This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft File: bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json) Hash identifier: Zd9VrCfEMofJzrO4mN53+OdJnwdRmZTYyss1UPwcIDA= Subject key identifier: AD:03:88:CD:7A:90:59:24:61:3B:38:F7:D4:8A:F2:4B:62:02:8A:8F Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Certificate serial: 019B35D7258E69B4C92B590B8FB75F053549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 09:00:50 +0000 Manifest this update: Fri 19 Dec 2025 09:00:50 +0000 Manifest next update: Sat 20 Dec 2025 09:00:50 +0000 Files and hashes: 1: PkuzLc70cdZNfzBONmq4AlueJ3c.roa (hash: IUupDkJ+pYc5DFM+j/FDYtvyoxCFZGawCLtSOO5xgU0=) 2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: Itk8Bic38Zp9ZGPqw3KYnARIMfdWytgPeKYppSd7EEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:25:8e:69:b4:c9:2b:59:0b:8f:b7:5f:05:35:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Validity Not Before: Dec 19 09:00:50 2025 GMT Not After : Dec 20 09:00:50 2025 GMT Subject: CN=ad0388cd7a905924613b38f7d48af24b62028a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:56:e3:b9:a7:ff:ba:00:d6:2a:17:19:b4: 15:e5:73:63:c6:ec:93:53:3d:26:b2:5a:49:a7:08: 73:eb:a2:92:5a:2a:7b:a1:f1:ae:6e:a2:64:b4:a2: 33:f1:2b:db:58:9d:af:3e:94:57:2e:fb:d0:a8:41: 11:f8:f9:5a:98:38:7e:18:3c:41:75:5a:b7:24:0c: 73:1c:a8:31:7f:1f:99:67:26:9e:b1:86:ca:f7:e3: 2c:48:7c:6a:fe:02:e0:e0:5d:7b:e8:f7:38:ec:7f: 14:ce:64:f8:e9:6b:e9:24:80:48:b8:cf:e3:59:c7: c4:d1:2b:7d:53:71:17:bd:8c:51:48:a4:ec:07:12: 6f:e8:a5:17:bc:3b:e1:10:86:dc:6c:fc:72:9d:65: 21:32:f7:6f:c8:41:c0:d7:af:b7:f3:43:8b:78:03: 86:1c:93:7b:88:79:dc:ca:48:b4:a3:8b:99:1c:ab: 40:70:db:85:91:70:4c:da:44:1f:08:ad:3b:ed:1f: 20:92:29:f1:15:5d:3e:25:79:1d:04:1f:3f:c8:65: cb:35:a0:a1:09:39:3c:3d:6a:86:08:86:0f:d3:6f: be:a9:3b:9f:51:ff:52:6f:b5:47:18:36:d5:1e:c7: 61:b2:1a:51:3b:3b:bb:74:1e:8a:43:cb:de:94:ef: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:03:88:CD:7A:90:59:24:61:3B:38:F7:D4:8A:F2:4B:62:02:8A:8F X509v3 Authority Key Identifier: keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:59:d9:b3:03:14:1b:3b:30:82:ef:a3:27:ea:4a:53:83:81: c2:c1:9e:28:78:7e:ae:f5:d4:7a:db:e0:ba:d8:c8:a0:a4:b9: 47:12:9f:2a:e5:03:5a:5a:6f:78:f0:75:08:51:77:d0:22:ef: 91:06:4b:ef:01:31:20:bc:58:36:ce:5f:b8:52:94:bb:d5:9d: a8:2c:38:84:0f:e7:5c:49:34:e9:4f:3a:30:04:de:c0:b8:de: 4f:9a:2d:73:a5:c0:d8:ff:09:4c:8e:d3:1a:3e:65:11:46:d6: c5:43:e8:bb:33:18:0e:4c:6b:83:05:84:2e:45:0c:b5:b2:68: d6:7f:27:f0:2d:13:e6:e7:f9:55:75:e7:46:46:5b:30:f3:1f: 90:20:5b:eb:6c:00:ce:85:0a:90:00:75:c6:a9:8a:70:66:e5: cf:4c:8f:c1:79:82:d1:71:30:e3:bf:ac:a6:70:22:82:17:38: c0:79:b4:7b:a6:92:ad:55:72:5b:61:14:f5:85:ca:51:9d:1e: 8c:e1:7c:6b:2b:c3:de:47:26:05:2a:62:4e:b5:d1:91:3c:1e: 74:85:97:c7:78:7a:86:43:92:4f:2c:1b:51:ca:09:0f:da:8d: d4:0a:06:b0:ab:be:27:d9:60:27:ff:cb:ee:b4:9f:88:ab:04: 05:4a:45:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11yWOabTJK1kLj7dfBTVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWJkMTlkYTk4YzI3ZmFiYWI3YjJmMjk0YmNmOWVjNmFm NDQ5MDUwHhcNMjUxMjE5MDkwMDUwWhcNMjUxMjIwMDkwMDUwWjAzMTEwLwYDVQQD EyhhZDAzODhjZDdhOTA1OTI0NjEzYjM4ZjdkNDhhZjI0YjYyMDI4YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxtW47mn/7oA1ioXGbQV5XNjxuyT Uz0mslpJpwhz66KSWip7ofGubqJktKIz8SvbWJ2vPpRXLvvQqEER+PlamDh+GDxB dVq3JAxzHKgxfx+ZZyaesYbK9+MsSHxq/gLg4F176Pc47H8UzmT46WvpJIBIuM/j WcfE0St9U3EXvYxRSKTsBxJv6KUXvDvhEIbcbPxynWUhMvdvyEHA16+380OLeAOG HJN7iHncyki0o4uZHKtAcNuFkXBM2kQfCK077R8gkinxFV0+JXkdBB8/yGXLNaCh CTk8PWqGCIYP02++qTufUf9Sb7VHGDbVHsdhshpROzu7dB6KQ8velO/B2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0DiM16kFkkYTs499SK8ktiAoqPMB8GA1UdIwQY MBaAFG3r0Z2pjCf6urey8pS8+exq9EkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzct MjY0YWI5MzM3ZmEwLzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzctMjY0YWI5MzM3ZmEw LzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1nZswMU Gzswgu+jJ+pKU4OBwsGeKHh+rvXUetvgutjIoKS5RxKfKuUDWlpvePB1CFF30CLv kQZL7wExILxYNs5fuFKUu9WdqCw4hA/nXEk06U86MATewLjeT5otc6XA2P8JTI7T Gj5lEUbWxUPouzMYDkxrgwWELkUMtbJo1n8n8C0T5uf5VXXnRkZbMPMfkCBb62wA zoUKkAB1xqmKcGblz0yPwXmC0XEw47+spnAighc4wHm0e6aSrVVyW2EU9YXKUZ0e jOF8ayvD3kcmBSpiTrXRkTwedIWXx3h6hkOSTywbUcoJD9qN1AoGsKu+J9lgJ//L 7rSfiKsEBUpF6g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:29 2025 by rpki-client