This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json) Hash identifier: aD4mbXNwj234Ws9H3qEMzMADOcDKb4XUEEbmT/P8Y0w= Subject key identifier: 63:DB:B3:B2:BC:32:5D:EB:E3:69:DA:BA:C5:27:DB:E1:F0:E7:75:3F Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Certificate serial: 019AF1D181DF760D7DD069CE2DA051DDF52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft Manifest number: 06F1 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: /y++8KUAcEsvISBTESE2TLEyDounju/hj2SwVI4zJMs=) 2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:81:df:76:0d:7d:d0:69:ce:2d:a0:51:dd:f5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=63dbb3b2bc325debe369dabac527dbe1f0e7753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:40:e9:dd:af:4d:4b:18:c7:11:39:27:cf: 52:92:3d:ed:50:ba:91:27:81:1b:b5:c9:01:3c:4c: 3e:0d:ba:ed:a4:b3:09:27:cd:b5:05:10:5c:12:fc: 69:11:16:5c:d5:a2:bc:f4:68:fa:94:1f:b6:c3:44: 14:d5:e5:31:20:d9:5e:ae:72:a4:ac:69:1d:5a:50: 82:61:e9:7b:f9:52:5a:d1:3c:60:15:05:45:f9:0d: c3:d0:a6:cf:46:a8:81:3a:0e:cd:bc:f3:ca:64:d6: 2e:a5:e9:87:7d:f3:79:62:fe:80:ba:d7:85:1a:32: f7:79:6c:5f:d7:c9:26:38:ee:99:97:2b:41:06:e9: 2c:37:a0:ee:f9:74:d5:6d:7c:bf:17:ae:2e:44:46: 65:30:9a:7c:a2:fe:1f:8b:3e:d6:0f:20:6b:80:3b: ef:87:67:01:3c:14:01:ca:d4:3d:eb:6c:e6:fe:27: 89:2b:93:bb:b7:c9:63:c3:3a:17:09:c9:11:59:36: ff:31:fd:93:f4:85:95:6f:ec:f6:fb:e3:5c:fe:4e: 70:89:55:40:0c:e7:f6:e6:0b:c8:3d:c1:ca:28:18: 54:19:63:e2:be:63:69:b2:22:58:4a:35:d5:0f:28: ea:00:04:7d:eb:1e:bc:55:27:8e:17:97:59:8b:88: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DB:B3:B2:BC:32:5D:EB:E3:69:DA:BA:C5:27:DB:E1:F0:E7:75:3F X509v3 Authority Key Identifier: keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:15:ed:68:c5:75:52:74:03:bb:3b:a0:ad:ba:e5:6d:43:b3: f4:d5:81:4d:7f:70:84:56:fa:c3:a6:9c:da:49:a3:60:bb:80: fb:53:f5:46:28:62:b6:58:74:d1:0e:e9:90:95:2b:cc:07:5d: 76:40:3e:f2:eb:bb:d3:f2:4b:4e:9d:87:c3:31:f8:2a:43:c6: 76:58:0c:b6:90:96:1a:40:0b:de:bd:5e:3a:0c:d2:fc:fa:52: 75:e1:1c:80:bd:02:f7:6f:7c:bf:9b:cd:4d:fb:6d:a0:4d:91: 74:a8:49:29:aa:3a:83:13:18:29:c6:da:5c:cc:53:35:2a:19: cf:0e:40:1e:a9:78:de:e7:74:ef:18:f1:0d:3b:96:49:2e:79: b2:f8:41:05:71:72:49:eb:2f:6f:a6:37:00:86:04:6e:b2:cf: eb:1f:41:5a:28:b3:22:fa:b3:ab:6a:bb:63:39:80:46:45:fa: 9a:8b:95:73:69:8c:cf:ab:fc:b2:25:41:53:63:09:52:be:60: 13:75:49:99:35:0c:7a:20:9a:f9:3c:5d:8d:b9:f8:71:6d:2c: 36:9f:0a:79:ba:7b:f6:d2:52:cf:34:1e:b2:ad:34:db:69:e0: 3d:38:df:fc:ba:8d:76:f7:e4:22:9c:58:35:ab:4b:28:17:0b: eb:a1:9e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YHfdg190GnOLaBR3fUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk NWI0ZjYwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD Eyg2M2RiYjNiMmJjMzI1ZGViZTM2OWRhYmFjNTI3ZGJlMWYwZTc3NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJpA6d2vTUsYxxE5J89Skj3tULqR J4EbtckBPEw+DbrtpLMJJ821BRBcEvxpERZc1aK89Gj6lB+2w0QU1eUxINlernKk rGkdWlCCYel7+VJa0TxgFQVF+Q3D0KbPRqiBOg7NvPPKZNYupemHffN5Yv6AuteF GjL3eWxf18kmOO6ZlytBBuksN6Du+XTVbXy/F64uREZlMJp8ov4fiz7WDyBrgDvv h2cBPBQBytQ962zm/ieJK5O7t8ljwzoXCckRWTb/Mf2T9IWVb+z2++Nc/k5wiVVA DOf25gvIPcHKKBhUGWPivmNpsiJYSjXVDyjqAAR96x68VSeOF5dZi4jUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPbs7K8Ml3r42nausUn2+Hw53U/MB8GA1UdIwQY MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxXtaMV1 UnQDuzugrbrlbUOz9NWBTX9whFb6w6ac2kmjYLuA+1P1Rihitlh00Q7pkJUrzAdd dkA+8uu70/JLTp2HwzH4KkPGdlgMtpCWGkAL3r1eOgzS/PpSdeEcgL0C9298v5vN TfttoE2RdKhJKao6gxMYKcbaXMxTNSoZzw5AHql43ud07xjxDTuWSS55svhBBXFy Sesvb6Y3AIYEbrLP6x9BWiizIvqzq2q7YzmARkX6mouVc2mMz6v8siVBU2MJUr5g E3VJmTUMeiCa+Txdjbn4cW0sNp8Kebp79tJSzzQesq0022ngPTjf/LqNdvfkIpxY NatLKBcL66Gefg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:26 2025 by rpki-client