This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json) Hash identifier: TyggTP+E9XXqrbX8wenIxlmLFaLlSgTGtOBZQX4aj7E= Subject key identifier: D2:3E:0C:B5:E8:69:77:81:30:51:9A:30:E5:B9:B2:94:8D:7E:D5:E3 Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Certificate serial: 019C04B17E28CC2E45A7B4E43265F89E96E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft Manifest number: 03E5 Signing time: Wed 28 Jan 2026 13:01:06 +0000 Manifest this update: Wed 28 Jan 2026 13:01:06 +0000 Manifest next update: Thu 29 Jan 2026 13:01:06 +0000 Files and hashes: 1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=) 2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: O4Z6PVTLtD7ZHrzMujkJFpuHomBhHg4fnARzwoq+IOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b1:7e:28:cc:2e:45:a7:b4:e4:32:65:f8:9e:96:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece Validity Not Before: Jan 28 13:01:06 2026 GMT Not After : Jan 29 13:01:06 2026 GMT Subject: CN=d23e0cb5e869778130519a30e5b9b2948d7ed5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:26:e3:dc:18:fc:ac:6b:f4:8d:9d:5f:d2: 17:fc:4f:83:e4:6f:56:c1:51:75:68:6a:ae:3f:af: 84:5f:a8:7d:dd:eb:4b:46:3b:8a:12:43:f8:8e:db: 7e:36:a7:1f:9d:e7:a8:03:4f:ec:ee:e2:b8:0a:b2: 48:0a:56:b6:ee:34:2d:d7:b6:e7:2e:26:b6:4c:85: 10:61:24:8e:f8:5f:1e:76:97:5e:77:e1:34:b8:70: cf:8e:ff:41:d9:eb:0e:ea:14:7a:dd:46:23:a8:05: 0f:73:23:8b:3f:6b:68:64:8f:48:a0:72:74:e9:4c: 73:39:38:15:e5:df:00:1c:04:e2:00:32:69:e4:80: d3:2e:af:38:a4:c5:54:82:e6:83:7d:6a:f6:a1:25: 4d:43:7d:50:97:a9:ea:97:ff:ba:98:47:3c:0a:21: 75:56:1f:a1:d3:f5:62:fd:17:04:3f:33:06:46:02: 7d:4d:d7:9f:12:39:c3:0d:8c:ba:b6:0a:a6:0b:18: cb:e2:19:e4:ec:5c:71:41:c7:2a:22:9b:fe:6e:14: ac:fd:c8:98:da:58:a0:c0:de:b4:79:c1:a5:df:ee: b7:db:6f:59:47:82:f4:2d:e4:1e:d3:52:d8:7c:60: d8:68:1a:cf:09:41:8f:60:5d:2b:f7:d3:b1:18:a8: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3E:0C:B5:E8:69:77:81:30:51:9A:30:E5:B9:B2:94:8D:7E:D5:E3 X509v3 Authority Key Identifier: keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:99:da:a7:8d:91:b8:0a:3c:1b:02:67:96:7c:f6:04:37:99: a2:a7:bc:e3:99:3e:e7:7e:ca:0e:8e:f6:c7:b5:b2:35:c1:2d: 34:c7:07:29:26:0a:3b:80:f1:57:ae:28:0d:20:18:e3:00:0e: 24:b9:f4:dc:d4:45:db:ec:d1:ec:ab:2f:4a:10:6c:00:fd:32: 4f:84:30:24:f6:a9:6a:dc:a3:ab:a1:7f:f9:9d:29:4f:4e:45: 02:70:82:9f:1f:10:42:1d:12:e3:cf:f4:da:ba:81:77:fd:21: 6c:fd:74:f3:ef:61:e3:21:1e:54:b1:78:30:6e:33:39:be:4e: 05:5a:b9:54:9c:4d:15:d8:7b:92:67:ba:8e:b2:aa:26:c1:12: f5:bd:9b:30:37:a4:df:8a:6f:89:89:4d:74:ae:12:16:5e:57: 2b:c9:12:c0:d9:5b:d2:c9:dd:e1:59:84:3c:61:fe:c5:32:4f: b6:2d:a9:64:86:27:01:d0:84:d1:33:99:c2:ab:d2:72:07:2d: c9:d5:4b:2b:2a:11:5b:1d:d5:05:a1:ad:1c:95:6f:70:83:14: 06:5e:63:e9:ee:74:ef:de:c8:ec:aa:65:52:25:34:59:a4:66: be:66:ad:c5:3e:ea:aa:04:69:9d:67:48:03:c4:4e:24:24:d3: 09:db:a9:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEsX4ozC5Fp7TkMmX4npbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTc5NTI1OTExOWVlOGE2ZDEwOGU5YjVjYmUwYmI5MGMw OThlY2UwHhcNMjYwMTI4MTMwMTA2WhcNMjYwMTI5MTMwMTA2WjAzMTEwLwYDVQQD EyhkMjNlMGNiNWU4Njk3NzgxMzA1MTlhMzBlNWI5YjI5NDhkN2VkNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCwm49wY/Kxr9I2dX9IX/E+D5G9W wVF1aGquP6+EX6h93etLRjuKEkP4jtt+NqcfneeoA0/s7uK4CrJICla27jQt17bn Lia2TIUQYSSO+F8edpded+E0uHDPjv9B2esO6hR63UYjqAUPcyOLP2toZI9IoHJ0 6UxzOTgV5d8AHATiADJp5IDTLq84pMVUguaDfWr2oSVNQ31Ql6nql/+6mEc8CiF1 Vh+h0/Vi/RcEPzMGRgJ9TdefEjnDDYy6tgqmCxjL4hnk7FxxQccqIpv+bhSs/ciY 2ligwN60ecGl3+63229ZR4L0LeQe01LYfGDYaBrPCUGPYF0r99OxGKiiVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI+DLXoaXeBMFGaMOW5spSNftXjMB8GA1UdIwQY MBaAFPwXlSWRGe6KbRCOm1y+C7kMCY7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYt Y2ZhNmEyNTQzMmU5LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYtY2ZhNmEyNTQzMmU5 LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJnap42R uAo8GwJnlnz2BDeZoqe845k+537KDo72x7WyNcEtNMcHKSYKO4DxV64oDSAY4wAO JLn03NRF2+zR7KsvShBsAP0yT4QwJPapatyjq6F/+Z0pT05FAnCCnx8QQh0S48/0 2rqBd/0hbP108+9h4yEeVLF4MG4zOb5OBVq5VJxNFdh7kme6jrKqJsES9b2bMDek 34pviYlNdK4SFl5XK8kSwNlb0snd4VmEPGH+xTJPti2pZIYnAdCE0TOZwqvScgct ydVLKyoRWx3VBaGtHJVvcIMUBl5j6e50797I7KplUiU0WaRmvmatxT7qqgRpnWdI A8ROJCTTCdupXg== -----END CERTIFICATE-----Generated at Wed Jan 28 18:35:05 2026 by rpki-client