This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: UJf1GlRsfsYMxZ/YOh0/X28PPsYsCYeWzTzgjrcewS8=
Subject key identifier: BE:00:EA:E2:39:B9:8F:94:C8:A1:5A:3E:F8:A6:DC:52:9E:96:01:A7
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019C4321E82342EEB2448E76D665239D0DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0EA8
Signing time: Mon 09 Feb 2026 16:00:21 +0000
Manifest this update: Mon 09 Feb 2026 16:00:21 +0000
Manifest next update: Tue 10 Feb 2026 16:00:21 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: A0Fd/4z6Nuq45LPScRt/FVxWF8dlXfnL28l2DGH3TK4=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e8:23:42:ee:b2:44:8e:76:d6:65:23:9d:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Feb 9 16:00:21 2026 GMT
Not After : Feb 10 16:00:21 2026 GMT
Subject: CN=be00eae239b98f94c8a15a3ef8a6dc529e9601a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:68:46:b3:13:53:e0:f1:cc:4b:7e:38:98:
0b:e7:30:e0:f6:13:7d:61:87:2b:00:00:40:94:d5:
4b:c3:71:ac:33:e2:47:bf:0b:c2:1d:72:a2:9a:c7:
f2:e1:58:d4:3c:a5:84:25:89:f5:6e:31:70:45:0f:
5d:d6:8e:95:06:d3:24:a5:71:12:40:26:03:6a:03:
0e:c6:b5:83:12:37:98:07:d1:a1:f9:1c:59:2f:b4:
7f:22:86:3b:b5:89:fa:0e:4b:18:8d:de:0e:03:0b:
de:a0:15:fe:b2:d5:44:03:a7:2b:63:d2:63:aa:a0:
18:51:1f:c0:60:46:88:c6:2c:7d:ed:94:2c:90:98:
70:8f:27:7d:f8:6d:ac:3e:3b:2e:64:73:8b:95:d2:
6e:3a:46:20:16:ab:aa:85:82:fa:72:b7:01:79:0b:
af:a3:85:10:82:4b:ad:00:30:d0:8a:4d:1d:14:93:
7e:e7:13:ad:80:8b:57:de:f2:c5:f5:7a:6c:6c:74:
06:b3:f8:9a:e1:eb:05:8e:92:7e:c8:88:b1:ba:5f:
28:c5:d6:0b:f2:55:3d:5b:26:93:45:3d:27:e6:fe:
b6:30:13:61:7b:5f:2e:7d:b5:bc:1a:bd:05:48:91:
21:d1:e1:64:98:99:0c:03:04:72:ef:23:14:f4:db:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:00:EA:E2:39:B9:8F:94:C8:A1:5A:3E:F8:A6:DC:52:9E:96:01:A7
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:2c:5d:24:e2:86:6e:80:80:ae:a7:b8:f2:7c:70:ef:ba:
7b:ff:fd:41:ff:20:df:52:bc:6e:fe:67:61:a4:ce:9a:89:16:
0c:44:ae:11:05:23:3f:5a:f1:cd:0d:4f:60:36:b0:11:54:fd:
37:89:34:43:17:3c:a6:75:f4:43:5f:fb:71:28:61:99:84:fd:
cb:7f:21:07:05:e2:cc:56:83:36:05:5b:2d:f2:44:b2:4d:1a:
f9:9b:75:29:2b:5d:dc:83:b6:cc:20:0e:bc:44:e3:3a:58:89:
69:6c:37:2d:5b:bf:4e:39:d2:c3:0a:d8:07:6b:0d:d0:a4:39:
a6:f3:7e:17:16:bb:92:d0:89:2d:54:dc:50:05:a8:62:ad:d7:
d4:aa:0b:6a:d8:f7:08:b2:f3:d7:e2:4d:7a:7a:15:69:5b:22:
d6:54:79:9f:a9:85:83:78:0f:0a:db:83:01:3a:87:9d:82:bc:
19:82:a4:f3:3c:88:8c:a3:b0:7f:da:63:f8:7a:20:49:aa:f5:
fd:05:c5:36:a3:80:3c:28:5d:36:ef:b0:05:0b:6e:0a:e5:8e:
16:ea:d1:5e:1f:a0:8a:89:78:d5:37:f6:88:9e:11:7e:ec:c0:
d6:d8:df:f7:a3:35:f5:60:38:db:e4:2f:24:93:ca:02:db:84:
e3:72:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:15 2026 by rpki-client