This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json) Hash identifier: wA3O47UDLh1AOl4P027xJaTM4A97TmnR0EdsWMJ6AdM= Subject key identifier: E6:3F:B0:1E:8C:B7:7F:FC:D6:CE:A4:97:B0:DC:72:59:CE:31:41:63 Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19 Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219 Certificate serial: 019B0E2607FC97574A894F1CBD008B5C6DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft Manifest number: 10DC Signing time: Thu 11 Dec 2025 16:02:11 +0000 Manifest this update: Thu 11 Dec 2025 16:02:11 +0000 Manifest next update: Fri 12 Dec 2025 16:02:11 +0000 Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: AXrL5O4hHH64q4Dxk5Ba9Elh2HbLq28gAwkqnLVxYEM=) 2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=) 3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:07:fc:97:57:4a:89:4f:1c:bd:00:8b:5c:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219 Validity Not Before: Dec 11 16:02:11 2025 GMT Not After : Dec 12 16:02:11 2025 GMT Subject: CN=e63fb01e8cb77ffcd6cea497b0dc7259ce314163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:a3:52:8e:a8:8f:fc:b2:83:9d:67:08:11: e8:f5:a9:ce:b3:8c:a9:89:66:ce:a0:12:ee:36:67: 8e:3c:30:49:62:c1:e7:9e:30:0d:56:5c:4a:88:1d: 1d:cc:ea:29:c1:69:92:cb:00:bc:c5:38:21:91:17: 9a:26:38:cb:9b:e2:00:93:e3:35:18:65:f9:94:91: cb:77:db:df:9a:8f:cf:6e:4d:3a:43:70:da:dd:64: 74:f0:8a:ae:5b:28:8d:1d:64:95:a7:75:36:77:a0: 8e:1a:23:38:90:31:17:0b:55:d9:f9:1c:55:9d:43: 6a:32:78:33:77:0d:a1:3f:6d:44:37:72:80:d8:e4: 0a:1f:2c:d0:46:14:55:7b:bb:c8:aa:eb:4c:8f:e2: 9d:ba:06:af:6f:1d:2d:e0:b6:5a:c7:02:91:cf:a4: 36:96:79:ef:e6:cb:be:82:fe:30:04:6e:3f:3a:70: 0a:ca:65:94:2f:04:25:8e:c7:e6:62:f0:99:07:56: cf:8d:83:2f:6d:b3:00:7c:e6:a8:75:a7:cf:68:60: 95:4d:f8:07:c9:8a:54:98:a8:57:11:b0:c7:43:06: 8f:5f:89:03:3f:75:59:0d:db:7e:38:20:a3:b3:85: 64:f5:76:6d:ce:ab:40:a1:20:09:60:1d:92:4e:07: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:B0:1E:8C:B7:7F:FC:D6:CE:A4:97:B0:DC:72:59:CE:31:41:63 X509v3 Authority Key Identifier: keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c0:2b:d1:91:70:9b:32:7c:90:0b:d2:65:4e:0e:1a:de:2d: c6:49:85:b6:7f:c9:4c:f7:7e:54:79:5f:6e:89:7b:6e:5e:db: 0f:44:55:36:1f:c0:b0:b3:b4:e9:e8:64:57:93:89:0f:5c:43: bc:0f:2d:0e:93:fa:85:7d:a0:45:ba:3a:73:8d:0b:df:df:88: ef:08:4e:18:65:64:3a:62:81:58:d2:74:dc:03:f1:e7:83:6a: 67:df:51:fb:43:92:4c:6a:22:0a:dd:d2:68:31:dd:f4:a0:23: 1d:0b:62:a7:cd:83:a7:3c:c6:11:1e:cb:55:a6:fa:79:fc:e6: 3e:98:36:de:9b:37:89:41:eb:56:c2:98:ee:c2:4a:a5:c7:49: 3b:d6:27:17:80:e9:7a:9f:e6:a9:f5:24:6d:f1:1b:8c:2d:82: ed:d6:ed:aa:1e:76:b0:fd:37:49:b2:33:42:19:b9:70:dd:da: 30:af:98:66:39:18:7e:6f:da:69:d4:bd:65:5e:79:c1:2b:ff: 03:73:1b:97:5e:ab:0f:f1:aa:a2:3f:04:86:0b:b2:ba:ab:16: 72:b4:22:c7:c5:03:34:bd:b8:72:be:36:94:fc:4f:5e:63:fc: 4a:79:81:a6:7d:e6:ce:d0:0b:75:70:8e:2b:d2:21:4b:31:64: 1b:e0:9e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJgf8l1dKiU8cvQCLXG3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3 YzEyMTkwHhcNMjUxMjExMTYwMjExWhcNMjUxMjEyMTYwMjExWjAzMTEwLwYDVQQD EyhlNjNmYjAxZThjYjc3ZmZjZDZjZWE0OTdiMGRjNzI1OWNlMzE0MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApICjUo6oj/yyg51nCBHo9anOs4yp iWbOoBLuNmeOPDBJYsHnnjANVlxKiB0dzOopwWmSywC8xTghkReaJjjLm+IAk+M1 GGX5lJHLd9vfmo/Pbk06Q3Da3WR08IquWyiNHWSVp3U2d6COGiM4kDEXC1XZ+RxV nUNqMngzdw2hP21EN3KA2OQKHyzQRhRVe7vIqutMj+Kdugavbx0t4LZaxwKRz6Q2 lnnv5su+gv4wBG4/OnAKymWULwQljsfmYvCZB1bPjYMvbbMAfOaodafPaGCVTfgH yYpUmKhXEbDHQwaPX4kDP3VZDdt+OCCjs4Vk9XZtzqtAoSAJYB2STgcGQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY/sB6Mt3/81s6kl7DcclnOMUFjMB8GA1UdIwQY MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt YjIxZGQzZjY4YWJhLzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsAr0ZFw mzJ8kAvSZU4OGt4txkmFtn/JTPd+VHlfbol7bl7bD0RVNh/AsLO06ehkV5OJD1xD vA8tDpP6hX2gRbo6c40L39+I7whOGGVkOmKBWNJ03APx54NqZ99R+0OSTGoiCt3S aDHd9KAjHQtip82DpzzGER7LVab6efzmPpg23ps3iUHrVsKY7sJKpcdJO9YnF4Dp ep/mqfUkbfEbjC2C7dbtqh52sP03SbIzQhm5cN3aMK+YZjkYfm/aadS9ZV55wSv/ A3Mbl16rD/Gqoj8EhguyuqsWcrQix8UDNL24cr42lPxPXmP8SnmBpn3mztALdXCO K9IhSzFkG+Ce+Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:16 2025 by rpki-client