This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier: q4+1xQS+/tH1TxGbOmxyltdjPb5O8oqiriArtR4qnmI=
Subject key identifier: B7:8E:4B:92:86:86:37:07:3C:D2:ED:65:A0:63:45:EF:1A:BA:AA:6E
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 019C4322A7805AF24B5C89C30DC29D95FD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 16:01:10 +0000
Manifest this update: Mon 09 Feb 2026 16:01:10 +0000
Manifest next update: Tue 10 Feb 2026 16:01:10 +0000
Files and hashes: 1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: KWphEDRSlzbKB7UDq1F6Kd+VnRY0xwLblEjDp+RfhBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:a7:80:5a:f2:4b:5c:89:c3:0d:c2:9d:95:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Feb 9 16:01:10 2026 GMT
Not After : Feb 10 16:01:10 2026 GMT
Subject: CN=b78e4b92868637073cd2ed65a06345ef1abaaa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:29:80:a9:6b:74:e5:54:e1:d3:4f:b7:8d:
f4:b0:3f:33:53:94:de:74:3e:11:f5:7e:84:3b:98:
d1:95:b2:6c:41:90:c3:0a:51:77:d1:bd:91:c8:ca:
aa:10:37:93:c7:a6:74:de:93:e1:a1:d8:ac:13:9c:
84:be:03:9b:43:72:9f:e2:37:17:1b:2d:97:d5:93:
bc:ed:69:0f:1a:9a:30:1c:7a:d8:81:2c:50:66:17:
0a:19:e2:de:2c:60:1a:65:a5:66:e6:29:52:a3:63:
ff:e9:f0:ce:dc:26:8a:66:4e:d0:8f:b5:bb:e7:50:
a2:64:65:e5:5a:23:23:ad:1d:fe:ea:94:51:40:df:
01:57:13:da:2c:5b:82:13:5c:88:81:cd:57:17:63:
29:85:01:4f:76:25:3d:38:3b:dd:96:e6:3a:96:38:
1b:0a:10:4f:99:30:ea:75:cb:fc:2e:a8:43:5c:5a:
3f:53:c5:35:d9:ac:bf:67:de:3a:87:3c:bf:27:fe:
f1:c0:b3:41:20:d2:82:01:23:1a:15:f7:91:49:37:
3d:81:7c:d3:f0:58:b1:80:a5:98:97:ec:8d:cd:67:
b7:12:8e:94:9a:83:f1:b0:ec:c5:4d:2c:67:cb:df:
2a:5a:83:fd:cb:bb:90:b7:f4:ce:0d:d2:28:8b:5d:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:4B:92:86:86:37:07:3C:D2:ED:65:A0:63:45:EF:1A:BA:AA:6E
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:62:f1:a8:12:b8:de:66:d9:40:22:2a:ed:c9:16:30:b7:d7:
a6:ce:97:fa:60:5b:9f:39:65:85:ce:87:c4:2b:54:0d:ee:d3:
ff:d0:8c:1c:e6:6d:cd:2f:b1:1b:ce:25:54:17:a9:23:6d:5c:
4b:96:82:a1:91:fd:65:9e:64:52:06:b4:7c:42:84:22:10:cd:
2e:7b:da:74:19:00:41:23:20:17:94:49:dc:c6:12:cc:89:34:
20:ac:f9:bd:94:ca:6e:cc:2f:04:58:5d:8e:ac:83:7d:56:2f:
9d:d1:df:d9:53:3d:9a:96:5f:c2:66:16:8b:6e:50:5f:a0:90:
e5:00:2e:97:00:f1:c5:ec:26:a6:3d:41:8f:21:ea:42:1a:7e:
1b:bb:3f:cd:79:86:64:4c:2a:69:40:77:df:5b:f5:94:f5:00:
dd:fd:4a:85:7d:d6:4e:8e:e7:b5:2d:00:3e:24:48:a4:53:0a:
78:13:a2:b9:4d:d0:25:99:18:31:78:19:e8:39:48:fa:df:45:
f5:ac:ec:b7:51:76:72:d9:70:5e:56:12:3f:87:f4:7c:1f:d8:
78:05:ad:d2:f8:85:e4:46:c1:cf:73:51:c4:d0:ac:54:a4:4e:
5d:95:17:7e:98:31:2d:5d:ab:60:93:7a:61:b7:cc:86:14:59:
a3:15:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:22 2026 by rpki-client