This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json) Hash identifier: yCFW6ftFSs/EWWat7wYXFz5SGoQR8SFjSA/IgZDeyDs= Subject key identifier: 3A:37:E8:1D:3F:90:6D:29:04:E3:0E:2E:63:DD:C4:45:6E:05:B7:61 Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Certificate serial: 019AF20939531727F8B2E22601E5B3F34A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft Manifest number: 0D62 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: WnLg7IN52g7SQ2H7SNxGRwqTCdmUNGIiIzvCWL9d7BY=) 2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:39:53:17:27:f8:b2:e2:26:01:e5:b3:f3:4a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=3a37e81d3f906d2904e30e2e63ddc4456e05b761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:21:71:80:92:2e:26:02:06:53:13:dd:1f: 88:03:6b:46:e9:9f:6b:06:6e:df:f7:41:9e:50:59: 05:51:bf:3b:a8:39:04:1f:49:5b:8f:ec:f7:f3:d9: b3:2c:88:ca:b9:8a:c7:31:ce:de:87:d7:e9:fd:13: f6:40:54:d3:47:13:67:28:f7:37:45:01:30:26:09: 41:cb:43:d3:28:8b:ff:7e:af:48:eb:ab:17:9e:52: 61:fc:9d:8a:78:54:89:6f:5f:30:07:37:94:8a:37: 08:3b:bb:fd:fc:dc:79:7c:52:09:e9:e9:4d:c0:56: 6d:84:84:ee:a2:91:80:56:40:7b:be:a3:f6:1b:b0: 56:bf:6b:ca:9f:8d:ba:47:d5:6e:55:25:cd:3e:f8: 85:9b:92:a3:dc:55:b6:a8:dd:2b:a1:53:c7:52:ec: 7f:7c:b9:b7:cb:3e:15:b2:15:15:4a:c0:52:fa:29: 76:8d:e6:14:97:51:3d:90:dd:66:01:3e:8d:6e:19: 37:5a:ef:b7:32:64:a0:1a:f0:fa:76:90:e5:03:55: b1:be:10:66:f8:ad:2b:b3:82:7f:2d:7a:9c:5d:eb: 94:90:3e:90:59:44:1e:45:92:d3:43:59:a3:8b:6a: 9d:b5:c2:40:a7:38:df:69:7d:c2:15:61:b7:35:c2: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:E8:1D:3F:90:6D:29:04:E3:0E:2E:63:DD:C4:45:6E:05:B7:61 X509v3 Authority Key Identifier: keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:79:16:ea:ba:5f:5e:2e:f6:ef:ea:12:70:33:fc:5d:ad:ef: a9:13:c5:a8:7d:68:1c:e6:69:8c:34:a3:99:c2:bd:2f:84:cb: 57:ee:85:a5:8e:fb:36:59:21:f9:39:01:e5:59:75:7b:85:23: ad:53:fa:1f:13:31:4e:c1:03:44:c1:2a:3a:fa:28:58:00:bf: 1c:84:c8:c0:19:67:d9:ba:97:d6:12:4c:dd:2e:5e:9b:3c:95: 9c:72:64:85:ad:69:42:80:5d:49:8b:74:11:b2:e0:c1:69:a3: dd:3b:79:e2:97:5e:70:8c:5c:d3:a5:a5:b5:03:b3:49:5f:c0: f3:33:e5:dc:a7:a0:b5:8c:70:91:43:bb:6a:9e:03:57:58:da: b4:4f:0b:ad:06:2c:16:26:6d:f3:31:55:0c:19:06:8e:f2:e7: 7e:48:6f:56:d8:67:c1:02:60:4a:5f:3a:ba:6a:28:fc:f2:ee: 6d:f0:16:99:73:83:7a:20:24:9b:ad:4b:b9:08:ea:f4:9f:a7: 5c:93:90:22:70:89:0e:44:ab:05:d4:e1:84:2f:f6:ff:58:13: 34:e8:4a:fe:02:ec:90:03:aa:82:82:9f:a3:35:d4:47:17:bb: d7:69:0b:c0:8d:52:60:f1:03:70:dc:e7:11:59:1b:8b:da:76: bd:dc:16:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTlTFyf4suImAeWz80pfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4 YWMxOWIwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygzYTM3ZTgxZDNmOTA2ZDI5MDRlMzBlMmU2M2RkYzQ0NTZlMDViNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylYhcYCSLiYCBlMT3R+IA2tG6Z9r Bm7f90GeUFkFUb87qDkEH0lbj+z389mzLIjKuYrHMc7eh9fp/RP2QFTTRxNnKPc3 RQEwJglBy0PTKIv/fq9I66sXnlJh/J2KeFSJb18wBzeUijcIO7v9/Nx5fFIJ6elN wFZthITuopGAVkB7vqP2G7BWv2vKn426R9VuVSXNPviFm5Kj3FW2qN0roVPHUux/ fLm3yz4VshUVSsBS+il2jeYUl1E9kN1mAT6Nbhk3Wu+3MmSgGvD6dpDlA1WxvhBm +K0rs4J/LXqcXeuUkD6QWUQeRZLTQ1mji2qdtcJApzjfaX3CFWG3NcK8YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo36B0/kG0pBOMOLmPdxEVuBbdhMB8GA1UdIwQY MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0 LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnkW6rpf Xi727+oScDP8Xa3vqRPFqH1oHOZpjDSjmcK9L4TLV+6FpY77Nlkh+TkB5Vl1e4Uj rVP6HxMxTsEDRMEqOvooWAC/HITIwBln2bqX1hJM3S5emzyVnHJkha1pQoBdSYt0 EbLgwWmj3Tt54pdecIxc06WltQOzSV/A8zPl3KegtYxwkUO7ap4DV1jatE8LrQYs FiZt8zFVDBkGjvLnfkhvVthnwQJgSl86umoo/PLubfAWmXODeiAkm61LuQjq9J+n XJOQInCJDkSrBdThhC/2/1gTNOhK/gLskAOqgoKfozXURxe712kLwI1SYPEDcNzn EVkbi9p2vdwW8w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:45 2025 by rpki-client