This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json) Hash identifier: sl181EubAKkQoi7qbXxlhLq8nWJ0VwcVsH1C0IEHn5k= Subject key identifier: F6:F3:64:36:A3:9A:8D:9D:AD:26:84:6B:55:62:95:8B:F3:3C:0A:03 Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95 Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895 Certificate serial: 019AF1D1CEA1A4E687C0DF388EA68A819ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=) 2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: J5h5AfBfBVaO2MtcR21b7zkHRApg9vhhPYQaSgHH6oA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ce:a1:a4:e6:87:c0:df:38:8e:a6:8a:81:9e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=f6f36436a39a8d9dad26846b5562958bf33c0a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:c5:3f:8d:1e:30:cc:ce:f3:8f:cb:b9:69: a3:f3:5b:46:1f:c0:88:22:d7:7c:b2:60:2f:eb:c4: 52:37:f9:15:c3:e0:91:0b:ca:23:d2:42:67:d3:df: 6d:73:38:8c:97:cf:6b:be:74:54:c9:1e:04:0e:ea: 63:5d:c8:df:b6:3d:d5:93:b6:85:53:90:af:57:6d: 95:0e:ee:39:82:38:7f:0c:b0:e2:d3:9b:bf:e5:c2: 70:9c:c8:1b:2f:1c:30:15:8e:4c:26:67:73:57:5a: 51:ff:d9:16:d9:0c:70:a0:87:ce:02:3c:0b:96:31: f6:ee:43:4c:92:b9:2f:a5:71:91:f6:f8:cf:8b:e0: ee:4a:c2:c1:48:6e:21:28:ca:ae:7b:0b:61:24:23: 07:f9:d4:aa:c2:67:4f:a5:91:a0:b8:14:f0:7a:bd: 3b:c3:c1:e6:b7:99:56:10:24:f4:6c:03:7b:6a:be: 25:7b:f4:8a:35:88:88:39:7d:b4:f7:cf:3b:b2:29: 07:ee:63:30:6e:a0:d2:8f:38:cd:48:a0:10:cf:e0: 44:c2:9d:23:64:85:23:f3:77:07:29:79:82:fe:f9: 26:fd:c4:b6:e6:2d:f2:91:dc:fa:89:ba:d8:84:3c: dc:09:75:e6:a7:31:6f:9c:00:9c:a1:a6:32:d8:68: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:64:36:A3:9A:8D:9D:AD:26:84:6B:55:62:95:8B:F3:3C:0A:03 X509v3 Authority Key Identifier: keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:85:bf:cb:52:8f:7e:5f:b1:8f:7c:b5:25:66:6b:83:60:2d: c7:8b:8e:df:1c:d0:9a:c7:10:8e:c5:e8:1c:44:dd:bd:f4:d0: 47:53:d4:f1:90:ff:f6:07:d0:10:a1:f2:b3:ca:50:43:ac:f8: 39:f6:b5:ad:c4:e8:49:cf:4e:85:2f:3f:7e:75:81:57:90:6e: 66:4a:dc:85:ab:53:b0:3e:48:f8:09:0d:c8:0e:6b:27:61:5b: 1e:76:e9:61:b0:59:06:5d:6f:45:0b:87:a9:e7:52:a4:5b:b1: 94:a4:52:55:f0:29:0f:b1:0c:b0:45:fc:66:90:a3:96:4b:ff: f8:3e:2f:28:70:06:f4:d2:0c:b1:c0:df:1c:b2:4c:69:d8:0a: 30:0c:f7:d3:d7:d4:a4:de:96:23:3e:e6:0f:17:06:3d:f8:2d: a0:72:17:de:0d:90:4e:eb:e7:14:d4:81:a4:c3:e3:6d:6a:96: cb:0a:74:e2:b6:4c:6c:fc:81:ef:d7:9b:2d:ee:f0:9e:cc:b5: a8:1b:42:0e:68:52:ef:30:68:09:02:4f:a3:e5:10:17:9d:d6: 41:74:74:83:47:3e:f6:d9:9f:09:b0:24:a0:d6:1f:82:a4:64: 4b:b5:bf:8f:d6:79:b4:eb:1f:dc:18:b4:e8:7e:33:d2:6c:b3: 07:f0:c1:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c6hpOaHwN84jqaKgZ7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNDUzYzA5MWY2YzBjYTRiMDJiMWM0Y2ExN2JiNjVkMWRl MTY4OTUwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhmNmYzNjQzNmEzOWE4ZDlkYWQyNjg0NmI1NTYyOTU4YmYzM2MwYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid7FP40eMMzO84/LuWmj81tGH8CI Itd8smAv68RSN/kVw+CRC8oj0kJn099tcziMl89rvnRUyR4EDupjXcjftj3Vk7aF U5CvV22VDu45gjh/DLDi05u/5cJwnMgbLxwwFY5MJmdzV1pR/9kW2QxwoIfOAjwL ljH27kNMkrkvpXGR9vjPi+DuSsLBSG4hKMquewthJCMH+dSqwmdPpZGguBTwer07 w8Hmt5lWECT0bAN7ar4le/SKNYiIOX209887sikH7mMwbqDSjzjNSKAQz+BEwp0j ZIUj83cHKXmC/vkm/cS25i3ykdz6ibrYhDzcCXXmpzFvnACcoaYy2Gh/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbzZDajmo2drSaEa1VilYvzPAoDMB8GA1UdIwQY MBaAFGxFPAkfbAyksCscTKF7tl0d4WiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2Et YmVjMGU5ZWU0YTI1LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2EtYmVjMGU5ZWU0YTI1 LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIW/y1KP fl+xj3y1JWZrg2Atx4uO3xzQmscQjsXoHETdvfTQR1PU8ZD/9gfQEKHys8pQQ6z4 Ofa1rcToSc9OhS8/fnWBV5BuZkrchatTsD5I+AkNyA5rJ2FbHnbpYbBZBl1vRQuH qedSpFuxlKRSVfApD7EMsEX8ZpCjlkv/+D4vKHAG9NIMscDfHLJMadgKMAz309fU pN6WIz7mDxcGPfgtoHIX3g2QTuvnFNSBpMPjbWqWywp04rZMbPyB79ebLe7wnsy1 qBtCDmhS7zBoCQJPo+UQF53WQXR0g0c+9tmfCbAkoNYfgqRkS7W/j9Z5tOsf3Bi0 6H4z0myzB/DBAA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:03 2025 by rpki-client