This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json) Hash identifier: kLAWy29sSYOTzd40FJ5vUOtlfKRdO28eyJaOevbatnY= Subject key identifier: 50:C9:EC:EE:29:2F:0C:0C:26:C1:83:9F:D6:DB:EE:5D:8B:2F:D3:ED Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2 Certificate serial: 019AF19B6990BB47F7988C72793775398DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft Manifest number: 0A40 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: t9j76tMyKIhEmlPCbmXt6oUBbiJaq/m8eLUwbVi3ejM=) 2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:90:bb:47:f7:98:8c:72:79:37:75:39:8d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=50c9ecee292f0c0c26c1839fd6dbee5d8b2fd3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:b6:d4:70:32:3e:bb:68:5e:3d:4b:3b:06: 42:98:48:c4:fb:3a:1f:99:3a:30:f7:38:0b:b7:30: 4d:d7:a7:12:b1:44:9e:93:13:70:ed:35:10:63:d8: 27:56:cf:7d:c7:73:e6:bd:14:51:b8:c7:50:b3:19: 2c:02:ea:59:c6:16:c9:b8:34:db:52:1c:09:7b:a0: 63:33:71:ac:63:03:41:17:23:a1:37:a8:a7:50:22: 91:b6:a5:30:6d:86:c7:3a:31:88:b8:26:2a:23:5a: 64:5e:71:87:ce:aa:40:41:9a:4d:d5:b9:cc:1d:f5: 68:90:ed:2a:48:e1:18:56:72:2a:fe:f1:51:43:6e: df:cc:1d:6d:b2:9e:6b:2a:f5:9b:72:8d:99:ee:f3: 77:f9:fc:42:a5:ba:82:29:be:5b:e9:0a:e2:d1:72: 36:a9:5e:fb:28:a0:b3:96:d3:d3:62:3d:df:b0:b5: 8d:60:53:fd:5b:66:28:7a:41:8e:cd:14:04:da:78: 3f:9a:34:27:61:22:dd:e4:30:a3:0e:5c:64:d1:42: d0:cd:47:fa:f3:2e:2d:eb:64:ac:34:ce:45:5f:c5: c6:c9:7e:62:66:3f:37:90:ab:fc:6a:1f:5d:f4:78: 3c:3a:c2:ba:65:81:70:f2:08:7a:57:a1:e4:69:b9: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:EC:EE:29:2F:0C:0C:26:C1:83:9F:D6:DB:EE:5D:8B:2F:D3:ED X509v3 Authority Key Identifier: keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:af:92:81:43:ac:ab:a4:4d:26:5e:26:cc:3c:97:8b:38:69: 39:60:02:50:7b:86:de:e0:e8:24:7a:b7:0b:5e:28:4d:40:0e: ac:10:97:44:a9:19:e0:8b:a3:2b:e4:41:09:cd:9d:e1:7e:dc: 3d:90:91:bb:b0:b7:67:27:2d:11:dd:5b:87:06:ba:a2:29:2b: 1e:b6:d7:d4:d5:55:8a:fd:de:78:2d:bf:f6:ec:81:fa:78:f5: 9f:a5:f4:75:b7:79:9c:56:cd:3f:2c:12:fa:80:35:f1:9d:e1: 74:37:32:19:06:c3:3f:a9:9c:7a:b3:81:21:e3:80:b3:f4:c4: 48:72:56:bc:ae:79:35:97:63:bf:20:fa:7a:ea:24:5a:94:80: e3:df:dd:30:20:8a:e4:5a:f7:73:ed:53:88:38:5a:bc:9d:c0: 29:db:4f:d3:f8:e2:12:86:84:ef:58:6f:f9:fa:d8:86:31:5a: 55:52:2f:24:6a:b3:43:1d:9b:bc:24:53:07:3c:8f:e3:f3:d3: fb:26:f6:7e:b9:76:4c:78:13:1b:66:de:6b:3b:30:e7:ea:fa: 9c:b4:b9:e1:38:6f:cf:57:e1:99:c0:e9:5e:e2:8a:04:5c:49: 65:a5:81:09:ce:e3:e8:62:3c:65:37:cb:4c:c5:49:4d:9a:e8: 48:7b:45:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2mQu0f3mIxyeTd1OY3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2 NGE2ZjIwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg1MGM5ZWNlZTI5MmYwYzBjMjZjMTgzOWZkNmRiZWU1ZDhiMmZkM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QS21HAyPrtoXj1LOwZCmEjE+zof mTow9zgLtzBN16cSsUSekxNw7TUQY9gnVs99x3PmvRRRuMdQsxksAupZxhbJuDTb UhwJe6BjM3GsYwNBFyOhN6inUCKRtqUwbYbHOjGIuCYqI1pkXnGHzqpAQZpN1bnM HfVokO0qSOEYVnIq/vFRQ27fzB1tsp5rKvWbco2Z7vN3+fxCpbqCKb5b6Qri0XI2 qV77KKCzltPTYj3fsLWNYFP9W2YoekGOzRQE2ng/mjQnYSLd5DCjDlxk0ULQzUf6 8y4t62SsNM5FX8XGyX5iZj83kKv8ah9d9Hg8OsK6ZYFw8gh6V6HkabnQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDJ7O4pLwwMJsGDn9bb7l2LL9PtMB8GA1UdIwQY MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4 LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK+SgUOs q6RNJl4mzDyXizhpOWACUHuG3uDoJHq3C14oTUAOrBCXRKkZ4IujK+RBCc2d4X7c PZCRu7C3ZyctEd1bhwa6oikrHrbX1NVViv3eeC2/9uyB+nj1n6X0dbd5nFbNPywS +oA18Z3hdDcyGQbDP6mcerOBIeOAs/TESHJWvK55NZdjvyD6euokWpSA49/dMCCK 5Fr3c+1TiDhavJ3AKdtP0/jiEoaE71hv+frYhjFaVVIvJGqzQx2bvCRTBzyP4/PT +yb2frl2THgTG2beazsw5+r6nLS54Thvz1fhmcDpXuKKBFxJZaWBCc7j6GI8ZTfL TMVJTZroSHtF0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:10 2025 by rpki-client