This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json) Hash identifier: 18UiddGt/xo2O82RmeXFXPTmXj4E5rHJR7hBVP+Kmu4= Subject key identifier: 85:80:1C:31:6A:BF:D0:F5:0A:8A:01:B0:4A:7A:44:CD:61:0E:B7:94 Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43 Certificate serial: 019AF1D1C144831EA3509C0071D87A96CB83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft Manifest number: 128E Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: LA7pybYgLFEbcttqHC8RCPvQ9wBSZ5d+R7Pzv21aIfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:44:83:1e:a3:50:9c:00:71:d8:7a:96:cb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=85801c316abfd0f50a8a01b04a7a44cd610eb794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:92:fe:56:41:f7:9c:1e:33:17:12:c4:da: 23:f5:37:0f:33:45:7c:ca:15:b3:7e:a0:a4:33:53: b4:b0:79:d1:72:69:45:49:0d:47:8a:b8:a8:fb:fa: 3d:ae:f1:dd:4d:0b:df:e2:93:cd:0b:5f:3f:4c:29: 5d:a3:40:35:78:c8:25:2a:91:69:15:69:6f:45:6b: aa:e6:5a:82:91:f7:58:5f:60:83:16:18:a4:d4:fa: 91:c8:79:6c:ac:69:4f:5b:fa:bc:63:70:e5:2d:54: 8f:b4:a1:85:4b:e8:3c:92:81:12:64:13:0c:f6:0a: ca:0d:ea:11:81:0d:62:2a:f7:07:81:8b:97:67:4d: 68:75:95:55:12:20:16:f7:0c:11:77:02:53:d5:ae: 6c:fa:55:80:cf:58:fb:61:7e:60:24:86:bc:e5:6f: b3:86:62:bd:e6:1e:63:75:5e:80:db:ac:3a:8c:0c: e3:a8:d3:4e:35:43:28:79:c3:82:8b:7e:3c:ea:e0: f3:b0:e2:36:7a:27:2e:ad:61:dc:df:a7:64:c5:93: 7f:d7:aa:e3:bd:18:d1:51:01:7f:a9:7d:db:e6:0f: 43:eb:6f:45:c1:50:25:9d:b2:4a:76:4b:a8:6a:a4: 09:94:8c:fc:3a:0f:13:75:3e:ef:dd:0c:cc:7e:ac: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:80:1C:31:6A:BF:D0:F5:0A:8A:01:B0:4A:7A:44:CD:61:0E:B7:94 X509v3 Authority Key Identifier: keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:41:ce:51:03:c4:7d:a4:ea:67:ae:72:13:ff:9b:c9:93:b0: 11:69:ee:51:65:47:d8:4a:02:4d:1f:e2:f1:0c:34:ad:81:1e: de:76:e8:be:9c:67:a5:d3:fa:8a:38:0b:e4:46:27:9f:35:e5: 18:ee:c6:c9:8f:6b:26:59:64:82:34:63:6f:e1:ac:88:7e:0e: a5:d7:ca:e5:28:98:d0:39:9b:26:8c:a1:41:e5:1c:03:c2:ff: d8:fb:b9:18:a7:a1:aa:ba:56:8d:2e:14:01:23:6a:b9:7d:3a: f6:f3:6b:c1:70:e3:bb:05:e7:8e:12:e2:03:65:5c:de:79:4c: 46:27:4e:76:9e:37:c6:03:9e:69:5c:8a:99:e3:31:bb:b1:4c: 3d:f4:54:f7:38:9c:d7:a3:49:19:9d:a6:fb:0a:4f:ec:76:eb: 3a:73:89:13:4c:28:30:36:7b:49:84:7b:0f:14:94:a2:96:27: e1:7e:02:38:0d:56:d5:c5:30:a9:8a:6a:b8:1d:4c:47:6b:53: 46:d9:e3:6a:88:57:26:16:7f:9d:b5:c6:69:c2:78:86:21:d8: 1f:07:55:a2:79:1e:0b:e9:e8:f0:e0:bf:78:50:1f:c1:d4:cb: c2:14:6f:e2:d5:31:32:60:ec:62:27:1e:17:46:82:ab:6a:3c: 4c:0a:85:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cFEgx6jUJwAcdh6lsuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWQzNmM2NTY0NmRhY2IxMTRhYTcyYzFiYmNiNzQxODFi N2ZmNDMwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg4NTgwMWMzMTZhYmZkMGY1MGE4YTAxYjA0YTdhNDRjZDYxMGViNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/GS/lZB95weMxcSxNoj9TcPM0V8 yhWzfqCkM1O0sHnRcmlFSQ1Hirio+/o9rvHdTQvf4pPNC18/TCldo0A1eMglKpFp FWlvRWuq5lqCkfdYX2CDFhik1PqRyHlsrGlPW/q8Y3DlLVSPtKGFS+g8koESZBMM 9grKDeoRgQ1iKvcHgYuXZ01odZVVEiAW9wwRdwJT1a5s+lWAz1j7YX5gJIa85W+z hmK95h5jdV6A26w6jAzjqNNONUMoecOCi3486uDzsOI2eicurWHc36dkxZN/16rj vRjRUQF/qX3b5g9D629FwVAlnbJKdkuoaqQJlIz8Og8TdT7v3QzMfqx1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWAHDFqv9D1CooBsEp6RM1hDreUMB8GA1UdIwQY MBaAFAXtNsZWRtrLEUqnLBu8t0GBt/9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQt OGRkZGI5YzM0ZDk3LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQtOGRkZGI5YzM0ZDk3 LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUHOUQPE faTqZ65yE/+byZOwEWnuUWVH2EoCTR/i8Qw0rYEe3nbovpxnpdP6ijgL5EYnnzXl GO7GyY9rJllkgjRjb+GsiH4OpdfK5SiY0DmbJoyhQeUcA8L/2Pu5GKehqrpWjS4U ASNquX069vNrwXDjuwXnjhLiA2Vc3nlMRidOdp43xgOeaVyKmeMxu7FMPfRU9zic 16NJGZ2m+wpP7HbrOnOJE0woMDZ7SYR7DxSUopYn4X4COA1W1cUwqYpquB1MR2tT RtnjaohXJhZ/nbXGacJ4hiHYHwdVonkeC+no8OC/eFAfwdTLwhRv4tUxMmDsYice F0aCq2o8TAqFJw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:59 2025 by rpki-client