This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft File: bevRnamMJ_q6t7LylLz57Gr0SQU.mft (raw, json) Hash identifier: MkYE/z/XF46Q7V6DKFgSijiHVogUUi64rSEaY4/idTE= Subject key identifier: 17:95:9A:99:0D:BE:9C:6F:31:A8:BB:14:1C:4C:7F:4C:95:41:82:40 Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Certificate serial: 019AF42E0EF12F12D686C95B80B6A19ABED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 15:00:50 +0000 Manifest this update: Sat 06 Dec 2025 15:00:50 +0000 Manifest next update: Sun 07 Dec 2025 15:00:50 +0000 Files and hashes: 1: PkuzLc70cdZNfzBONmq4AlueJ3c.roa (hash: IUupDkJ+pYc5DFM+j/FDYtvyoxCFZGawCLtSOO5xgU0=) 2: bevRnamMJ_q6t7LylLz57Gr0SQU.crl (hash: mHOquFZArbMT+1v3AGTfCiuDb53rllcP+6xPDF6oqro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0e:f1:2f:12:d6:86:c9:5b:80:b6:a1:9a:be:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905 Validity Not Before: Dec 6 15:00:50 2025 GMT Not After : Dec 7 15:00:50 2025 GMT Subject: CN=17959a990dbe9c6f31a8bb141c4c7f4c95418240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:b6:b4:33:dc:80:0a:b5:75:f1:58:7d:61: 84:7c:59:aa:95:98:d5:79:88:74:e0:57:ac:be:37: bb:3f:3c:e8:a5:ad:6d:47:bb:74:cb:6b:25:5a:ef: 70:56:60:64:11:98:e6:47:fe:cc:6d:93:c0:5f:4a: dc:e6:85:a0:3c:73:64:b7:5b:5d:60:b2:33:be:07: a5:46:3b:2d:20:1b:08:b8:cf:52:80:a0:2d:f1:91: 2c:97:26:e1:3b:61:b9:b0:63:7f:9c:27:e0:d2:0b: b0:e3:ad:8f:89:ed:80:1a:9c:22:30:54:db:97:f6: 1a:c3:36:be:30:a7:27:70:38:23:1e:29:3f:91:d3: de:ab:01:ba:ac:09:3b:f9:7e:16:c8:e3:d1:f0:66: 2d:5d:f4:a7:9c:e1:eb:ca:d0:11:68:ce:fa:6b:04: 18:14:94:bf:92:d1:9c:43:e9:4e:fb:79:b9:ca:bf: f1:3d:6f:e3:f4:72:86:e5:be:27:7b:01:6c:28:f6: d4:83:88:48:b9:e3:2c:af:a9:e2:3a:bf:49:74:85: cb:e4:1b:a8:48:a4:3f:76:60:ab:04:72:ec:a7:60: 11:da:08:fa:38:dd:4b:db:ab:ee:4b:1a:ca:4d:15: e3:b9:98:ec:c1:d1:52:54:af:96:b0:a5:78:75:b4: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:95:9A:99:0D:BE:9C:6F:31:A8:BB:14:1C:4C:7F:4C:95:41:82:40 X509v3 Authority Key Identifier: keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:13:a6:7d:28:85:07:da:4b:8c:77:5d:d8:61:08:11:77:26: a7:f0:e5:7b:d8:d6:80:ac:05:c8:5e:7d:3b:19:89:23:e7:e6: 83:39:d7:4c:f0:83:de:bb:51:35:dc:d0:62:cd:76:93:c0:89: 48:3f:77:8c:13:d5:97:af:61:7e:a7:61:18:6f:22:59:52:d4: ae:7f:9b:33:c8:a6:e1:3f:95:91:e2:da:57:bf:d0:3f:02:47: e0:b4:fe:ae:ff:21:74:d4:05:a6:6e:aa:22:79:61:a7:f2:49: 04:db:23:f2:31:d8:ad:05:98:56:7f:7a:cf:a4:48:34:18:70: 01:58:79:b9:62:41:b2:88:54:98:41:8c:f3:84:7d:14:47:66: 29:a8:31:4b:9a:57:9d:27:a0:cd:28:7e:67:a2:f7:9f:16:bb: ac:d0:83:dc:c8:c9:06:81:06:5b:d7:61:8b:43:6f:c1:f5:54: 0d:3f:82:7a:fb:14:3b:ec:e7:af:32:d6:35:f8:d6:7e:36:98: 1e:7e:d2:e6:b5:ac:e5:4e:c5:ec:a3:65:f5:34:fb:9f:6c:1d: eb:8d:4a:42:d7:b9:14:16:53:c1:b6:ea:8e:2e:bc:6a:12:f9: c0:85:09:a1:4d:f4:57:f3:c4:f9:ab:b1:6d:f7:3e:60:9b:c7: a8:89:e0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lg7xLxLWhslbgLahmr7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZWJkMTlkYTk4YzI3ZmFiYWI3YjJmMjk0YmNmOWVjNmFm NDQ5MDUwHhcNMjUxMjA2MTUwMDUwWhcNMjUxMjA3MTUwMDUwWjAzMTEwLwYDVQQD EygxNzk1OWE5OTBkYmU5YzZmMzFhOGJiMTQxYzRjN2Y0Yzk1NDE4MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8q2tDPcgAq1dfFYfWGEfFmqlZjV eYh04Fesvje7Pzzopa1tR7t0y2slWu9wVmBkEZjmR/7MbZPAX0rc5oWgPHNkt1td YLIzvgelRjstIBsIuM9SgKAt8ZEslybhO2G5sGN/nCfg0guw462Pie2AGpwiMFTb l/Yawza+MKcncDgjHik/kdPeqwG6rAk7+X4WyOPR8GYtXfSnnOHrytARaM76awQY FJS/ktGcQ+lO+3m5yr/xPW/j9HKG5b4newFsKPbUg4hIueMsr6niOr9JdIXL5Buo SKQ/dmCrBHLsp2AR2gj6ON1L26vuSxrKTRXjuZjswdFSVK+WsKV4dbQ0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeVmpkNvpxvMai7FBxMf0yVQYJAMB8GA1UdIwQY MBaAFG3r0Z2pjCf6urey8pS8+exq9EkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzct MjY0YWI5MzM3ZmEwLzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xYWQzNDktZWRmZS00MTUwLTlkMzctMjY0YWI5MzM3ZmEw LzEvYmV2Um5hbU1KX3E2dDdMeWxMejU3R3IwU1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxOmfSiF B9pLjHdd2GEIEXcmp/Dle9jWgKwFyF59OxmJI+fmgznXTPCD3rtRNdzQYs12k8CJ SD93jBPVl69hfqdhGG8iWVLUrn+bM8im4T+VkeLaV7/QPwJH4LT+rv8hdNQFpm6q Inlhp/JJBNsj8jHYrQWYVn96z6RINBhwAVh5uWJBsohUmEGM84R9FEdmKagxS5pX nSegzSh+Z6L3nxa7rNCD3MjJBoEGW9dhi0NvwfVUDT+CevsUO+znrzLWNfjWfjaY Hn7S5rWs5U7F7KNl9TT7n2wd641KQte5FBZTwbbqji68ahL5wIUJoU30V/PE+aux bfc+YJvHqInglQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:34 2025 by rpki-client