This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json) Hash identifier: gJmLFPsXjGMMjkMS39b5wHskZ8p8BvgbIv1j1zWIC1E= Subject key identifier: C4:7D:11:F8:1C:22:4A:D6:C0:E5:2F:2A:5D:D5:0A:9F:0B:42:1B:00 Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Certificate serial: 019AF12CFAA81E38DEA5D174C4DEDC8CA101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=) 2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: r4XKZdq3oUZ4DTbLrgShHDuJrHHakI6/DOhtHr0xfV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fa:a8:1e:38:de:a5:d1:74:c4:de:dc:8c:a1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=c47d11f81c224ad6c0e52f2a5dd50a9f0b421b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:f6:fd:51:8b:0a:cf:f6:8a:ec:93:57:17: 02:d5:90:d9:89:af:b5:40:4a:8e:e7:f5:36:7b:2f: cd:cf:da:8b:f2:8b:28:8d:49:f9:9b:45:92:d2:3f: ed:7b:d4:3b:21:49:af:08:89:75:29:63:f6:dc:10: 80:8f:63:e6:a9:5f:12:71:fc:28:bc:22:f9:b2:6c: e1:ac:62:a5:f7:ea:21:0f:0d:1f:18:54:43:eb:d4: 96:73:f0:0c:a6:9f:74:d2:ee:a4:5f:22:2e:46:1a: e5:e1:c1:d1:10:b8:6d:43:17:80:4f:f4:dc:77:ea: ed:44:0f:1f:97:49:99:37:e3:0a:bb:cc:0c:0d:66: 95:50:8d:a6:6b:c4:f7:34:0a:9d:5e:9b:f3:39:92: 11:e0:bb:09:a1:c2:34:8c:15:58:19:b5:20:67:86: df:bf:9d:59:7d:d2:9c:60:d0:be:76:0f:1d:48:25: a7:6a:81:ff:50:dd:10:eb:10:9a:ee:ef:9f:67:2b: ee:90:70:c7:86:be:e5:d9:f5:24:2f:ca:84:e6:1e: b4:8a:9f:0a:72:ed:7c:e8:ec:fa:c3:a0:a0:2a:66: 44:51:18:77:fc:88:d8:61:28:61:9b:8b:74:1e:9d: fd:97:7e:0b:db:d9:3b:ab:b2:ab:81:e7:46:aa:4e: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:11:F8:1C:22:4A:D6:C0:E5:2F:2A:5D:D5:0A:9F:0B:42:1B:00 X509v3 Authority Key Identifier: keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:12:e3:ce:8f:c6:4a:c7:3a:d7:d4:bc:82:18:bb:8a:72:39: 58:f9:67:0f:42:4e:53:e6:88:85:57:53:4f:8f:ae:3e:4d:a6: 85:4e:aa:fc:cb:c2:46:de:53:95:f1:70:cd:2a:cb:99:da:d7: a2:71:b2:7e:0f:b2:a3:7c:68:45:42:3a:ff:7e:f8:91:5f:03: a8:31:df:45:9a:82:bb:c1:44:36:8f:f3:2d:d7:42:25:30:36: 80:db:33:6e:32:66:7c:e6:f2:bc:89:b4:f2:b2:58:93:d6:87: 64:45:c3:ae:71:00:7b:94:e6:8b:a1:00:fc:d6:46:38:cc:c8: 89:00:9c:97:ba:d1:b3:c8:8d:c9:12:70:c2:f4:c0:31:c6:54: c8:56:e7:42:90:ea:b2:e0:b4:e2:3a:60:84:58:73:af:b6:ef: 1e:b0:c1:1f:f2:09:fd:96:d5:2f:11:11:21:7c:d3:73:b2:8f: e1:d9:39:cc:91:9f:cf:57:b5:30:bc:01:10:5f:7c:49:1a:8f: b1:7a:35:45:6d:82:d1:a8:06:6e:06:0a:a4:fb:66:8b:d1:d7: ab:78:0e:bf:2b:0c:13:76:b0:1f:0a:a9:51:4e:9a:95:4b:f1: c5:43:53:22:9a:21:f4:19:56:3d:b2:09:e9:bd:91:4b:5e:08: ab:f6:8e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPqoHjjepdF0xN7cjKEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi NWQ3MmEwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhjNDdkMTFmODFjMjI0YWQ2YzBlNTJmMmE1ZGQ1MGE5ZjBiNDIxYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY72/VGLCs/2iuyTVxcC1ZDZia+1 QEqO5/U2ey/Nz9qL8osojUn5m0WS0j/te9Q7IUmvCIl1KWP23BCAj2PmqV8Scfwo vCL5smzhrGKl9+ohDw0fGFRD69SWc/AMpp900u6kXyIuRhrl4cHRELhtQxeAT/Tc d+rtRA8fl0mZN+MKu8wMDWaVUI2ma8T3NAqdXpvzOZIR4LsJocI0jBVYGbUgZ4bf v51ZfdKcYNC+dg8dSCWnaoH/UN0Q6xCa7u+fZyvukHDHhr7l2fUkL8qE5h60ip8K cu186Oz6w6CgKmZEURh3/IjYYShhm4t0Hp39l34L29k7q7KrgedGqk6BkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR9EfgcIkrWwOUvKl3VCp8LQhsAMB8GA1UdIwQY MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt MWE5YWJhYjI0ZGM5LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5 LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThLjzo/G Ssc619S8ghi7inI5WPlnD0JOU+aIhVdTT4+uPk2mhU6q/MvCRt5TlfFwzSrLmdrX onGyfg+yo3xoRUI6/374kV8DqDHfRZqCu8FENo/zLddCJTA2gNszbjJmfObyvIm0 8rJYk9aHZEXDrnEAe5Tmi6EA/NZGOMzIiQCcl7rRs8iNyRJwwvTAMcZUyFbnQpDq suC04jpghFhzr7bvHrDBH/IJ/ZbVLxERIXzTc7KP4dk5zJGfz1e1MLwBEF98SRqP sXo1RW2C0agGbgYKpPtmi9HXq3gOvysME3awHwqpUU6alUvxxUNTIpoh9BlWPbIJ 6b2RS14Iq/aOPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:10 2025 by rpki-client