This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json) Hash identifier: BXQfIXCWnBbEszVpnCWJLsiP6XAEziIFDf0QU0jjBv8= Subject key identifier: 0C:95:28:7B:B9:4C:85:38:EB:D5:C5:7B:4E:68:25:F3:DC:AD:8F:32 Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7 Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7 Certificate serial: 019AF541222F66DCA68EBB619B8A0EE5280A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft Manifest number: 0D35 Signing time: Sat 06 Dec 2025 20:01:17 +0000 Manifest this update: Sat 06 Dec 2025 20:01:17 +0000 Manifest next update: Sun 07 Dec 2025 20:01:17 +0000 Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: naKzXtwm40wtM5+MkSITxsf4vNgOB/XkuVBjIgd4o1k=) 2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:22:2f:66:dc:a6:8e:bb:61:9b:8a:0e:e5:28:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7 Validity Not Before: Dec 6 20:01:17 2025 GMT Not After : Dec 7 20:01:17 2025 GMT Subject: CN=0c95287bb94c8538ebd5c57b4e6825f3dcad8f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8d:52:2c:ba:e2:49:81:12:4d:35:4c:32:de: ba:82:f8:7f:8d:4c:3d:55:6d:8f:4a:c4:a8:a4:f1: 5d:e4:56:ff:bb:b3:bb:99:54:c2:d6:1e:e3:28:ac: 2b:30:0c:48:41:48:95:e8:bd:e4:02:a5:69:74:41: 1a:33:5c:d5:a8:96:44:b6:cf:ee:75:43:46:c1:4f: f5:c4:73:cc:90:4c:4f:4c:98:95:01:11:97:6d:24: 25:28:21:ad:ae:e6:31:e9:b5:f7:7a:90:79:8a:31: 9f:5d:ec:87:5b:ed:81:1e:71:c8:6a:ed:ff:93:86: 96:e8:4a:05:15:fb:7e:11:a4:ac:14:34:80:c2:0d: 86:8d:81:9f:c5:a3:89:e4:f0:bd:17:46:d1:4f:db: 23:8b:18:2b:a1:e9:e2:13:39:e3:28:d3:d6:cb:91: 66:b6:fe:63:1c:a4:80:59:84:7b:84:9d:e1:b9:eb: 1a:a3:1d:91:03:b0:e8:32:ef:c7:86:e3:25:a4:49: f6:47:c4:01:f0:27:4a:da:d0:3d:e9:3e:41:5e:da: 97:1d:0b:09:1f:36:09:a6:9c:0d:15:c2:be:b7:42: 8d:c4:cb:c5:3b:41:43:a4:c7:e2:94:45:e4:79:30: f2:2f:2a:7a:e5:28:ee:39:61:2d:af:4b:0f:f9:6e: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:95:28:7B:B9:4C:85:38:EB:D5:C5:7B:4E:68:25:F3:DC:AD:8F:32 X509v3 Authority Key Identifier: keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c3:34:e4:9a:98:63:fe:7d:be:09:e3:bc:db:7a:ef:07:6e: 7f:ed:a8:98:33:92:83:f8:a0:86:26:fd:e6:bb:4b:0a:e1:8c: 38:ae:70:aa:77:dd:83:af:1f:4a:37:54:67:43:ba:1e:d2:88: d6:d6:1e:5d:12:af:9f:ce:5e:fe:b0:04:a7:6e:e4:cc:68:90: 67:9d:cc:14:83:40:6f:05:85:38:37:33:35:0b:d5:53:aa:ac: 26:39:50:97:2e:e0:8c:26:54:eb:af:04:9f:22:1e:40:5d:1d: c6:76:f7:84:72:fc:aa:94:fa:b6:bd:86:e8:63:cb:68:aa:65: cf:d3:c6:90:48:48:6c:9f:6f:4d:08:52:2f:c1:ec:6d:d0:f1: 9d:35:54:ef:cd:c5:b9:f9:ca:ec:98:a9:c4:b5:42:07:4b:88: 3c:5b:1a:46:83:f1:c8:c7:5e:f2:c8:97:7a:6b:b7:86:8a:c4: 05:7a:6d:04:cb:ab:fc:c4:c0:cb:6a:86:87:92:00:41:db:18: e4:d1:c1:6c:f7:07:de:78:63:e5:d5:88:e0:94:58:cd:ec:71: ee:3a:86:f5:30:0c:2b:9f:17:96:5b:99:6b:be:c4:b5:00:8d: 46:72:2e:cf:d3:28:eb:3c:5e:d8:e7:3c:ad:e7:2b:86:5d:a8: b3:57:81:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSIvZtymjrthm4oO5SgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNDk5ZWVhMWYwOWQwMTEyMjUyOGQ0MTc1NGQzN2M1Y2Fh MzRiYTcwHhcNMjUxMjA2MjAwMTE3WhcNMjUxMjA3MjAwMTE3WjAzMTEwLwYDVQQD EygwYzk1Mjg3YmI5NGM4NTM4ZWJkNWM1N2I0ZTY4MjVmM2RjYWQ4ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI1SLLriSYESTTVMMt66gvh/jUw9 VW2PSsSopPFd5Fb/u7O7mVTC1h7jKKwrMAxIQUiV6L3kAqVpdEEaM1zVqJZEts/u dUNGwU/1xHPMkExPTJiVARGXbSQlKCGtruYx6bX3epB5ijGfXeyHW+2BHnHIau3/ k4aW6EoFFft+EaSsFDSAwg2GjYGfxaOJ5PC9F0bRT9sjixgroeniEznjKNPWy5Fm tv5jHKSAWYR7hJ3huesaox2RA7DoMu/HhuMlpEn2R8QB8CdK2tA96T5BXtqXHQsJ HzYJppwNFcK+t0KNxMvFO0FDpMfilEXkeTDyLyp65SjuOWEtr0sP+W4MCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyVKHu5TIU469XFe05oJfPcrY8yMB8GA1UdIwQY MBaAFGxJnuofCdARIlKNQXVNN8XKo0unMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEt N2ZkZGQyMjIwMmJmLzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEtN2ZkZGQyMjIwMmJm LzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsM05JqY Y/59vgnjvNt67wduf+2omDOSg/ighib95rtLCuGMOK5wqnfdg68fSjdUZ0O6HtKI 1tYeXRKvn85e/rAEp27kzGiQZ53MFINAbwWFODczNQvVU6qsJjlQly7gjCZU668E nyIeQF0dxnb3hHL8qpT6tr2G6GPLaKplz9PGkEhIbJ9vTQhSL8HsbdDxnTVU783F ufnK7JipxLVCB0uIPFsaRoPxyMde8siXemu3horEBXptBMur/MTAy2qGh5IAQdsY 5NHBbPcH3nhj5dWI4JRYzexx7jqG9TAMK58XlluZa77EtQCNRnIuz9Mo6zxe2Oc8 recrhl2os1eBWg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:33 2025 by rpki-client