This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft File: BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json) Hash identifier: kADHbDtlg9wBMil3etnDrnI7oxCYivKZVLqo+t5DnXE= Subject key identifier: AD:81:CB:63:91:69:94:E6:35:9F:25:3D:F3:06:61:0E:86:60:A6:8F Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 Certificate issuer: /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Certificate serial: 019B59775EDE264B3E54B8A9DC58BC813F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft Manifest number: 085B Signing time: Fri 26 Dec 2025 07:02:33 +0000 Manifest this update: Fri 26 Dec 2025 07:02:33 +0000 Manifest next update: Sat 27 Dec 2025 07:02:33 +0000 Files and hashes: 1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: QU2uZAhoRxWW6ej1/boSGiiNSWMoODAkBgY+cuHkWro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:5e:de:26:4b:3e:54:b8:a9:dc:58:bc:81:3f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Validity Not Before: Dec 26 07:02:33 2025 GMT Not After : Dec 27 07:02:33 2025 GMT Subject: CN=ad81cb63916994e6359f253df306610e8660a68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:aa:97:47:61:aa:7e:a1:49:e9:b5:92:49: dc:af:ea:58:16:ed:80:76:1c:2c:a4:14:6f:3e:a0: 1b:9c:9a:28:b6:66:b5:39:e2:7f:02:f9:bf:b2:01: bb:8d:66:c0:7c:c3:cc:31:a2:ce:d2:55:c3:2c:f2: b3:ee:ec:ab:fa:bf:ed:5b:0a:9e:7e:8f:12:4a:86: 3b:39:bc:d0:cb:8e:72:96:92:f8:ff:56:7e:eb:ce: da:6e:ac:30:d9:7a:33:b7:60:3f:a3:bf:d2:09:50: 5f:ee:e6:a6:bc:ef:f8:cb:66:cb:4d:e1:93:44:78: 8e:ae:5c:c7:24:90:69:db:f9:26:93:ba:11:dc:91: ac:8d:a8:f5:62:4b:09:aa:27:b2:23:94:39:a9:83: c5:fb:d0:54:91:9e:71:94:4b:e4:05:d9:58:72:53: 3b:0e:2f:0c:a1:d1:74:cc:99:8c:a3:c2:a0:61:45: 68:3e:82:2a:0a:e6:fb:5b:be:a2:8a:ae:d9:e9:67: f5:46:8d:ee:5d:8a:61:6a:59:55:51:88:10:e2:89: 7b:47:c8:c0:2a:01:3d:8d:46:fb:ce:70:39:7a:2c: 9a:28:7c:92:de:68:c1:98:7e:be:81:73:34:80:35: 54:9e:92:3b:c3:15:a0:00:16:b6:23:86:f2:27:17: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:CB:63:91:69:94:E6:35:9F:25:3D:F3:06:61:0E:86:60:A6:8F X509v3 Authority Key Identifier: keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6a:90:df:6e:f2:29:4c:22:00:04:2c:e5:de:10:ea:d2:df: 29:01:e0:df:b9:31:68:7c:48:26:06:7e:ec:09:ea:ca:79:2c: 15:2c:91:c5:65:3c:f3:86:02:90:79:68:a3:6e:0a:36:68:36: 5b:ba:db:63:6b:58:ab:46:31:d7:20:3b:4b:9c:c9:5c:5b:87: fd:7d:69:63:ae:3d:67:94:2e:01:c4:7b:71:6a:4a:19:49:93: 0c:db:4a:20:7b:76:7f:30:6e:13:41:93:b4:53:12:c2:1a:a2: 83:50:57:8f:d5:2c:10:cc:f0:db:79:6b:60:99:11:8f:6c:bd: db:e8:80:fb:fb:50:5b:46:05:dc:41:d4:23:83:ea:15:f0:23: 3e:81:db:6a:a8:fd:b2:0b:2b:c8:14:12:b6:a9:7a:2a:7c:48: ac:e0:d7:37:49:5c:4a:9e:cf:11:b6:cb:b9:99:93:30:93:3c: b5:56:5d:3b:37:90:3b:b1:f6:a0:78:03:ff:2e:bf:5f:5a:50: f2:40:d9:e5:33:b3:90:e1:32:8a:9d:08:92:56:37:cf:18:01: 6d:d6:11:06:ae:9a:5b:70:ee:6d:87:c0:4c:54:3d:50:8a:87: 57:0c:ec:17:d6:82:b5:e0:75:04:7b:0f:39:3c:80:93:76:ca: 44:9a:49:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd17eJks+VLip3Fi8gT+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGRhNWI3ZTJkYmY3Yzc2ZmNjNjZjOTZmZmU2NDhmZWFk NGIwNjAwHhcNMjUxMjI2MDcwMjMzWhcNMjUxMjI3MDcwMjMzWjAzMTEwLwYDVQQD EyhhZDgxY2I2MzkxNjk5NGU2MzU5ZjI1M2RmMzA2NjEwZTg2NjBhNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI+ql0dhqn6hSem1kkncr+pYFu2A dhwspBRvPqAbnJootma1OeJ/Avm/sgG7jWbAfMPMMaLO0lXDLPKz7uyr+r/tWwqe fo8SSoY7ObzQy45ylpL4/1Z+687abqww2Xozt2A/o7/SCVBf7uamvO/4y2bLTeGT RHiOrlzHJJBp2/kmk7oR3JGsjaj1YksJqieyI5Q5qYPF+9BUkZ5xlEvkBdlYclM7 Di8ModF0zJmMo8KgYUVoPoIqCub7W76iiq7Z6Wf1Ro3uXYphallVUYgQ4ol7R8jA KgE9jUb7znA5eiyaKHyS3mjBmH6+gXM0gDVUnpI7wxWgABa2I4byJxdQwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2By2ORaZTmNZ8lPfMGYQ6GYKaPMB8GA1UdIwQY MBaAFARNpbfi2/fHb8xmyW/+ZI/q1LBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMt YWNiYzlkNGUwODQzLzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMtYWNiYzlkNGUwODQz LzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmqQ327y KUwiAAQs5d4Q6tLfKQHg37kxaHxIJgZ+7AnqynksFSyRxWU884YCkHloo24KNmg2 W7rbY2tYq0Yx1yA7S5zJXFuH/X1pY649Z5QuAcR7cWpKGUmTDNtKIHt2fzBuE0GT tFMSwhqig1BXj9UsEMzw23lrYJkRj2y92+iA+/tQW0YF3EHUI4PqFfAjPoHbaqj9 sgsryBQStql6KnxIrODXN0lcSp7PEbbLuZmTMJM8tVZdOzeQO7H2oHgD/y6/X1pQ 8kDZ5TOzkOEyip0IklY3zxgBbdYRBq6aW3DubYfATFQ9UIqHVwzsF9aCteB1BHsP OTyAk3bKRJpJJA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:38 2025 by rpki-client