This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json) Hash identifier: 4EcaA7SqQq9pOX/47BXT8yjjcI36WpGS7RnpTLCRoUM= Subject key identifier: 0B:C0:6C:E9:23:7A:90:53:48:0B:C8:C7:07:BD:D4:31:76:F7:93:F8 Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Certificate serial: 019B6F586FC88B45380A419F4CDCB214A344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft Manifest number: 0732 Signing time: Tue 30 Dec 2025 13:00:25 +0000 Manifest this update: Tue 30 Dec 2025 13:00:25 +0000 Manifest next update: Wed 31 Dec 2025 13:00:25 +0000 Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: 1VqMTKig3+5pQBRHDDG10gci4oKPzmf2ibIwUtkRNRg=) 2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:6f:c8:8b:45:38:0a:41:9f:4c:dc:b2:14:a3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Validity Not Before: Dec 30 13:00:25 2025 GMT Not After : Dec 31 13:00:25 2025 GMT Subject: CN=0bc06ce9237a9053480bc8c707bdd43176f793f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:b9:b9:b2:04:93:59:e9:b6:b7:88:28:86: ba:d4:1c:7c:b7:01:97:28:e5:83:67:7d:6f:47:f0: 3e:c5:6a:32:84:66:78:58:d7:75:1b:90:57:e1:7e: ad:b1:46:f7:e0:bd:29:f5:d0:0b:cd:40:45:e3:4a: d9:ef:e8:bb:57:5d:03:88:3e:f1:4f:0c:ec:a0:33: 69:27:f9:30:94:f6:56:38:65:a1:b2:92:3f:ff:3f: 44:a0:96:02:18:b0:ff:1f:3e:97:5d:ed:db:cc:ee: 3e:ef:2a:00:16:20:ca:a9:8a:30:7e:b1:3c:9b:01: b6:cd:a9:67:4e:e0:57:da:e9:e1:5a:f0:e0:16:57: 7f:9a:a5:02:4a:cd:9d:d7:ff:de:bc:0a:fb:c8:d9: 27:23:fb:49:a7:42:13:ff:9f:43:bc:f5:34:12:13: a7:4b:30:4c:ff:bf:99:c0:0b:37:2f:73:1c:a8:90: 02:18:94:b2:0a:51:bf:0b:b2:fd:47:e2:7f:c1:d6: 9c:87:24:3c:92:99:fa:39:2e:e5:87:07:76:b6:8d: c1:76:90:35:d9:9c:0e:f2:75:95:08:37:6e:ad:b5: 90:d8:46:27:ac:b4:e2:c6:16:60:7b:41:4a:59:71: 72:b2:1f:a2:4b:23:76:c4:50:95:a1:8d:26:23:62: 28:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C0:6C:E9:23:7A:90:53:48:0B:C8:C7:07:BD:D4:31:76:F7:93:F8 X509v3 Authority Key Identifier: keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e5:3d:1d:82:a3:3d:4b:67:0d:90:b5:56:fc:de:02:35:b8: 8f:fb:a1:e8:1e:d0:f6:a5:95:7c:f1:10:2f:40:e8:77:3c:86: 27:38:13:22:ba:9a:14:52:bd:45:7a:f7:ad:4e:8d:76:8b:32: f0:2d:db:8e:86:64:f3:e7:56:e2:6e:b4:e6:56:e5:b5:3d:22: e4:0c:ee:83:52:14:14:04:53:12:52:1f:73:21:e8:ab:c5:68: 46:cb:33:95:e4:6f:00:cc:55:c7:a5:2a:37:52:70:10:26:46: af:2c:29:92:e6:4d:f6:1c:de:b3:14:09:99:81:c3:e5:83:54: ab:5a:c6:87:e3:8f:be:4b:dd:2e:18:a2:18:5d:64:6b:61:f4: fe:55:ab:2a:0e:dc:b9:16:39:bf:fc:44:82:dc:bf:c6:34:00: 7b:32:7d:15:8d:b7:ff:fd:30:3f:8c:54:c2:9c:86:80:32:9e: 86:ea:64:dc:e7:31:bc:c9:08:ff:1e:41:ce:1f:eb:7c:ef:ed: 78:b4:17:b5:a9:a1:0a:dc:c2:d8:66:96:e1:76:f6:a2:32:1d: a1:ba:14:50:be:6e:80:4e:3a:6d:1e:61:2f:2e:6f:b1:4b:da: ed:96:7c:51:63:92:90:99:2a:9a:c5:c7:58:01:e2:ff:a8:e8: 0b:07:34:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWG/Ii0U4CkGfTNyyFKNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk NWI0ZjYwHhcNMjUxMjMwMTMwMDI1WhcNMjUxMjMxMTMwMDI1WjAzMTEwLwYDVQQD EygwYmMwNmNlOTIzN2E5MDUzNDgwYmM4YzcwN2JkZDQzMTc2Zjc5M2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74K5ubIEk1nptreIKIa61Bx8twGX KOWDZ31vR/A+xWoyhGZ4WNd1G5BX4X6tsUb34L0p9dALzUBF40rZ7+i7V10DiD7x TwzsoDNpJ/kwlPZWOGWhspI//z9EoJYCGLD/Hz6XXe3bzO4+7yoAFiDKqYowfrE8 mwG2zalnTuBX2unhWvDgFld/mqUCSs2d1//evAr7yNknI/tJp0IT/59DvPU0EhOn SzBM/7+ZwAs3L3McqJACGJSyClG/C7L9R+J/wdachyQ8kpn6OS7lhwd2to3BdpA1 2ZwO8nWVCDdurbWQ2EYnrLTixhZge0FKWXFysh+iSyN2xFCVoY0mI2Io5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvAbOkjepBTSAvIxwe91DF295P4MB8GA1UdIwQY MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouU9HYKj PUtnDZC1VvzeAjW4j/uh6B7Q9qWVfPEQL0DodzyGJzgTIrqaFFK9RXr3rU6Ndosy 8C3bjoZk8+dW4m605lbltT0i5Azug1IUFARTElIfcyHoq8VoRsszleRvAMxVx6Uq N1JwECZGrywpkuZN9hzesxQJmYHD5YNUq1rGh+OPvkvdLhiiGF1ka2H0/lWrKg7c uRY5v/xEgty/xjQAezJ9FY23//0wP4xUwpyGgDKehupk3OcxvMkI/x5Bzh/rfO/t eLQXtamhCtzC2GaW4Xb2ojIdoboUUL5ugE46bR5hLy5vsUva7ZZ8UWOSkJkqmsXH WAHi/6joCwc0kA== -----END CERTIFICATE-----Generated at Tue Dec 30 22:02:48 2025 by rpki-client