This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json) Hash identifier: JlPdqHeD5XSPByPSy7q/J5pgK7Pc1xiI4GbfP/Ucv9g= Subject key identifier: F8:37:0A:5D:B2:E1:DA:1A:B9:37:19:FD:06:E3:2F:E8:F6:5D:A3:5A Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9 Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9 Certificate serial: 019B3644DB7C78FD34980C53F4B27888BDB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 11:00:40 +0000 Manifest this update: Fri 19 Dec 2025 11:00:40 +0000 Manifest next update: Sat 20 Dec 2025 11:00:40 +0000 Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=) 2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: GbjR4pibQdsnUWiAao4DjUY0jhELMGCVM9nLBkin7es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:db:7c:78:fd:34:98:0c:53:f4:b2:78:88:bd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9 Validity Not Before: Dec 19 11:00:40 2025 GMT Not After : Dec 20 11:00:40 2025 GMT Subject: CN=f8370a5db2e1da1ab93719fd06e32fe8f65da35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:18:d9:62:6e:09:65:d6:93:8d:f2:05:7c: 62:cb:f7:17:4e:18:63:23:12:86:0b:9f:29:df:37: 12:60:c8:ba:37:0a:af:2b:51:06:9b:ed:76:cf:54: f6:f4:22:62:4f:19:c0:40:8e:c0:4f:f8:1f:a6:ac: b9:29:5f:05:8e:bb:ed:17:e8:2f:f3:af:bc:95:d9: 24:53:89:0d:1f:6e:b0:7b:65:63:89:35:a2:b0:e4: 27:ee:3b:ad:78:da:e3:cf:f4:ba:31:e7:9d:45:84: c4:8c:63:51:28:d9:bb:2c:de:c1:64:0f:ad:95:f9: 7c:ce:71:c1:6b:5d:f3:1b:23:45:8c:09:41:96:e8: fb:73:05:76:2d:d2:5a:d1:b9:db:1a:a8:6c:4a:a6: 3f:40:69:10:06:49:ce:bf:ab:8a:71:f5:ba:10:fd: 2e:dc:b6:11:de:49:26:9d:03:67:e1:21:e7:c1:4a: ea:5b:99:fd:49:03:f7:84:7c:c2:e2:a7:8e:34:fa: 8b:b3:78:90:50:2f:fc:02:b5:3e:ce:ad:d9:13:3b: ca:a2:6e:2a:54:6a:09:25:be:68:33:95:d6:fc:4c: 36:80:ae:2d:39:6f:87:ad:c8:c4:f2:e9:67:e3:93: 29:11:06:c2:3e:9d:2c:08:83:a5:53:64:45:da:28: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:37:0A:5D:B2:E1:DA:1A:B9:37:19:FD:06:E3:2F:E8:F6:5D:A3:5A X509v3 Authority Key Identifier: keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8d:fd:a3:2e:97:65:65:b2:ba:08:8c:27:b0:62:88:73:f8: 2e:9d:d4:60:9c:07:7b:29:26:76:25:91:6d:9e:ec:ea:72:e5: e4:79:58:ed:c1:4e:4d:96:80:4b:ef:ee:d4:24:a0:fa:74:2f: 0a:73:d8:de:ed:8f:33:63:d1:1e:49:9f:05:ed:e9:ce:da:3e: 4e:58:5f:be:b8:37:0d:ec:a8:37:85:ff:38:97:8a:40:73:23: 38:35:e3:a0:87:36:e7:0d:31:de:1b:eb:b1:78:0f:4e:bd:ca: 85:05:d2:49:da:e5:a8:6d:a8:05:56:20:ad:5b:22:a6:97:8b: 60:3e:25:8c:1a:25:d2:fa:50:60:db:4b:bb:8d:f0:21:aa:3a: fc:b2:81:4f:8d:6a:4b:19:78:01:05:7c:bc:a9:27:10:20:b8: f6:8f:b0:c2:8b:8d:14:21:6b:11:09:f1:16:34:1d:17:e8:7c: 09:91:a5:ab:8b:e4:85:1e:32:d0:b1:ef:c9:9c:5b:31:0d:26: e4:e3:a7:d0:22:fe:25:e0:78:f1:c8:1c:82:d2:ae:06:ab:54: 00:b0:38:9b:f0:41:82:f5:44:6c:dd:9f:ac:3d:45:cd:12:db: f3:a7:9f:b0:4d:7f:b8:49:39:8c:19:24:4b:0b:14:e0:38:65: c9:4c:71:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RNt8eP00mAxT9LJ4iL24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz N2UyZDkwHhcNMjUxMjE5MTEwMDQwWhcNMjUxMjIwMTEwMDQwWjAzMTEwLwYDVQQD EyhmODM3MGE1ZGIyZTFkYTFhYjkzNzE5ZmQwNmUzMmZlOGY2NWRhMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjggY2WJuCWXWk43yBXxiy/cXThhj IxKGC58p3zcSYMi6NwqvK1EGm+12z1T29CJiTxnAQI7AT/gfpqy5KV8FjrvtF+gv 86+8ldkkU4kNH26we2VjiTWisOQn7juteNrjz/S6MeedRYTEjGNRKNm7LN7BZA+t lfl8znHBa13zGyNFjAlBluj7cwV2LdJa0bnbGqhsSqY/QGkQBknOv6uKcfW6EP0u 3LYR3kkmnQNn4SHnwUrqW5n9SQP3hHzC4qeONPqLs3iQUC/8ArU+zq3ZEzvKom4q VGoJJb5oM5XW/Ew2gK4tOW+HrcjE8uln45MpEQbCPp0sCIOlU2RF2ijh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg3Cl2y4doauTcZ/QbjL+j2XaNaMB8GA1UdIwQY MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX439oy6X ZWWyugiMJ7BiiHP4Lp3UYJwHeykmdiWRbZ7s6nLl5HlY7cFOTZaAS+/u1CSg+nQv CnPY3u2PM2PRHkmfBe3pzto+Tlhfvrg3DeyoN4X/OJeKQHMjODXjoIc25w0x3hvr sXgPTr3KhQXSSdrlqG2oBVYgrVsippeLYD4ljBol0vpQYNtLu43wIao6/LKBT41q Sxl4AQV8vKknECC49o+wwouNFCFrEQnxFjQdF+h8CZGlq4vkhR4y0LHvyZxbMQ0m 5OOn0CL+JeB48cgcgtKuBqtUALA4m/BBgvVEbN2frD1FzRLb86efsE1/uEk5jBkk SwsU4DhlyUxx0w== -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:39 2025 by rpki-client