This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft File: BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json) Hash identifier: MOr7pYmZvUiI5LSw7dPJqwrrzMMVAeN4LwjyQSFBk7k= Subject key identifier: F2:94:0B:84:70:84:B9:FD:A0:72:B7:E7:D3:5B:82:9A:B0:9E:CB:A8 Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 Certificate issuer: /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Certificate serial: 019AF12D3CB23D54E3866E604E53E38C8D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft Manifest number: 0825 Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: 3F/xBzbcURSVUR9WblnUbJFoXX7A540pumrseSRYE30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3c:b2:3d:54:e3:86:6e:60:4e:53:e3:8c:8d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=f2940b847084b9fda072b7e7d35b829ab09ecba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:b5:37:68:ac:20:bf:f7:5c:77:48:e5:29: 00:f7:74:09:ec:49:8a:d2:f4:da:ef:53:00:03:50: 4c:d2:14:2f:98:c5:79:c4:76:ec:fe:cc:dd:0b:10: 38:52:b8:de:21:0e:f5:e9:61:42:85:de:26:24:46: 0b:e9:49:6e:2b:99:c0:40:14:4b:da:12:62:53:f0: af:e2:99:40:a0:65:68:99:ec:b3:94:b4:73:16:24: 30:d7:98:d8:e0:8c:8b:a8:9d:e3:98:df:87:ab:20: d9:71:c3:59:17:e5:1e:66:3f:47:43:83:2c:29:fa: 27:05:1c:6f:1a:85:a8:cf:66:6f:72:05:e8:9f:1c: 2c:42:e0:b4:a9:93:f7:80:01:cf:c3:4d:ae:3d:98: da:cd:a5:d3:46:c9:57:1c:d5:57:b6:b6:bc:75:4e: 9c:df:f7:67:71:90:31:2f:b4:c7:54:5a:fd:55:82: 79:a8:d8:65:49:89:6e:c0:17:82:24:26:d7:77:a1: 6c:e7:f5:5c:f2:74:21:4b:1f:7c:c0:c6:38:cf:51: af:ae:ed:d4:cd:99:ad:64:85:0d:f5:a8:1c:c9:f0: 31:2b:a6:c5:66:cc:03:0b:96:23:a0:5c:3c:67:de: 5a:fd:40:0b:49:8a:ae:03:f5:8e:6e:d8:e3:71:b4: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:0B:84:70:84:B9:FD:A0:72:B7:E7:D3:5B:82:9A:B0:9E:CB:A8 X509v3 Authority Key Identifier: keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:ca:0a:0a:bf:d0:19:39:aa:b7:eb:df:4d:8c:c1:f6:98: cb:fe:dd:23:46:19:c9:f3:60:7c:6b:0a:22:f4:07:7c:95:05: a9:13:2a:af:ec:9e:57:46:e9:74:86:64:92:c0:58:7c:a1:5b: 52:8e:d3:f6:ce:c8:47:c5:a5:a7:f9:6d:fd:ea:69:04:14:b1: 41:63:1f:b2:93:49:12:b7:a7:bd:1e:d8:e4:d6:0b:70:24:84: 40:7f:45:42:c1:a2:f5:48:61:27:aa:f4:25:15:b6:fb:80:db: bc:d1:4a:57:07:2d:53:59:08:79:0f:67:ba:5b:1e:34:05:39: d0:8c:5d:1e:d3:5e:13:b2:74:be:db:1b:69:39:b3:17:35:a4: 3c:c1:29:28:63:cb:59:d4:96:3d:44:4c:e9:ec:a2:04:a9:b8: 8b:14:01:8e:89:ff:5d:4b:f0:a6:9f:e2:81:67:3d:ea:88:04: 16:8a:f4:bb:a1:9a:48:02:12:2c:8d:60:c1:8f:37:3a:fd:ee: 2a:21:f0:34:e5:07:e1:e5:84:09:d7:81:5c:f5:ca:cf:22:53: 12:87:77:f4:8d:e7:b6:cc:a1:9c:90:fc:52:f5:36:06:c4:45: e1:bb:57:c7:00:50:2c:5c:39:8c:ff:07:58:cb:b7:d5:90:6d: 05:8c:ff:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTyyPVTjhm5gTlPjjI1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGRhNWI3ZTJkYmY3Yzc2ZmNjNjZjOTZmZmU2NDhmZWFk NGIwNjAwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EyhmMjk0MGI4NDcwODRiOWZkYTA3MmI3ZTdkMzViODI5YWIwOWVjYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6i1N2isIL/3XHdI5SkA93QJ7EmK 0vTa71MAA1BM0hQvmMV5xHbs/szdCxA4UrjeIQ716WFChd4mJEYL6UluK5nAQBRL 2hJiU/Cv4plAoGVomeyzlLRzFiQw15jY4IyLqJ3jmN+HqyDZccNZF+UeZj9HQ4Ms KfonBRxvGoWoz2ZvcgXonxwsQuC0qZP3gAHPw02uPZjazaXTRslXHNVXtra8dU6c 3/dncZAxL7THVFr9VYJ5qNhlSYluwBeCJCbXd6Fs5/Vc8nQhSx98wMY4z1Gvru3U zZmtZIUN9agcyfAxK6bFZswDC5YjoFw8Z95a/UALSYquA/WObtjjcbR78wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKUC4RwhLn9oHK359NbgpqwnsuoMB8GA1UdIwQY MBaAFARNpbfi2/fHb8xmyW/+ZI/q1LBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMt YWNiYzlkNGUwODQzLzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xMWE2MDAtNTk2Yi00OGY1LWIzZjMtYWNiYzlkNGUwODQz LzEvQkUybHQtTGI5OGR2ekdiSmJfNWtqLXJVc0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5/KCgq/ 0Bk5qrfr302MwfaYy/7dI0YZyfNgfGsKIvQHfJUFqRMqr+yeV0bpdIZkksBYfKFb Uo7T9s7IR8Wlp/lt/eppBBSxQWMfspNJErenvR7Y5NYLcCSEQH9FQsGi9UhhJ6r0 JRW2+4DbvNFKVwctU1kIeQ9nulseNAU50IxdHtNeE7J0vtsbaTmzFzWkPMEpKGPL WdSWPURM6eyiBKm4ixQBjon/XUvwpp/igWc96ogEFor0u6GaSAISLI1gwY83Ov3u KiHwNOUH4eWECdeBXPXKzyJTEod39I3ntsyhnJD8UvU2BsRF4btXxwBQLFw5jP8H WMu31ZBtBYz/zA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:14 2025 by rpki-client