This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json) Hash identifier: axHYUplT3MyGBNrHrvdbBFP365A2JCBS77JpADcMy9w= Subject key identifier: 74:45:7E:6C:22:DD:FA:BD:F9:80:5B:F1:3A:8C:5B:1E:96:52:19:C3 Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B3B3489B4355C1EB284651C2C956E4FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 10:00:57 +0000 Manifest this update: Sat 20 Dec 2025 10:00:57 +0000 Manifest next update: Sun 21 Dec 2025 10:00:57 +0000 Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=) 2: Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa (hash: A9ruPFPWY4kZ2E24/0zrIMK5qpBuF+PtTYNLIob0+wQ=) 3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: gh64tttFs1b1n+GtssCi3tpZZpgHBImUBl+zK8yefb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:89:b4:35:5c:1e:b2:84:65:1c:2c:95:6e:4f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Dec 20 10:00:57 2025 GMT Not After : Dec 21 10:00:57 2025 GMT Subject: CN=74457e6c22ddfabdf9805bf13a8c5b1e965219c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:30:81:1c:0b:00:9f:59:82:f9:ab:be:80: d7:ec:01:94:1b:3f:1f:ab:c5:19:88:1f:93:d5:39: ef:87:86:d7:bf:d2:32:bb:07:9f:76:43:36:e4:29: 8e:96:49:22:da:1a:ba:44:fb:da:f1:e4:7a:d4:ea: 72:d5:bc:87:d0:4c:52:c9:a4:5f:d6:f5:18:45:8d: 7d:70:54:3a:80:3c:eb:55:b9:8a:99:50:05:07:40: ac:d1:3b:71:d4:f8:45:89:e6:ea:5f:35:4b:8b:4f: 5a:30:0b:d4:11:3a:1f:31:d4:66:36:ff:e3:df:d7: a0:32:12:f3:ba:df:1f:63:c6:9c:60:36:d4:96:b9: 77:da:6c:51:bc:26:9a:1f:c6:b4:05:e5:7b:ff:c7: 21:81:34:63:d4:bf:13:0f:c2:86:ba:74:5b:91:07: 79:6b:65:71:0e:15:de:9d:48:3e:c8:47:51:6d:c8: 97:d8:c6:0a:55:be:53:42:54:bd:bc:83:5d:1a:d8: 24:06:55:47:b5:86:6b:3e:6a:6b:e9:11:b1:76:70: a0:b7:0f:6b:ab:5a:ae:6e:4d:39:6c:3e:ce:e1:59: d1:21:f8:61:66:01:5a:65:da:1b:9c:de:7c:e0:b3: e9:65:72:a6:19:7a:b9:26:76:5b:e2:76:a9:37:ad: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:7E:6C:22:DD:FA:BD:F9:80:5B:F1:3A:8C:5B:1E:96:52:19:C3 X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a4:15:a4:80:f1:d5:d0:71:91:52:82:4d:66:43:ae:2d:0a: 98:96:f9:51:c8:b1:53:9d:55:7c:73:34:a7:c5:2c:ce:11:da: 73:cd:d9:04:2a:f5:d4:d4:f7:11:23:f8:51:36:4f:9e:64:14: 7f:48:ca:8d:f7:0b:a3:03:37:67:d8:e0:18:9b:09:93:15:57: 8b:5a:7b:4c:ea:28:b7:07:f2:b8:2d:a4:00:cf:e3:24:6d:63: 63:36:81:57:49:61:6d:c3:46:7d:c9:8a:9f:58:77:63:45:18: 3c:27:35:17:4d:f3:6c:bd:85:28:4f:93:2b:81:85:39:73:27: c2:d1:9f:26:e2:d1:cd:2d:43:31:1b:f1:ee:e8:e2:70:c1:82: 56:45:31:c9:54:ec:77:ef:2f:46:de:ed:44:21:9d:fa:17:ba: 96:51:37:ed:02:9d:e4:b0:e0:c0:d4:37:89:89:26:de:ee:ef: 64:6d:6a:c4:11:70:2a:c4:03:57:3a:c6:d1:a7:5c:cb:da:2b: b0:b6:a1:f6:ae:1a:2f:fa:f3:8a:4e:e8:83:8a:3a:b8:84:58: 05:32:60:80:d9:01:62:ee:90:86:bb:32:76:78:6f:07:32:05: 3c:eb:db:3c:4e:13:20:6b:41:91:e9:31:08:3e:79:ee:a6:4d: b4:ad:5d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NIm0NVwesoRlHCyVbk+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjUxMjIwMTAwMDU3WhcNMjUxMjIxMTAwMDU3WjAzMTEwLwYDVQQD Eyg3NDQ1N2U2YzIyZGRmYWJkZjk4MDViZjEzYThjNWIxZTk2NTIxOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNEwgRwLAJ9ZgvmrvoDX7AGUGz8f q8UZiB+T1Tnvh4bXv9IyuwefdkM25CmOlkki2hq6RPva8eR61Opy1byH0ExSyaRf 1vUYRY19cFQ6gDzrVbmKmVAFB0Cs0Ttx1PhFiebqXzVLi09aMAvUETofMdRmNv/j 39egMhLzut8fY8acYDbUlrl32mxRvCaaH8a0BeV7/8chgTRj1L8TD8KGunRbkQd5 a2VxDhXenUg+yEdRbciX2MYKVb5TQlS9vINdGtgkBlVHtYZrPmpr6RGxdnCgtw9r q1qubk05bD7O4VnRIfhhZgFaZdobnN584LPpZXKmGXq5JnZb4napN63KDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRFfmwi3fq9+YBb8TqMWx6WUhnDMB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6QVpIDx 1dBxkVKCTWZDri0KmJb5UcixU51VfHM0p8UszhHac83ZBCr11NT3ESP4UTZPnmQU f0jKjfcLowM3Z9jgGJsJkxVXi1p7TOootwfyuC2kAM/jJG1jYzaBV0lhbcNGfcmK n1h3Y0UYPCc1F03zbL2FKE+TK4GFOXMnwtGfJuLRzS1DMRvx7ujicMGCVkUxyVTs d+8vRt7tRCGd+he6llE37QKd5LDgwNQ3iYkm3u7vZG1qxBFwKsQDVzrG0adcy9or sLah9q4aL/rzik7og4o6uIRYBTJggNkBYu6QhrsydnhvBzIFPOvbPE4TIGtBkekx CD557qZNtK1dIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:32:28 2025 by rpki-client