This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json) Hash identifier: nCiinax3lC7AhvAF/ZlbRe8guy+hX9s1yb9ecHQo0Tw= Subject key identifier: 98:51:62:FE:B0:D6:80:76:F3:EF:D7:C8:4D:84:F7:2F:A6:D1:05:09 Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43 Certificate serial: 019B4AA808E1A66C0DB696770C0FCFDF3889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft Manifest number: 12BC Signing time: Tue 23 Dec 2025 10:01:24 +0000 Manifest this update: Tue 23 Dec 2025 10:01:24 +0000 Manifest next update: Wed 24 Dec 2025 10:01:24 +0000 Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: /l+lpqX4XnukE0MNp5TDsvmPMpxeT5ZZ04vVowNbrx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:08:e1:a6:6c:0d:b6:96:77:0c:0f:cf:df:38:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43 Validity Not Before: Dec 23 10:01:24 2025 GMT Not After : Dec 24 10:01:24 2025 GMT Subject: CN=985162feb0d68076f3efd7c84d84f72fa6d10509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:c9:81:c7:b6:d6:97:c9:db:f7:07:1f:7f: ff:1b:3d:e6:bc:c1:d2:82:2e:f4:ac:2f:0f:83:c9: 34:f1:81:28:ea:43:49:45:47:14:25:6d:8c:ee:45: 8c:96:f4:99:1a:62:8e:a3:70:9b:63:c0:5d:12:9b: 6f:a4:38:04:f7:27:c2:c4:08:9c:ee:99:e1:4c:75: 72:bf:b8:00:9c:9a:f4:ad:11:c3:71:64:fd:93:39: 43:a2:18:0d:73:a9:d1:33:96:09:cb:0d:c7:11:e3: 75:ee:10:a2:ff:b9:0b:c2:f6:12:7e:db:6b:a3:85: f6:04:fa:3f:6f:05:df:d2:b8:2e:a5:e0:ab:e7:1d: 53:4b:a1:9f:6d:45:fd:10:fe:71:79:35:ae:dd:ac: af:83:20:06:f5:d4:3f:00:29:9e:e1:d8:6a:ac:5b: c3:fc:e8:ad:e9:84:24:03:05:1a:d3:99:63:f3:62: 92:a7:e3:99:fd:55:76:98:d5:b0:1c:eb:d0:72:3d: b9:86:9c:ca:e4:2e:15:9b:40:c6:92:83:12:87:f7: 8a:2e:5c:f2:ca:05:55:b8:3e:83:b0:50:b9:1e:ef: 5c:ca:18:97:64:2c:76:bf:ba:c2:12:e0:b8:c8:5d: 8c:f3:b0:ab:e6:c4:d5:7a:7d:0c:52:3f:7f:48:7f: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:62:FE:B0:D6:80:76:F3:EF:D7:C8:4D:84:F7:2F:A6:D1:05:09 X509v3 Authority Key Identifier: keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:ba:ff:fb:3c:7b:f9:41:8a:31:ba:82:aa:2a:64:ae:ac: 0e:e9:fe:1f:2d:5b:79:06:d1:56:de:22:14:27:e7:a2:98:43: 41:a5:3a:ad:18:ee:c4:0e:d4:47:09:01:d4:23:59:bb:be:a5: 8d:46:99:8b:bf:8c:a5:79:7a:4b:e6:39:a5:bf:3f:91:a4:9c: be:6c:98:7f:39:3e:05:90:d9:72:83:00:57:f4:03:85:2e:57: dc:85:25:85:51:38:c4:a3:fd:8b:d2:3c:01:56:7b:d5:67:97: e9:58:e5:57:6e:75:3c:75:81:4b:6f:80:4f:92:05:31:e2:a3: 1e:4a:26:78:65:a3:3d:48:ff:8f:78:eb:82:e1:6e:2e:5f:b3: a1:af:85:42:c9:1a:b5:2b:b0:d7:44:f6:e0:7e:66:92:80:e7: 09:85:31:64:18:e5:50:13:c9:4e:d8:8c:be:d3:34:53:8e:92: 7a:25:b6:16:a9:4f:f4:e6:a8:4a:d5:26:e6:08:75:b5:24:d4: 22:e8:26:2d:b7:18:13:88:e4:b7:76:b7:cb:63:f9:65:a5:d7: c8:94:fb:27:5a:92:c7:79:cc:a0:72:ee:26:b1:67:db:e3:ed: 7f:3d:36:58:1c:01:f7:55:56:26:43:7d:3e:4b:de:ae:45:19: 97:5e:f4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqAjhpmwNtpZ3DA/P3ziJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWQzNmM2NTY0NmRhY2IxMTRhYTcyYzFiYmNiNzQxODFi N2ZmNDMwHhcNMjUxMjIzMTAwMTI0WhcNMjUxMjI0MTAwMTI0WjAzMTEwLwYDVQQD Eyg5ODUxNjJmZWIwZDY4MDc2ZjNlZmQ3Yzg0ZDg0ZjcyZmE2ZDEwNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjJgce21pfJ2/cHH3//Gz3mvMHS gi70rC8Pg8k08YEo6kNJRUcUJW2M7kWMlvSZGmKOo3CbY8BdEptvpDgE9yfCxAic 7pnhTHVyv7gAnJr0rRHDcWT9kzlDohgNc6nRM5YJyw3HEeN17hCi/7kLwvYSfttr o4X2BPo/bwXf0rgupeCr5x1TS6GfbUX9EP5xeTWu3ayvgyAG9dQ/ACme4dhqrFvD /Oit6YQkAwUa05lj82KSp+OZ/VV2mNWwHOvQcj25hpzK5C4Vm0DGkoMSh/eKLlzy ygVVuD6DsFC5Hu9cyhiXZCx2v7rCEuC4yF2M87Cr5sTVen0MUj9/SH8/KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhRYv6w1oB28+/XyE2E9y+m0QUJMB8GA1UdIwQY MBaAFAXtNsZWRtrLEUqnLBu8t0GBt/9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQt OGRkZGI5YzM0ZDk3LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQtOGRkZGI5YzM0ZDk3 LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl526//s8 e/lBijG6gqoqZK6sDun+Hy1beQbRVt4iFCfnophDQaU6rRjuxA7URwkB1CNZu76l jUaZi7+MpXl6S+Y5pb8/kaScvmyYfzk+BZDZcoMAV/QDhS5X3IUlhVE4xKP9i9I8 AVZ71WeX6VjlV251PHWBS2+AT5IFMeKjHkomeGWjPUj/j3jrguFuLl+zoa+FQska tSuw10T24H5mkoDnCYUxZBjlUBPJTtiMvtM0U46SeiW2FqlP9OaoStUm5gh1tSTU IugmLbcYE4jkt3a3y2P5ZaXXyJT7J1qSx3nMoHLuJrFn2+Ptfz02WBwB91VWJkN9 PkverkUZl1703Q== -----END CERTIFICATE-----Generated at Tue Dec 23 13:07:46 2025 by rpki-client