This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json) Hash identifier: xx+xGJdF8f0eTn6X68CGCA22EKb+8LLem+6DD0WEt1s= Subject key identifier: 02:42:AB:03:D3:A4:10:81:68:1D:15:1C:5B:DB:48:CD:3D:0F:D5:1A Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Certificate serial: 019C4133DCA016B3F72EAA741FE8AEC5B2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft Manifest number: 0E10 Signing time: Mon 09 Feb 2026 07:00:43 +0000 Manifest this update: Mon 09 Feb 2026 07:00:43 +0000 Manifest next update: Tue 10 Feb 2026 07:00:43 +0000 Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: fkVUKupZeBdteifdg/ses7pjPBDKReQq+bjxWylSeXc=) 2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:dc:a0:16:b3:f7:2e:aa:74:1f:e8:ae:c5:b2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b Validity Not Before: Feb 9 07:00:43 2026 GMT Not After : Feb 10 07:00:43 2026 GMT Subject: CN=0242ab03d3a41081681d151c5bdb48cd3d0fd51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:f1:6a:cb:9f:b3:a9:e6:bf:e7:b5:25:f2: bb:9c:08:3f:86:f9:82:ef:5a:de:d3:96:ea:b7:ea: 15:bb:bb:55:47:f5:94:98:9d:e7:fd:ac:9f:db:72: c4:f1:76:f9:4e:98:e8:65:49:ba:64:53:71:ba:91: d0:69:cb:e0:8c:a8:14:30:0d:21:69:40:bd:e2:d6: 72:50:8a:09:fa:af:80:11:ad:26:44:4f:9d:8c:13: f5:0c:b6:de:2f:ab:73:d7:fa:aa:da:ec:d0:03:5f: 1a:fd:05:2d:ac:76:29:c1:13:1d:03:ad:ae:72:cd: cb:dd:66:4b:eb:5a:04:2a:b8:14:47:13:68:d7:d2: 94:99:54:f7:d0:5f:4c:96:f8:68:c9:10:91:62:96: 2d:45:cc:53:66:62:25:df:81:65:5a:c4:3a:94:b4: 10:e7:92:c2:e8:ea:e6:0f:ec:b9:35:3b:ee:36:97: d1:63:57:8c:f3:33:40:da:1f:26:ec:9b:03:2f:ca: 35:a0:8e:89:20:2b:bb:f8:68:71:d4:69:9b:af:7e: 0e:9a:68:86:14:85:3a:56:09:3d:20:ee:df:8f:15: ea:52:8d:08:d9:30:56:63:36:9f:03:4f:3e:38:28: 27:44:dd:02:be:40:cc:af:be:f4:0d:af:51:b1:3e: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:AB:03:D3:A4:10:81:68:1D:15:1C:5B:DB:48:CD:3D:0F:D5:1A X509v3 Authority Key Identifier: keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:61:7a:33:5c:13:b4:b9:36:76:99:80:6a:b7:97:b4:e4:62: 57:92:cc:a0:10:da:bb:ce:79:0c:33:32:bf:7f:4a:4e:ba:83: eb:02:f8:80:d9:a0:3e:55:de:89:b1:c0:70:69:61:58:61:f5: 22:c6:4c:ea:01:e5:14:d5:ab:53:77:9f:6f:60:70:91:83:73: d6:d0:a9:dc:14:96:67:8a:40:85:46:f8:bf:ff:9f:5d:3d:98: f1:06:7f:88:b1:6d:7e:f5:4d:43:dd:97:11:f3:05:4e:24:1f: 87:96:d6:19:c7:d7:a5:87:05:9a:cd:8a:21:7d:43:d6:88:4a: 0c:23:17:e2:3b:ac:5d:41:57:6c:7e:0b:34:bc:5f:90:0b:d8: 72:0a:b0:48:c7:44:f8:e5:20:c1:23:f0:86:f5:87:38:f3:59: 57:b6:f9:73:1f:b0:08:1b:03:de:54:fd:1e:54:fe:04:d4:30: 37:96:a1:d7:94:76:2f:cc:3e:2c:64:fb:88:17:c9:4a:89:d6: e8:a0:43:b6:be:be:82:35:98:e8:e0:1a:8f:b3:e3:0e:dd:cd: 20:e3:98:1b:99:f2:de:29:f0:5a:e9:23:71:ca:ec:e1:c7:15: 30:60:bc:66:7d:23:45:17:c8:3e:a8:78:45:66:29:f9:b0:72: a1:4f:74:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9ygFrP3Lqp0H+iuxbK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4 YWMxOWIwHhcNMjYwMjA5MDcwMDQzWhcNMjYwMjEwMDcwMDQzWjAzMTEwLwYDVQQD EygwMjQyYWIwM2QzYTQxMDgxNjgxZDE1MWM1YmRiNDhjZDNkMGZkNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7xasufs6nmv+e1JfK7nAg/hvmC 71re05bqt+oVu7tVR/WUmJ3n/ayf23LE8Xb5TpjoZUm6ZFNxupHQacvgjKgUMA0h aUC94tZyUIoJ+q+AEa0mRE+djBP1DLbeL6tz1/qq2uzQA18a/QUtrHYpwRMdA62u cs3L3WZL61oEKrgURxNo19KUmVT30F9MlvhoyRCRYpYtRcxTZmIl34FlWsQ6lLQQ 55LC6OrmD+y5NTvuNpfRY1eM8zNA2h8m7JsDL8o1oI6JICu7+Ghx1Gmbr34OmmiG FIU6Vgk9IO7fjxXqUo0I2TBWYzafA08+OCgnRN0CvkDMr770Da9RsT5tTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJCqwPTpBCBaB0VHFvbSM09D9UaMB8GA1UdIwQY MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0 LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGF6M1wT tLk2dpmAareXtORiV5LMoBDau855DDMyv39KTrqD6wL4gNmgPlXeibHAcGlhWGH1 IsZM6gHlFNWrU3efb2BwkYNz1tCp3BSWZ4pAhUb4v/+fXT2Y8QZ/iLFtfvVNQ92X EfMFTiQfh5bWGcfXpYcFms2KIX1D1ohKDCMX4jusXUFXbH4LNLxfkAvYcgqwSMdE +OUgwSPwhvWHOPNZV7b5cx+wCBsD3lT9HlT+BNQwN5ah15R2L8w+LGT7iBfJSonW 6KBDtr6+gjWY6OAaj7PjDt3NIOOYG5ny3inwWukjccrs4ccVMGC8Zn0jRRfIPqh4 RWYp+bByoU90tw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:30 2026 by rpki-client