This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json) Hash identifier: DWtwS1nPjYgihUGb0mVlIz1aEgI8HzL9IvDltZwsncg= Subject key identifier: 9F:6D:A2:89:C4:FF:77:2D:25:7A:0C:A7:D4:71:65:52:F4:04:37:F8 Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983 Certificate serial: 019B394625B31655CCA2DBFAEDE8C25E7827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 01:00:56 +0000 Manifest this update: Sat 20 Dec 2025 01:00:56 +0000 Manifest next update: Sun 21 Dec 2025 01:00:56 +0000 Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=) 2: Saw4YI-N1hXUw3k4MBu_PDw68cQ.roa (hash: A9ruPFPWY4kZ2E24/0zrIMK5qpBuF+PtTYNLIob0+wQ=) 3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: vT8m/UoMiy8BgIzONLDmE6aO4of3B+55Jclgq7EBU18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:25:b3:16:55:cc:a2:db:fa:ed:e8:c2:5e:78:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983 Validity Not Before: Dec 20 01:00:56 2025 GMT Not After : Dec 21 01:00:56 2025 GMT Subject: CN=9f6da289c4ff772d257a0ca7d4716552f40437f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:cb:59:9c:6a:80:72:f8:08:7b:94:6f:59: 51:8a:39:cc:c1:34:52:51:23:aa:a0:65:ff:ef:93: 37:22:cb:5e:90:fc:bd:f5:03:f2:12:b2:78:98:b6: 10:d1:93:be:e8:6b:ff:e5:6f:a2:31:01:b3:ea:83: c4:dc:06:3f:e0:bd:62:40:c2:93:c8:54:05:58:7b: bf:8c:10:97:43:0a:39:12:6c:60:cd:11:5a:51:39: 12:23:6e:d1:31:eb:c7:d1:92:3c:3c:74:2a:19:49: 47:c3:76:93:52:61:cd:fc:bc:95:23:be:b5:a7:d5: a4:4b:e2:e1:30:5e:95:90:e7:64:8a:1d:7d:75:b2: ee:d2:29:db:e1:00:4d:c3:bd:d7:1c:3a:a9:21:37: 34:d3:ce:f3:28:79:1c:24:b2:93:94:5e:d5:2f:5f: 8f:c7:76:ac:67:88:a9:23:14:fe:ca:af:bf:b6:ad: f2:25:c1:4e:ef:b8:4e:8b:95:28:30:45:15:ab:9b: 6f:61:b7:ee:54:0a:04:20:b1:1a:f8:4e:ac:b6:53: 59:32:c3:0c:b5:92:83:50:48:83:f5:45:ff:25:99: 37:d6:08:15:e0:2d:43:cd:c0:cf:b2:ed:dc:29:db: 63:ff:dd:6b:a4:77:19:ad:af:60:1d:02:dd:5d:a2: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6D:A2:89:C4:FF:77:2D:25:7A:0C:A7:D4:71:65:52:F4:04:37:F8 X509v3 Authority Key Identifier: keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5f:f7:35:cf:18:35:92:13:81:38:a9:ee:02:64:bc:20:bc: 30:98:bc:f9:59:af:0a:b9:f0:cc:1d:4f:05:5b:3f:73:0a:37: 2d:82:2f:90:ad:b2:42:ac:3d:f1:f9:d8:6b:ec:57:03:5c:9b: cb:86:c5:d1:56:85:dd:aa:37:2c:7e:f2:b8:67:08:1e:78:3b: 71:39:b2:ec:97:c8:7d:32:d5:03:13:79:ec:2d:b6:d4:db:10: c0:f3:e0:a6:98:9c:d9:36:7c:07:da:04:e8:c4:1d:e6:28:ac: 39:c0:81:43:2f:85:f0:d0:c9:7e:3a:f5:c6:15:42:8d:5e:32: 20:66:66:d6:a9:85:9d:60:85:cf:c3:54:fa:c9:7d:8b:b9:9d: 68:cf:90:19:0b:ab:89:a3:fc:41:cc:57:7e:da:60:ab:fc:ac: c1:4b:67:f2:cc:3f:7a:13:df:32:af:a5:15:a3:b4:60:00:c3: 80:26:3a:48:63:bf:91:cd:1a:50:db:5c:a8:c7:2f:7e:ba:9b: 4a:44:0c:cf:a4:d8:bb:7d:1f:8e:e7:33:c9:8c:6a:3d:20:34: 2c:10:11:f7:98:df:40:5f:6f:0e:bd:03:06:34:bf:81:00:18: c2:9e:3b:95:ee:b5:67:5f:42:cc:ba:5e:98:c4:05:4c:8a:3f: 74:67:db:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RiWzFlXMotv67ejCXngnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh MTk5ODMwHhcNMjUxMjIwMDEwMDU2WhcNMjUxMjIxMDEwMDU2WjAzMTEwLwYDVQQD Eyg5ZjZkYTI4OWM0ZmY3NzJkMjU3YTBjYTdkNDcxNjU1MmY0MDQzN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BvLWZxqgHL4CHuUb1lRijnMwTRS USOqoGX/75M3IstekPy99QPyErJ4mLYQ0ZO+6Gv/5W+iMQGz6oPE3AY/4L1iQMKT yFQFWHu/jBCXQwo5EmxgzRFaUTkSI27RMevH0ZI8PHQqGUlHw3aTUmHN/LyVI761 p9WkS+LhMF6VkOdkih19dbLu0inb4QBNw73XHDqpITc0087zKHkcJLKTlF7VL1+P x3asZ4ipIxT+yq+/tq3yJcFO77hOi5UoMEUVq5tvYbfuVAoEILEa+E6stlNZMsMM tZKDUEiD9UX/JZk31ggV4C1DzcDPsu3cKdtj/91rpHcZra9gHQLdXaIBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9toonE/3ctJXoMp9RxZVL0BDf4MB8GA1UdIwQY MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5 LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV/3Nc8Y NZITgTip7gJkvCC8MJi8+VmvCrnwzB1PBVs/cwo3LYIvkK2yQqw98fnYa+xXA1yb y4bF0VaF3ao3LH7yuGcIHng7cTmy7JfIfTLVAxN57C221NsQwPPgppic2TZ8B9oE 6MQd5iisOcCBQy+F8NDJfjr1xhVCjV4yIGZm1qmFnWCFz8NU+sl9i7mdaM+QGQur iaP8QcxXftpgq/yswUtn8sw/ehPfMq+lFaO0YADDgCY6SGO/kc0aUNtcqMcvfrqb SkQMz6TYu30fjuczyYxqPSA0LBAR95jfQF9vDr0DBjS/gQAYwp47le61Z19CzLpe mMQFTIo/dGfbtw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:18:27 2025 by rpki-client