This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json) Hash identifier: gEsam2l91+WURd0VWw0llul1vXfD4Kl0KgNmSLIP1Wo= Subject key identifier: C3:69:6F:44:CA:0A:97:AD:96:63:2E:12:0F:72:2F:86:2E:D9:C6:7B Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Certificate serial: 019B1A9773E4E8B2CBA689040C4D3F38AA54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft Manifest number: 036B Signing time: Sun 14 Dec 2025 02:01:31 +0000 Manifest this update: Sun 14 Dec 2025 02:01:31 +0000 Manifest next update: Mon 15 Dec 2025 02:01:31 +0000 Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: S/IvE43P5Tj10Uj5XYk2zrz2I+MeKNgiVuzG9Hu4fLg=) 2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:73:e4:e8:b2:cb:a6:89:04:0c:4d:3f:38:aa:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Validity Not Before: Dec 14 02:01:31 2025 GMT Not After : Dec 15 02:01:31 2025 GMT Subject: CN=c3696f44ca0a97ad96632e120f722f862ed9c67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:1f:8d:f5:81:d4:d4:6c:0c:3b:2a:1c:47: ef:1e:7b:82:54:3a:a9:9f:11:27:07:3d:f1:3d:e1: 8b:64:78:45:65:42:3e:59:ca:c0:53:88:ae:50:86: 95:32:1f:17:af:2b:ae:5b:c9:f9:78:ff:6f:39:71: a1:7e:b1:02:a0:d6:a7:bf:19:38:82:74:1c:08:51: ec:87:80:e8:c8:5c:52:f1:74:83:d7:be:d0:23:4d: 58:42:c3:ee:7d:09:fa:2e:85:80:5d:a2:f9:3f:23: 74:8a:2f:00:7e:bc:0f:85:d3:13:b5:ae:82:ca:0b: bb:c9:68:20:84:ec:1a:43:0c:91:df:37:c2:2b:11: 9d:6a:7f:ec:bc:09:10:5d:b9:ab:b9:e4:a6:d0:bc: 49:0e:f2:a2:8c:ba:09:86:4f:a7:05:41:fb:f4:62: e4:09:44:37:a4:88:13:84:c2:bb:cf:b9:fd:1d:fe: a0:26:64:94:ed:ec:10:6b:0f:3b:9e:35:06:0d:ec: ef:9c:cb:18:98:45:ab:80:8d:e9:83:d0:de:f9:67: 66:36:77:85:80:1d:44:af:d4:79:2e:ac:db:45:78: 79:e0:bf:9f:ac:aa:59:29:e4:4b:3e:cc:a6:12:74: 1c:36:37:e1:24:a4:05:d4:2b:ea:05:70:7d:c1:0b: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:6F:44:CA:0A:97:AD:96:63:2E:12:0F:72:2F:86:2E:D9:C6:7B X509v3 Authority Key Identifier: keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:98:4e:34:15:11:20:ec:fa:ac:f7:96:ef:d8:c0:f2:93:81: 6f:74:52:4a:2a:c9:99:b6:bf:f2:74:8d:03:36:d2:3f:bf:9e: 0b:33:5a:a1:cc:25:cc:0a:10:7f:b2:d0:5e:53:22:b9:1a:97: e8:b2:02:24:5b:64:3c:31:cf:48:1d:86:a3:30:8d:c3:e2:de: db:5b:84:b0:1b:c1:31:49:ef:fb:86:51:3b:e4:0e:a7:4e:e5: e6:f2:2c:49:ec:65:3f:96:7c:00:8f:e9:e9:f3:c3:12:9c:17: 8e:ac:4f:0d:01:b5:aa:83:38:dc:bc:6d:0b:d9:9e:4c:e8:69: c4:c4:2b:d8:e2:b9:12:c7:2c:00:f3:bd:06:d5:75:a8:c7:26: ff:84:13:9a:39:ab:fb:3d:c8:fb:81:28:4c:a7:de:09:e9:22: ed:a9:c4:72:ea:c4:d8:57:41:18:f3:c6:f9:8a:71:cd:b3:7a: d6:99:10:3f:82:69:92:1e:85:91:c1:27:e0:8e:1c:a0:67:66: fc:9b:38:40:3f:f4:79:76:6d:2d:b7:17:dc:aa:8c:5c:eb:20: 40:58:e4:3a:b0:65:24:82:96:80:c1:82:b3:ea:1d:2b:ea:bc: 81:ed:e4:96:41:d0:c0:40:09:79:67:59:fa:b2:0a:fc:9b:a4: 89:58:9e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal3Pk6LLLpokEDE0/OKpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTc5NTI1OTExOWVlOGE2ZDEwOGU5YjVjYmUwYmI5MGMw OThlY2UwHhcNMjUxMjE0MDIwMTMxWhcNMjUxMjE1MDIwMTMxWjAzMTEwLwYDVQQD EyhjMzY5NmY0NGNhMGE5N2FkOTY2MzJlMTIwZjcyMmY4NjJlZDljNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwfjfWB1NRsDDsqHEfvHnuCVDqp nxEnBz3xPeGLZHhFZUI+WcrAU4iuUIaVMh8XryuuW8n5eP9vOXGhfrECoNanvxk4 gnQcCFHsh4DoyFxS8XSD177QI01YQsPufQn6LoWAXaL5PyN0ii8AfrwPhdMTta6C ygu7yWgghOwaQwyR3zfCKxGdan/svAkQXbmrueSm0LxJDvKijLoJhk+nBUH79GLk CUQ3pIgThMK7z7n9Hf6gJmSU7ewQaw87njUGDezvnMsYmEWrgI3pg9De+WdmNneF gB1Er9R5LqzbRXh54L+frKpZKeRLPsymEnQcNjfhJKQF1CvqBXB9wQuBTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNpb0TKCpetlmMuEg9yL4Yu2cZ7MB8GA1UdIwQY MBaAFPwXlSWRGe6KbRCOm1y+C7kMCY7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYt Y2ZhNmEyNTQzMmU5LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYtY2ZhNmEyNTQzMmU5 LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZhONBUR IOz6rPeW79jA8pOBb3RSSirJmba/8nSNAzbSP7+eCzNaocwlzAoQf7LQXlMiuRqX 6LICJFtkPDHPSB2GozCNw+Le21uEsBvBMUnv+4ZRO+QOp07l5vIsSexlP5Z8AI/p 6fPDEpwXjqxPDQG1qoM43LxtC9meTOhpxMQr2OK5EscsAPO9BtV1qMcm/4QTmjmr +z3I+4EoTKfeCeki7anEcurE2FdBGPPG+YpxzbN61pkQP4Jpkh6FkcEn4I4coGdm /Js4QD/0eXZtLbcX3KqMXOsgQFjkOrBlJIKWgMGCs+odK+q8ge3klkHQwEAJeWdZ +rIK/JukiVie5w== -----END CERTIFICATE-----Generated at Sun Dec 14 03:47:01 2025 by rpki-client