This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json) Hash identifier: klypTh5uIKxjcSgeTWfOf1uGOnRePRXgeOCKq0jM1a8= Subject key identifier: 88:CA:F0:7D:E7:0F:7F:6B:58:E1:97:E5:40:C8:8D:7C:8A:42:7A:80 Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Certificate serial: 019C43FDF5F8BAC9D7EB96AC7E14879106CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft Manifest number: 09D0 Signing time: Mon 09 Feb 2026 20:00:42 +0000 Manifest this update: Mon 09 Feb 2026 20:00:42 +0000 Manifest next update: Tue 10 Feb 2026 20:00:42 +0000 Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: xMNI+QkzATJXenQw8fhrzYy9GsrNClEoySFxXHGw59M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:f5:f8:ba:c9:d7:eb:96:ac:7e:14:87:91:06:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a Validity Not Before: Feb 9 20:00:42 2026 GMT Not After : Feb 10 20:00:42 2026 GMT Subject: CN=88caf07de70f7f6b58e197e540c88d7c8a427a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dd:dd:bc:5f:52:3a:f3:71:be:1f:e4:37:35: a0:14:17:db:ea:c3:e1:82:aa:c2:ec:de:34:ae:2e: 5f:66:c0:23:e8:81:67:0d:97:79:d3:24:25:ce:a6: bd:34:0e:1b:be:f1:1b:fd:8f:3a:9f:7d:00:69:b4: 01:38:4b:2c:1f:b7:ae:06:a9:bb:6e:78:4b:5f:47: 6a:bf:3a:a9:be:83:5a:f9:bc:5f:50:f7:75:11:4a: 3a:87:98:27:87:34:b1:b6:c1:ae:6f:52:ef:02:90: 2b:f9:2c:26:2d:86:8a:ce:06:b2:41:a1:20:25:c0: 76:8e:21:ef:e9:46:bd:99:fe:fe:2d:63:5d:93:64: 23:c7:a7:41:8e:7b:e3:05:7c:a9:cf:cb:82:60:91: 04:4f:ab:96:52:e6:80:bc:b8:15:84:5e:8a:e4:1e: ac:5d:71:70:3a:c3:94:df:9f:17:12:41:f1:89:65: f3:39:0d:9e:4c:09:38:e3:ad:a3:ac:fc:83:d8:6e: 48:ab:14:db:e3:3d:de:96:71:c2:75:b6:8c:18:ae: 03:dc:54:18:14:e9:61:cb:94:a7:13:cb:a8:48:e4: 96:ef:3d:c1:08:46:38:78:09:4a:b8:a7:7f:cf:ed: eb:de:d6:d2:a9:ce:2b:1e:02:60:2e:2f:44:13:ee: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:F0:7D:E7:0F:7F:6B:58:E1:97:E5:40:C8:8D:7C:8A:42:7A:80 X509v3 Authority Key Identifier: keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:4f:ce:d6:98:fd:38:7e:7f:f2:df:e1:15:15:ca:2e:4e: 1f:6e:db:9b:9e:47:78:e4:3a:87:b0:d3:6e:14:84:9e:e1:25: 5f:9f:5c:3b:0d:53:30:79:84:21:a6:ba:89:da:af:94:3d:10: bc:1f:99:e9:0d:1b:1c:a7:ea:b7:62:68:1d:99:3d:71:cc:91: 9d:78:c0:7a:ba:15:32:37:12:92:16:2e:77:25:ca:d2:bb:d5: 83:ff:6b:82:f9:56:63:8a:08:9d:27:d8:e3:c0:70:93:6e:41: 03:fe:be:c9:92:40:60:66:72:aa:0b:7a:b4:1d:a5:28:26:be: 4c:7e:df:c5:c8:2e:68:21:0d:aa:55:60:ce:bc:25:94:10:d8: f6:c8:29:c6:01:68:5d:78:73:4b:a3:b3:70:b9:99:23:89:49: 25:0c:d8:3a:43:89:88:51:3c:eb:1a:32:e2:5b:e0:5a:43:29: 44:11:8b:df:0b:b7:02:68:b1:4c:c7:2a:64:18:da:56:50:b6: 3c:d5:0a:9d:36:f6:77:62:a1:ae:d5:d9:68:69:01:45:90:f5: 0d:be:c4:ca:08:94:da:25:7b:56:db:5c:79:7b:c0:94:36:3b: 38:05:e1:ad:b1:a8:65:9c:86:d7:82:f7:15:a4:03:13:ae:ee: f2:b7:f7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/fX4usnX65asfhSHkQbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5 ZjlmNGEwHhcNMjYwMjA5MjAwMDQyWhcNMjYwMjEwMjAwMDQyWjAzMTEwLwYDVQQD Eyg4OGNhZjA3ZGU3MGY3ZjZiNThlMTk3ZTU0MGM4OGQ3YzhhNDI3YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA893dvF9SOvNxvh/kNzWgFBfb6sPh gqrC7N40ri5fZsAj6IFnDZd50yQlzqa9NA4bvvEb/Y86n30AabQBOEssH7euBqm7 bnhLX0dqvzqpvoNa+bxfUPd1EUo6h5gnhzSxtsGub1LvApAr+SwmLYaKzgayQaEg JcB2jiHv6Ua9mf7+LWNdk2Qjx6dBjnvjBXypz8uCYJEET6uWUuaAvLgVhF6K5B6s XXFwOsOU358XEkHxiWXzOQ2eTAk4462jrPyD2G5IqxTb4z3elnHCdbaMGK4D3FQY FOlhy5SnE8uoSOSW7z3BCEY4eAlKuKd/z+3r3tbSqc4rHgJgLi9EE+52ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjK8H3nD39rWOGX5UDIjXyKQnqAMB8GA1UdIwQY MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1 LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUZPztaY /Th+f/Lf4RUVyi5OH27bm55HeOQ6h7DTbhSEnuElX59cOw1TMHmEIaa6idqvlD0Q vB+Z6Q0bHKfqt2JoHZk9ccyRnXjAeroVMjcSkhYudyXK0rvVg/9rgvlWY4oInSfY 48Bwk25BA/6+yZJAYGZyqgt6tB2lKCa+TH7fxcguaCENqlVgzrwllBDY9sgpxgFo XXhzS6OzcLmZI4lJJQzYOkOJiFE86xoy4lvgWkMpRBGL3wu3AmixTMcqZBjaVlC2 PNUKnTb2d2KhrtXZaGkBRZD1Db7EygiU2iV7VttceXvAlDY7OAXhrbGoZZyG14L3 FaQDE67u8rf3SQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:52 2026 by rpki-client