This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json) Hash identifier: RJc+M6ZEzAt7a1aELVRDNaXpTyE5+2AjEcPtpnIHEPw= Subject key identifier: 9F:49:A5:D6:F0:0C:39:CA:B2:56:41:AE:7B:C7:72:BB:C4:77:1A:CF Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Certificate serial: 019AF208D6789B9B670FE184753E63028AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft Manifest number: 0921 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: IhkwZ/BliQKuZjasdTJiMipgXQ8NwXiylSpuHHFItfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d6:78:9b:9b:67:0f:e1:84:75:3e:63:02:8a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=9f49a5d6f00c39cab25641ae7bc772bbc4771acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:fd:44:7e:13:56:6a:7c:82:05:b5:d0:61: f7:09:6f:e2:a2:ee:e3:d3:0d:d7:49:b5:ee:34:5e: 65:c0:e1:8a:0d:a0:1e:69:98:35:cc:6d:5b:c1:9e: 22:5a:c4:31:a6:3e:e9:52:ea:08:43:5a:b8:70:8b: 1b:8e:6e:0d:1b:28:ca:c6:e3:96:93:49:a5:39:27: f8:0b:5a:53:e9:15:f2:43:4d:09:5c:f0:5c:03:b9: e9:c0:f5:5c:3f:00:f6:72:34:27:57:c8:1b:9b:d2: 96:f8:62:ef:64:c5:9d:5f:d4:c4:68:de:7a:24:63: 43:7a:b6:52:c5:c1:0b:d5:87:0b:72:08:69:09:1f: 47:78:e3:31:5c:7a:9b:86:3c:ca:4e:ce:c7:0a:32: 82:a2:7b:58:e4:2b:4a:c8:a8:31:a9:64:12:de:ac: a5:8e:c5:5e:34:c3:7e:70:77:5b:b9:83:7d:5d:7f: eb:38:8b:de:30:e4:0b:a5:ba:f7:de:d6:a8:89:c7: 88:ca:15:36:74:9e:2f:e7:46:68:5e:5a:71:a3:2a: 49:b7:d0:5d:1b:a1:86:f8:66:5c:89:5e:68:1c:14: 5b:36:5a:9d:c6:21:a9:7e:51:0b:1b:06:55:74:ff: 06:32:26:96:2e:00:46:fc:82:64:f9:78:da:24:53: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:A5:D6:F0:0C:39:CA:B2:56:41:AE:7B:C7:72:BB:C4:77:1A:CF X509v3 Authority Key Identifier: keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1b:54:5f:90:72:6c:ce:8e:08:3f:f5:31:f8:cd:b5:18:26: 5c:be:c6:fb:23:32:59:7e:ad:99:9f:c8:a9:96:ea:2e:26:38: 4d:d7:36:fd:ac:bc:e9:ec:72:63:f5:04:be:ad:3e:1d:0e:fe: bf:37:b4:7b:37:41:e7:03:54:fa:94:31:76:e3:b3:c5:bf:c5: 61:80:aa:78:7f:98:0b:ac:78:14:05:3e:df:4a:55:87:8f:9b: e4:ca:9a:08:29:66:70:e5:73:87:40:9e:99:2b:7a:eb:f3:2f: c1:c3:63:2b:80:d6:f1:62:8e:e4:69:89:97:2c:de:60:73:8c: 8d:85:15:b1:8e:af:0e:9b:bb:2f:78:ce:7c:8a:8a:e7:26:5b: 6b:b6:94:1a:0f:8a:85:c6:42:eb:f7:c0:f6:19:55:19:27:a9: da:49:ff:cb:3f:22:f6:12:a5:90:b7:04:48:24:b6:53:48:28: 1b:21:1a:05:2f:9f:5c:5c:55:2d:90:37:91:84:e0:bb:f8:ba: e7:5c:eb:73:76:dc:72:a4:4d:cd:f7:aa:61:f5:3f:7a:a2:1e: 44:3d:63:1f:dd:2b:88:28:ed:f1:72:6e:af:62:b3:1a:0b:86: 96:2b:59:76:b8:a7:9d:5e:33:46:ac:20:5b:02:03:45:f0:83: f6:0e:60:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNZ4m5tnD+GEdT5jAorqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5 ZjlmNGEwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg5ZjQ5YTVkNmYwMGMzOWNhYjI1NjQxYWU3YmM3NzJiYmM0NzcxYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosz9RH4TVmp8ggW10GH3CW/iou7j 0w3XSbXuNF5lwOGKDaAeaZg1zG1bwZ4iWsQxpj7pUuoIQ1q4cIsbjm4NGyjKxuOW k0mlOSf4C1pT6RXyQ00JXPBcA7npwPVcPwD2cjQnV8gbm9KW+GLvZMWdX9TEaN56 JGNDerZSxcEL1YcLcghpCR9HeOMxXHqbhjzKTs7HCjKContY5CtKyKgxqWQS3qyl jsVeNMN+cHdbuYN9XX/rOIveMOQLpbr33taoiceIyhU2dJ4v50ZoXlpxoypJt9Bd G6GG+GZciV5oHBRbNlqdxiGpflELGwZVdP8GMiaWLgBG/IJk+XjaJFNSiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9JpdbwDDnKslZBrnvHcrvEdxrPMB8GA1UdIwQY MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1 LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxtUX5By bM6OCD/1MfjNtRgmXL7G+yMyWX6tmZ/IqZbqLiY4Tdc2/ay86exyY/UEvq0+HQ7+ vze0ezdB5wNU+pQxduOzxb/FYYCqeH+YC6x4FAU+30pVh4+b5MqaCClmcOVzh0Ce mSt66/MvwcNjK4DW8WKO5GmJlyzeYHOMjYUVsY6vDpu7L3jOfIqK5yZba7aUGg+K hcZC6/fA9hlVGSep2kn/yz8i9hKlkLcESCS2U0goGyEaBS+fXFxVLZA3kYTgu/i6 51zrc3bccqRNzfeqYfU/eqIeRD1jH90riCjt8XJur2KzGguGlitZdrinnV4zRqwg WwIDRfCD9g5gBA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:34 2025 by rpki-client