd:09: b7:19:75:44:96:12:1b:31:f7:f1:17:a4:c9:18:27: f5:db:05:00:bd:99:14:3a:62:ca:5f:c4:42:39:bb: e6:34:5f:39:45:5b:9c:4a:42:4e:98:03:8b:73:58: d6:9e:94:b1:9f:50:e6:b9:f3:a3:5f:86:b6:e6:be: bc:47:44:7c:1d:47:ea:ea:dc:ee:c3:e7:3e:98:4f: cf:6c:cf:7e:83:d9:d6:3a:ed:8e:70:57:b4:dc:32: 26:9a:23:66:6e:f6:6b:be:99:1e:5c:94:a4:b3:ee: 02:39:29:b4:a3:f1:10:b2:9a:94:9d:52:26:51:10: 95:78:5e:a7:f0:a9:5f:b3:41:e0:ca:73:c1:8e:ef: 49:66:2a:9f:ce:81:92:71:12:ed:54:70:58:3d:87: 0c:83:3a:c8:0c:02:53:68:99:51:08:3a:61:9f:9b: f8:22:35:13:95:56:e3:dc:37:32:83:75:11:da:c0: d0:b6:51:59:b9:1f:75:a8:b7:aa:dd:de:e1:5b:7e: 0e:42:de:f2:3b:6c:4f:a7:3a:2f:03:ef:e8:e5:eb: 66:bb:7b:3d:1e:d3:cf:d2:98:19:8c:83:f4:da:f5: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:61:20:96:FD:B0:91:67:AE:8F:AF:01:61:C4:75:42:2F:C0:38 X509v3 Authority Key Identifier: keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c3:4b:5e:4f:25:d7:93:80:af:19:ee:be:16:84:08:22:77: 33:92:76:12:90:e4:a0:41:0f:0b:c0:db:60:ec:bc:6b:25:e2: b8:2b:36:57:07:ab:9c:21:87:3a:a3:5f:c5:8a:bd:7d:f8:52: a4:d9:67:64:84:d5:f1:6d:b9:7e:3d:a5:99:19:79:a9:72:99: df:dd:7e:07:d4:dd:cd:3b:49:c9:19:0f:af:a9:35:c7:8b:4a: cf:cd:53:c8:dc:60:ca:ce:66:83:13:ca:b1:f1:af:c4:6b:31: 1d:cc:69:88:bf:43:6a:b3:6f:18:91:92:10:4e:be:b3:d2:d8: a9:23:6e:56:29:f0:c7:2e:fb:9b:83:d8:ae:48:cd:3e:45:2f: f5:89:ef:99:df:0f:db:fb:7d:c7:0d:2a:ae:c2:ee:6e:53:f1: b6:0e:b4:c0:4d:fe:2a:59:a6:2a:73:8e:c8:ea:9e:6f:44:90: e6:60:9c:0e:1b:79:6f:91:f9:12:f7:bc:b2:41:68:c1:94:c4: 6a:19:e9:49:5f:a0:f0:4b:cb:3c:c9:2d:d4:2e:ef:24:3e:92: 87:74:a3:e9:3e:bf:30:c4:b5:2d:9e:0c:1a:58:fa:f0:ec:e6: 68:5a:06:be:8a:2c:d0:f8:42:15:b3:a4:7e:bf:82:e6:fa:8a: 9b:3c:a5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/6gvwrbmHuOjOfdqdqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3 ODhlMDMwHhcNMjUxMjIwMTgwMDU3WhcNMjUxMjIxMTgwMDU3WjAzMTEwLwYDVQQD EyhhM2RlNjEyMDk2ZmRiMDkxNjdhZThmYWYwMTYxYzQ3NTQyMmZjMDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC2QX4Gh5NcgD/M0OK/+52souRR3 /YUXKjZozQm3GXVElhIbMffxF6TJGCf12wUAvZkUOmLKX8RCObvmNF85RVucSkJO mAOLc1jWnpSxn1DmufOjX4a25r68R0R8HUfq6tzuw+c+mE/PbM9+g9nWOu2OcFe0 3DImmiNmbvZrvpkeXJSks+4COSm0o/EQspqUnVImURCVeF6n8Klfs0HgynPBju9J ZiqfzoGScRLtVHBYPYcMgzrIDAJTaJlRCDphn5v4IjUTlVbj3Dcyg3UR2sDQtlFZ uR91qLeq3d7hW34OQt7yO2xPpzovA+/o5etmu3s9HtPP0pgZjIP02vW1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPeYSCW/bCRZ66PrwFhxHVCL8A4MB8GA1UdIwQY MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5 LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8NLXk8l 15OArxnuvhaECCJ3M5J2EpDkoEEPC8DbYOy8ayXiuCs2VwernCGHOqNfxYq9ffhS pNlnZITV8W25fj2lmRl5qXKZ391+B9TdzTtJyRkPr6k1x4tKz81TyNxgys5mgxPK sfGvxGsxHcxpiL9DarNvGJGSEE6+s9LYqSNuVinwxy77m4PYrkjNPkUv9Ynvmd8P 2/t9xw0qrsLublPxtg60wE3+KlmmKnOOyOqeb0SQ5mCcDht5b5H5Eve8skFowZTE ahnpSV+g8EvLPMkt1C7vJD6Sh3Sj6T6/MMS1LZ4MGlj68OzmaFoGvoos0PhCFbOk fr+C5vqKmzylYw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:35 2025 by rpki-client