This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json) Hash identifier: B8Vzt5/N/IBz5EnM6cbJ7dVEak2gn1Zk8F7noGjeSvo= Subject key identifier: AC:85:D3:D6:10:E1:C7:D9:E6:6A:1F:31:DB:9A:40:6B:5B:C6:F7:0D Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2 Certificate serial: 019C416A6B6C4E732A4510B431F7C7CBEB0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft Manifest number: 0AEE Signing time: Mon 09 Feb 2026 08:00:19 +0000 Manifest this update: Mon 09 Feb 2026 08:00:19 +0000 Manifest next update: Tue 10 Feb 2026 08:00:19 +0000 Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=) 2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: vVDRK/bqpKsUTQE2D/v2jYayFzw3XYbgQbRKjWAowLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:6b:6c:4e:73:2a:45:10:b4:31:f7:c7:cb:eb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2 Validity Not Before: Feb 9 08:00:19 2026 GMT Not After : Feb 10 08:00:19 2026 GMT Subject: CN=ac85d3d610e1c7d9e66a1f31db9a406b5bc6f70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:e4:74:39:44:25:92:23:af:44:85:c5:a5: 11:f8:4d:bc:92:11:97:dd:38:c8:eb:3f:75:10:1d: 80:46:75:5e:be:fd:d8:2b:fd:4b:99:5b:c8:9a:86: 35:6c:0d:f9:72:c3:e2:fc:97:3b:04:cc:77:91:f8: 87:1c:f0:c9:c0:6e:ae:42:5f:73:1e:bf:ea:37:63: bb:48:db:6d:0f:17:18:1f:1f:65:ae:42:11:29:3e: c9:bd:fa:e4:44:64:21:0d:de:ae:4b:cf:b7:27:8f: 77:91:85:64:b0:49:d5:e3:51:fb:9b:55:20:38:69: 83:3a:45:b4:a3:5c:ab:87:8b:f8:e2:4a:30:46:f1: 73:1e:41:52:ab:6f:77:03:e0:af:0e:b4:a5:bd:aa: e6:3a:36:e6:55:db:70:80:06:d8:7c:b4:79:38:e3: 54:b5:b6:a7:da:bd:0e:51:9d:41:d6:2a:60:2b:8f: e7:94:e9:bd:c6:e0:fc:9d:17:c5:1d:28:34:d8:6d: 9d:a3:60:81:4f:c5:3c:15:63:36:d1:a4:e7:ce:27: a6:83:8e:80:ad:53:22:92:47:36:9c:5f:09:e0:68: 52:c7:81:ee:5b:1b:4a:d4:7d:8f:d0:2a:51:9d:f6: 3e:f9:32:2a:76:1d:5f:de:c9:a3:4e:24:f6:a2:27: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:D3:D6:10:E1:C7:D9:E6:6A:1F:31:DB:9A:40:6B:5B:C6:F7:0D X509v3 Authority Key Identifier: keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c2:4c:bd:38:1e:df:a6:12:b2:5b:dc:ae:fe:c7:c8:0f:28: 7a:84:cc:c3:d0:04:21:79:80:6a:ee:74:39:ef:91:d1:40:98: b5:e8:38:4e:6f:04:18:d8:2d:6b:29:94:7e:31:b1:b8:57:00: b1:c5:83:5a:b1:f3:92:39:10:df:ba:af:0f:86:da:4c:c9:37: bf:f8:6f:8d:66:81:45:ec:b9:f7:82:d8:bf:23:32:ae:c4:2e: 99:3c:a6:0a:9a:8e:48:b4:a0:29:46:d4:c2:03:a3:0c:50:07: 63:cf:91:d7:ca:db:ad:2d:10:1e:51:c8:d8:62:4e:04:ee:d4: 4c:cf:0d:f1:55:f1:0c:61:7e:80:53:69:28:e9:e4:60:ef:9f: e4:1a:f8:0e:e4:ec:50:06:f6:11:02:35:ba:1b:77:a5:00:82: 44:90:0e:ba:22:c7:bb:12:0a:30:11:a9:1e:66:df:df:eb:17: 49:ad:c0:5d:9f:18:ad:7a:ab:15:a7:48:97:45:af:2d:33:fb: 51:55:fe:51:fd:72:cf:2b:7e:cd:69:91:21:a3:37:3f:ba:cb: f3:b6:1c:ec:30:f2:16:d0:98:cb:12:db:b6:ff:ed:c7:f8:a9: 7b:89:72:85:6b:1e:4e:28:25:b7:fc:0c:e6:39:49:36:48:99: 54:b7:47:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBamtsTnMqRRC0MffHy+sPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2 NGE2ZjIwHhcNMjYwMjA5MDgwMDE5WhcNMjYwMjEwMDgwMDE5WjAzMTEwLwYDVQQD EyhhYzg1ZDNkNjEwZTFjN2Q5ZTY2YTFmMzFkYjlhNDA2YjViYzZmNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXkdDlEJZIjr0SFxaUR+E28khGX 3TjI6z91EB2ARnVevv3YK/1LmVvImoY1bA35csPi/Jc7BMx3kfiHHPDJwG6uQl9z Hr/qN2O7SNttDxcYHx9lrkIRKT7JvfrkRGQhDd6uS8+3J493kYVksEnV41H7m1Ug OGmDOkW0o1yrh4v44kowRvFzHkFSq293A+CvDrSlvarmOjbmVdtwgAbYfLR5OONU tban2r0OUZ1B1ipgK4/nlOm9xuD8nRfFHSg02G2do2CBT8U8FWM20aTnziemg46A rVMikkc2nF8J4GhSx4HuWxtK1H2P0CpRnfY++TIqdh1f3smjTiT2oid1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyF09YQ4cfZ5mofMduaQGtbxvcNMB8GA1UdIwQY MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4 LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsJMvTge 36YSslvcrv7HyA8oeoTMw9AEIXmAau50Oe+R0UCYteg4Tm8EGNgtaymUfjGxuFcA scWDWrHzkjkQ37qvD4baTMk3v/hvjWaBRey594LYvyMyrsQumTymCpqOSLSgKUbU wgOjDFAHY8+R18rbrS0QHlHI2GJOBO7UTM8N8VXxDGF+gFNpKOnkYO+f5Br4DuTs UAb2EQI1uht3pQCCRJAOuiLHuxIKMBGpHmbf3+sXSa3AXZ8YrXqrFadIl0WvLTP7 UVX+Uf1yzyt+zWmRIaM3P7rL87Yc7DDyFtCYyxLbtv/tx/ipe4lyhWseTiglt/wM 5jlJNkiZVLdHjA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client