This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json) Hash identifier: HtO9pjER5rCocCeJsr4obTikAniQYimcKQFTq+75B7A= Subject key identifier: 32:E0:B8:F3:48:8C:6B:C5:29:0A:46:D6:3C:E5:1E:67:93:08:BD:58 Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3 Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3 Certificate serial: 019C43593A805867185FB767F752B8B46FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:47 +0000 Manifest this update: Mon 09 Feb 2026 17:00:47 +0000 Manifest next update: Tue 10 Feb 2026 17:00:47 +0000 Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: KhHnSdIev2zkldhCkebNidvhjVDyLh7uir9RlovwBvg=) 2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3a:80:58:67:18:5f:b7:67:f7:52:b8:b4:6f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3 Validity Not Before: Feb 9 17:00:47 2026 GMT Not After : Feb 10 17:00:47 2026 GMT Subject: CN=32e0b8f3488c6bc5290a46d63ce51e679308bd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:77:54:1e:3b:00:d4:a7:ce:e6:d9:94:c3: 35:5b:1f:08:41:65:c1:25:a3:3c:b3:d3:76:d3:cf: ab:cf:5e:75:84:1e:dd:6e:44:37:b6:c0:7c:55:5c: d0:80:c6:ed:5f:b6:50:4d:ad:d6:f0:c4:ea:19:1d: 02:d2:dd:9c:89:15:4f:98:5b:7e:fc:40:b6:37:d4: ed:88:d3:a4:0c:5c:e6:88:73:f5:ac:21:36:e6:fc: fa:26:5b:89:c0:7b:dc:a9:7a:83:ed:97:c7:2b:5f: 3f:3f:d4:3e:25:d9:5b:81:42:76:69:d3:67:94:2f: 24:29:1e:57:3d:fb:27:2b:3d:25:5a:b2:02:d2:aa: 14:dd:b1:05:0e:b9:f2:2c:30:28:25:3c:8e:24:f0: 06:2b:ab:5a:b7:84:69:bb:21:bc:ec:ff:26:87:13: d6:a9:c1:5b:b5:07:f3:c9:43:78:70:46:40:e7:51: 66:f7:89:ab:73:86:87:36:84:c1:06:ec:a9:4a:5b: 5d:48:96:c2:1e:2d:97:eb:0c:f3:54:22:77:44:08: 93:bf:7a:26:77:7a:ed:12:29:15:74:52:5f:f3:24: 62:29:2d:2d:dd:db:b8:ce:76:e8:a7:24:b0:96:08: 3d:10:be:6e:ce:19:d4:03:64:93:a6:41:d6:d3:7e: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:B8:F3:48:8C:6B:C5:29:0A:46:D6:3C:E5:1E:67:93:08:BD:58 X509v3 Authority Key Identifier: keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fa:96:93:ed:5e:53:2a:c0:3e:18:a1:db:83:e4:de:14:46: 29:4f:47:1f:89:9e:48:f3:d0:af:d0:3c:01:3f:f9:85:1b:d6: b0:9f:98:de:98:1a:66:55:d5:eb:79:32:6d:2d:5c:5a:41:0c: 38:8b:59:1c:9d:17:e5:6b:d6:70:a0:47:9b:95:03:50:93:0f: 53:61:e7:cb:3f:a9:63:b5:4f:4f:6a:e8:02:17:fe:4f:16:8b: 49:81:41:68:fa:80:31:ba:c2:71:01:9f:c7:58:94:be:6f:cd: be:c9:91:03:55:f3:cf:7d:0f:80:f7:8d:c5:3d:62:dd:02:f3: 61:55:95:50:84:4c:c5:23:bc:7f:97:15:50:19:75:d0:2d:43: 66:85:7b:c7:ee:33:d3:88:ad:32:93:3c:ea:5d:8a:e2:9d:89: 2a:4b:6e:9c:e5:90:83:97:90:4d:91:9c:d9:61:f6:f9:80:5b: 62:f0:34:75:ed:61:4e:53:b7:1c:7a:31:12:63:93:72:cb:8e: 5c:ba:94:c7:30:c6:52:7e:17:a8:c3:e5:e2:4e:6b:60:eb:0f: 55:8d:cb:7c:3a:bd:68:41:fa:ad:d5:0e:9a:5e:d3:d8:70:df: 3e:eb:23:18:25:cd:f1:34:ea:2b:b0:75:13:b1:62:88:74:d3: 90:f0:be:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTqAWGcYX7dn91K4tG/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi M2ZlZDMwHhcNMjYwMjA5MTcwMDQ3WhcNMjYwMjEwMTcwMDQ3WjAzMTEwLwYDVQQD EygzMmUwYjhmMzQ4OGM2YmM1MjkwYTQ2ZDYzY2U1MWU2NzkzMDhiZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt93VB47ANSnzubZlMM1Wx8IQWXB JaM8s9N208+rz151hB7dbkQ3tsB8VVzQgMbtX7ZQTa3W8MTqGR0C0t2ciRVPmFt+ /EC2N9TtiNOkDFzmiHP1rCE25vz6JluJwHvcqXqD7ZfHK18/P9Q+JdlbgUJ2adNn lC8kKR5XPfsnKz0lWrIC0qoU3bEFDrnyLDAoJTyOJPAGK6tat4RpuyG87P8mhxPW qcFbtQfzyUN4cEZA51Fm94mrc4aHNoTBBuypSltdSJbCHi2X6wzzVCJ3RAiTv3om d3rtEikVdFJf8yRiKS0t3du4znbopySwlgg9EL5uzhnUA2STpkHW036GGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLguPNIjGvFKQpG1jzlHmeTCL1YMB8GA1UdIwQY MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt NjM3M2QzNmNlZWY2LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2 LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/qWk+1e UyrAPhih24Pk3hRGKU9HH4meSPPQr9A8AT/5hRvWsJ+Y3pgaZlXV63kybS1cWkEM OItZHJ0X5WvWcKBHm5UDUJMPU2Hnyz+pY7VPT2roAhf+TxaLSYFBaPqAMbrCcQGf x1iUvm/NvsmRA1Xzz30PgPeNxT1i3QLzYVWVUIRMxSO8f5cVUBl10C1DZoV7x+4z 04itMpM86l2K4p2JKktunOWQg5eQTZGc2WH2+YBbYvA0de1hTlO3HHoxEmOTcsuO XLqUxzDGUn4XqMPl4k5rYOsPVY3LfDq9aEH6rdUOml7T2HDfPusjGCXN8TTqK7B1 E7FiiHTTkPC+jA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:29 2026 by rpki-client