This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json) Hash identifier: S3Z1vUXNLMu5rmH65hmGlEIdFSgMaD1XNhmFKVt37H0= Subject key identifier: B6:EF:8A:C7:EB:C0:89:9E:0A:7C:9F:61:9E:1D:C6:E8:23:36:7A:6F Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B126FC41E1D053E8A9496190C3A584AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft Manifest number: 1777 Signing time: Fri 12 Dec 2025 12:01:13 +0000 Manifest this update: Fri 12 Dec 2025 12:01:13 +0000 Manifest next update: Sat 13 Dec 2025 12:01:13 +0000 Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=) 2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: 7O+KBRyfVwu3wiYgohYYKHjo5gj6dWQwSV8MSSUQhLE=) 3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:c4:1e:1d:05:3e:8a:94:96:19:0c:3a:58:4a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Dec 12 12:01:13 2025 GMT Not After : Dec 13 12:01:13 2025 GMT Subject: CN=b6ef8ac7ebc0899e0a7c9f619e1dc6e823367a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:67:ba:a5:13:53:3e:05:70:50:7f:9b:a8: 78:62:74:33:8a:1f:79:01:3c:39:8b:c7:50:25:ea: dd:5d:92:a5:67:87:f1:26:1e:26:14:af:d6:2c:d9: 13:6f:dd:e5:c1:f8:f6:da:a0:f8:6f:c2:46:80:dc: 7b:ef:01:f5:67:ec:ed:0d:4a:bd:42:dc:e6:30:7a: 08:e0:32:9e:cc:03:2b:9c:4d:03:35:96:34:17:97: 39:e1:d7:c2:38:86:4b:ec:f1:c9:c6:f9:6b:cb:e3: a0:2c:5c:23:b6:48:92:79:0e:69:84:90:e9:b7:bc: d1:10:57:7f:2d:9a:23:41:a5:6a:cc:bf:cf:72:8f: da:3c:40:90:9c:d1:99:e0:3c:4d:b4:71:cc:0c:7b: 91:84:09:5f:07:6f:07:95:7d:e1:0a:e9:b6:89:e2: 49:5c:3c:7f:68:17:c4:53:40:a3:fe:10:a3:4f:a3: ff:d9:3d:7f:34:ad:8d:c5:ce:3b:af:28:d2:03:d3: af:d2:32:24:96:f0:4e:6b:0e:60:65:3e:c1:3a:81: dc:5f:2f:b1:18:43:15:62:3b:2c:c9:2d:b8:b9:a4: 79:c0:f3:db:51:61:70:8c:01:6a:a8:68:c7:d9:9d: 14:53:36:8b:bf:0f:25:26:33:ec:7f:ad:0b:4c:17: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EF:8A:C7:EB:C0:89:9E:0A:7C:9F:61:9E:1D:C6:E8:23:36:7A:6F X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ab:15:5a:34:14:5a:ce:24:d5:34:c7:5e:72:37:ca:ee:34: 71:67:5f:92:ba:25:b4:50:81:6a:ad:97:89:4a:ac:b9:d0:d0: ba:94:f5:f2:d6:06:84:d4:38:c6:1b:a1:35:bb:0e:db:ca:99: e1:ed:32:c3:cb:db:69:79:c7:44:4a:6e:d1:dd:69:4c:77:52: 35:16:4c:51:ac:60:80:91:c8:0b:3f:0a:c6:9f:64:70:8f:48: 1c:cd:4c:f4:18:da:da:56:fa:b3:45:36:d6:20:14:a2:9a:54: d1:c4:64:ee:28:3b:12:bf:f7:f4:be:af:d7:04:5c:cf:f7:7b: 5c:d0:4d:5a:8d:a6:31:ea:f8:b6:d9:be:35:e1:64:02:64:a3: d7:55:9d:78:eb:31:07:0c:0d:9d:0b:e7:9d:fa:1b:68:7b:11: 97:5c:66:33:29:fa:19:30:be:7d:16:68:4d:29:40:ac:61:6c: 4a:69:a6:1d:f7:f6:95:62:0d:a2:d5:b9:b6:53:ad:21:34:dd: f1:65:32:a0:fc:f7:b5:04:c4:3f:34:ce:c1:96:cc:b0:01:16: b0:57:01:fc:bf:ee:b8:b0:d1:86:40:d8:f0:aa:e0:4f:5f:8f: c1:79:89:38:4d:96:1a:fb:40:bd:58:81:51:d2:56:41:56:10: cf:83:d3:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb8QeHQU+ipSWGQw6WErmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjUxMjEyMTIwMTEzWhcNMjUxMjEzMTIwMTEzWjAzMTEwLwYDVQQD EyhiNmVmOGFjN2ViYzA4OTllMGE3YzlmNjE5ZTFkYzZlODIzMzY3YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizhnuqUTUz4FcFB/m6h4YnQzih95 ATw5i8dQJerdXZKlZ4fxJh4mFK/WLNkTb93lwfj22qD4b8JGgNx77wH1Z+ztDUq9 QtzmMHoI4DKezAMrnE0DNZY0F5c54dfCOIZL7PHJxvlry+OgLFwjtkiSeQ5phJDp t7zREFd/LZojQaVqzL/Pco/aPECQnNGZ4DxNtHHMDHuRhAlfB28HlX3hCum2ieJJ XDx/aBfEU0Cj/hCjT6P/2T1/NK2Nxc47ryjSA9Ov0jIklvBOaw5gZT7BOoHcXy+x GEMVYjssyS24uaR5wPPbUWFwjAFqqGjH2Z0UUzaLvw8lJjPsf60LTBceawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbvisfrwImeCnyfYZ4dxugjNnpvMB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKsVWjQU Ws4k1TTHXnI3yu40cWdfkroltFCBaq2XiUqsudDQupT18tYGhNQ4xhuhNbsO28qZ 4e0yw8vbaXnHREpu0d1pTHdSNRZMUaxggJHICz8Kxp9kcI9IHM1M9Bja2lb6s0U2 1iAUoppU0cRk7ig7Er/39L6v1wRcz/d7XNBNWo2mMer4ttm+NeFkAmSj11WdeOsx BwwNnQvnnfobaHsRl1xmMyn6GTC+fRZoTSlArGFsSmmmHff2lWINotW5tlOtITTd 8WUyoPz3tQTEPzTOwZbMsAEWsFcB/L/uuLDRhkDY8KrgT1+PwXmJOE2WGvtAvViB UdJWQVYQz4PTtQ== -----END CERTIFICATE-----Generated at Fri Dec 12 17:10:28 2025 by rpki-client