This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: /eHdYe21+/+sBqEJIZoalYI3Si3Bz+8gtb2XNHSJ538= Subject key identifier: 8F:D6:1F:8E:FF:56:46:CD:40:97:02:86:44:5B:43:CD:DF:D7:46:28 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B262D5AE30FE98CF3626DF8EE9C970502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 1784 Signing time: Tue 16 Dec 2025 08:01:05 +0000 Manifest this update: Tue 16 Dec 2025 08:01:05 +0000 Manifest next update: Wed 17 Dec 2025 08:01:05 +0000 Files and hashes: 1: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (hash: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: hd8NmUkTbd8QgRVUMAo8Ahe0IcB4lcRPRBWoeye/Ztk=) 3: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (hash: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A=) 4: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (hash: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:5a:e3:0f:e9:8c:f3:62:6d:f8:ee:9c:97:05:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 16 08:01:05 2025 GMT Not After : Dec 17 08:01:05 2025 GMT Subject: CN=8fd61f8eff5646cd40970286445b43cddfd74628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:da:20:ff:85:66:45:b9:53:d5:1a:50:fd: ef:ca:4d:54:9d:52:9e:19:45:40:73:80:33:23:1d: 9e:e1:8b:15:64:9d:99:aa:46:7b:95:59:26:a4:35: 9d:5c:ea:2b:c0:0c:7c:4b:4d:39:76:2a:3c:3e:c5: 8c:f1:ed:f6:3c:4a:3f:57:37:4d:b6:57:b7:85:1c: b8:14:21:39:f3:e6:f7:b2:f2:8c:3c:5b:ba:f5:8c: 1d:0b:16:b1:a7:83:52:8b:43:35:62:36:04:a1:73: 29:a4:bc:a4:e2:8e:b2:ea:6d:d7:9a:fc:c9:26:f1: 92:43:39:4b:ff:1c:be:1a:41:ea:9b:d4:e9:cd:1b: 2a:36:2a:78:0f:75:f2:a7:f7:dc:7d:ee:3c:98:83: 66:8d:3e:8d:33:28:69:73:a3:ee:6a:f4:e8:a9:60: a6:86:49:55:8d:58:e0:63:e6:18:67:6b:65:d6:88: 58:7e:eb:92:5d:52:10:81:e9:ee:d0:44:58:f6:ed: 06:62:d7:85:60:02:ea:3c:dc:fa:54:b9:89:a6:71: 15:48:dc:10:52:8b:69:81:d0:28:15:1c:06:f8:76: b4:34:78:b3:0f:f0:c9:8a:b0:4c:5f:a2:7d:f0:0e: ad:d6:a8:50:ec:21:fd:99:9f:f8:df:c8:0d:3e:40: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:1F:8E:FF:56:46:CD:40:97:02:86:44:5B:43:CD:DF:D7:46:28 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7f:06:43:64:a0:76:a1:bb:1e:f9:71:31:0e:75:f3:61:3a: 2a:62:79:49:96:8d:99:ca:c7:b9:f1:e3:0d:e0:be:6b:9d:50: c8:6a:b1:b6:b3:7e:b4:7a:b8:b0:db:b1:8f:bd:bc:66:1f:dc: 5b:db:d6:84:ec:72:11:03:43:24:e5:2d:15:d3:f4:9a:78:aa: 07:c7:f9:01:a8:c6:78:4d:07:7e:37:06:a9:3b:5b:61:28:fa: 55:02:e3:08:52:44:c8:55:52:f9:5c:95:a6:5b:c5:cb:03:0c: 8a:00:b7:4d:9b:ad:1f:7d:94:f8:d3:10:a0:38:45:8e:45:69: 8a:4a:c5:e6:5f:f8:32:d8:44:e6:c0:35:1e:41:21:b0:38:81: 41:e7:73:ad:a0:57:a0:da:ed:ae:ea:c5:11:37:00:47:c4:15: b0:92:ff:24:45:cf:6b:4a:b1:ba:72:aa:b3:f6:1d:97:38:9d: 2d:66:32:1c:b1:5c:2c:b6:11:fb:9b:c1:98:e9:88:50:cb:3d: 01:35:f0:f2:ff:4a:2b:79:04:7d:16:5e:51:19:6c:df:63:c9: 8c:2c:06:65:11:a2:ab:5c:52:82:98:7f:d6:1c:98:6d:03:4a: c9:3d:2e:9a:7c:90:5d:19:21:6f:0c:44:c6:56:75:98:ad:c7: f1:b6:25:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLVrjD+mM82Jt+O6clwUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjE2MDgwMTA1WhcNMjUxMjE3MDgwMTA1WjAzMTEwLwYDVQQD Eyg4ZmQ2MWY4ZWZmNTY0NmNkNDA5NzAyODY0NDViNDNjZGRmZDc0NjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHaIP+FZkW5U9UaUP3vyk1UnVKe GUVAc4AzIx2e4YsVZJ2ZqkZ7lVkmpDWdXOorwAx8S005dio8PsWM8e32PEo/VzdN tle3hRy4FCE58+b3svKMPFu69YwdCxaxp4NSi0M1YjYEoXMppLyk4o6y6m3XmvzJ JvGSQzlL/xy+GkHqm9TpzRsqNip4D3Xyp/fcfe48mINmjT6NMyhpc6PuavToqWCm hklVjVjgY+YYZ2tl1ohYfuuSXVIQgenu0ERY9u0GYteFYALqPNz6VLmJpnEVSNwQ UotpgdAoFRwG+Ha0NHizD/DJirBMX6J98A6t1qhQ7CH9mZ/438gNPkDvfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/WH47/VkbNQJcChkRbQ83f10YoMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE38GQ2Sg dqG7HvlxMQ5182E6KmJ5SZaNmcrHufHjDeC+a51QyGqxtrN+tHq4sNuxj728Zh/c W9vWhOxyEQNDJOUtFdP0mniqB8f5AajGeE0HfjcGqTtbYSj6VQLjCFJEyFVS+VyV plvFywMMigC3TZutH32U+NMQoDhFjkVpikrF5l/4MthE5sA1HkEhsDiBQedzraBX oNrtrurFETcAR8QVsJL/JEXPa0qxunKqs/YdlzidLWYyHLFcLLYR+5vBmOmIUMs9 ATXw8v9KK3kEfRZeURls32PJjCwGZRGiq1xSgph/1hyYbQNKyT0umnyQXRkhbwxE xlZ1mK3H8bYlHg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:21:32 2025 by rpki-client