This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json) Hash identifier: ZRxnnvOQcWddkIKagYPD4Ni8YOsn4hyYZJHgYWSyjik= Subject key identifier: 9F:63:0E:AD:38:7D:35:DC:BC:F2:C3:9C:DD:56:1F:B0:9B:0C:38:CF Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2 Certificate serial: 019B3532757FB363680366414EE7D26EF043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft Manifest number: 0A63 Signing time: Fri 19 Dec 2025 06:00:57 +0000 Manifest this update: Fri 19 Dec 2025 06:00:57 +0000 Manifest next update: Sat 20 Dec 2025 06:00:57 +0000 Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: ab1ZK/Q6HsAU1rNXSCp7E+8KTJXvIvhCM2eE35N69i4=) 2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:75:7f:b3:63:68:03:66:41:4e:e7:d2:6e:f0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2 Validity Not Before: Dec 19 06:00:57 2025 GMT Not After : Dec 20 06:00:57 2025 GMT Subject: CN=9f630ead387d35dcbcf2c39cdd561fb09b0c38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:c2:0d:d7:ac:4d:a1:c4:39:55:b1:99:ec: 58:30:87:fc:5d:be:01:94:d8:2f:97:ed:77:bb:1d: a5:3b:80:6f:ce:76:09:67:ac:6a:d4:49:ff:bd:3e: dd:62:d8:da:1e:eb:8c:77:b9:f7:75:f9:ca:05:78: 88:2e:9c:10:43:ed:4f:00:08:71:04:63:7c:ad:5b: 7e:12:85:0d:88:a4:7a:1e:e2:05:eb:1f:e1:10:74: 29:51:e9:92:4b:f8:df:a3:ed:96:02:33:81:de:e4: e9:1f:d1:cf:b1:90:81:92:77:4c:67:54:f3:3e:8d: f7:00:52:32:54:f0:3f:ae:2f:f2:b8:4b:ea:4e:89: d2:9d:bd:3c:e3:18:73:43:06:0e:6e:73:9c:95:ca: c7:40:4d:52:e9:f7:ca:18:b9:12:48:4e:03:2e:9e: 1f:cd:db:61:37:07:1d:07:83:0c:94:6b:e0:9a:33: 4b:ca:3b:15:bc:cc:93:b1:a0:f2:4f:0c:06:ee:2b: 7a:64:75:41:be:e7:fc:86:ee:91:47:f0:77:e6:c2: ec:d5:c9:61:c2:8f:7f:34:25:93:59:ec:a6:1f:06: 28:e4:3f:e8:37:92:39:d0:3c:55:7a:d8:f6:6c:e8: a8:a2:dc:cb:7f:1e:d4:11:38:89:bd:a2:9a:af:53: e8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:63:0E:AD:38:7D:35:DC:BC:F2:C3:9C:DD:56:1F:B0:9B:0C:38:CF X509v3 Authority Key Identifier: keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:60:cd:7e:df:1c:6e:eb:ce:2a:22:1a:05:15:06:81:bd:7c: 4c:12:35:52:7f:d1:17:bf:09:90:56:bf:f2:74:14:83:48:a2: 5c:5c:b7:dd:23:d1:a4:f2:87:ff:b6:44:5f:07:d4:82:ba:a6: af:22:b9:55:6a:66:c6:e8:75:34:78:cc:75:21:52:7b:96:ba: 21:83:0e:2e:d6:d9:e2:ee:5a:f8:13:2f:93:e1:5b:e0:f0:41: 69:2f:e7:25:01:af:9f:e8:c0:f1:c0:03:d4:61:20:d8:19:7d: 9d:c4:5c:f4:ad:b6:c5:fa:26:da:e1:66:12:47:33:d3:7e:45: 00:d2:a0:5b:d0:96:e6:08:24:23:13:8f:7f:8a:b5:a9:a3:ed: c3:dd:d8:db:74:da:f0:6e:65:d9:ab:ce:72:ac:9f:76:98:ca: d4:a5:14:48:d9:c5:60:43:82:c4:21:3c:73:3f:70:9c:51:03: e8:5b:90:e9:27:15:37:9a:6d:ee:c3:5c:85:de:37:23:1e:76: 28:d8:70:67:74:bf:de:45:38:3f:0a:fa:db:4d:24:ce:ae:1a: d3:ed:04:af:e3:28:5d:4a:0d:c5:08:13:56:1f:48:fa:32:f6: e5:9e:5d:b3:c0:2c:2c:7e:cd:a9:4a:ae:9f:72:c1:4a:68:00: 45:a9:4b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MnV/s2NoA2ZBTufSbvBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2 NGE2ZjIwHhcNMjUxMjE5MDYwMDU3WhcNMjUxMjIwMDYwMDU3WjAzMTEwLwYDVQQD Eyg5ZjYzMGVhZDM4N2QzNWRjYmNmMmMzOWNkZDU2MWZiMDliMGMzOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4DCDdesTaHEOVWxmexYMIf8Xb4B lNgvl+13ux2lO4BvznYJZ6xq1En/vT7dYtjaHuuMd7n3dfnKBXiILpwQQ+1PAAhx BGN8rVt+EoUNiKR6HuIF6x/hEHQpUemSS/jfo+2WAjOB3uTpH9HPsZCBkndMZ1Tz Po33AFIyVPA/ri/yuEvqTonSnb084xhzQwYObnOclcrHQE1S6ffKGLkSSE4DLp4f zdthNwcdB4MMlGvgmjNLyjsVvMyTsaDyTwwG7it6ZHVBvuf8hu6RR/B35sLs1clh wo9/NCWTWeymHwYo5D/oN5I50DxVetj2bOiootzLfx7UETiJvaKar1PoywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9jDq04fTXcvPLDnN1WH7CbDDjPMB8GA1UdIwQY MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4 LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2DNft8c buvOKiIaBRUGgb18TBI1Un/RF78JkFa/8nQUg0iiXFy33SPRpPKH/7ZEXwfUgrqm ryK5VWpmxuh1NHjMdSFSe5a6IYMOLtbZ4u5a+BMvk+Fb4PBBaS/nJQGvn+jA8cAD 1GEg2Bl9ncRc9K22xfom2uFmEkcz035FANKgW9CW5ggkIxOPf4q1qaPtw93Y23Ta 8G5l2avOcqyfdpjK1KUUSNnFYEOCxCE8cz9wnFED6FuQ6ScVN5pt7sNchd43Ix52 KNhwZ3S/3kU4Pwr6200kzq4a0+0Er+MoXUoNxQgTVh9I+jL25Z5ds8AsLH7NqUqu n3LBSmgARalLkA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:32 2025 by rpki-client