This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json) Hash identifier: 1/pu8d6MSP9zTnATXhqHQ9ymVNBBxxjyMrrIHzPkFpI= Subject key identifier: 3B:1C:93:0A:29:E8:D1:C5:4E:3D:5D:5C:BD:41:7C:14:E2:24:D7:30 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019AF2090CBD0D7ECAD28895785E34728A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (hash: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk=) 2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: 37jPc9mzKxYHczisR/N/l8VjYSLv1GmOkyxa7IqGz6E=) 3: HGTWQmwsO_jbSec4ZsPysoI13ak.roa (hash: GJRWwpuaz80Q8HV2RPloUktasT/iZdp6LYSzg5Ixo8A=) 4: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (hash: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0c:bd:0d:7e:ca:d2:88:95:78:5e:34:72:8a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=3b1c930a29e8d1c54e3d5d5cbd417c14e224d730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:58:36:2d:43:49:ed:0d:15:ce:2c:6c:2a: 9b:d6:95:fd:e3:bf:41:93:27:7f:4b:ae:5a:04:27: a2:06:a4:e1:07:ad:66:4a:a9:20:12:ce:05:87:fc: 8f:b1:0f:4f:84:5a:d8:96:64:14:32:f1:a7:db:85: e2:f2:b9:92:2b:32:79:dd:6a:82:fe:b1:ec:ea:94: cf:c4:e3:e8:dc:d3:a1:51:ad:16:64:99:50:b6:3e: ab:74:40:eb:dd:28:c3:3c:b9:c2:d0:14:ee:90:67: ae:14:d6:09:de:8e:21:49:c8:65:09:85:6f:38:78: bb:be:82:8e:8e:ef:e6:26:c0:2c:64:bc:3a:bc:3e: 97:90:c5:9f:b0:ee:5f:c8:5e:5c:7f:23:20:dd:fd: a0:d1:4c:01:aa:fc:68:d2:a8:60:97:a7:c1:c6:d8: 64:b3:df:84:d2:8d:bc:95:86:1e:f5:b5:97:e3:1a: d6:55:1a:79:4e:63:4b:d4:08:38:cf:37:1f:ce:89: bc:6e:da:ba:cd:29:29:3d:44:a7:3a:76:ea:a4:6a: bb:2b:7c:6b:d5:9d:1f:b0:f6:a5:89:83:f1:66:b6: 9b:38:e5:fb:af:b7:2d:99:40:09:f9:43:ca:20:f8: 6c:32:68:0e:bd:5e:23:c7:c9:c7:19:e8:75:fb:1a: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:93:0A:29:E8:D1:C5:4E:3D:5D:5C:BD:41:7C:14:E2:24:D7:30 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:30:e8:18:3d:9e:52:b7:bf:84:89:9e:e0:99:fc:da:e4:02: 8d:53:da:72:87:07:4e:d7:2f:19:aa:5c:74:26:68:c8:02:f2: c7:9b:bb:10:c0:a8:aa:39:42:04:6c:3d:a6:29:cf:1a:71:13: ce:01:7c:cb:ea:26:11:bc:9f:72:74:79:61:04:0e:bf:9b:84: 31:eb:00:df:8a:3f:bd:67:3d:a1:53:0a:fe:98:74:8a:21:8f: e5:84:f1:63:35:df:82:23:a0:ef:03:73:da:04:d1:7c:3d:88: c0:3d:a0:6c:4d:25:47:1e:95:f6:f1:0b:76:fa:52:80:56:21: f7:52:d8:c2:3e:cd:af:2e:30:42:76:2f:25:52:cc:ec:d5:c0: 5c:58:13:14:20:c7:91:9f:cc:f1:ff:a8:26:cd:2a:a9:87:47: 7f:65:64:86:65:83:a6:f9:06:90:44:d6:a9:96:a3:79:e6:95: 7f:a3:b9:f7:cc:a2:27:8c:cc:81:1b:a8:e8:4f:ec:9e:84:b0: 87:1b:a0:de:28:be:16:96:c3:eb:ca:0c:69:75:78:f0:d7:93: 20:23:27:e6:91:fe:c7:4d:2b:ea:f3:64:14:47:24:6c:f9:77: e9:43:45:d9:84:fd:d9:3a:cc:06:bf:16:dc:ce:18:61:46:b4: 97:11:87:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQy9DX7K0oiVeF40copsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EygzYjFjOTMwYTI5ZThkMWM1NGUzZDVkNWNiZDQxN2MxNGUyMjRkNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV5YNi1DSe0NFc4sbCqb1pX9479B kyd/S65aBCeiBqThB61mSqkgEs4Fh/yPsQ9PhFrYlmQUMvGn24Xi8rmSKzJ53WqC /rHs6pTPxOPo3NOhUa0WZJlQtj6rdEDr3SjDPLnC0BTukGeuFNYJ3o4hSchlCYVv OHi7voKOju/mJsAsZLw6vD6XkMWfsO5fyF5cfyMg3f2g0UwBqvxo0qhgl6fBxthk s9+E0o28lYYe9bWX4xrWVRp5TmNL1Ag4zzcfzom8btq6zSkpPUSnOnbqpGq7K3xr 1Z0fsPaliYPxZrabOOX7r7ctmUAJ+UPKIPhsMmgOvV4jx8nHGeh1+xqC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsckwop6NHFTj1dXL1BfBTiJNcwMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDDoGD2e Ure/hIme4Jn82uQCjVPacocHTtcvGapcdCZoyALyx5u7EMCoqjlCBGw9pinPGnET zgF8y+omEbyfcnR5YQQOv5uEMesA34o/vWc9oVMK/ph0iiGP5YTxYzXfgiOg7wNz 2gTRfD2IwD2gbE0lRx6V9vELdvpSgFYh91LYwj7Nry4wQnYvJVLM7NXAXFgTFCDH kZ/M8f+oJs0qqYdHf2VkhmWDpvkGkETWqZajeeaVf6O598yiJ4zMgRuo6E/snoSw hxug3ii+FpbD68oMaXV48NeTICMn5pH+x00r6vNkFEckbPl36UNF2YT92TrMBr8W 3M4YYUa0lxGHBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:42 2025 by rpki-client